Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
File:                     E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft (raw, json)
Hash identifier:          Ddo6I4aJ+kEsY8KC+a7SEx8PXs2DQTkKRQU3o8E7f2U=
Subject key identifier:   70:E3:B0:21:B5:22:1F:6D:18:50:85:7E:CF:66:E3:D1:6E:34:65:E2
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       73FBF2FC74C8343E47DD0A7C7F55B55C3DC36031
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
Manifest number:          04E7
Signing time:             Sun 04 May 2025 11:01:36 +0000
Manifest this update:     Sun 04 May 2025 10:56:36 +0000
Manifest next update:     Wed 07 May 2025 18:57:36 +0000
Files and hashes:         1: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: 3bTLU0r/kGjXKDq/4CyYvhxk4DKQ0m82aKinCx3VEv4=)
                          2: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl (hash: W7jin8ym4IlZ9C3uGJgxiIpFhHf1oMJI5q7xzqoetTQ=)
                          3: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: yZc1iS4QoDixBleI5zCzNqJxlWUKStGiBLindHs1iEI=)
                          4: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: vA7wUsbitPXQ/g+uEYWZCPKwK0C5BXMnrLidIFEb1Os=)
                          5: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: hvbDj3oW0Ulg1k85u9jkPnoGdFUSrxAWB+C8nIEEK6o=)
                          6: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: euk9OJMoqKJ/PoRjzKpkFgAP821pupDkAT5Pdi0akjA=)
                          7: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: it/SzipXfJLThyc3J7HfzvzUSlGSxUAWhA/O+pawjWg=)
                          8: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: U8zMaSQ7+KDj9JX6Jxw28z4BWL6cFt7T425dsrSW9yo=)
                          9: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: 8JW2i4QARgl0zJX/bSzH4du3GV59x2527JCrnJKQbAc=)
                          10: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: sWFHDQkTsVJom3rOu9Mf9y3OJpTKgRwn5bDfHA2Pw9Y=)
                          11: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: n6DP+hj0ytP63iMEg7QfxbSfnpN9qL6B51j5r569ips=)
                          12: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: /OfdPYALZiupMxs8iF6+SD24UB/8ZrzibAD0LeJLOAs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 May 2025 18:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:fb:f2:fc:74:c8:34:3e:47:dd:0a:7c:7f:55:b5:5c:3d:c3:60:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: May  4 10:56:36 2025 GMT
            Not After : May  7 18:57:36 2025 GMT
        Subject: CN=70E3B021B5221F6D1850857ECF66E3D16E3465E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:4c:01:a2:c0:5e:70:90:99:c5:1d:49:bf:
                    de:ee:0f:90:a4:6c:95:1b:64:ab:1b:df:71:8f:c6:
                    69:ac:15:4f:69:4f:5e:52:52:70:6a:db:05:76:a2:
                    c5:53:f4:0f:b0:2e:f4:25:7b:3c:d3:68:8e:79:19:
                    07:d1:a7:d5:fe:97:de:30:ef:f0:63:71:fd:d6:54:
                    da:18:c8:86:dd:a1:d9:1e:99:57:b1:fb:f6:bc:85:
                    d4:d9:5c:cd:c1:88:20:2b:52:d3:83:3d:a5:86:bc:
                    ec:b5:8e:6e:0e:00:85:72:27:37:bc:41:78:a6:a5:
                    75:81:71:b7:52:94:9f:df:ae:f7:79:a7:35:91:66:
                    4a:73:78:f1:b0:13:27:88:54:a6:e3:d5:a8:aa:ea:
                    4f:82:dc:b0:c9:eb:1b:dc:26:d0:2d:68:bd:71:9c:
                    b1:db:d3:b6:66:e6:d1:5d:a2:bf:ab:26:0f:5b:2a:
                    6c:ed:8a:56:de:3c:94:f7:64:72:ff:03:ad:d3:b6:
                    27:9e:bf:ba:d9:cb:c6:05:c5:12:0c:db:fb:2d:0c:
                    9e:fc:87:3b:e6:dc:9c:d4:68:d2:2e:19:c1:7e:e2:
                    16:ed:29:44:33:e7:3e:fe:3d:af:2d:e9:08:8e:e8:
                    ec:11:7e:a5:75:14:1f:4a:91:98:81:d7:85:62:66:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E3:B0:21:B5:22:1F:6D:18:50:85:7E:CF:66:E3:D1:6E:34:65:E2
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:74:7e:88:42:f9:cb:3a:6b:5e:ec:8a:cc:ac:4f:6a:d4:
         fd:3d:dc:13:11:af:0b:f5:9f:18:8c:ce:11:29:c4:be:fc:7f:
         69:f9:85:c2:ad:95:d3:90:b2:2d:61:02:57:f7:c5:b2:0e:2a:
         21:b7:e7:e6:85:c1:0f:bc:bb:50:d7:11:91:fc:dc:7f:fd:52:
         07:4d:dd:ef:e3:86:26:3e:58:ca:a3:09:54:c2:a6:8a:c4:c5:
         9d:66:5d:48:58:08:55:ea:85:5f:35:bd:e2:e1:f7:b5:53:9d:
         23:f6:f7:41:d8:b5:84:fc:b2:78:14:1b:dd:6a:11:c5:57:ab:
         a9:b8:fb:8d:c3:fb:55:91:ad:96:4b:f9:96:50:f8:c8:c8:dc:
         c4:3d:90:a5:a1:2b:ec:c5:f2:c3:6d:14:df:d3:c5:76:57:73:
         09:81:01:44:6f:07:df:38:90:d2:81:a5:92:c5:35:c9:1f:f9:
         37:4e:d9:bd:0f:52:0b:4d:4d:d3:92:ee:83:79:c0:54:8e:11:
         59:02:0d:3a:de:60:8c:35:eb:87:a5:83:25:df:cc:c5:f9:a8:
         53:0f:40:fb:1c:b5:9c:18:43:4b:53:74:d6:9b:4e:e8:bf:54:
         33:25:fd:a3:5a:6b:d5:94:3b:ba:93:ed:63:db:fe:8e:f8:8a:
         bf:ef:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:32:34 2025 by rpki-client