Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
File:                     C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json)
Hash identifier:          mxPRnh2XO67NqSLFfd7shr06C9oedX9gBEM6xR6aUE0=
Subject key identifier:   27:49:61:B2:1A:9A:BC:63:B7:37:F1:21:7C:5B:67:56:CA:10:EE:18
Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Certificate issuer:       /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Certificate serial:       62D27C2686AA8CDF409FB1B245211E30FEF42217
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
Manifest number:          04EE
Signing time:             Wed 02 Jul 2025 16:01:54 +0000
Manifest this update:     Wed 02 Jul 2025 15:56:54 +0000
Manifest next update:     Sat 05 Jul 2025 17:36:54 +0000
Files and hashes:         1: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: 6LyyJJeV4MUKQUmSmy0p8Z51yI1Vj4eAExDWuf2DxM8=)
                          2: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: 25bjKMZwqQbYi5jKvGEGUrT2NIQ4GwrYcOU6Y3FnIcI=)
                          3: 323430333a626130303a3630303a3a2f34302d3438203d3e203234353231.roa (hash: Cpr5xYTkNb6GEJUfrbLB6Ih2u86v1ZHFmVVPR6riK70=)
                          4: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: B9qLkdqrOWwVF5tA2jsrqX21V3LrtEAcPvXr3jC/ETM=)
                          5: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: /NJYIz5c5OxCtCzAI9eMSZnnK2DRsoEPFpGekXPN3/Y=)
                          6: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: okeDaf7d0Xuvp8xnTxJzUWPegOkeMCYHPs8G9yAmQ6Y=)
                          7: 323430333a626130303a3730303a3a2f34302d3438203d3e203234353231.roa (hash: oediRSUfrbiKHZ+4lfJc75ZOQTevxDBy4CNqy2qW3Ec=)
                          8: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: XTblwJ4OpupQKVM3L+0VPdo1vzAlW+UZ6yrctqElG0s=)
                          9: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: UQj5o2r9jrF7gwD6zEDeivAaIC1EoryECU1Z4pufDeg=)
                          10: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: trFC+pX4oMn7rw9va8+zapompho+fZFvfIyOd+ou6p0=)
                          11: 3137352e3138342e3233382e302f32332d3234203d3e20313334363534.roa (hash: U4Kz+JMqmBXXJWJ51q9GFdWYnPA1z7UpadwESZtmyoA=)
                          12: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: goTJLl3/w7x7U8NSkn0Z63N87b464oCxipnXIbqlKyA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
                          rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 17:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d2:7c:26:86:aa:8c:df:40:9f:b1:b2:45:21:1e:30:fe:f4:22:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
        Validity
            Not Before: Jul  2 15:56:54 2025 GMT
            Not After : Jul  5 17:36:54 2025 GMT
        Subject: CN=274961B21A9ABC63B737F1217C5B6756CA10EE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:55:d9:8f:31:21:8e:8c:6c:ea:1a:34:05:
                    ab:d8:d9:2e:90:35:c1:00:7f:c2:fa:ee:54:78:82:
                    05:eb:98:94:45:60:0c:7c:45:93:3d:c0:ec:b1:12:
                    7c:8f:a2:67:97:8a:be:f9:ec:ac:4b:fc:65:96:08:
                    c7:7e:87:dc:0c:18:33:32:eb:c2:26:fd:36:a1:8b:
                    1f:6e:83:d6:84:39:87:8a:44:0a:89:eb:5e:ef:89:
                    20:57:23:6d:ce:59:19:d7:30:f2:f6:b0:bc:65:66:
                    87:fc:29:36:63:0c:c4:ea:18:06:b6:bb:7c:b2:8e:
                    bf:c2:0c:c7:aa:7f:f6:27:92:23:3a:2e:01:5e:79:
                    21:f8:4a:a0:55:b0:80:01:db:1a:bf:ec:cf:f0:90:
                    65:d1:fb:c4:dc:9a:8b:cc:59:cf:b9:28:9f:1e:e2:
                    b6:cb:01:e8:fe:c4:5d:b0:ea:e9:5c:33:7a:07:63:
                    44:af:a6:f2:19:9b:18:8e:f5:d3:fe:53:ec:72:1e:
                    29:7e:a8:e9:23:41:8a:7b:d3:21:00:90:1a:45:83:
                    7b:f8:61:a0:ab:35:59:12:bc:ba:7e:a6:6b:86:90:
                    07:90:72:20:15:76:a7:fd:90:1a:44:3c:38:b0:b5:
                    c6:83:50:ab:81:09:13:92:e4:b1:5f:ef:2d:13:8f:
                    2a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:49:61:B2:1A:9A:BC:63:B7:37:F1:21:7C:5B:67:56:CA:10:EE:18
            X509v3 Authority Key Identifier:
                keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:21:86:a5:8a:f5:76:f4:54:f4:9b:9b:37:e2:00:f0:e8:63:
         f4:c6:ed:49:ad:40:93:53:3c:38:c7:6b:ad:58:9a:2d:32:ff:
         a5:1f:dc:30:ad:55:b3:51:35:84:db:db:f6:cb:5d:43:cf:de:
         44:d2:d5:8e:bb:2e:bd:07:b2:ec:36:66:d8:ef:4c:ae:9b:19:
         21:e3:c8:4f:d6:dd:d8:5e:e4:25:c7:81:f7:8b:2c:02:8b:20:
         96:8e:34:31:a4:c3:f1:89:f4:0b:66:da:1f:0c:b7:e4:b7:12:
         cc:ee:1b:e0:14:a2:b8:99:68:e6:14:b0:4d:77:da:9f:77:84:
         38:01:d6:a0:8d:a6:df:63:d8:a8:e7:9e:1b:7c:3e:49:6f:15:
         d6:7c:0f:d7:7a:15:83:c6:59:dd:5c:f4:62:02:d3:51:0d:40:
         01:77:bb:8d:5b:b3:fb:99:0c:01:98:4d:0f:8e:07:68:36:1b:
         b9:f3:c7:44:55:d1:a3:64:b4:3a:65:ba:09:af:73:bd:11:3c:
         c6:d6:bb:2c:cb:2c:57:ed:04:8b:a2:0d:ab:a5:76:4e:aa:8f:
         47:18:14:89:7f:49:1c:05:9d:28:f1:20:b2:9d:37:29:97:62:
         ac:50:f0:a2:f0:7d:4d:6e:8e:03:2e:d3:41:e5:30:4a:b4:04:
         1c:4a:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:19:26 2025 by rpki-client