Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft
File:                     CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json)
Hash identifier:          +ZtsjhoGT/9czZ5yQCsd0YcTY2TArG4ZcNtPp8gXK5g=
Subject key identifier:   BC:1F:0F:F6:BD:ED:C6:36:CE:14:A7:33:36:7A:07:8D:48:80:CF:54
Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37
Certificate issuer:       /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637
Certificate serial:       290C4FDADBD91C289C50F271F103425B4A228B34
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft
Manifest number:          AD
Signing time:             Sat 28 Jun 2025 11:50:42 +0000
Manifest this update:     Sat 28 Jun 2025 11:45:42 +0000
Manifest next update:     Tue 01 Jul 2025 23:20:42 +0000
Files and hashes:         1: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: GweS9Pdb3fKwk3vkuwATblIdaGfttmAkmYCffjgypE0=)
                          2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl
                          rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 23:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0c:4f:da:db:d9:1c:28:9c:50:f2:71:f1:03:42:5b:4a:22:8b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637
        Validity
            Not Before: Jun 28 11:45:42 2025 GMT
            Not After : Jul  1 23:20:42 2025 GMT
        Subject: CN=BC1F0FF6BDEDC636CE14A733367A078D4880CF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:06:7e:f2:14:63:f7:8a:b7:c8:bf:18:fb:
                    8c:69:54:aa:91:ec:61:3d:6c:7e:a2:42:c7:e7:00:
                    76:01:41:90:96:3a:a6:ac:c9:cb:5b:b4:e4:e9:ed:
                    26:b1:1b:18:46:21:ce:c8:6b:e4:02:ec:da:d9:24:
                    31:a9:b3:af:9f:f1:cd:ec:d7:67:8c:09:1c:9a:dc:
                    1d:3d:07:c6:8a:4e:0a:ec:98:cc:0b:e9:fa:dc:d8:
                    59:f8:76:a9:e7:a9:33:df:93:04:2d:57:de:b4:70:
                    fe:5f:70:1f:bb:4b:88:2b:5d:c1:cc:08:71:9f:08:
                    e0:d7:1c:8b:5b:b2:1b:1c:ef:4d:64:a9:e3:16:c0:
                    28:b7:a5:d8:2e:bf:3a:27:ce:4b:1f:e3:28:4f:84:
                    07:43:f1:87:75:77:04:d3:a1:3f:fe:d5:a7:03:a8:
                    ef:46:57:04:2f:90:57:87:f7:d9:dc:e7:71:90:6f:
                    bb:5f:03:13:2a:09:98:93:b2:f6:06:f6:7b:10:35:
                    a6:23:d4:f3:89:8a:a9:05:8c:6c:d1:73:67:00:3c:
                    c8:73:60:8b:9d:de:df:24:4b:a0:69:fc:b3:57:4b:
                    2b:07:38:d3:63:ed:5b:20:fd:8e:0f:33:90:57:ef:
                    b2:b6:98:41:ce:a4:11:35:6c:ac:1d:af:9b:cc:b1:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1F:0F:F6:BD:ED:C6:36:CE:14:A7:33:36:7A:07:8D:48:80:CF:54
            X509v3 Authority Key Identifier:
                keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:35:c0:2a:08:2f:75:ff:25:87:3e:36:17:79:32:bc:ed:69:
         6d:79:4b:44:86:10:5e:f8:91:68:25:07:23:e3:c1:0b:72:2f:
         be:c6:52:18:06:0a:96:1b:c3:1f:8b:57:d5:9c:da:34:0f:d5:
         22:9e:54:e1:90:d3:15:bd:24:af:68:f4:3c:d0:79:00:c0:ba:
         cd:69:3f:33:fe:3f:48:5b:3d:84:9d:e0:60:06:33:26:88:47:
         e8:d1:50:b4:c9:dd:09:2c:87:bb:1e:14:99:2d:9c:5b:ad:12:
         ff:35:f1:7d:03:7d:b0:07:34:24:63:5a:00:45:69:c2:b8:ba:
         fe:17:8c:98:2b:5b:0f:7b:fb:a4:a2:51:1a:33:8c:3b:31:1a:
         e1:80:ed:ac:ec:c6:66:ee:af:2d:60:53:d2:a9:7e:d5:d9:9f:
         f4:bf:68:50:e1:17:60:aa:06:93:42:d1:39:7c:f0:08:5f:db:
         fc:01:96:dc:2f:ba:92:cb:d2:f6:b8:0b:b5:1b:db:fb:e7:fa:
         31:12:c7:8a:c9:23:d3:cc:91:3c:f1:c3:11:35:d3:cd:85:10:
         f1:64:21:05:3c:38:75:39:a9:2f:e9:c5:16:51:93:ac:32:6e:
         84:f5:84:e1:d6:3e:77:a4:ed:61:0d:f8:e0:c5:c4:c3:1d:6b:
         d7:bf:ef:8a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKQxP2tvZHCicUPJx8QNCW0oiizQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw
QTc5RTYzNzAeFw0yNTA2MjgxMTQ1NDJaFw0yNTA3MDEyMzIwNDJaMDMxMTAvBgNV
BAMTKEJDMUYwRkY2QkRFREM2MzZDRTE0QTczMzM2N0EwNzhENDg4MENGNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93gZ+8hRj94q3yL8Y+4xpVKqR
7GE9bH6iQsfnAHYBQZCWOqasyctbtOTp7SaxGxhGIc7Ia+QC7NrZJDGps6+f8c3s
12eMCRya3B09B8aKTgrsmMwL6frc2Fn4dqnnqTPfkwQtV960cP5fcB+7S4grXcHM
CHGfCODXHItbshsc701kqeMWwCi3pdguvzonzksf4yhPhAdD8Yd1dwTToT/+1acD
qO9GVwQvkFeH99nc53GQb7tfAxMqCZiTsvYG9nsQNaYj1POJiqkFjGzRc2cAPMhz
YIud3t8kS6Bp/LNXSysHONNj7Vsg/Y4PM5BX77K2mEHOpBE1bKwdr5vMsVPlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvB8P9r3txjbOFKczNnoHjUiAz1QwHwYDVR0j
BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw
MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5
RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj
ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx
QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAM81wCoIL3X/JYc+Nhd5MrztaW15S0SGEF74
kWglByPjwQtyL77GUhgGCpYbwx+LV9Wc2jQP1SKeVOGQ0xW9JK9o9DzQeQDAus1p
PzP+P0hbPYSd4GAGMyaIR+jRULTJ3Qksh7seFJktnFutEv818X0DfbAHNCRjWgBF
acK4uv4XjJgrWw97+6SiURozjDsxGuGA7azsxmbury1gU9KpftXZn/S/aFDhF2Cq
BpNC0Tl88Ahf2/wBltwvupLL0va4C7Ub2/vn+jESx4rJI9PMkTzxwxE1082FEPFk
IQU8OHU5qS/pxRZRk6wyboT1hOHWPnek7WEN+ODFxMMda9e/74o=
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:27:05 2025 by rpki-client