Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
File:                     882209E37356E0512FBE4E81B00E4F2481865087.mft (raw, json)
Hash identifier:          bRtBSdVZiVwYIm5QXYLwbbNVKsaPf6ogp11HMQ6xaAE=
Subject key identifier:   7E:7A:6F:41:90:2B:CD:9A:81:25:0E:8C:17:27:8F:64:6E:83:70:CA
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       7550BB7BCC7C1FB175164798707E86EFBC6D0725
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
Manifest number:          04BE
Signing time:             Fri 04 Apr 2025 14:41:58 +0000
Manifest this update:     Fri 04 Apr 2025 14:36:58 +0000
Manifest next update:     Tue 08 Apr 2025 00:58:58 +0000
Files and hashes:         1: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: /cpzswwTNxt4PA+y5NQBd3j9f6qF16C52KUQtHtdF0o=)
                          2: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: Rb28NXlYt2i42cKjjOk5iENFCUNoEfsw3NtDJbjO8H8=)
                          3: 882209E37356E0512FBE4E81B00E4F2481865087.crl (hash: 6CsUpTJg3CkE0n/GkkI51YWs08eoOy6IkIhRiD8auBs=)
                          4: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: e+Om61XELdd62RuYWQyB46Ok2HY1yu4g+v0tQE3Vs9M=)
                          5: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: zFwcJRk1pIStXgYvOW6EJ+sh6WfmyVgLQT18K9kq+Sw=)
                          6: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: +orAdsz6eB8/rfzFzwo7jDI03fKrjW+cdaqzhCiMpmg=)
                          7: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: tJ8ZvI46pqkm8zQNc8mw5mnCsJpq72czgdRpZYAABAU=)
                          8: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: ax01vkbIK29IQaPMOtL4UaEdAFFntCppP1NSNhQX5iY=)
                          9: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: uQXGM2cnzjEJ+e+qYTRcu8Q2bkfF87zDJZZFwMyns1U=)
                          10: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: rpd32ZUdwQpFXx4Nv2RhdtnfkJHyyuemJCQ3vprxsb0=)
                          11: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: 5OLfvTl6gcSwQBrapeYjNQFXfGFP7wdrUnoFQhbTuyE=)
                          12: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: Xew1w+gXgylH740u1c4Z60dTjHU8+UmrHSS0NUpHOoU=)
                          13: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: w3Ks91mwkS7NztUtNLKYf1Zt3ODkRQznfK1tF6ldT8k=)
                          14: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: XT+BpWNDktvWNwFTQkLNNS/w5oWhizouaSiWM8/abUU=)
                          15: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: xpET03ZY7J+readhaJ1QYHRYS1mjCgsf+hUmxPF8BxA=)
                          16: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: y6nyZ4wEj4h4my4pTHsmLYPMQpLcieoKxLYPlH4EY2A=)
                          17: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: JZOCGNrXopoaPI4jZi8eXqzn2wPKF8AfdVx1G95vRF4=)
                          18: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: NOw/zlirvTqoOX6sm1/vix2ODTXn4yeECfZvuo38lBs=)
                          19: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: sJb8leavmPnYQkhyoTizATUpn0Qf48YJaugxYyG/DSE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:50:bb:7b:cc:7c:1f:b1:75:16:47:98:70:7e:86:ef:bc:6d:07:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Apr  4 14:36:58 2025 GMT
            Not After : Apr  8 00:58:58 2025 GMT
        Subject: CN=7E7A6F41902BCD9A81250E8C17278F646E8370CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:cf:7e:23:de:1b:1e:c7:29:a5:67:f9:22:
                    4a:d3:9e:92:3f:91:f9:a2:50:b9:c4:f3:bf:5a:dc:
                    a9:6f:dc:9f:19:5f:8d:39:0c:96:4f:66:28:a8:b0:
                    b4:27:dd:82:62:08:b1:00:b2:54:63:3a:45:e2:ce:
                    b0:02:d8:f1:0c:e7:7e:45:0c:70:3e:60:dc:57:bb:
                    dc:d5:a8:44:be:7a:a9:20:01:97:a7:8e:00:48:ef:
                    2f:a4:09:34:f8:ac:ff:d7:04:11:3b:05:8a:52:2f:
                    e2:d4:04:aa:ed:5a:1a:11:09:d6:87:60:94:24:af:
                    bb:2e:34:d0:63:68:d2:dd:41:38:27:c7:05:2b:4b:
                    91:eb:5e:7f:5a:70:46:6c:f0:77:1a:2b:81:dd:69:
                    66:9e:71:80:76:72:9d:f1:87:aa:d4:03:34:5b:f0:
                    fc:c3:05:5c:a7:27:2b:c2:2d:ab:76:fd:78:0b:f8:
                    59:c2:ab:ba:71:b7:a4:89:8b:1a:b9:32:a3:10:3b:
                    21:15:28:6c:2f:80:49:55:d7:13:78:5b:6e:6a:3d:
                    6b:42:81:78:eb:ec:3f:fa:a3:66:86:ba:d6:10:89:
                    a8:9e:00:a7:19:1c:7e:44:56:11:a8:6a:45:91:b3:
                    30:c2:00:44:6c:43:1d:2c:b2:1b:a1:04:b2:d7:e9:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7A:6F:41:90:2B:CD:9A:81:25:0E:8C:17:27:8F:64:6E:83:70:CA
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:01:a0:b9:ec:39:04:15:27:54:6e:14:fb:70:04:79:5a:
         21:28:a5:35:67:bf:14:ca:db:3f:38:2c:c5:43:94:b3:68:70:
         60:87:38:6d:6e:b0:ca:91:5a:0e:64:23:58:e2:11:1e:ac:21:
         1e:e0:80:c9:31:92:69:8e:13:88:1c:76:cd:64:8e:65:91:b6:
         c3:85:b9:6f:98:69:db:77:b9:f3:ea:4e:51:77:cd:3c:32:88:
         4c:f2:8d:72:4a:a3:24:8d:a3:a9:1b:4c:ef:0f:7e:7e:f7:24:
         3a:cd:89:4b:e1:6b:39:02:c1:1b:f9:a4:cd:14:5e:38:6b:0c:
         99:17:59:15:94:4a:f3:ec:69:52:7f:93:d5:9f:49:08:a1:3e:
         f6:21:ec:68:e5:07:ed:89:53:80:ba:e9:ec:0a:28:02:60:1f:
         16:00:fd:28:17:f3:2e:3a:97:00:c8:c8:e3:c6:25:88:c7:fb:
         e0:ff:ca:d1:9d:d1:34:b2:d4:0b:e1:5a:dc:0d:d2:8c:f2:83:
         37:df:d1:a5:8a:22:91:f0:0f:03:2f:b8:5e:f7:fd:b1:ef:ac:
         8a:41:db:99:ab:2c:0b:cc:b9:41:f2:7e:39:9c:56:06:e9:f2:
         20:7d:6f:77:c9:e1:f1:c9:41:c7:63:26:9d:07:79:da:30:46:
         4f:61:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:44 2025 by rpki-client