Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
File:                     798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json)
Hash identifier:          +CzkILPdWnotD2unF65v1yvGS+21nR7/TFe0OUjRgyU=
Subject key identifier:   AC:6F:93:B1:78:E6:68:16:E3:2C:9D:E6:3B:2E:3F:CB:BC:FD:62:FC
Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19
Certificate issuer:       /CN=798A229C42DA54D0690064D264AA7AA2375D0419
Certificate serial:       467FFFFC5002C7733BB7EF9183F0D3B9CB0DCD85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
Manifest number:          95
Signing time:             Fri 09 May 2025 16:22:06 +0000
Manifest this update:     Fri 09 May 2025 16:17:06 +0000
Manifest next update:     Tue 13 May 2025 03:08:06 +0000
Files and hashes:         1: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: shl5hzE7A/Tc3LxB68K5+LeHHHNimXXsrSJroYt9mi4=)
                          2: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: fQ6tub3fn3tq1TbZ6X/1QKN9bxY0g+eTvgh/5CohooI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl
                          rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 03:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7f:ff:fc:50:02:c7:73:3b:b7:ef:91:83:f0:d3:b9:cb:0d:cd:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419
        Validity
            Not Before: May  9 16:17:06 2025 GMT
            Not After : May 13 03:08:06 2025 GMT
        Subject: CN=AC6F93B178E66816E32C9DE63B2E3FCBBCFD62FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:51:2f:7b:ba:a0:b9:60:52:a8:50:8f:38:
                    40:5e:c5:c2:6b:36:e4:51:3e:df:a4:18:b7:5a:55:
                    75:cd:05:d5:6c:b1:7e:c1:dd:55:a7:98:80:86:a8:
                    63:06:52:f6:36:fa:af:b5:7c:03:ba:a8:72:25:03:
                    8f:33:32:28:41:71:3e:7b:f6:9d:c6:f1:c1:b3:9a:
                    0d:42:d4:1f:8f:0e:72:3d:2c:49:7d:2a:f8:7e:27:
                    e6:30:77:2b:d2:2b:e4:c7:4a:ae:68:c0:df:74:73:
                    70:4a:18:d9:5f:5b:94:90:98:0a:15:0b:8b:59:93:
                    4e:26:be:1c:68:19:de:20:ff:a7:2b:8e:ab:01:d9:
                    30:df:c0:97:85:2c:c4:a4:89:c9:62:e2:72:33:7e:
                    8b:3e:0c:31:6e:4e:fe:cc:46:63:85:48:f1:dd:1b:
                    c1:a2:f1:73:23:ae:ab:63:04:d6:10:ed:2c:a8:95:
                    72:64:42:eb:90:1c:d2:3c:fb:59:1f:a6:4e:8e:97:
                    25:da:a6:9d:0c:13:61:db:ec:60:9a:8f:a1:17:e6:
                    18:5f:69:51:cc:49:78:05:20:45:1c:4f:33:d9:c7:
                    f4:ba:d1:a1:52:74:95:49:75:75:3a:ce:33:5c:c6:
                    8b:b7:20:ee:7d:3b:11:ad:73:80:5a:d8:a9:e7:0c:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6F:93:B1:78:E6:68:16:E3:2C:9D:E6:3B:2E:3F:CB:BC:FD:62:FC
            X509v3 Authority Key Identifier:
                keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:52:4f:4c:32:66:67:6e:89:d0:95:54:5c:7c:19:3b:78:e9:
         a4:f1:45:a6:44:64:41:19:40:a6:30:d5:7a:98:ed:32:f9:5f:
         04:00:32:f8:74:0c:b7:6c:c4:dd:1e:64:b4:f8:27:60:2e:e1:
         2e:b9:31:4f:f1:8d:fd:ac:81:f0:a0:e5:fb:7b:25:a1:ac:0c:
         f9:a7:24:00:df:a2:a4:20:8f:e8:65:31:8e:f8:e2:df:2c:08:
         18:bf:ff:b1:11:9e:0b:97:11:1a:5b:09:c0:c8:2e:af:60:cd:
         b1:d4:af:d2:e3:62:64:13:a4:69:7e:9d:e1:bf:9c:f0:c3:7c:
         cf:f9:fd:d7:f0:f0:1f:9d:5d:10:f1:40:f3:77:85:4e:8d:87:
         fa:15:ef:82:8e:61:32:a1:d7:3b:7c:63:4c:3a:2f:f3:af:71:
         6f:27:7f:45:66:f0:76:b8:80:43:d9:69:b7:b5:6d:cc:6c:ad:
         eb:e4:6f:6b:28:c6:4f:69:fd:d2:be:2d:74:69:8d:09:0f:e5:
         f5:5b:7f:b6:03:4a:53:05:cc:da:1e:7a:7a:7f:c7:2a:36:27:
         16:df:7e:33:06:53:c7:9e:07:ce:46:a8:95:11:66:0b:0e:be:
         4f:d6:26:81:42:fc:ae:e8:25:df:9e:d9:a3:0d:10:48:ee:f2:
         d8:41:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:57:42 2025 by rpki-client