Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
File:                     83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft (raw, json)
Hash identifier:          qLLlqdy2tnQhawnGfCsfjn1OOh7anjQabMjPZpZtTQw=
Subject key identifier:   54:B7:D6:E1:D1:DD:D4:22:5E:4B:FE:F1:4D:8D:1E:32:34:83:F7:81
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       129C8B3F3924A5E075F4BDD276178E7EDE783D5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
Manifest number:          04EA
Signing time:             Thu 08 May 2025 17:52:16 +0000
Manifest this update:     Thu 08 May 2025 17:47:16 +0000
Manifest next update:     Sun 11 May 2025 23:33:16 +0000
Files and hashes:         1: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: T4+pJPmCfgNNh91fQe+cFh2S1JfH4wE9FS6aSJjDE44=)
                          2: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: E2PhZYIW23U+utUpZwqULcvTt6KlzYJl4T2mdMuJpvU=)
                          3: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: 4vp0Qpf0MLP4khTVs9MQwOQui0ZXjUZqWXi8G+NFZc8=)
                          4: 3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa (hash: OD3JiPGHDiL7kIqgNDTr6d3lXB+Vqj+hZ7qDs1qxRC4=)
                          5: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: N2T7DBYjNznj0B0Gx8wABa3A4sF8W5Eo0nd66DsyVr4=)
                          6: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: gMz09JidDcRWBTwU6ryArFJQlq35y7FUrFAp/Wy4yQg=)
                          7: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: 0uFyEk4kSz2+PTofQStkvWY/ZflHglwyBx+4DydiuOs=)
                          8: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl (hash: NMq8Z2bDYf564Jard+WYuXjT3ObGVrlmjtWwNX7ZB9M=)
                          9: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: DY+I8fOVqUjezx/DmSAGLnloSubkgTLcYKo00TtWhVE=)
                          10: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: Ni8K6MxuczEixPJW7FrAgC5kkezA9a+/a/29Cb7hSuw=)
                          11: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: T6zBCDYCBei1sIwoPeFlZke8e/0x59ASpBVpgvqvRNg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 23:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9c:8b:3f:39:24:a5:e0:75:f4:bd:d2:76:17:8e:7e:de:78:3d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: May  8 17:47:16 2025 GMT
            Not After : May 11 23:33:16 2025 GMT
        Subject: CN=54B7D6E1D1DDD4225E4BFEF14D8D1E323483F781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:f0:45:dd:55:04:c2:4a:2d:47:83:16:44:
                    65:89:ba:a3:00:98:25:3d:1c:01:a7:e1:9f:50:ba:
                    63:39:90:c0:3f:6a:d5:f8:54:14:ec:bd:20:91:b1:
                    05:ee:f6:e3:45:2c:5d:b8:77:4e:15:1e:ca:4e:25:
                    a1:11:4d:c1:bc:8b:e1:a4:b6:18:ae:d3:3f:78:da:
                    0b:9a:5a:cf:70:9e:a4:a7:65:6f:c4:91:ea:ed:47:
                    f3:fe:be:76:b3:0f:73:38:25:ce:df:5e:5e:32:6a:
                    9b:56:02:50:2e:00:ab:e7:45:67:ee:e3:50:60:d4:
                    a8:b5:45:7d:2e:39:0c:55:e9:31:8d:e1:4f:97:2e:
                    71:cf:3e:97:0c:a1:ae:9e:64:ef:be:e1:f7:62:33:
                    c3:c3:4d:0f:e9:f3:f3:40:e1:dd:68:3e:33:4a:3b:
                    e5:81:32:7d:a1:a8:09:ea:95:d7:10:ed:cb:f6:cc:
                    2e:e9:2a:e0:0a:e1:05:91:0d:29:14:88:a9:dc:9e:
                    7c:72:d9:98:2b:80:bf:36:e6:36:89:6f:34:ab:13:
                    50:5f:0c:c1:2e:e8:97:8e:9a:9c:06:f0:e5:2c:6d:
                    4c:04:1c:d0:e1:24:8c:37:08:52:18:ac:b1:1f:a7:
                    60:e7:18:92:82:ee:7b:7d:69:1e:01:4c:8d:66:7a:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B7:D6:E1:D1:DD:D4:22:5E:4B:FE:F1:4D:8D:1E:32:34:83:F7:81
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c9:33:ea:8f:4c:ca:2d:29:f9:3d:31:42:97:90:ff:4d:1d:
         d8:75:cb:a4:7f:91:91:ec:69:d4:53:83:84:c8:7b:7b:b2:e6:
         e3:4b:b5:ab:71:48:d9:ae:df:56:35:ac:62:3c:6d:3b:96:fe:
         b7:45:81:da:3d:d6:7c:47:cc:b9:0a:eb:2f:31:e6:13:ab:c9:
         10:7d:69:27:44:5d:61:4f:f0:29:44:af:62:f0:9f:41:6d:7b:
         40:e7:f4:54:57:86:10:df:14:99:ca:d3:a5:b4:e7:0e:cc:9c:
         a9:c6:99:0b:92:0a:95:a9:98:50:2f:28:9b:63:82:93:53:c3:
         83:9c:07:13:80:44:46:c8:d9:55:1b:25:e3:44:57:b6:d5:44:
         d8:75:f2:12:87:16:e3:7c:84:27:30:41:da:fa:de:cc:31:ca:
         07:39:e0:75:91:73:4a:44:37:bf:71:55:54:bb:a6:1a:10:25:
         4d:33:cb:68:e8:9d:0a:05:35:0a:fd:d4:56:99:ba:d2:37:7e:
         d1:4f:34:4d:56:4a:50:17:ee:24:10:c3:b3:a1:40:b1:2f:66:
         1a:2b:40:e2:77:b4:e6:e7:1e:78:c5:cd:8e:65:cf:ef:3e:e0:
         75:c5:9d:b6:ae:5e:32:b1:20:85:e1:a1:a9:01:33:22:ab:47:
         f3:a4:b2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:53:32 2025 by rpki-client