Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
File:                     AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json)
Hash identifier:          eFbhUlorTK1kFpW+cSajfSbvufPi6TtO2fnhlQ88a20=
Subject key identifier:   B2:B1:F4:53:62:25:A3:5B:FB:57:DD:9E:22:B6:60:07:CD:7E:0A:09
Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B
Certificate issuer:       /CN=AA90F6A6378710CD695B4CC742651F235E503C5B
Certificate serial:       2A10412661E25FA951C506CA9AEFC4798D4782A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
Manifest number:          EE
Signing time:             Sat 10 May 2025 02:30:43 +0000
Manifest this update:     Sat 10 May 2025 02:25:43 +0000
Manifest next update:     Tue 13 May 2025 04:37:43 +0000
Files and hashes:         1: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: LCOxne1G1zfA1uk19FRWvkSgaEnqddeo1tG5FzlWCow=)
                          2: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: YmpzZpg+cWSd+9uJixfrwNPdQ5zM3aLz4TuMuxHWLMU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl
                          rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 04:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:10:41:26:61:e2:5f:a9:51:c5:06:ca:9a:ef:c4:79:8d:47:82:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B
        Validity
            Not Before: May 10 02:25:43 2025 GMT
            Not After : May 13 04:37:43 2025 GMT
        Subject: CN=B2B1F4536225A35BFB57DD9E22B66007CD7E0A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:2e:a5:3a:86:f9:54:b2:34:59:2b:19:37:
                    a5:78:37:ce:b2:80:19:c6:c4:c3:97:2b:b4:30:13:
                    e0:c4:ce:68:bb:0e:83:cf:22:f8:c3:8d:dc:a6:a2:
                    c2:84:8b:92:ce:53:7e:86:98:fb:14:b8:a6:9b:8f:
                    cc:27:40:21:c9:9c:dd:ff:ac:45:84:1e:cf:7f:34:
                    f3:8c:1d:71:27:4a:9e:ed:06:49:63:51:b8:a4:b9:
                    86:29:05:47:14:a4:a9:8b:05:7e:3b:8b:47:a5:bc:
                    c5:cd:6d:aa:05:22:b2:66:ac:cb:0d:74:c5:49:48:
                    d1:fa:eb:60:1b:cd:3d:de:3f:42:8d:f6:22:82:da:
                    0d:6a:8d:2f:4e:16:78:78:7b:f9:97:f5:c9:a9:70:
                    6e:02:ef:85:41:8b:66:9b:2c:0a:8a:f4:a6:ce:4c:
                    1c:27:e6:fa:3b:8e:e4:4e:37:b3:17:cf:7d:60:14:
                    70:5f:d9:98:86:32:c8:57:ba:2d:dd:cf:df:44:23:
                    27:a8:93:c8:34:e8:01:50:dc:a8:04:ec:79:71:2d:
                    07:13:b7:59:89:7f:b2:89:a7:56:fc:67:7e:c0:ae:
                    07:ea:55:61:0a:be:86:19:20:d2:a9:d7:3b:e1:3a:
                    60:ae:68:33:b3:46:cc:37:f8:10:aa:4d:e9:55:3d:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B1:F4:53:62:25:A3:5B:FB:57:DD:9E:22:B6:60:07:CD:7E:0A:09
            X509v3 Authority Key Identifier:
                keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:85:86:53:4c:80:cf:2b:0e:60:12:2b:7b:92:2e:55:0e:64:
         f1:3e:c2:5f:de:c6:30:67:56:31:1a:b0:eb:aa:96:0e:7c:d2:
         b2:ce:db:63:89:5f:4b:70:76:75:8c:4b:a2:75:4e:eb:ed:d2:
         7b:17:7d:5c:d0:35:17:13:00:2e:2d:97:40:bb:41:d8:33:b4:
         26:f7:ba:43:90:ff:8c:2d:8e:99:af:66:fd:66:73:d4:c8:23:
         59:59:d5:3a:8b:fc:25:30:dd:a6:65:44:31:83:68:b5:fa:9e:
         1a:88:8e:54:01:4c:9c:9f:03:3a:2c:b0:97:d2:e2:c1:13:62:
         f8:36:3e:bc:e6:fb:e3:b0:ae:d5:8c:89:4f:dc:b5:1c:eb:79:
         d0:de:8f:eb:86:f7:59:02:01:16:1b:c1:a8:7d:e7:cc:55:ff:
         b9:4e:d2:f3:8c:95:69:7a:f3:cd:ba:ac:42:8e:55:98:a7:81:
         9c:ed:0c:13:e8:8c:c7:2b:08:89:d3:04:ce:55:51:8f:99:43:
         1a:57:84:0f:9a:eb:6e:f8:3a:33:ba:5d:c1:a8:e2:d1:ca:1b:
         6f:15:ca:ae:61:44:76:a3:fc:e7:9d:bf:37:af:65:c1:94:08:
         fd:5e:1e:ac:bb:17:8c:98:27:8d:73:8c:f7:25:f7:0e:c7:1b:
         06:cf:9f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:07:57 2025 by rpki-client