Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
File:                     EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft (raw, json)
Hash identifier:          Q4SxY5zsuiQNKh14/GCSvcHSD4abVV44oRenUAZaFgc=
Subject key identifier:   30:13:94:15:9C:09:29:7C:3E:3E:43:74:2D:D5:53:E2:2C:27:D1:76
Authority key identifier: EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9
Certificate issuer:       /CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
Certificate serial:       0D2EF9F0AE9CA0FB35CC857C1D04C246424C9F9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
Manifest number:          04DA
Signing time:             Mon 02 Jun 2025 01:02:32 +0000
Manifest this update:     Mon 02 Jun 2025 00:57:32 +0000
Manifest next update:     Thu 05 Jun 2025 09:56:32 +0000
Files and hashes:         1: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: FH/voLgmuZE3XbtxgnYOWLHEkRd7OKtR53sqhIsyCzA=)
                          2: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl (hash: 0ZOAQgCbvth+kqEOJwrZJf6LN2lDOVgHVNQrGHsA+R4=)
                          3: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: 3V+KbbdMSsyWcppKJdE78z6t2xUFj1baxa/Y1TQkRqM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl
                          rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Jun 2025 09:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2e:f9:f0:ae:9c:a0:fb:35:cc:85:7c:1d:04:c2:46:42:4c:9f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
        Validity
            Not Before: Jun  2 00:57:32 2025 GMT
            Not After : Jun  5 09:56:32 2025 GMT
        Subject: CN=301394159C09297C3E3E43742DD553E22C27D176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:80:1f:04:4f:24:c0:70:16:86:42:c9:8b:
                    3d:a9:79:62:39:50:52:6f:79:2d:40:58:d3:41:1d:
                    9f:07:23:22:89:85:11:79:ab:09:50:64:65:95:79:
                    37:c4:93:56:67:72:1f:04:bb:04:b7:17:26:4d:d0:
                    ac:97:c5:62:a1:46:26:c2:5f:cf:ea:39:46:a8:56:
                    8e:63:2a:0b:a5:71:fe:65:19:de:17:30:3e:48:15:
                    b2:eb:10:a0:82:96:58:a3:4d:12:98:4e:13:6e:53:
                    90:4d:a9:a4:16:e7:f1:58:0c:44:a0:b0:69:cd:fe:
                    47:e3:09:22:d2:c6:aa:da:91:a2:df:ef:bd:be:a1:
                    c7:0a:cd:4a:42:01:9b:a0:75:c7:39:27:cf:79:af:
                    32:25:99:62:a7:ba:de:f1:9b:b3:af:8a:25:a6:15:
                    ea:84:a8:c0:6f:73:c8:1b:a5:34:01:1e:83:db:f0:
                    db:65:e6:a2:ca:eb:be:69:81:72:28:9e:10:a4:fc:
                    5d:3b:a3:3f:bf:64:40:4a:8d:30:41:8e:44:4d:8a:
                    6e:80:2a:f9:8d:6d:6b:b8:e5:53:97:c0:4a:45:aa:
                    64:2d:99:7d:6c:50:d7:bb:59:ec:5c:ce:95:79:a1:
                    b8:bf:03:6a:ce:a1:aa:f0:4e:22:b1:2e:04:06:05:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:13:94:15:9C:09:29:7C:3E:3E:43:74:2D:D5:53:E2:2C:27:D1:76
            X509v3 Authority Key Identifier:
                keyid:EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4b:2c:bc:76:10:78:4a:59:c0:a8:70:6f:52:3b:75:19:56:
         10:e8:b8:8a:63:a3:20:48:92:c3:55:a4:d7:30:94:72:73:3a:
         4d:56:33:f7:69:5d:85:83:9c:41:70:13:94:d2:4b:07:06:5d:
         96:9f:2e:7c:94:08:41:b1:c9:65:1b:33:80:32:98:23:91:f7:
         a8:07:ea:70:99:35:90:c4:55:56:f3:8a:18:ca:d3:d2:cf:83:
         56:82:39:a8:76:2e:6e:e0:0f:15:7f:6d:72:ce:15:f9:3d:f3:
         7c:a7:8f:71:3f:37:80:0f:85:f6:09:f9:7d:a3:5e:3f:cb:00:
         4e:23:53:57:e7:58:fa:cb:fd:1c:a1:f3:31:4e:82:37:7c:37:
         98:50:0f:db:72:b8:48:29:85:ec:83:1a:76:ef:8d:ed:73:9f:
         8e:6c:e9:e5:84:0f:47:a2:01:f3:82:b0:11:6d:d8:66:80:57:
         7b:ff:11:ba:56:35:4e:4a:16:7b:5b:f6:b4:10:15:44:eb:0e:
         43:b9:b3:e2:03:fc:67:bd:d9:77:69:08:77:13:24:5d:88:2c:
         fc:e8:82:fe:65:50:bd:53:19:cf:3f:eb:5a:be:e0:71:df:24:
         e5:5f:fe:19:91:d2:18:7d:62:3c:72:2d:1f:02:1e:34:c0:ef:
         67:78:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:57:52 2025 by rpki-client