Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
File:                     065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json)
Hash identifier:          iV4CoUaTnhQj4AHdgo5a4G2Bvg2Jb9Sv+TxpG4ZnqMc=
Subject key identifier:   D7:F5:3A:C2:BC:FD:97:9B:66:E2:95:5A:25:F6:7D:29:87:0B:75:92
Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
Certificate issuer:       /CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Certificate serial:       7DEDB8BE015A7B98319836B967BE57C834F1EA35
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
Manifest number:          C7
Signing time:             Fri 09 May 2025 14:41:51 +0000
Manifest this update:     Fri 09 May 2025 14:36:51 +0000
Manifest next update:     Mon 12 May 2025 23:21:51 +0000
Files and hashes:         1: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: PgJ7DAgC1jsK0L+82efl0LxW+fd4oDxvnLlmcLgUUGQ=)
                          2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: JkcKtcV//LYqaw+9zrmVkPhDbatpI5ildpclS3nEbmQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
                          rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 23:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ed:b8:be:01:5a:7b:98:31:98:36:b9:67:be:57:c8:34:f1:ea:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128
        Validity
            Not Before: May  9 14:36:51 2025 GMT
            Not After : May 12 23:21:51 2025 GMT
        Subject: CN=D7F53AC2BCFD979B66E2955A25F67D29870B7592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:88:34:64:e1:31:eb:a2:62:4f:34:00:69:a4:
                    73:68:e9:5b:14:10:22:29:20:c9:d7:1d:18:f2:68:
                    77:0c:52:21:76:cc:fe:c3:c0:dd:43:7f:30:b9:2f:
                    b9:90:e3:d3:9d:97:82:50:f1:1a:90:66:14:32:a7:
                    a1:5e:c2:47:79:4f:9e:cf:43:da:78:e1:45:8d:ae:
                    05:aa:50:8d:5f:9b:c2:2b:72:a4:f8:bd:a2:42:e9:
                    a0:14:c1:3f:8e:70:1b:33:38:fa:d8:3d:50:1e:0b:
                    c4:d3:62:c4:66:01:99:07:a1:dc:79:43:d3:3d:01:
                    11:54:08:93:ad:72:d0:62:34:6d:05:fe:9d:a1:21:
                    73:38:67:40:25:3e:37:d0:a4:01:5d:c3:40:a6:bb:
                    2e:48:c2:f0:fc:20:24:07:a7:c3:60:5a:92:b0:7c:
                    b9:7c:2e:cb:cb:d5:35:f5:d4:35:3f:6b:01:7f:ef:
                    08:57:a9:b8:6b:d8:e3:44:92:9f:9c:83:18:03:79:
                    db:65:d6:fe:68:78:f2:b2:ef:74:ab:b6:8d:53:9c:
                    84:49:75:a2:88:86:2a:61:4b:2b:23:9e:89:ff:98:
                    53:b7:f3:8c:60:50:99:ee:7f:7f:0a:cd:af:a3:27:
                    48:d2:bb:d3:97:ab:14:ed:7f:6c:66:fc:90:8b:fc:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F5:3A:C2:BC:FD:97:9B:66:E2:95:5A:25:F6:7D:29:87:0B:75:92
            X509v3 Authority Key Identifier:
                keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:34:79:a4:cc:6d:94:98:2e:94:41:20:44:f7:d6:bb:ae:33:
         37:90:5e:0e:eb:8d:f3:3c:93:d0:57:69:96:de:eb:22:81:33:
         ef:d4:77:8c:f7:1c:82:58:dd:25:8b:80:00:4b:58:34:64:bf:
         9c:42:78:b3:66:79:e2:eb:34:b6:52:2a:34:3f:67:14:0e:10:
         a6:37:c3:fd:f6:fe:01:32:d2:35:ce:ce:19:80:4d:68:8f:a9:
         05:98:ff:b5:4c:58:bf:da:d3:36:64:04:fa:bd:b1:32:d8:da:
         7f:14:62:4f:9a:d4:f9:dd:31:c6:c3:68:23:0e:59:0f:f1:e5:
         fe:d9:17:88:0c:e9:ec:62:77:f4:30:39:ee:bb:13:13:d2:da:
         fa:ed:e3:7b:ea:39:8b:c0:88:0a:f3:3c:12:3a:e2:1b:ba:fd:
         74:9f:76:23:9b:51:2b:cf:dc:ca:44:16:dd:26:7e:33:e7:72:
         fe:d1:16:dd:25:20:b2:ab:21:5e:cb:55:1c:8b:8c:ae:dc:7f:
         9e:c8:8d:58:b8:18:75:9a:bd:28:a2:1b:f3:3c:c5:55:89:16:
         2c:f4:07:6c:1b:c0:90:ff:6b:4d:d1:14:38:34:8c:1a:66:1e:
         9f:c2:4d:b9:aa:fc:e4:66:ab:68:bf:0a:00:92:d0:8c:dc:85:
         de:ba:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:08:19 2025 by rpki-client