Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
File:                     69BB542D91A8CC754EA322384139641D17704D60.mft (raw, json)
Hash identifier:          4kFnAZaLMQd/zffRIVa2wTvx5gzekdHDXH+VbaJIDxc=
Subject key identifier:   66:9D:B5:0D:7E:97:A7:A3:9E:DC:B6:29:60:C6:DB:1D:08:A0:1C:75
Authority key identifier: 69:BB:54:2D:91:A8:CC:75:4E:A3:22:38:41:39:64:1D:17:70:4D:60
Certificate issuer:       /CN=69BB542D91A8CC754EA322384139641D17704D60
Certificate serial:       5E493DA0BA68727D4EFE301B8E77D3F86E9697D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
Manifest number:          0187
Signing time:             Sat 10 May 2025 16:30:43 +0000
Manifest this update:     Sat 10 May 2025 16:25:43 +0000
Manifest next update:     Wed 14 May 2025 03:46:43 +0000
Files and hashes:         1: 3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa (hash: +2cHre9FQzEIu4ncAZOvB9Udxn0tX40tE2H1hraGulI=)
                          2: 69BB542D91A8CC754EA322384139641D17704D60.crl (hash: DhMfpaNyqqqke3qpyfwl6310/4CBBFAW7urZVq5H9Ec=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.crl
                          rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 May 2025 02:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:49:3d:a0:ba:68:72:7d:4e:fe:30:1b:8e:77:d3:f8:6e:96:97:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69BB542D91A8CC754EA322384139641D17704D60
        Validity
            Not Before: May 10 16:25:43 2025 GMT
            Not After : May 14 03:46:43 2025 GMT
        Subject: CN=669DB50D7E97A7A39EDCB62960C6DB1D08A01C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:62:f3:01:ce:36:af:dc:77:f7:b5:10:ec:78:
                    b4:7a:8a:c5:8e:61:8a:1a:14:ec:69:9a:d8:82:8e:
                    b5:74:92:ce:24:6d:99:13:52:8a:2c:84:d9:68:cd:
                    c0:23:40:f5:d7:f4:36:fe:42:80:a4:43:08:c9:f7:
                    cb:bb:e3:7c:dc:00:d6:07:b5:8d:6b:04:4d:2d:9d:
                    a5:2c:87:3f:94:a0:6c:bd:85:86:8d:a7:60:4d:82:
                    79:fc:7f:f2:bb:1e:3e:f6:64:e7:eb:f5:f1:05:1e:
                    93:50:44:53:72:3c:5e:db:75:c5:53:bd:5a:54:a3:
                    1c:4b:07:65:df:ff:db:99:bd:c7:45:5a:29:06:9a:
                    ad:2a:b3:1e:3c:7f:12:7f:03:67:1b:b9:de:15:2d:
                    73:2d:04:81:7b:d1:bd:b8:41:5e:ba:19:ed:6a:ea:
                    c1:1f:01:49:f8:d2:a9:25:85:74:a8:eb:d7:d1:32:
                    39:01:a1:c5:35:1f:84:56:fc:ac:90:4f:4f:1b:af:
                    3d:7f:3e:31:03:0c:ce:09:c4:87:94:e2:3c:52:d5:
                    32:dd:99:63:fa:35:1a:d9:aa:f9:26:93:58:67:ad:
                    da:87:8f:63:bb:44:21:2f:3d:e3:97:c5:57:81:0c:
                    e4:8f:6a:a2:8b:e6:70:c5:95:5d:d1:32:be:33:91:
                    f5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9D:B5:0D:7E:97:A7:A3:9E:DC:B6:29:60:C6:DB:1D:08:A0:1C:75
            X509v3 Authority Key Identifier:
                keyid:69:BB:54:2D:91:A8:CC:75:4E:A3:22:38:41:39:64:1D:17:70:4D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0b:c5:5c:6e:da:15:1a:2e:3d:cb:40:9a:54:be:82:d2:2b:
         34:a7:6e:4e:e7:4f:56:4e:7e:d6:f1:e0:f6:0e:26:92:0d:1c:
         3f:bb:38:cf:2b:7f:a7:e6:68:c1:4f:97:32:6d:f5:92:2d:f7:
         bd:e2:06:80:2a:87:2f:59:bb:7e:ac:d5:91:c1:f3:9d:8f:ad:
         fd:31:4d:d8:95:65:07:2a:84:f2:29:89:c5:fc:b3:d1:a4:a4:
         91:0d:3b:ef:d0:c7:8b:39:d2:e2:b5:a8:3e:43:8e:a8:d7:46:
         05:72:f0:c4:7e:8e:b4:dd:40:3b:1b:1c:3a:80:5e:c3:c5:bd:
         05:c9:fe:3c:d0:84:b1:23:17:87:d5:4a:da:bf:e3:e6:a0:95:
         45:91:f9:05:21:fa:55:c1:88:29:bf:15:8e:20:04:d5:2b:4c:
         d1:57:81:63:a6:80:fa:c4:0e:fd:30:e1:b6:ba:2f:c5:b2:6f:
         85:c0:ef:95:84:7e:ab:09:42:92:68:78:01:5e:90:fe:b1:89:
         11:09:1d:91:65:db:f4:ba:71:3c:4f:d6:85:78:1e:12:7e:29:
         ff:f5:aa:73:3e:fa:f7:9b:8c:5e:41:38:02:6f:a3:85:0f:47:
         21:11:36:71:3f:44:70:90:59:72:be:90:38:9a:46:e4:e1:b8:
         a1:6c:c9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:16:16 2025 by rpki-client