Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
File:                     C451166D49539649063AF8F493F51CB1ACE0AB09.mft (raw, json)
Hash identifier:          kWvQTdVxv6xzKdNPZWA2JcWkNxCCkAiDVpmzbDLXaFU=
Subject key identifier:   BB:BE:51:2E:96:64:74:5E:2F:80:A2:F6:58:19:8F:01:F3:BA:B5:80
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Certificate issuer:       /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial:       7F5DEF690BEFF1FA02341B28C1538287C17D7089
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
Manifest number:          01A1
Signing time:             Wed 07 May 2025 23:00:56 +0000
Manifest this update:     Wed 07 May 2025 22:55:56 +0000
Manifest next update:     Sun 11 May 2025 07:25:56 +0000
Files and hashes:         1: 3230322e35352e3137342e302f32342d3234203d3e203137373639.roa (hash: TOicGjX8vcWkrijZarpkF1YRbk4fvyDvP+6bb+eWkQo=)
                          2: 3230322e35352e3137322e302f32342d3234203d3e203137373639.roa (hash: 1RNEIimWls5L1YA+6LvVON5gsGW9KYIAg/Gbxl/jXeo=)
                          3: 3230322e35352e3136352e302f32342d3234203d3e203137373639.roa (hash: EnBylqGRkHck1P/w6gsiqwIs4ZiF2BWlNLshGkPWj1w=)
                          4: 3230322e35352e3136332e302f32342d3234203d3e203137373639.roa (hash: 8mQvVYsNu1MgIuS85Ekeeuz1vVHgVHOVsmhN5uaPP2Q=)
                          5: 3230322e35352e3136302e302f32342d3234203d3e203137373639.roa (hash: 1+BV/NTZwsd8/f/6SrmjQsaN3Cxn5HVV92bi1Tr6Udg=)
                          6: 3230322e35352e3136342e302f32342d3234203d3e203137373639.roa (hash: gJiPfcs7x+QPwd46zsyy0LC5MIR9E7LSEG+4rdoSXqA=)
                          7: C451166D49539649063AF8F493F51CB1ACE0AB09.crl (hash: SslMFf37yYnNFJymOWIdoeNuh8ZN4vmci6+QVjQ1dqw=)
                          8: 3230322e35352e3137352e302f32342d3234203d3e203137373639.roa (hash: WXEDDDPWB5FVkZshm54puF6BbpeClu5z65OQiUmZWzQ=)
                          9: 3230322e35352e3136362e302f32342d3234203d3e203137373639.roa (hash: /uN/gRWvxMAuWk8UTjPgmb7AlZbY5wXA7sl/iVtprNo=)
                          10: 3230322e35352e3137302e302f32342d3234203d3e203137373639.roa (hash: 4bj3MXGoZaT4Igt7DvfRdU3lCEctq8NmmP9+BphbuzU=)
                          11: 3230322e35352e3136322e302f32342d3234203d3e203137373639.roa (hash: GxlygWgwwXSgX7kQBxUFnJkMJD7Fxqb8DLIN6hy94xY=)
                          12: 3230322e35352e3137332e302f32342d3234203d3e203137373639.roa (hash: KsBanZtrFrCcxMbzafZ0aONiDKdqsDpHhmyfMWYDBwE=)
                          13: 3230322e35352e3136312e302f32342d3234203d3e203137373639.roa (hash: AMZA6poYk3LsQX36BjatntHHqUJ3uNfC32cqYqHULzA=)
                          14: 3230322e35352e3137312e302f32342d3234203d3e203137373639.roa (hash: HY2Lm/Wv56q0jC2Eykf082uzU9W7rCpdXShoCfWdI5c=)
                          15: 3230322e35352e3136382e302f32342d3234203d3e203137373639.roa (hash: UCKUGGRJkmZTnZ328lhxhPO1YBrE7sa3RsSw2CUGUbU=)
                          16: 3230322e35352e3136372e302f32342d3234203d3e203137373639.roa (hash: 81RZ2WuSRSNrswgyRZXjYvG3Ysm+qlLZYds2FFDcp40=)
                          17: 3230322e35352e3136392e302f32342d3234203d3e203137373639.roa (hash: 44mRlsx4iVAKs6V8CS8fG/JX89Mk1KlAJik4Z/oAau4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
                          rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 07:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5d:ef:69:0b:ef:f1:fa:02:34:1b:28:c1:53:82:87:c1:7d:70:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
        Validity
            Not Before: May  7 22:55:56 2025 GMT
            Not After : May 11 07:25:56 2025 GMT
        Subject: CN=BBBE512E9664745E2F80A2F658198F01F3BAB580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ea:45:4a:b4:97:dd:9e:d1:a6:24:4d:8b:c5:
                    76:5d:48:88:bf:31:ca:8d:cd:72:05:18:5d:d7:99:
                    20:75:56:50:01:a4:72:10:72:c9:f4:49:49:13:45:
                    bd:5d:03:ca:4f:ca:b2:38:5d:c1:e0:67:cf:cd:44:
                    40:72:1c:f9:49:3d:6e:8e:b7:e4:b9:d0:35:57:02:
                    99:d1:64:1f:c2:ab:9a:1a:92:24:24:95:e6:fe:f2:
                    ca:78:cd:5b:04:80:1e:80:ba:5f:16:ab:2c:fa:14:
                    b2:3b:cc:9f:1d:cb:88:d4:b4:f1:9c:ad:7a:7b:e5:
                    8a:64:a4:2f:e8:69:5f:0f:d5:e8:cc:24:fa:15:7b:
                    f8:02:16:42:ac:09:e9:24:78:f7:64:cb:25:e8:29:
                    a1:e6:49:62:0b:ed:4e:0c:75:b0:40:1c:97:31:19:
                    e4:51:05:0f:25:43:b9:d9:3f:6a:f4:cd:ee:d4:39:
                    dc:ec:76:c1:53:54:29:03:d9:dc:a7:48:0a:12:d6:
                    8b:53:63:53:5b:51:92:77:6d:05:23:b8:36:b4:38:
                    c8:50:54:a5:e8:37:b7:e8:bb:fd:e9:23:fe:bc:2c:
                    02:cc:8b:1d:18:40:32:8c:c0:61:74:41:b0:e0:10:
                    c9:be:10:14:5f:a6:b1:df:28:df:28:90:0b:83:04:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BE:51:2E:96:64:74:5E:2F:80:A2:F6:58:19:8F:01:F3:BA:B5:80
            X509v3 Authority Key Identifier:
                keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:53:29:52:80:f2:cc:5e:d5:7e:2b:d7:d9:31:f9:b6:17:2e:
         6c:87:3c:4b:d9:06:92:e1:80:bc:17:39:a7:a9:8b:d0:36:d4:
         1d:7d:cb:7b:4d:b3:88:3e:b7:a0:6f:93:7c:8c:17:57:e7:c1:
         77:43:10:0f:5e:14:e5:67:c9:08:87:89:35:95:a3:06:a9:bf:
         ec:e2:a7:d1:10:98:d4:45:65:f7:b9:95:3c:30:a3:fd:fa:a6:
         39:5c:6a:7c:a3:c1:09:27:8d:c0:32:69:d1:c2:a4:eb:90:ee:
         d1:5c:22:bc:2c:ee:cc:0f:f0:63:77:63:88:82:25:2d:f6:2d:
         72:9b:41:be:ce:18:9c:a6:9c:57:4b:a4:45:0e:c0:af:24:41:
         1d:1a:9d:30:0a:1d:b3:f2:f0:01:e3:19:ea:b7:3e:68:cf:78:
         38:58:7b:d7:b7:4c:14:fc:c8:b4:ee:73:d1:3c:99:14:8b:45:
         88:c5:35:db:b8:be:a5:02:c4:7d:38:9e:49:4d:d0:a3:27:1a:
         72:08:bc:16:5d:08:4a:69:e0:c8:70:29:48:a9:77:a9:b5:ac:
         d3:65:a0:ce:06:46:dd:02:8a:bf:e7:02:0e:0a:3d:8b:38:34:
         6f:ea:65:90:27:62:db:39:02:51:8a:7a:8f:4d:d9:66:1f:cf:
         64:bb:6d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:19:07 2025 by rpki-client