Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
File:                     AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json)
Hash identifier:          wJveZfAh04uqqKkdicjY6aw9nQKehU3ctpUCS2oAmOk=
Subject key identifier:   59:39:52:6E:FA:C1:64:E1:D6:08:A0:05:25:2D:C6:EC:D6:17:F0:97
Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F
Certificate issuer:       /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
Certificate serial:       348EB72B2AB6EA98494B2593C24963AFB19468D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
Manifest number:          0283
Signing time:             Mon 02 Jun 2025 01:51:30 +0000
Manifest this update:     Mon 02 Jun 2025 01:46:30 +0000
Manifest next update:     Thu 05 Jun 2025 07:39:30 +0000
Files and hashes:         1: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: wvwxjNQtDmVK123sqVmPBd50o7Z58A5QSiMZoWTSvi4=)
                          2: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: nbrMCd1FrZtyUDsSqPOwiezNZhmsRsgvcmYK466mrE4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl
                          rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Jun 2025 07:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8e:b7:2b:2a:b6:ea:98:49:4b:25:93:c2:49:63:af:b1:94:68:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
        Validity
            Not Before: Jun  2 01:46:30 2025 GMT
            Not After : Jun  5 07:39:30 2025 GMT
        Subject: CN=5939526EFAC164E1D608A005252DC6ECD617F097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:a6:ab:a7:3f:57:01:bf:0d:86:5f:29:c2:
                    72:77:52:5b:d3:de:8c:26:ed:b4:55:88:23:92:ba:
                    99:e1:5e:dd:cf:d4:3a:2d:2c:c8:09:f0:bb:b4:6f:
                    73:45:9e:5c:1c:80:a6:94:b8:67:12:13:b8:75:c0:
                    41:80:47:ad:9f:a6:bf:6e:83:0b:7f:fa:b9:8e:ba:
                    b7:80:23:c5:db:ba:32:11:a4:ca:91:cc:8d:b7:71:
                    d6:cb:71:8b:bf:18:bc:55:da:b1:29:df:ff:37:86:
                    70:24:52:40:5a:a4:b2:b2:b0:96:69:88:31:1c:3c:
                    73:a3:d5:8e:07:8f:54:91:59:c9:aa:7c:48:27:aa:
                    64:24:13:f3:33:37:a7:56:d7:4e:87:5d:0f:50:ad:
                    21:61:75:4b:41:8d:fb:dc:e4:70:fa:74:5e:4c:18:
                    ee:51:2c:5d:cf:1a:1b:4b:67:88:c4:7d:11:e9:f9:
                    c7:4b:59:4d:ab:17:91:64:95:f7:40:e4:e1:1a:20:
                    45:56:0d:ca:0d:1a:0b:51:53:35:eb:46:92:d6:2d:
                    95:f0:49:84:00:af:08:1b:f9:33:05:5c:47:03:29:
                    3c:0d:4e:e2:0e:e4:12:cd:ce:5c:2c:df:18:de:ca:
                    b6:be:20:95:b3:79:09:27:65:0e:ee:6a:cc:e5:dc:
                    28:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:39:52:6E:FA:C1:64:E1:D6:08:A0:05:25:2D:C6:EC:D6:17:F0:97
            X509v3 Authority Key Identifier:
                keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9c:33:4d:b7:39:82:3b:e1:44:6a:06:2a:bd:6b:f8:8e:2b:
         e2:40:d2:4e:6e:a0:28:ad:f2:76:f3:c2:73:9e:5a:44:e6:27:
         2b:2b:56:36:76:54:b7:aa:7d:a7:6a:c3:3f:c1:9f:4e:14:5c:
         9c:02:19:5c:da:3f:f7:0a:1c:c4:1f:06:62:72:2e:ba:2e:90:
         4d:15:74:85:5d:67:77:a9:80:32:d7:93:d0:b1:e6:28:92:37:
         e1:85:76:c7:9b:b2:90:d6:10:a5:81:01:0f:fc:d3:38:11:53:
         41:0c:c7:18:51:3f:1f:5a:9b:8a:be:08:aa:2d:ba:7f:65:d1:
         81:2d:e2:04:3e:5f:ab:50:a5:c8:6d:af:d6:98:bd:81:53:44:
         9f:70:66:cb:50:59:f0:be:9c:0d:4d:6f:b1:79:88:26:4b:e8:
         23:41:b3:95:14:67:4c:f5:dc:09:af:91:b9:1c:23:5a:23:74:
         03:e5:47:21:93:57:ee:6b:83:a4:13:3d:2a:92:16:cc:af:8a:
         83:e1:dc:da:06:df:4f:d1:74:3e:e3:56:0b:05:c0:12:f6:50:
         72:04:b9:04:c1:65:c9:28:18:2c:2b:b6:5f:c0:1d:12:de:d7:
         8f:b4:62:41:07:51:e0:86:d9:d1:ea:a9:47:df:5e:ce:8c:89:
         23:fb:0e:b0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNI63Kyq26phJSyWTwkljr7GUaNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx
RTY1RDU2RjAeFw0yNTA2MDIwMTQ2MzBaFw0yNTA2MDUwNzM5MzBaMDMxMTAvBgNV
BAMTKDU5Mzk1MjZFRkFDMTY0RTFENjA4QTAwNTI1MkRDNkVDRDYxN0YwOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3FKarpz9XAb8Nhl8pwnJ3UlvT
3owm7bRViCOSupnhXt3P1DotLMgJ8Lu0b3NFnlwcgKaUuGcSE7h1wEGAR62fpr9u
gwt/+rmOureAI8XbujIRpMqRzI23cdbLcYu/GLxV2rEp3/83hnAkUkBapLKysJZp
iDEcPHOj1Y4Hj1SRWcmqfEgnqmQkE/MzN6dW106HXQ9QrSFhdUtBjfvc5HD6dF5M
GO5RLF3PGhtLZ4jEfRHp+cdLWU2rF5FklfdA5OEaIEVWDcoNGgtRUzXrRpLWLZXw
SYQArwgb+TMFXEcDKTwNTuIO5BLNzlws3xjeyra+IJWzeQknZQ7uaszl3CgjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWTlSbvrBZOHWCKAFJS3G7NYX8JcwHwYDVR0j
BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5
REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1
RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2
NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw
ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKCcM023OYI74URqBiq9a/iOK+JA0k5uoCit
8nbzwnOeWkTmJysrVjZ2VLeqfadqwz/Bn04UXJwCGVzaP/cKHMQfBmJyLroukE0V
dIVdZ3epgDLXk9Cx5iiSN+GFdsebspDWEKWBAQ/80zgRU0EMxxhRPx9am4q+CKot
un9l0YEt4gQ+X6tQpchtr9aYvYFTRJ9wZstQWfC+nA1Nb7F5iCZL6CNBs5UUZ0z1
3AmvkbkcI1ojdAPlRyGTV+5rg6QTPSqSFsyvioPh3NoG30/RdD7jVgsFwBL2UHIE
uQTBZckoGCwrtl/AHRLe14+0YkEHUeCG2dHqqUffXs6MiSP7DrA=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:39:33 2025 by rpki-client