Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft
File:                     DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json)
Hash identifier:          cf/5GSqWEYYhu2l5mWq2W73JoKQ1msOF3xiM8HQxtUY=
Subject key identifier:   83:A8:84:E7:9E:4B:70:07:7B:F2:4D:C9:1A:46:8E:E6:78:D6:68:B9
Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7
Certificate issuer:       /CN=DE99361912581A3A43349B6FFB379A285B0972E7
Certificate serial:       5B9C85349801842BBB32DA7A7DE4836DC5796CB3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft
Manifest number:          7A
Signing time:             Mon 12 May 2025 10:30:41 +0000
Manifest this update:     Mon 12 May 2025 10:25:41 +0000
Manifest next update:     Thu 15 May 2025 21:02:41 +0000
Files and hashes:         1: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: TB9w+9WNDfCetivqdz0OMjP0DSeFxNWZVZ2reY94buw=)
                          2: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: mI6PTkpaM6ChlY4guRYd5Ne9UFAZRwUFW3RPT7EOVQM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl
                          rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 21:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9c:85:34:98:01:84:2b:bb:32:da:7a:7d:e4:83:6d:c5:79:6c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7
        Validity
            Not Before: May 12 10:25:41 2025 GMT
            Not After : May 15 21:02:41 2025 GMT
        Subject: CN=83A884E79E4B70077BF24DC91A468EE678D668B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:cb:a2:b5:2f:27:bd:63:65:60:ef:a2:be:
                    44:ae:0c:9d:d6:c2:fa:11:ce:3e:9c:7d:d6:f1:be:
                    c9:7d:62:93:e7:42:18:78:51:1d:96:b1:12:d8:9e:
                    8e:5f:57:0a:90:6a:42:b7:45:1c:9a:37:76:90:23:
                    72:32:01:b2:d2:ff:df:90:36:87:83:ad:cc:d8:6b:
                    76:02:78:4f:91:a3:23:a5:37:b7:0c:78:a9:0a:eb:
                    15:a4:e4:3b:27:59:39:c9:fb:85:17:87:9e:73:28:
                    0e:aa:ff:19:1a:9f:d9:a7:44:3f:fd:e1:86:43:08:
                    db:41:0b:2f:8c:e7:97:cc:e9:d2:8b:fc:b3:9e:1a:
                    24:37:83:dd:1e:34:be:f6:60:6f:21:4e:07:95:e9:
                    b9:ff:3c:38:99:b3:24:82:cf:57:df:79:de:61:28:
                    d7:2d:60:e2:70:50:5f:b0:c0:6b:7d:ea:0c:b3:05:
                    5d:0d:8c:0f:35:16:8e:ab:4c:c7:40:a3:92:1c:33:
                    bb:70:99:2b:9d:c0:dc:cc:1b:e3:0f:42:be:56:f6:
                    70:9f:df:42:4f:31:57:00:78:99:a0:b7:19:6c:28:
                    bd:53:cb:16:80:df:73:5d:cb:54:5c:d4:d7:4e:52:
                    1e:1f:86:66:7c:15:73:bb:e1:30:70:7e:ba:a6:ae:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A8:84:E7:9E:4B:70:07:7B:F2:4D:C9:1A:46:8E:E6:78:D6:68:B9
            X509v3 Authority Key Identifier:
                keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:95:33:af:d0:40:af:af:6b:2b:a6:89:b6:94:89:0f:df:26:
         8d:80:bf:cb:51:c5:3a:e2:4a:0e:20:d0:1e:25:29:8a:52:0c:
         8f:45:c2:94:94:ab:0a:d0:7d:96:a5:4c:58:98:a9:b0:67:9e:
         bf:98:2b:5c:de:e8:19:8e:d8:de:7e:2c:82:91:eb:1d:48:f2:
         a8:68:a3:44:1b:2e:12:60:d0:46:18:7b:bf:63:78:d0:17:9e:
         74:47:1e:12:06:f6:e2:de:7a:60:84:88:72:c8:7d:3b:72:89:
         63:02:1b:72:18:96:a7:46:e5:63:5b:00:7c:17:f6:61:ac:60:
         62:0c:56:87:f4:02:17:8d:fa:f6:23:8f:ac:94:83:6c:b7:d9:
         0b:76:1e:04:f9:1b:b6:a7:7d:5b:f2:85:b0:26:91:5c:e8:1b:
         ab:db:20:26:58:ab:1a:39:32:e4:e9:d7:9d:d2:e2:ff:5c:7c:
         ba:d1:72:e3:cb:56:e9:e3:09:bd:93:c7:f1:9c:2a:aa:6a:ed:
         a8:fa:66:0b:3d:3c:8a:40:21:76:5b:b8:e2:b3:a7:23:2a:49:
         9a:4c:51:da:3d:8c:37:25:84:5c:d0:cf:9a:0b:85:f5:ac:ba:
         f5:fa:d3:a8:7c:ff:c0:51:66:78:83:7e:9e:80:30:68:d2:1d:
         cf:32:eb:a2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUW5yFNJgBhCu7Mtp6feSDbcV5bLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1
QjA5NzJFNzAeFw0yNTA1MTIxMDI1NDFaFw0yNTA1MTUyMTAyNDFaMDMxMTAvBgNV
BAMTKDgzQTg4NEU3OUU0QjcwMDc3QkYyNERDOTFBNDY4RUU2NzhENjY4QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xcuitS8nvWNlYO+ivkSuDJ3W
wvoRzj6cfdbxvsl9YpPnQhh4UR2WsRLYno5fVwqQakK3RRyaN3aQI3IyAbLS/9+Q
NoeDrczYa3YCeE+RoyOlN7cMeKkK6xWk5DsnWTnJ+4UXh55zKA6q/xkan9mnRD/9
4YZDCNtBCy+M55fM6dKL/LOeGiQ3g90eNL72YG8hTgeV6bn/PDiZsySCz1ffed5h
KNctYOJwUF+wwGt96gyzBV0NjA81Fo6rTMdAo5IcM7twmSudwNzMG+MPQr5W9nCf
30JPMVcAeJmgtxlsKL1TyxaA33Ndy1Rc1NdOUh4fhmZ8FXO74TBwfrqmrizrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUg6iE555LcAd78k3JGkaO5njWaLkwHwYDVR0j
BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy
NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5
NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw
NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB
Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAKVM6/QQK+vayumibaUiQ/fJo2Av8tRxTri
Sg4g0B4lKYpSDI9FwpSUqwrQfZalTFiYqbBnnr+YK1ze6BmO2N5+LIKR6x1I8qho
o0QbLhJg0EYYe79jeNAXnnRHHhIG9uLeemCEiHLIfTtyiWMCG3IYlqdG5WNbAHwX
9mGsYGIMVof0AheN+vYjj6yUg2y32Qt2HgT5G7anfVvyhbAmkVzoG6vbICZYqxo5
MuTp153S4v9cfLrRcuPLVunjCb2Tx/GcKqpq7aj6Zgs9PIpAIXZbuOKzpyMqSZpM
Udo9jDclhFzQz5oLhfWsuvX606h8/8BRZniDfp6AMGjSHc8y66I=
-----END CERTIFICATE-----
Generated at Tue May 13 02:39:34 2025 by rpki-client