Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File:                     BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier:          B2k1nBDNE+xNp63OeG3Y6JhNXfzma/4XoF5nZRYpJ58=
Subject key identifier:   05:22:67:E5:A4:56:2B:EB:70:D8:BF:1A:93:20:D4:46:0B:67:54:F2
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       5140F75CAE49EE6B9484B1A524C465BE7D92585C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number:          04E6
Signing time:             Fri 06 Jun 2025 13:02:25 +0000
Manifest this update:     Fri 06 Jun 2025 12:57:25 +0000
Manifest next update:     Mon 09 Jun 2025 13:43:25 +0000
Files and hashes:         1: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=)
                          2: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: plupCnR+dNFUkh76EPqZZVPN9GFqydhXdkx7v+gcERU=)
                          3: 3131312e36372e38362e302f32332d3234203d3e203234353337.roa (hash: tDz28BGDnFd3MGcS96yd4J0BbOjvcShV8THChhLQTrA=)
                          4: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=)
                          5: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: vhSbfr4PwcH2c1j4QZ7NODAAE3UKxSP2hh5xHxbrnvM=)
                          6: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=)
                          7: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: ev9kwx7xYfGQ0wqa7vOCRk3KIttSxKV6RHvfveIzVEs=)
                          8: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=)
                          9: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: ndzf/dY/nmXxj2I9KPRlglxDyJBwxAj+OgRvw2hK3Yo=)
                          10: 3131312e36372e38382e302f32332d3234203d3e203234353337.roa (hash: Kkkq08Mmxr8hsDH69JGbHxLxb84nfHJXao32g/p1mFQ=)
                          11: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: 79szJlSxFEM6vGgihAOETNzSQWjHNJBKmnEw59Gq12g=)
                          12: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 13:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:40:f7:5c:ae:49:ee:6b:94:84:b1:a5:24:c4:65:be:7d:92:58:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jun  6 12:57:25 2025 GMT
            Not After : Jun  9 13:43:25 2025 GMT
        Subject: CN=052267E5A4562BEB70D8BF1A9320D4460B6754F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:0d:31:e3:54:aa:93:b6:ae:bb:df:b8:65:
                    b6:b7:d5:9f:f7:01:2a:3d:c2:b3:c5:5c:04:3c:d3:
                    32:f3:a7:14:e7:06:9d:74:53:08:d3:73:1b:da:ba:
                    a5:d9:ec:da:65:e8:98:7c:0b:eb:9d:79:54:dd:12:
                    8d:e8:59:f9:82:83:e5:0a:19:dd:4a:5b:93:d3:e0:
                    3c:1a:e6:f9:e8:e4:c8:e6:9e:f7:de:4d:6c:0a:91:
                    3f:7c:b8:ba:04:34:3c:0c:03:b8:fd:a8:48:a9:41:
                    c1:86:14:1f:3e:cf:a1:3c:dc:5e:8e:87:f7:3d:b8:
                    bc:d1:3a:39:ee:24:25:02:e3:6f:34:4a:84:5d:4d:
                    02:dd:b2:d9:ea:98:ad:76:57:69:2c:be:9d:e5:68:
                    8d:cc:d9:78:4a:e0:9a:52:0c:37:04:99:8b:52:71:
                    8a:86:14:15:b1:3f:1a:f4:0b:11:70:1d:d5:00:4a:
                    80:ce:ad:26:31:5d:7b:96:59:0c:ba:5d:c5:5c:4b:
                    f3:20:25:a5:f8:34:1e:00:76:82:a2:fd:1a:31:61:
                    92:dd:d7:a3:d1:5f:9a:15:9e:0d:ef:bd:ad:86:2c:
                    75:43:4f:53:4a:35:0e:b3:4f:52:a8:ab:d6:0a:2d:
                    f3:96:3e:57:eb:8c:0d:8f:17:a3:33:62:fe:a2:fd:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:22:67:E5:A4:56:2B:EB:70:D8:BF:1A:93:20:D4:46:0B:67:54:F2
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:10:43:df:fd:6f:cf:14:1d:6c:6b:8a:3c:e4:b7:e6:eb:
         93:52:a4:72:d6:0e:8b:1a:82:7b:d1:f3:15:d8:c1:9f:c0:02:
         46:f4:9f:59:18:df:ca:57:68:6d:23:7a:98:b2:38:e7:e3:ef:
         b1:b2:8b:92:e7:d6:fc:fc:80:02:ab:4a:b9:40:6e:37:ed:27:
         25:f1:22:42:d7:97:3d:98:ed:c2:52:1d:ce:01:c5:11:c6:56:
         c3:66:fe:1e:45:e7:79:01:9d:e5:db:47:f7:72:e1:c7:fb:8d:
         db:f9:bb:35:ba:bf:7e:3e:03:b3:bb:ff:77:24:10:74:9c:96:
         6b:7d:e1:a0:7a:bf:9b:9f:43:e4:50:b8:38:c3:c9:01:47:b9:
         24:c7:60:fd:b6:b3:77:2a:6d:56:a4:34:ec:62:f0:39:bb:97:
         29:5e:54:52:81:ff:20:d7:48:f1:76:38:5a:1d:19:0a:64:9b:
         27:bf:88:36:0a:c1:fa:f8:dd:8d:6b:5d:00:4c:14:83:ef:72:
         7a:b0:27:53:96:a1:c1:53:f7:eb:80:92:e8:2d:d7:84:9a:ed:
         0e:5f:fe:56:c3:d9:be:12:aa:12:3e:0a:a1:18:23:1c:25:08:
         d1:be:09:13:41:71:3c:da:9b:8c:6b:d3:a2:bb:3b:d3:52:19:
         7f:76:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:54:47 2025 by rpki-client