Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft
File:                     82FB9CE597D61EC382BA2D63909426959C43F18F.mft (raw, json)
Hash identifier:          3Kw3Zut8rDxteh4RHkq/vxbJCBsN65aWh/vsSPbPxEw=
Subject key identifier:   8E:3A:1D:C9:35:70:F2:00:AC:71:89:38:02:DF:AC:12:B0:39:38:A8
Authority key identifier: 82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F
Certificate issuer:       /CN=82FB9CE597D61EC382BA2D63909426959C43F18F
Certificate serial:       1C5693D77D11EAAB6D5D60C7073C06AE10B5CB9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft
Manifest number:          0104
Signing time:             Tue 03 Jun 2025 05:43:47 +0000
Manifest this update:     Tue 03 Jun 2025 05:38:47 +0000
Manifest next update:     Fri 06 Jun 2025 15:31:47 +0000
Files and hashes:         1: 3130332e372e3130352e302f32342d3234203d3e20313531353933.roa (hash: rsOTPdLO3l6+1P3Je6sbMePtqvI/ELKRFjVBjUBnTLQ=)
                          2: 3130332e372e3130342e302f32342d3234203d3e20313531353933.roa (hash: Pp05Le3/SJbeFB+88418w73fpvvmK1Gfjl+mJ0AjkKg=)
                          3: 82FB9CE597D61EC382BA2D63909426959C43F18F.crl (hash: qIoFGPWIABvF8BpC8wbBmYpNKE4coS/6lEBOHQn2zVM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl
                          rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 15:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:56:93:d7:7d:11:ea:ab:6d:5d:60:c7:07:3c:06:ae:10:b5:cb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FB9CE597D61EC382BA2D63909426959C43F18F
        Validity
            Not Before: Jun  3 05:38:47 2025 GMT
            Not After : Jun  6 15:31:47 2025 GMT
        Subject: CN=8E3A1DC93570F200AC71893802DFAC12B03938A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:77:b1:23:51:f5:83:cc:da:ca:9e:be:e1:d5:
                    9b:35:d2:bc:2d:11:6d:1f:16:21:d9:de:9f:d3:29:
                    6b:f3:09:57:44:05:b6:e7:de:89:b8:d4:33:02:c2:
                    a4:03:28:70:d7:1d:9e:a2:70:68:77:32:e8:08:3d:
                    3a:27:8c:97:4f:af:c3:8f:56:1c:da:06:84:c2:c3:
                    09:b3:32:06:3d:c1:db:a2:02:69:27:6a:b1:3e:3d:
                    40:fc:b7:56:85:04:ec:fc:30:7f:f8:f5:60:d2:7f:
                    52:fc:d3:55:c6:b8:84:e8:b0:5d:5f:55:5f:52:82:
                    02:d6:45:7d:ba:82:a7:f6:59:68:3d:fb:67:e8:1d:
                    1a:b0:91:55:b0:25:f9:04:b3:9b:01:30:ef:7f:a7:
                    80:1c:3e:20:e3:f2:fc:57:26:3f:e2:60:9f:65:84:
                    37:c9:fc:a5:8d:e9:59:fe:5b:97:07:25:ee:f4:20:
                    21:e3:8b:1a:58:9c:c3:95:ce:0e:98:79:e1:cb:58:
                    c4:3f:a9:85:6c:df:8d:3f:6a:c7:d5:a0:30:e5:aa:
                    7b:d9:03:a4:79:5e:02:23:bf:40:19:57:dc:ac:d3:
                    70:95:5e:09:39:48:5f:30:9b:ab:b2:99:90:d0:90:
                    45:07:36:17:86:87:22:66:3e:b3:52:90:2b:10:04:
                    60:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3A:1D:C9:35:70:F2:00:AC:71:89:38:02:DF:AC:12:B0:39:38:A8
            X509v3 Authority Key Identifier:
                keyid:82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:67:29:cc:09:ab:d6:65:88:d9:d7:86:02:06:00:34:c4:a5:
         36:c2:ef:09:45:5e:80:e7:c0:28:e1:94:d2:28:c6:5a:57:d7:
         d0:53:f0:bb:f1:ec:38:98:86:f3:e4:6e:7b:93:5a:78:ad:10:
         58:56:ee:34:76:74:13:d2:e0:fa:26:c5:cd:b7:a7:0d:45:05:
         0e:57:d4:9f:25:49:2f:48:6f:38:55:88:10:e1:14:5f:42:df:
         1a:d9:eb:b8:95:7c:b6:53:ea:c8:48:f3:93:bc:2a:cd:7f:fa:
         aa:18:73:80:40:00:04:03:58:d8:43:03:ee:f0:59:38:58:10:
         e9:96:74:7e:02:be:6b:f8:84:8a:2d:66:b3:c6:be:4c:79:77:
         ea:e1:a4:8a:94:f0:45:a7:86:a3:d9:25:77:75:5b:83:06:c2:
         d4:51:0d:8b:81:4a:3e:bb:b7:0f:c5:9e:b5:b0:f7:29:60:82:
         b9:d0:8b:86:55:5e:9f:d2:ef:ac:dc:cb:e2:7c:6e:06:90:e7:
         fa:78:12:5a:25:03:68:90:f3:45:ec:5a:a0:0a:7e:a9:34:63:
         47:3e:39:af:56:6c:3d:0a:9a:6f:f6:98:3f:e7:5c:88:9d:3b:
         b7:87:6a:58:ce:c0:07:a5:86:8f:06:cb:c7:fa:e1:c9:76:30:
         1c:ea:03:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:34:49 2025 by rpki-client