Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft
File:                     34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json)
Hash identifier:          6TECaximKF0fosIv6aL8+Q7X8y7T30e3lay0GU1rsR0=
Subject key identifier:   ED:2B:5B:9F:B4:48:2B:81:6B:98:CE:72:B5:70:CC:31:64:FE:34:52
Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A
Certificate issuer:       /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A
Certificate serial:       3004364E41051E8C89F3AA55CC08B75F33274029
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft
Manifest number:          0332
Signing time:             Sun 07 Sep 2025 06:01:40 +0000
Manifest this update:     Sun 07 Sep 2025 05:56:40 +0000
Manifest next update:     Wed 10 Sep 2025 10:11:40 +0000
Files and hashes:         1: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: 5C7GpGjL6UNFHAH2uIC2pru2+G+e7gEY9NQvQOaOKlw=)
                          2: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=)
                          3: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl
                          rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 10:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:04:36:4e:41:05:1e:8c:89:f3:aa:55:cc:08:b7:5f:33:27:40:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A
        Validity
            Not Before: Sep  7 05:56:40 2025 GMT
            Not After : Sep 10 10:11:40 2025 GMT
        Subject: CN=ED2B5B9FB4482B816B98CE72B570CC3164FE3452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:ca:0f:a9:36:82:c4:70:5f:53:c9:a1:bc:
                    ba:cd:45:a1:c4:fc:cd:60:cf:8c:46:95:9b:30:3c:
                    5e:5e:2f:e8:b8:73:e1:7e:21:b3:0f:92:a4:ec:80:
                    73:3c:ca:3d:ce:f3:bb:3c:9c:06:60:d6:58:c5:d7:
                    6b:82:58:76:03:69:1b:d6:d5:4a:71:6c:4d:c9:11:
                    8b:7a:b2:57:8c:75:ef:50:3a:8a:21:70:72:cf:bc:
                    d8:2b:59:44:f2:a1:8a:a6:2c:79:25:6f:41:cf:b0:
                    99:08:1c:13:f3:77:c3:d4:05:f0:82:34:58:02:d8:
                    16:4e:0b:b9:af:fa:1d:b0:96:2f:75:1b:ad:97:da:
                    c0:8e:03:00:25:a2:f7:f0:92:e5:e9:dd:ce:0e:3e:
                    d6:ef:63:fc:ee:c9:2b:af:d4:62:36:25:f8:d5:dc:
                    b5:cc:8b:4d:d8:c9:62:6f:0e:c8:8a:84:0b:d7:d3:
                    b5:c5:5a:cb:23:24:04:71:a2:b9:df:a0:9a:5f:e9:
                    78:58:58:db:99:5a:75:ec:fe:e5:93:7d:6b:d7:17:
                    98:6e:cd:a7:c0:aa:3b:35:0a:3c:64:c1:70:34:fa:
                    5c:2f:f6:91:87:cc:a6:ee:02:b6:4a:b2:d3:a6:44:
                    df:8a:4e:0c:ff:aa:3d:c4:57:19:5f:b4:67:8b:58:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2B:5B:9F:B4:48:2B:81:6B:98:CE:72:B5:70:CC:31:64:FE:34:52
            X509v3 Authority Key Identifier:
                keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:2f:97:f7:00:b2:4b:f3:9b:fe:75:57:9e:2e:e5:01:72:
         4e:13:76:06:61:77:bc:47:86:48:97:ca:9d:4d:75:86:44:4d:
         9f:ae:4a:7e:e9:7e:38:48:a6:7f:47:05:00:63:1b:d3:1c:28:
         2a:8a:20:7c:be:e2:63:bd:a3:b7:6a:ce:5d:ef:99:34:e8:c5:
         fa:da:8d:d8:1f:51:6a:94:70:6a:d3:91:e3:f5:74:d4:41:02:
         7c:6c:a6:48:29:e8:a8:2f:ec:00:88:1c:8a:fd:fa:44:a9:86:
         b7:40:b9:38:fc:f3:1a:c4:d7:db:3c:78:5b:80:f5:c7:67:72:
         6d:3e:29:cf:15:24:90:95:65:65:08:d9:01:e3:9a:a8:12:3f:
         2c:83:c4:f0:f5:76:15:47:23:d3:02:5c:ac:65:4a:d6:d4:38:
         04:65:8d:60:a5:8a:28:75:37:23:0c:71:2d:2c:a1:aa:ca:ac:
         c8:b7:aa:5b:74:ef:15:9b:e8:3d:2b:63:71:15:d0:cd:ba:44:
         0c:a1:26:cd:cf:d9:41:f0:25:4f:17:6c:57:67:70:36:b8:5a:
         12:3c:b4:cf:90:d2:80:2b:3e:82:1f:92:ab:3f:9d:70:b9:49:
         dd:90:5e:6f:b4:f7:85:90:79:f6:87:96:da:71:52:75:43:d3:
         15:dc:0d:50
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMAQ2TkEFHoyJ86pVzAi3XzMnQCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD
ODQxREYzQTAeFw0yNTA5MDcwNTU2NDBaFw0yNTA5MTAxMDExNDBaMDMxMTAvBgNV
BAMTKEVEMkI1QjlGQjQ0ODJCODE2Qjk4Q0U3MkI1NzBDQzMxNjRGRTM0NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGP8oPqTaCxHBfU8mhvLrNRaHE
/M1gz4xGlZswPF5eL+i4c+F+IbMPkqTsgHM8yj3O87s8nAZg1ljF12uCWHYDaRvW
1UpxbE3JEYt6sleMde9QOoohcHLPvNgrWUTyoYqmLHklb0HPsJkIHBPzd8PUBfCC
NFgC2BZOC7mv+h2wli91G62X2sCOAwAlovfwkuXp3c4OPtbvY/zuySuv1GI2JfjV
3LXMi03YyWJvDsiKhAvX07XFWssjJARxornfoJpf6XhYWNuZWnXs/uWTfWvXF5hu
zafAqjs1CjxkwXA0+lwv9pGHzKbuArZKstOmRN+KTgz/qj3EVxlftGeLWOgfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7Stbn7RIK4FrmM5ytXDMMWT+NFIwHwYDVR0j
BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2
MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx
REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm
YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw
RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIw3L5f3ALJL85v+dVeeLuUBck4TdgZhd7xH
hkiXyp1NdYZETZ+uSn7pfjhIpn9HBQBjG9McKCqKIHy+4mO9o7dqzl3vmTToxfra
jdgfUWqUcGrTkeP1dNRBAnxspkgp6Kgv7ACIHIr9+kSphrdAuTj88xrE19s8eFuA
9cdncm0+Kc8VJJCVZWUI2QHjmqgSPyyDxPD1dhVHI9MCXKxlStbUOARljWCliih1
NyMMcS0soarKrMi3qlt07xWb6D0rY3EV0M26RAyhJs3P2UHwJU8XbFdncDa4WhI8
tM+Q0oArPoIfkqs/nXC5Sd2QXm+094WQefaHltpxUnVD0xXcDVA=
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:52 2025 by rpki-client