Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft
File:                     21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json)
Hash identifier:          24p6pGZoWbpGSdGgKfAVoJ+H+rC5vZBYLjdgMSQ2DP0=
Subject key identifier:   B1:F9:02:D5:75:D6:29:B6:1C:62:D9:9D:44:52:A0:43:E3:AC:0F:F5
Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42
Certificate issuer:       /CN=21AB9EB0A860D2619CF210410608EB831A463442
Certificate serial:       325AB94421AA06AE5A014576E5A8080ED8AB2D4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft
Manifest number:          7B
Signing time:             Fri 09 May 2025 23:01:51 +0000
Manifest this update:     Fri 09 May 2025 22:56:51 +0000
Manifest next update:     Tue 13 May 2025 06:10:51 +0000
Files and hashes:         1: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: Fs6GYexOru9x4QlpPyF/xOPAyzwPnZ2E7+vfemQK+fg=)
                          2: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: WAJ22gxcIZsLrG3fwFj6LAYpg0sHhVFWhpG6gRBIpI8=)
                          3: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: Gc4dXVgpL/0JDxzgUp/Bm+QrjRcWOwryJsZ/zIr92Lc=)
                          4: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: wAD9t329NOrNWj0qcNW0GFGLPcbbRGGUYDvia4Tf2LY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl
                          rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 03:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5a:b9:44:21:aa:06:ae:5a:01:45:76:e5:a8:08:0e:d8:ab:2d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442
        Validity
            Not Before: May  9 22:56:51 2025 GMT
            Not After : May 13 06:10:51 2025 GMT
        Subject: CN=B1F902D575D629B61C62D99D4452A043E3AC0FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:6f:72:4f:b7:19:f1:5b:3f:1d:f9:0c:0b:
                    23:fd:9c:8c:22:c9:cd:81:61:da:85:fc:f0:bf:90:
                    a7:4d:0e:0a:f7:fa:63:e7:64:ee:77:3a:06:ad:a5:
                    31:d2:67:6d:d4:d1:b3:cd:a3:5f:e7:f8:d2:78:b6:
                    38:9f:0c:27:95:27:76:4e:ae:1d:d9:5a:21:87:13:
                    b3:d3:3a:9f:2e:96:77:54:ea:0c:b1:b2:35:c5:ff:
                    7b:8b:94:ae:8a:80:d3:8e:60:47:c7:c1:48:31:65:
                    a9:a7:c7:f4:68:08:41:56:d7:4f:45:fb:b1:61:65:
                    d4:f5:84:c9:65:85:32:4e:32:ee:62:dc:db:0f:ed:
                    dc:14:3b:65:dd:c6:44:4b:af:24:8c:0d:0e:a1:94:
                    d7:07:0b:0e:83:12:e7:bc:cd:3e:02:15:37:3e:cf:
                    d1:11:62:3a:a9:5c:93:fd:6a:54:0c:ea:fc:85:83:
                    91:42:aa:27:5c:5c:6f:82:75:ea:d3:88:bc:b9:e7:
                    b3:a0:24:c5:39:c0:dc:4f:ae:48:9f:45:ed:07:27:
                    7e:43:8e:62:61:4c:d2:d0:23:ea:fe:76:a8:5c:6a:
                    dc:87:99:5e:b3:a2:64:4d:f7:79:21:7d:c8:ab:6e:
                    01:ad:b3:6f:c2:91:da:b8:26:4d:a9:ff:43:85:b6:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:02:D5:75:D6:29:B6:1C:62:D9:9D:44:52:A0:43:E3:AC:0F:F5
            X509v3 Authority Key Identifier:
                keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:6b:13:91:a9:1e:cb:a4:f3:0b:31:ce:32:2b:78:e7:78:68:
         44:6b:8b:de:3b:03:70:53:4a:7a:b8:4a:94:c4:d5:3e:6c:d5:
         e6:f5:1b:d9:ab:5d:b1:15:94:82:c7:fb:0a:30:46:a5:47:81:
         bd:de:24:00:ac:98:c0:45:ad:6a:13:88:c3:9d:9a:0f:48:44:
         00:41:15:2b:fd:3c:c0:f6:75:75:26:fe:8f:36:87:25:ad:b3:
         79:cd:74:3e:4e:b5:48:75:64:28:23:68:8c:8a:12:29:6d:c6:
         91:a1:69:23:8f:2d:05:d3:ce:7f:6f:65:2c:da:45:d2:19:d1:
         09:04:38:a6:45:3d:6f:a3:ee:09:7a:0c:e9:91:66:f0:66:d4:
         f5:18:9b:7b:48:de:ec:92:76:32:4e:1f:4d:16:09:8f:72:00:
         35:79:4d:16:92:1b:2e:13:df:66:09:ce:2b:85:c9:27:9a:6f:
         1c:fb:dc:24:6c:3b:86:e6:30:94:c7:23:63:0e:33:dd:88:49:
         e2:c3:72:5a:8b:c2:b7:04:63:6a:ec:0a:9b:8e:b5:65:ff:b8:
         a5:07:7f:6f:df:35:28:84:d4:5e:8b:96:e6:1b:6a:ee:1e:4d:
         c7:9a:9a:fa:fc:ca:04:24:92:ac:82:22:dd:6d:85:0e:e2:7f:
         24:c9:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:47:07 2025 by rpki-client