Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
File:                     053084D88D32CFF591DBCBF3109B9137C3E74648.mft (raw, json)
Hash identifier:          V9rpOvyZEL76AgAtDqk6rEMc071eOq0/I95LOLZ3FDw=
Subject key identifier:   3E:0F:D9:AE:63:02:A0:08:72:C7:76:98:3B:65:0C:0A:48:90:4D:D8
Authority key identifier: 05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48
Certificate issuer:       /CN=053084D88D32CFF591DBCBF3109B9137C3E74648
Certificate serial:       2994B4045443DD8DF5037AC9991B61441028ABBF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
Manifest number:          012F
Signing time:             Tue 06 May 2025 13:52:08 +0000
Manifest this update:     Tue 06 May 2025 13:47:08 +0000
Manifest next update:     Fri 09 May 2025 18:23:08 +0000
Files and hashes:         1: 053084D88D32CFF591DBCBF3109B9137C3E74648.crl (hash: Z5TMM8n8CkZpertCtvCosCWajZ1XGGyxIqK6IhOPQ4o=)
                          2: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: IFF8MMQl7QrAWHNWN8IJDvMcW+S+e7mDZB2ax29c+ck=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl
                          rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 18:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:94:b4:04:54:43:dd:8d:f5:03:7a:c9:99:1b:61:44:10:28:ab:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053084D88D32CFF591DBCBF3109B9137C3E74648
        Validity
            Not Before: May  6 13:47:08 2025 GMT
            Not After : May  9 18:23:08 2025 GMT
        Subject: CN=3E0FD9AE6302A00872C776983B650C0A48904DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:40:9f:e2:63:bd:d5:d0:17:fb:cd:24:e7:
                    00:d5:ef:eb:ed:ff:58:fb:1c:b5:95:bf:8c:66:4e:
                    cd:bb:77:89:16:64:1f:d1:36:53:30:ec:9a:84:83:
                    f6:04:d3:50:90:c4:ad:99:ca:00:4a:f2:ec:15:a5:
                    89:4e:f9:18:2f:df:95:6d:74:35:f9:de:6a:37:2f:
                    18:f9:a4:9c:e1:cb:7c:0e:ad:78:d7:60:26:0a:96:
                    25:d7:40:99:63:cb:f1:f9:0f:94:e4:df:3d:ab:05:
                    9c:af:c1:e2:41:cd:14:b3:45:b6:3b:ea:39:ff:14:
                    fb:d7:b4:7d:98:7d:8c:e2:da:b6:cf:a5:dc:9b:0a:
                    d5:04:56:94:6b:64:e3:cf:f5:85:7d:12:3c:50:9d:
                    bc:18:6b:86:8e:e7:c3:47:f4:d6:f4:6e:3c:a3:62:
                    ae:ea:31:0a:05:b2:f9:be:9c:d3:67:db:62:2e:c7:
                    98:a4:1e:f1:e2:f8:da:03:f1:96:db:7c:70:a8:df:
                    ae:83:13:0f:59:7c:15:33:ad:2f:a5:39:db:0e:ac:
                    09:19:29:30:59:d5:9c:e0:80:28:8d:46:6e:1c:fd:
                    0c:f2:22:15:b2:f3:16:89:8f:87:30:65:d5:71:1f:
                    2e:10:97:b1:3e:81:98:96:2f:93:36:c6:e0:ad:dd:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0F:D9:AE:63:02:A0:08:72:C7:76:98:3B:65:0C:0A:48:90:4D:D8
            X509v3 Authority Key Identifier:
                keyid:05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ce:d4:b2:e9:17:e1:69:20:72:01:90:62:e2:32:03:33:51:
         4f:e3:10:71:c9:b6:d0:80:f8:fa:aa:86:32:d5:0a:3c:6c:7b:
         99:a4:5d:9a:1a:5e:e6:83:46:b1:c4:a9:fb:06:d0:c4:1b:1b:
         13:21:7c:f9:50:ae:90:7e:c5:4d:b5:b5:a6:8e:91:b1:b9:80:
         b6:f2:b1:b8:25:bf:47:f7:b2:10:e7:7e:18:c9:96:e8:1a:73:
         b4:b1:e5:22:a9:6d:90:c6:9d:74:3e:dd:9d:a3:1f:03:91:9d:
         f4:9a:42:52:c7:3d:5d:d2:d5:cd:0a:20:e4:80:18:05:8a:e9:
         c4:24:7a:46:cb:35:9c:f0:34:10:68:a1:49:68:5a:7f:e6:ca:
         47:54:fb:df:8f:df:98:ab:e3:e1:7f:ce:44:25:6c:bf:55:f7:
         eb:5b:2d:98:51:f3:2e:d2:56:c9:5c:5c:0d:48:cf:32:78:a7:
         22:58:a4:c0:16:53:98:09:8e:99:87:a0:d8:2d:97:7d:c0:c9:
         94:c3:66:36:02:95:d9:55:00:ce:ce:20:db:d1:89:0c:1e:3d:
         7c:82:b8:c8:17:e7:f2:23:d1:50:65:1e:4f:1c:46:21:ff:09:
         47:a9:49:66:33:10:b6:57:c6:7b:95:62:a0:b7:f5:d1:33:eb:
         12:10:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:56:37 2025 by rpki-client