Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
File:                     6C11FF5474BE690E545132237E53030296585D32.mft (raw, json)
Hash identifier:          YTYqF/zq83u3Wl1xROJLT5Tl3+4B/D11DElHipy06mw=
Subject key identifier:   B4:8A:FC:5D:3E:9E:2F:C1:BD:68:66:68:F0:2B:78:E9:74:9C:D3:8C
Authority key identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
Certificate issuer:       /CN=6C11FF5474BE690E545132237E53030296585D32
Certificate serial:       1AC2208B84C1F89F1750347A254137AD4808CBD6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
Manifest number:          042E
Signing time:             Sat 10 May 2025 04:30:45 +0000
Manifest this update:     Sat 10 May 2025 04:25:45 +0000
Manifest next update:     Tue 13 May 2025 11:52:45 +0000
Files and hashes:         1: 3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa (hash: bRNZ8nUlgm5rj4Lv4Xn5qKIuBE6nw8cnVSc6VxHCPew=)
                          2: 6C11FF5474BE690E545132237E53030296585D32.crl (hash: mF1ZQPyC61aDtAH0Cg4CGA7Q4Xi5JvLnZWi5uVqVCYE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl
                          rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 11:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c2:20:8b:84:c1:f8:9f:17:50:34:7a:25:41:37:ad:48:08:cb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C11FF5474BE690E545132237E53030296585D32
        Validity
            Not Before: May 10 04:25:45 2025 GMT
            Not After : May 13 11:52:45 2025 GMT
        Subject: CN=B48AFC5D3E9E2FC1BD686668F02B78E9749CD38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:76:da:00:64:8c:bd:b5:83:d8:f7:1f:c9:
                    9d:0a:44:9b:86:22:91:6b:81:06:ea:f2:a7:7c:98:
                    71:ed:50:92:c1:44:ea:79:46:ce:69:ba:99:f6:b9:
                    8e:02:22:42:d3:fa:4e:50:a3:4a:ad:8a:a2:d6:2f:
                    a4:f2:e3:42:33:87:91:a0:95:e1:3b:d6:a7:ba:d5:
                    e3:2a:53:aa:5c:49:17:6e:41:df:d3:29:37:5f:4e:
                    d3:56:c3:f5:47:b8:33:10:e8:6b:74:03:71:9b:8c:
                    03:bc:0e:a3:98:72:34:14:72:87:ed:42:d6:bd:84:
                    4c:e1:d0:b8:2c:27:a8:b8:6e:fe:4e:68:98:96:79:
                    21:e0:5d:d5:a6:4a:e4:ff:c4:ed:18:93:7d:9a:a3:
                    4f:7d:b9:ca:76:89:5c:a8:d0:bf:ee:78:3c:a6:50:
                    fe:6b:08:34:f2:53:0c:83:8d:58:aa:88:78:48:d3:
                    1c:58:3a:22:af:3b:31:1e:13:a7:e7:97:25:f2:93:
                    8b:d5:8e:94:60:d7:68:a4:6d:3e:da:2b:de:0f:df:
                    04:a1:d8:bd:bb:ed:03:ad:13:2d:e4:00:8e:5b:b3:
                    f7:33:f8:8f:6c:0f:32:ce:59:ed:ba:9b:9d:07:f8:
                    32:39:5e:3f:cf:a8:42:18:9e:17:31:be:f0:da:3b:
                    27:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8A:FC:5D:3E:9E:2F:C1:BD:68:66:68:F0:2B:78:E9:74:9C:D3:8C
            X509v3 Authority Key Identifier:
                keyid:6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:24:f8:2c:3e:80:b2:e6:8a:50:d4:df:1e:72:21:7b:9c:76:
         00:8f:c3:a5:79:47:f0:e7:c9:a2:e9:15:9e:cb:f7:8f:11:fb:
         e7:bc:26:36:f0:b3:74:f7:1a:f4:42:1b:3e:61:02:4b:b0:f8:
         5f:9c:8c:68:4e:56:ff:54:9c:39:5a:01:56:8e:5e:7e:85:ec:
         ee:56:b2:d6:a6:ed:7c:9b:03:35:3d:c5:97:bd:f0:6d:d0:ab:
         ad:80:13:7c:29:5e:08:ee:fb:14:7a:36:0a:45:24:04:06:37:
         13:fd:d3:83:e1:1e:4f:16:f4:f6:25:e8:00:80:6c:b5:0e:70:
         ae:62:4b:64:5f:9d:2b:19:ef:6f:82:aa:72:00:84:11:63:d8:
         df:ab:83:49:b2:94:10:85:58:e8:41:9c:68:ac:17:6c:9f:69:
         41:6c:e8:4e:7e:fa:66:77:d1:6a:d5:1a:dc:09:99:aa:86:6b:
         a2:8c:0c:69:fc:9b:1b:28:70:4b:05:03:fd:1c:03:a7:54:a0:
         d7:7e:dd:22:cb:e9:03:d3:01:ae:87:2a:1c:66:4a:f2:c2:8a:
         0d:a5:cf:45:a2:e4:99:2d:f0:7e:45:68:c2:7a:3a:94:74:b3:
         a5:5a:1e:44:9f:40:40:cd:8f:17:dc:ef:e6:dc:aa:b5:dd:92:
         d3:31:87:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:52:57 2025 by rpki-client