Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft
File:                     353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json)
Hash identifier:          Zb9m4SCzV7cNYqYU33uzzDAFGG89mCGywucGS7XzdS4=
Subject key identifier:   C3:81:F1:62:3E:11:04:F5:1A:10:6B:A0:95:CB:EA:89:4A:3F:A5:8A
Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09
Certificate issuer:       /CN=353E665549A5A245D363BD0DCEA20282E562E909
Certificate serial:       099616D183A760B243295410A7265F659BE54EA1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft
Manifest number:          73
Signing time:             Thu 03 Jul 2025 18:51:07 +0000
Manifest this update:     Thu 03 Jul 2025 18:46:07 +0000
Manifest next update:     Mon 07 Jul 2025 03:30:07 +0000
Files and hashes:         1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: pKQdVAtwKbSOki6GnCaJwg1Xi0v4ViHRdqPbxknx+vg=)
                          2: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: SGYxBKQT1oe8FEm+4xQN0hghNyo8QkRAGj8Qjvvy968=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl
                          rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 03:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:96:16:d1:83:a7:60:b2:43:29:54:10:a7:26:5f:65:9b:e5:4e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909
        Validity
            Not Before: Jul  3 18:46:07 2025 GMT
            Not After : Jul  7 03:30:07 2025 GMT
        Subject: CN=C381F1623E1104F51A106BA095CBEA894A3FA58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:49:ea:df:01:fc:a1:12:b2:83:fd:9d:77:29:
                    54:b8:dc:78:43:c7:20:f6:f5:70:a7:f3:7a:a6:9b:
                    7b:97:50:31:52:82:87:8e:9a:76:02:bf:08:6d:59:
                    82:32:91:96:ba:32:2e:9c:77:ba:e4:0c:32:e0:98:
                    87:55:4b:83:eb:cc:38:84:2b:0c:78:e0:12:bb:63:
                    64:4c:dc:00:f0:f2:50:6a:6d:d2:e8:ff:fe:0c:03:
                    10:08:ac:a1:3d:74:0e:2a:82:7b:a3:a4:ba:98:bf:
                    d9:31:38:35:97:1a:c2:a4:40:fb:01:86:cf:6c:0e:
                    7c:47:5e:88:9e:51:fe:55:4d:66:77:ab:f8:04:12:
                    f3:23:30:14:8c:46:85:05:97:e6:06:91:6d:2c:9d:
                    5b:7a:c6:1d:ab:63:da:46:57:24:69:b2:1f:b0:1c:
                    8b:9f:a9:e1:57:c6:21:cc:f5:b1:95:1b:8e:81:7d:
                    d5:2a:21:9b:63:39:f2:5d:e4:2f:de:b0:c7:f2:bb:
                    2d:fc:74:38:9a:83:2e:ca:7b:10:1e:ec:bd:d2:bc:
                    c3:38:fb:b2:29:61:df:7b:72:8f:b0:3b:6c:8a:9e:
                    90:a5:88:7e:17:b6:f3:b4:c8:a7:e4:c8:b5:22:25:
                    14:85:e5:5e:21:01:69:64:0e:30:19:4b:c8:4b:87:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:81:F1:62:3E:11:04:F5:1A:10:6B:A0:95:CB:EA:89:4A:3F:A5:8A
            X509v3 Authority Key Identifier:
                keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:17:09:5a:7a:2d:1f:9b:04:56:86:14:87:b0:f1:8f:38:bb:
         3e:ea:a7:9b:49:da:d6:a5:e7:05:5a:a1:8f:8b:45:6e:18:cf:
         e4:a7:54:29:d6:7c:17:be:11:08:85:c9:b2:08:02:b9:59:76:
         34:4d:33:24:89:02:d4:b2:3f:e2:c7:51:f7:d5:90:66:7f:3b:
         a3:3c:9e:2b:36:24:41:34:44:f3:3e:a2:b6:cd:47:3f:5c:7f:
         ff:7b:6a:86:ba:f1:fa:40:6e:2f:d7:1c:d8:65:5c:f8:25:44:
         68:4b:e4:c5:5c:fd:19:4f:96:7c:e3:b2:10:3d:40:41:4c:f2:
         71:3c:38:50:6d:b8:5b:e3:04:57:2f:79:e6:e0:45:e0:d3:d3:
         4b:03:e3:83:9f:0d:df:17:8c:57:28:c6:a6:63:1d:d1:4e:3a:
         ae:4c:a3:1d:5a:64:60:e5:0e:9a:23:3e:be:ed:61:ad:f1:c5:
         c3:2c:81:ec:ce:fe:3c:ab:0a:2f:53:e9:e4:41:9e:44:83:7b:
         1d:94:92:21:8b:80:6a:ef:cd:70:95:43:10:ab:3a:e9:c6:b1:
         ef:2f:90:9f:5e:73:4c:67:9d:4c:b1:e8:16:e8:79:90:6c:78:
         09:fc:80:e5:91:f6:aa:b5:cd:5f:a3:3d:7d:b4:39:00:ea:46:
         da:f8:7c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 22:11:20 2025 by rpki-client