Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
File:                     D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json)
Hash identifier:          l4cVAGRLuP0gB+nwRta/dl/h4zJ3lWyncqp0u02zD3Y=
Subject key identifier:   0C:9D:B9:77:44:55:12:45:EF:A4:BA:3D:77:42:8A:A3:F0:BA:3C:F3
Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B
Certificate issuer:       /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B
Certificate serial:       04277862715224EA5597BAB675FD60CB0A502E05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
Manifest number:          CC
Signing time:             Sat 28 Jun 2025 17:02:16 +0000
Manifest this update:     Sat 28 Jun 2025 16:57:16 +0000
Manifest next update:     Tue 01 Jul 2025 17:03:16 +0000
Files and hashes:         1: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: zM59QgzH/K8O4i/tzNe37zwwVnS65qf7DZJku3UKUIg=)
                          2: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: 08VDOU1DwBq3h4PFK8PYkAlpedsLIFNT/Wa8/3g1wsw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl
                          rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 17:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:27:78:62:71:52:24:ea:55:97:ba:b6:75:fd:60:cb:0a:50:2e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B
        Validity
            Not Before: Jun 28 16:57:16 2025 GMT
            Not After : Jul  1 17:03:16 2025 GMT
        Subject: CN=0C9DB97744551245EFA4BA3D77428AA3F0BA3CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:9d:86:9c:7b:46:68:58:0f:21:65:31:2e:
                    69:8b:f4:34:2d:ff:c9:cb:ee:6b:b3:3f:c3:20:7f:
                    da:72:14:16:9d:50:3f:d2:53:22:65:03:59:63:83:
                    c2:d9:e1:72:7f:22:b6:a0:3c:92:c1:e8:14:00:73:
                    ef:94:87:de:aa:45:9a:68:58:16:a6:7f:8c:e1:ee:
                    30:bf:df:b1:e4:a9:c5:0f:55:6b:15:37:7a:36:aa:
                    73:82:d6:a5:b6:4e:f1:7c:e9:29:e2:52:85:a2:e2:
                    31:a1:e4:a1:98:5f:b8:78:a0:fb:f4:06:67:97:94:
                    09:4b:b0:f3:7b:01:35:d4:f6:a3:2b:98:28:56:27:
                    2d:29:7c:d6:9a:c7:e6:d9:6f:47:ca:66:2e:d3:56:
                    49:07:c4:45:1e:2b:69:3f:bd:52:16:5e:74:3f:7e:
                    e8:1a:f1:c4:d9:19:02:d4:17:3c:51:ad:e7:70:6a:
                    62:c3:59:d6:61:b2:28:39:04:9a:3f:20:fc:44:eb:
                    d8:c1:2f:5e:5b:37:57:79:c1:72:e7:08:e6:c0:f1:
                    e4:57:d3:b0:18:68:72:e5:ab:39:52:47:43:65:2a:
                    2d:c3:78:27:06:f7:23:5d:b1:aa:97:81:85:f0:5f:
                    49:fc:ec:fc:35:d0:e0:48:5d:a4:c4:88:25:83:8c:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9D:B9:77:44:55:12:45:EF:A4:BA:3D:77:42:8A:A3:F0:BA:3C:F3
            X509v3 Authority Key Identifier:
                keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:84:fc:3c:20:84:9a:b2:d1:1a:48:86:27:50:0b:a4:ed:
         ee:ad:33:a6:73:5d:a7:dd:84:c5:1b:17:80:96:52:ec:4f:00:
         32:72:4e:26:7f:55:6d:86:de:aa:9d:a4:08:83:78:b3:a1:78:
         b8:0a:4e:89:2a:d2:33:6e:a0:39:5c:21:51:cb:06:9f:12:8f:
         5c:6c:a9:c8:b3:26:39:eb:5d:c2:49:09:4d:a2:5a:4d:b7:65:
         6b:0c:15:13:6b:14:99:b5:e9:00:25:7f:75:11:d7:4c:3d:31:
         1d:a2:47:99:b8:10:2b:18:75:1d:6b:85:bb:f4:19:13:29:bc:
         53:c0:2a:ec:b2:ac:68:4a:4c:89:63:a7:d0:80:48:86:46:1f:
         6f:87:52:0e:cd:21:b0:f3:f0:36:2f:4d:b5:48:dd:a0:22:d1:
         37:c8:cc:bf:61:c7:09:31:35:52:bd:10:20:ad:9f:bf:66:73:
         8c:26:b8:9a:12:b5:9a:a5:b1:af:04:44:c8:60:0f:f6:d2:23:
         9a:80:da:a4:40:cd:a3:1d:94:44:7b:6a:5d:05:3b:fa:e5:3a:
         c7:59:04:a2:d1:21:41:cc:88:bd:f5:12:de:31:2c:74:1f:90:
         2f:20:ed:2b:75:5d:ae:f3:5b:cf:00:00:27:23:59:43:6b:8f:
         a3:2e:2f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:16:15 2025 by rpki-client