Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
File:                     3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json)
Hash identifier:          HtSusC18ZZq7jKnx0xaTt/04axDV5mOfkfQ8RfT/w8I=
Subject key identifier:   2D:C2:44:F5:E3:BB:49:A6:99:57:61:8C:00:25:AA:81:72:1A:19:FF
Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27
Certificate issuer:       /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727
Certificate serial:       7474AF26DCB9979E49EE5BBB17F726032E92BBA1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
Manifest number:          01CF
Signing time:             Fri 22 Aug 2025 15:00:04 +0000
Manifest this update:     Fri 22 Aug 2025 14:55:04 +0000
Manifest next update:     Mon 25 Aug 2025 15:27:04 +0000
Files and hashes:         1: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: 2pmnEjpV6xKfD9pUClZgIAGRZy9Yz1iTckvB+l+9+U4=)
                          2: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: urGasBwupMxtrVjaDiYy9w/gCP0OaSZc8uWl1QZCwDo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl
                          rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 15:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:74:af:26:dc:b9:97:9e:49:ee:5b:bb:17:f7:26:03:2e:92:bb:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727
        Validity
            Not Before: Aug 22 14:55:04 2025 GMT
            Not After : Aug 25 15:27:04 2025 GMT
        Subject: CN=2DC244F5E3BB49A69957618C0025AA81721A19FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:34:9f:15:dc:c4:e4:37:6d:8e:cd:b8:57:
                    7a:b3:8b:d8:da:6f:11:8e:59:e9:50:ff:9a:3a:74:
                    37:46:09:50:95:ed:f4:ab:4b:3c:5a:ad:ca:c9:09:
                    de:6d:13:5b:94:75:35:4f:03:3b:89:69:6f:68:7b:
                    26:b0:50:4c:d5:ea:21:26:e2:49:76:b1:0c:a7:0f:
                    dd:95:99:b5:d5:7a:81:d8:3b:cf:99:dc:ca:a5:77:
                    a4:63:e7:b4:06:75:72:4e:06:ee:8d:c5:07:d9:70:
                    48:e7:41:9b:77:b4:54:9d:82:b3:7b:d6:bd:59:bf:
                    45:9d:55:e9:51:d6:8e:b7:4d:bc:b1:60:3e:8b:6f:
                    36:21:56:3a:ae:81:4a:8a:54:6a:20:9a:9c:b9:7e:
                    64:c8:2e:75:88:12:97:cf:80:60:2f:ce:98:16:4c:
                    a0:ac:4a:d3:75:a0:85:7e:7b:0c:9e:43:81:6b:17:
                    59:3e:bb:df:78:9a:cf:68:08:28:d9:89:b1:b3:90:
                    bc:4d:63:91:68:48:70:f3:50:85:d0:82:93:3c:71:
                    30:ea:16:0f:10:12:5a:69:eb:0f:62:c0:fe:2d:60:
                    aa:18:1e:34:b6:88:4a:94:df:c1:df:b3:5c:b8:2d:
                    f3:28:66:7f:93:5e:22:8d:e9:84:be:83:3e:c8:bc:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C2:44:F5:E3:BB:49:A6:99:57:61:8C:00:25:AA:81:72:1A:19:FF
            X509v3 Authority Key Identifier:
                keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a9:cd:71:bf:7d:50:00:58:95:5d:e7:d8:22:be:a6:4e:69:
         b5:9d:77:c5:82:45:46:3c:a4:a0:2e:8a:49:a6:cb:85:42:14:
         b9:ec:aa:13:6b:fc:71:2e:70:7a:d2:c6:f8:b6:b4:a9:fd:0d:
         aa:21:54:a1:9d:d5:83:96:07:b5:5e:21:14:0c:0e:67:fd:d7:
         ef:6b:34:bd:ce:55:e2:4c:a4:31:09:af:b6:f2:5b:84:7d:2f:
         54:3a:8d:65:11:01:10:6a:37:12:75:5a:c7:75:82:c9:d5:08:
         4a:04:5f:5a:6b:7a:13:07:fb:5d:de:35:82:e5:04:5c:7c:64:
         1c:e3:d4:ba:5b:cb:b3:4b:74:ae:86:9f:54:1f:e5:da:2d:1a:
         71:94:71:8b:ca:18:85:65:0f:cf:90:ea:41:b6:cd:66:4f:8e:
         e1:e4:ad:12:bb:bc:6b:b9:18:4c:35:06:0a:4a:58:3e:cb:4a:
         98:bb:70:57:ba:36:d8:38:c4:93:18:29:a4:b1:15:54:13:e7:
         55:e6:11:16:13:d0:77:9b:41:a8:11:13:e9:69:c6:a2:8a:7b:
         90:2a:90:9e:1f:b7:bb:d4:a7:29:a0:37:fc:a1:60:91:9b:a2:
         da:1d:70:df:32:40:70:29:a4:13:02:e9:65:6c:5a:66:3a:a2:
         e2:f8:4a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:58 2025 by rpki-client