Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File:                     735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier:          EaOfQOrDSGN7sHtUvixmLrXFYQ9m/I+Fma8tKXUhNWQ=
Subject key identifier:   9D:34:B6:7A:71:62:FA:AC:0C:4F:B3:93:53:F0:0D:AF:96:9B:EE:B1
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       47DEE7EBCFD90C6353BAA62C718FD15F532A0DCE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number:          0202
Signing time:             Sat 10 May 2025 21:31:03 +0000
Manifest this update:     Sat 10 May 2025 21:26:03 +0000
Manifest next update:     Wed 14 May 2025 02:45:03 +0000
Files and hashes:         1: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: SoFui+6+9U4okutKDEEDEO8cNoDM72pJozwIgVHrak0=)
                          2: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: MYkgPF54ZFrZUvgyAUVZduFZA6VqGujX+c3smzb0mEg=)
                          3: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: cA/F4dRQqVseyocCpcE2agAw/XVimr3HwwnooMdskYo=)
                          4: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: HVHmI9LYWzUl9gKsQ8FU1Tx5Y7XtKCw8rdxVRtkxFvM=)
                          5: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: Vj9b7eOBgij03V9LOKkEMCElDrFIB3RU0Drnp1lzskU=)
                          6: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: ixUeVPdiiujjqdz2cxBs4b9W1yytwj3hYRmTEjubFdc=)
                          7: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: MNca57frzbraXQ+A5sffHCuXC7kbkp16cgNgxDCrZrE=)
                          8: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: cuW15q9SnbE27U2Jg8nnNYvxOwHbFyEv1g42R3Sx4E0=)
                          9: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: hML4QQ0UsZ/MNuzlhXm7ZxAfBsEoo8p/TG6zTdeHPYA=)
                          10: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: bNf7w52cmLw3GYp+mMaw3papmg1ZcgmFTgd1v4VSUIU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 May 2025 02:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:de:e7:eb:cf:d9:0c:63:53:ba:a6:2c:71:8f:d1:5f:53:2a:0d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: May 10 21:26:03 2025 GMT
            Not After : May 14 02:45:03 2025 GMT
        Subject: CN=9D34B67A7162FAAC0C4FB39353F00DAF969BEEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:22:26:87:de:70:72:db:3c:20:61:1c:74:a0:
                    dc:4b:62:a4:2d:8c:f7:3e:03:cb:60:20:ae:2c:c8:
                    a9:de:c7:2e:4e:77:25:b1:04:99:4a:bf:c7:f3:01:
                    de:4b:56:69:a2:90:e5:59:1e:cf:5f:c0:52:f5:7c:
                    93:e5:c3:84:c0:a0:d3:90:8b:0a:54:90:0d:18:40:
                    1e:bf:f9:0b:01:04:d7:ac:65:f6:fd:8c:64:55:56:
                    6c:91:9d:0f:7d:a2:8f:a9:ac:ad:55:26:9e:9d:1e:
                    99:e5:b6:23:46:29:19:8e:47:0a:d9:ea:cd:b8:90:
                    2c:6c:fc:8f:67:02:ca:54:55:95:49:15:6a:39:59:
                    36:f1:25:31:90:fe:ad:c8:8c:5a:31:26:66:d0:83:
                    ac:ac:fe:00:0f:dd:f5:5e:e0:f5:cf:c7:30:72:5b:
                    4e:f5:ce:d8:74:e8:5b:79:10:51:1c:3b:e6:88:4c:
                    81:16:ca:2d:f3:3a:be:fd:59:28:52:ae:d1:9b:c3:
                    db:c1:c1:a8:42:5f:d2:39:77:14:15:2d:d5:57:12:
                    ae:c7:fd:55:b5:c9:ad:e8:6d:86:08:14:65:96:7c:
                    2a:8e:9f:99:6d:cf:80:42:9e:30:a4:36:d9:44:52:
                    66:8a:b6:08:68:49:80:34:b7:11:c2:3c:be:1b:67:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:34:B6:7A:71:62:FA:AC:0C:4F:B3:93:53:F0:0D:AF:96:9B:EE:B1
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8d:d5:66:12:d8:91:98:41:eb:58:39:8c:95:c4:76:92:19:
         c3:48:f8:1f:be:4b:32:a6:3b:74:d7:f6:7b:87:cc:64:3a:7b:
         2d:26:8d:2d:bc:c6:c9:69:50:e8:71:4e:7f:64:f1:aa:48:77:
         79:f7:74:ad:09:7e:2b:72:b1:5a:10:20:a6:99:c9:dd:90:09:
         d5:8f:4c:0b:3d:e9:bc:40:94:22:fa:fb:50:b5:cf:fa:0c:69:
         b4:dd:44:b2:35:83:b7:e4:a9:17:f6:66:3d:dd:c7:15:bb:e3:
         2a:1e:e8:ba:1a:b5:62:76:0e:8e:e9:c5:f5:4a:fb:62:91:f7:
         fd:a0:63:ec:9b:ff:38:da:78:d6:27:d3:8c:27:e4:c4:73:5a:
         0a:cf:e1:bc:95:3c:ab:0a:b5:92:7e:7a:8c:39:9c:a9:39:6b:
         b7:d4:35:8e:67:7a:6d:52:03:e7:31:61:84:57:26:c1:44:31:
         a6:44:79:e0:27:77:4f:f4:9a:5c:b1:3c:3d:bc:0c:62:d3:56:
         ac:2c:97:2a:59:a9:38:4c:b3:cf:d4:af:b7:09:cf:77:f4:a0:
         10:b2:d1:96:e9:17:18:c7:5e:62:d6:dd:88:01:d9:00:cd:6a:
         5f:e7:07:c1:a3:93:52:18:5d:9b:0d:19:6e:4f:f3:7b:e1:62:
         47:8c:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:55:04 2025 by rpki-client