Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
File:                     5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json)
Hash identifier:          zwZ+wD43YFF6YWspQrMnQ9ng3Y5boHdaTtENqPCXKGw=
Subject key identifier:   AC:D6:B4:9C:85:23:0E:F7:50:19:5E:43:D8:48:93:1B:E6:41:92:C2
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       7BBB5DAC399DB3E3801233B23C20039E618F901E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
Manifest number:          04D9
Signing time:             Wed 04 Jun 2025 03:20:01 +0000
Manifest this update:     Wed 04 Jun 2025 03:15:01 +0000
Manifest next update:     Sat 07 Jun 2025 03:34:01 +0000
Files and hashes:         1: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: mp213bICEXwH+LqnHma8nvPV6BFgfv4aiHAHQpn9yQs=)
                          2: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 9KZ9F45elzM13kws/U0IoAzbbI/YdymyAIpoe5+fMUI=)
                          3: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: dTEDIPJlLGDlRHB30/PzLB90DYFKiiQue74QgGKHEVI=)
                          4: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: r/svlrZcSr5sJUDVP99x6FJY548aywPcFlNv37DJt2Y=)
                          5: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: aizJJB0DJVyZADiVIhCZ0i7gSchbKudhecmV+pyrx9o=)
                          6: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: qGI/gZ+/LHiM5HYO/jSSY227nu7Rlo4VufnCOUnRtK4=)
                          7: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: orPkEwdvzbgAdBqwJx5fyoqFz6nU1AjYY7pCrQmrMAU=)
                          8: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: oriUzK7mgQPCjaTV1H4IccgCRtyIm4Y5jf+70OM+bhw=)
                          9: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: ghDv+E88LbsHp+yiOmZsjAqDuH4NzWOqybkoMe5BmV8=)
                          10: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: tUFNikuzZ5Dxu83zUyF9psB1ZAXrbnO+JVBeZVWaO4g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bb:5d:ac:39:9d:b3:e3:80:12:33:b2:3c:20:03:9e:61:8f:90:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jun  4 03:15:01 2025 GMT
            Not After : Jun  7 03:34:01 2025 GMT
        Subject: CN=ACD6B49C85230EF750195E43D848931BE64192C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:94:7a:9b:e2:4c:2b:05:fb:ca:ec:63:99:
                    96:a6:ae:60:2b:d8:e4:28:db:0b:cc:da:4f:4c:ff:
                    cd:64:66:dd:91:76:54:d7:7b:90:99:b6:f4:20:f1:
                    41:a6:14:31:60:2a:a9:57:f8:97:34:a3:5d:04:c3:
                    8d:8d:83:f5:75:31:9e:38:9e:cb:df:ca:87:75:c1:
                    f1:68:55:13:48:1c:61:7a:3f:2d:17:55:f3:e7:c2:
                    c6:27:97:fc:b4:cf:35:67:85:fb:19:9a:a1:93:3f:
                    81:81:c0:68:33:ac:4a:80:25:61:b2:16:20:7e:71:
                    27:9f:a2:13:c1:86:37:1a:a4:de:62:fb:6a:73:2e:
                    8d:26:ec:47:cb:2c:14:6b:79:b3:b8:25:98:4e:e0:
                    24:87:02:23:f6:d1:c8:67:0e:e3:1e:18:7e:3c:3e:
                    21:c2:18:b9:4b:3b:96:fe:97:ae:38:cb:7c:21:5e:
                    28:21:b8:2a:13:ab:4d:53:95:ca:c0:ec:33:85:29:
                    72:fa:da:6d:83:22:fc:eb:59:01:95:e7:5a:5c:f1:
                    8d:fc:0d:35:06:e3:14:12:1f:80:99:ec:be:12:12:
                    db:c0:99:b0:cb:7a:fb:72:d5:73:40:5a:b7:75:ec:
                    bc:c0:91:1a:ec:cf:e4:d1:d4:e3:29:1d:75:a3:87:
                    a0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D6:B4:9C:85:23:0E:F7:50:19:5E:43:D8:48:93:1B:E6:41:92:C2
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e8:a8:ad:c1:f0:64:c1:a6:b0:e5:77:8f:46:8e:ef:11:51:
         8c:e7:43:33:ad:b0:39:92:32:f5:71:52:d7:f3:a6:ef:37:32:
         cf:cf:f8:c6:d7:fd:06:99:ff:37:71:7e:be:f4:a2:d7:1a:20:
         20:5e:50:3a:40:ed:14:f1:9c:46:30:97:6b:97:21:36:1b:e6:
         bd:56:2c:7a:3d:f5:f4:56:18:fd:fc:6c:d6:9f:f0:e8:46:bb:
         8d:a1:f7:67:69:67:f7:dd:9a:0a:0d:e4:ab:9d:54:13:be:b0:
         35:29:b0:97:17:67:46:00:9f:cd:f4:3b:3c:3e:a0:a3:56:8d:
         85:35:c9:ce:1f:31:e8:a9:95:0e:c1:0d:74:fa:fc:ee:24:19:
         99:c8:3b:94:2b:01:bb:13:3c:5c:b8:2c:9e:b7:0a:23:e2:82:
         91:b6:0c:8a:18:38:9c:47:43:6a:12:8b:2a:f0:91:d9:e0:ed:
         a1:78:f3:f5:d7:d9:6e:7f:fc:43:60:05:88:cc:60:d7:30:24:
         a6:a9:2e:ce:89:34:b5:21:bd:96:17:85:fa:bb:1d:81:65:5f:
         db:69:01:b8:4c:e9:26:f1:08:eb:e3:e9:c7:d2:93:b6:a4:ee:
         b0:0c:80:01:27:39:7d:a3:59:ca:78:d0:77:a8:d6:b2:21:ba:
         40:b2:3d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:49:16 2025 by rpki-client