Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
File:                     C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json)
Hash identifier:          H1T6s6/iZTDsSmQAAzmBseyWrmQHUvf79lvls9v06uU=
Subject key identifier:   B7:75:09:FB:14:B2:80:84:6A:35:E6:B4:97:37:A1:47:29:C1:CA:E4
Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E
Certificate issuer:       /CN=C33BE6D76C1444B4695CC56D706802967A2A404E
Certificate serial:       37A0D87972BBE3FE2D3C3E86283078EC86C6F15F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
Manifest number:          0104
Signing time:             Fri 09 May 2025 16:31:39 +0000
Manifest this update:     Fri 09 May 2025 16:26:39 +0000
Manifest next update:     Mon 12 May 2025 23:22:39 +0000
Files and hashes:         1: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: L/hfDR1lEtdm7E0F4fEU6g2zanRemGEQlp9ZuLXslCQ=)
                          2: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: Vy1WXfRVoaco1i9g0rlgCBYNCSdI50Y1sxWO96U5Kog=)
                          3: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: i9hzv6Lh5XhsF06igSnWbdzwnT3e+2hyiqqtyUqGr60=)
                          4: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: hJMRzuFAspptn4AlzH4LAwOhzmHjNIsN+aWqgtRAR7g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl
                          rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 14:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a0:d8:79:72:bb:e3:fe:2d:3c:3e:86:28:30:78:ec:86:c6:f1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E
        Validity
            Not Before: May  9 16:26:39 2025 GMT
            Not After : May 12 23:22:39 2025 GMT
        Subject: CN=B77509FB14B280846A35E6B49737A14729C1CAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:af:9f:eb:ce:47:c6:ad:82:1f:75:45:f4:a9:
                    a0:27:cd:47:ad:eb:1e:33:e2:10:b3:26:a8:1d:9d:
                    f7:1b:ce:76:29:23:5d:de:67:2a:80:07:00:fe:1c:
                    81:00:66:84:b7:66:12:21:87:6e:7b:7e:2c:c0:d0:
                    d3:26:c9:11:9c:ae:80:7d:f1:08:84:68:26:ea:6e:
                    3a:7d:ab:eb:59:3b:d7:43:02:3f:99:1c:13:62:28:
                    3c:13:2d:ba:46:f3:f9:ae:4c:b5:ce:79:ca:92:35:
                    d6:b7:42:1f:a2:f0:c3:c4:85:92:d9:ac:cc:99:2c:
                    c7:fb:78:fc:1f:14:b6:b5:ed:ea:81:12:b9:01:3f:
                    60:d2:b8:f4:48:5a:4b:2d:ed:12:36:5f:ed:e3:6a:
                    8f:85:99:ce:16:3c:7d:46:24:4e:d1:c6:99:df:9a:
                    79:ff:e7:29:d5:26:87:bc:95:5c:89:b2:e7:6d:d9:
                    ab:bd:02:76:66:1f:de:bc:e3:b6:df:47:d3:39:6c:
                    3a:97:77:ef:1a:f8:a5:88:4f:44:2a:cb:ee:a7:de:
                    2f:ef:91:38:5f:f9:ee:18:b7:6c:6d:51:be:9b:84:
                    9c:b4:c2:87:59:ec:58:6a:0f:6e:59:1c:6d:c4:ba:
                    83:e5:8d:63:59:df:66:12:cb:ac:8e:8d:35:53:fa:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:75:09:FB:14:B2:80:84:6A:35:E6:B4:97:37:A1:47:29:C1:CA:E4
            X509v3 Authority Key Identifier:
                keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3c:b6:25:d7:cb:54:9b:ef:1e:68:84:c2:06:ba:8d:7a:ae:
         b7:16:73:78:34:57:65:cb:60:65:39:f1:08:30:ca:2a:fc:09:
         e7:23:3a:bc:ad:15:f4:e1:77:b2:35:3c:62:8f:54:41:3d:00:
         21:88:de:3d:98:f1:b4:1e:ab:a0:6f:2e:a3:51:bc:05:82:14:
         4c:b8:8d:68:06:60:5d:ab:e5:ca:bb:60:00:f0:42:15:5c:7a:
         3e:3f:13:0a:01:f8:d7:97:9b:42:b4:76:a7:30:ea:21:c2:bf:
         bf:3d:b0:eb:c8:8d:69:f6:0e:c2:26:85:12:6b:ae:20:08:5e:
         fd:9f:27:03:ae:42:66:6d:fb:92:bb:b8:40:f1:1d:ff:68:2b:
         6d:ea:bc:2c:cc:c4:9f:1f:6f:a1:01:58:83:35:20:3c:be:50:
         56:27:af:4c:d0:c6:03:8e:04:e5:8d:4e:ea:99:d9:da:cd:6f:
         bb:1c:63:38:b4:c4:d0:ce:68:74:f6:7c:8f:fa:74:ae:9d:13:
         1b:69:f6:52:db:d8:43:f6:2a:00:0e:a1:23:e3:a7:7b:25:3e:
         a7:74:4d:87:0f:02:0c:7b:6f:70:29:e0:7d:8f:6a:36:05:8b:
         45:d3:7a:17:e3:42:87:2a:4c:21:f5:4f:a3:a8:00:1b:e9:4a:
         3c:87:86:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:36:32 2025 by rpki-client