Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft
File:                     E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json)
Hash identifier:          qS+xcO42hjQsAsH/Ws8kWe3MDQ3thLWYseA4xyXgFW0=
Subject key identifier:   65:1E:7C:A8:C8:20:06:44:FD:90:F1:2B:70:60:91:AD:6F:5C:D8:72
Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88
Certificate issuer:       /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188
Certificate serial:       04433F225CE9000132B8C857B0E130137C6991B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft
Manifest number:          04CE
Signing time:             Sat 10 May 2025 06:11:16 +0000
Manifest this update:     Sat 10 May 2025 06:06:16 +0000
Manifest next update:     Tue 13 May 2025 14:04:16 +0000
Files and hashes:         1: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: 8D+x24LnLI6xjFUZ9a0xIMqPX8qIQQ2uoQVnBKC2gjI=)
                          2: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: wn8mnwMzffhjqaH3mMBTlGmbXGRcg3dHonFKFCyctVQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl
                          rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 03:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:43:3f:22:5c:e9:00:01:32:b8:c8:57:b0:e1:30:13:7c:69:91:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188
        Validity
            Not Before: May 10 06:06:16 2025 GMT
            Not After : May 13 14:04:16 2025 GMT
        Subject: CN=651E7CA8C8200644FD90F12B706091AD6F5CD872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:35:ed:2e:85:62:3a:3a:83:2c:df:a6:ac:
                    a2:c3:d8:9d:c3:d2:66:fc:ea:be:a3:04:1b:16:a0:
                    74:bf:a4:23:2f:ae:3d:1b:48:b2:4f:83:cd:c5:a6:
                    9c:2b:61:e5:c4:7e:de:eb:14:e8:0c:25:cc:79:7c:
                    fd:a5:aa:d5:67:a2:67:df:76:e0:42:08:7d:4d:32:
                    38:eb:a2:3e:de:f7:c1:b4:01:07:8b:47:1a:3c:fa:
                    14:91:44:ce:8d:a9:01:d6:4e:c0:fc:2c:e0:9f:61:
                    06:14:e3:b8:c4:74:9e:e7:ed:2c:81:a1:ba:a9:df:
                    8f:48:ef:12:9a:17:fe:fd:0f:bc:91:11:b5:d8:6b:
                    bc:c5:6e:40:36:d3:51:ca:8e:00:c0:8b:ee:1d:10:
                    f5:e9:f6:d7:7b:13:1a:d1:10:1b:f2:4f:91:ae:d5:
                    dc:11:07:3b:30:1a:0e:bc:bb:3f:b8:0c:1e:fe:32:
                    5c:e0:b9:13:0e:76:6a:7d:00:7d:e5:06:96:93:57:
                    43:65:f3:48:e9:16:46:91:8b:b5:04:bf:ab:2b:b5:
                    34:a7:eb:cb:7c:b9:d4:1f:67:c0:03:bb:b2:0f:b3:
                    92:12:55:f5:91:7e:8c:76:13:17:0c:89:f5:17:55:
                    1b:16:36:79:c6:dc:62:ea:16:36:8b:1b:3c:59:17:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1E:7C:A8:C8:20:06:44:FD:90:F1:2B:70:60:91:AD:6F:5C:D8:72
            X509v3 Authority Key Identifier:
                keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:52:93:fe:c9:80:56:fa:80:bd:a4:47:f5:6b:7c:b7:91:4d:
         b5:fb:e4:56:c0:45:46:56:1d:28:f8:d9:14:70:75:fe:bf:74:
         68:e0:f7:0b:bf:0d:a9:d5:c7:6b:5e:af:43:31:b2:ed:4e:f7:
         cd:13:32:0d:13:7b:8c:6e:c6:98:e3:12:cf:7e:08:a3:52:19:
         b8:dc:8e:3f:51:6d:98:f2:d7:64:6d:c3:5e:8e:22:46:bf:12:
         0d:02:88:16:a5:7a:a8:c8:d0:25:b9:bb:71:49:19:d5:c5:5d:
         da:d0:9c:c8:ff:1c:e6:b9:4d:ea:e3:7c:68:cc:e2:bc:f8:83:
         81:0e:9b:72:42:49:0d:52:14:4f:41:71:53:7d:58:cd:e1:2d:
         22:1d:8e:9c:47:9e:07:e1:10:5d:51:fa:b7:94:ca:12:99:3f:
         37:c7:a4:3b:40:db:52:c2:89:47:75:d3:17:e6:34:88:43:06:
         be:89:d2:96:e9:65:68:f3:e9:e3:f8:0f:1d:89:44:42:31:82:
         f8:57:e6:f5:bb:a1:d0:8a:b1:5e:6f:dd:0b:a3:15:11:43:34:
         1a:83:dd:5c:f8:41:0c:4a:9f:36:f2:81:f4:7e:d6:24:10:a3:
         0a:fc:b5:0d:78:1d:eb:94:72:f0:67:9e:f1:8d:7c:d7:4f:8e:
         11:2d:7d:25
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBEM/IlzpAAEyuMhXsOEwE3xpkbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2
QzUwQzE4ODAeFw0yNTA1MTAwNjA2MTZaFw0yNTA1MTMxNDA0MTZaMDMxMTAvBgNV
BAMTKDY1MUU3Q0E4QzgyMDA2NDRGRDkwRjEyQjcwNjA5MUFENkY1Q0Q4NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzzXtLoViOjqDLN+mrKLD2J3D
0mb86r6jBBsWoHS/pCMvrj0bSLJPg83FppwrYeXEft7rFOgMJcx5fP2lqtVnomff
duBCCH1NMjjroj7e98G0AQeLRxo8+hSRRM6NqQHWTsD8LOCfYQYU47jEdJ7n7SyB
obqp349I7xKaF/79D7yREbXYa7zFbkA201HKjgDAi+4dEPXp9td7ExrREBvyT5Gu
1dwRBzswGg68uz+4DB7+MlzguRMOdmp9AH3lBpaTV0Nl80jpFkaRi7UEv6srtTSn
68t8udQfZ8ADu7IPs5ISVfWRfox2ExcMifUXVRsWNnnG3GLqFjaLGzxZF6mNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZR58qMggBkT9kPErcGCRrW9c2HIwHwYDVR0j
BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB
MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw
QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0
OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy
RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABZSk/7JgFb6gL2kR/VrfLeRTbX75FbARUZW
HSj42RRwdf6/dGjg9wu/DanVx2ter0Mxsu1O980TMg0Te4xuxpjjEs9+CKNSGbjc
jj9RbZjy12Rtw16OIka/Eg0CiBaleqjI0CW5u3FJGdXFXdrQnMj/HOa5TerjfGjM
4rz4g4EOm3JCSQ1SFE9BcVN9WM3hLSIdjpxHngfhEF1R+reUyhKZPzfHpDtA21LC
iUd10xfmNIhDBr6J0pbpZWjz6eP4Dx2JREIxgvhX5vW7odCKsV5v3QujFRFDNBqD
3Vz4QQxKnzbygfR+1iQQowr8tQ14HeuUcvBnnvGNfNdPjhEtfSU=
-----END CERTIFICATE-----
Generated at Sat May 10 08:22:15 2025 by rpki-client