Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
File:                     8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json)
Hash identifier:          4pEp151nYj5ffKwbZaKTTBJjz7BmXK9u6qF259yVhdQ=
Subject key identifier:   95:24:30:CA:CD:FA:16:29:49:EF:3B:92:8A:DF:C4:31:40:C8:77:D0
Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29
Certificate issuer:       /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
Certificate serial:       451872322061FC8ECF75FB03CAC22412E8BB2A06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
Manifest number:          AB
Signing time:             Tue 01 Jul 2025 03:02:15 +0000
Manifest this update:     Tue 01 Jul 2025 02:57:15 +0000
Manifest next update:     Fri 04 Jul 2025 12:00:15 +0000
Files and hashes:         1: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: euQgwTiZWR17/b+aupvTnxum3WlIaIYsIMhvnxgqXYM=)
                          2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl
                          rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:18:72:32:20:61:fc:8e:cf:75:fb:03:ca:c2:24:12:e8:bb:2a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
        Validity
            Not Before: Jul  1 02:57:15 2025 GMT
            Not After : Jul  4 12:00:15 2025 GMT
        Subject: CN=952430CACDFA162949EF3B928ADFC43140C877D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b8:87:13:9c:80:14:90:1f:75:5f:2b:30:e9:
                    a1:80:4d:e4:1c:9b:5d:f6:86:91:0d:5d:64:64:41:
                    0d:3f:ea:73:15:a6:ad:08:d8:17:dd:e7:13:d0:7b:
                    f0:78:e8:d1:52:38:f7:e7:7e:71:5a:2c:78:a9:56:
                    62:fe:52:9e:bb:4c:86:78:f0:48:a8:36:f2:dc:42:
                    75:d2:9e:b4:62:78:06:84:d8:92:2d:15:c1:3a:0e:
                    8b:f1:12:e4:a2:cb:0f:61:03:28:c6:2d:2a:3b:a8:
                    57:9c:55:16:2b:63:85:dc:ee:8c:fa:48:04:a9:06:
                    4b:c5:80:f1:9d:25:09:c3:37:b5:dc:f6:7c:95:f8:
                    62:4d:a7:88:13:44:06:9b:66:42:f4:eb:3a:ad:fd:
                    f7:53:74:52:cc:97:e2:64:84:00:25:07:f5:8a:dd:
                    08:b2:5c:29:b6:29:0a:bc:4f:9e:7c:b8:ce:64:ab:
                    11:73:ad:7d:c0:61:54:9f:18:c2:14:b8:f0:94:62:
                    1d:a4:d4:b5:97:31:ec:96:49:dd:0a:23:e3:a1:84:
                    6b:1a:c8:5e:6e:6b:bd:03:e9:a1:4c:6b:dd:02:b9:
                    4c:be:c5:19:48:58:49:77:cf:26:75:32:83:fe:12:
                    a7:fe:63:50:04:5f:70:d0:0d:c2:a5:91:c6:eb:fa:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:24:30:CA:CD:FA:16:29:49:EF:3B:92:8A:DF:C4:31:40:C8:77:D0
            X509v3 Authority Key Identifier:
                keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:68:5f:51:73:e1:1e:e0:ee:09:83:3f:b4:fa:2b:cc:7a:8d:
         2a:a7:3b:3b:6c:e6:eb:e8:10:84:f5:be:93:92:fb:2a:10:d0:
         79:b2:40:73:76:03:1b:51:4f:12:74:13:15:03:a4:8d:3b:14:
         b5:3c:87:1a:02:60:9f:7f:a2:ea:81:e0:7e:da:49:91:3a:24:
         e2:09:8e:71:9c:9e:f9:3c:0a:59:8a:c6:cd:a7:53:06:db:de:
         9f:fe:24:79:a9:8c:54:3a:a7:0e:42:c7:73:e3:a1:ce:d4:52:
         de:8c:28:25:18:64:e5:96:6a:ec:fe:1a:84:2a:7e:18:ba:c4:
         ed:33:64:5a:6e:96:7c:0d:e3:d2:7c:f9:7f:b3:88:68:ad:ad:
         c7:85:d8:41:58:85:88:9a:01:37:c3:1a:20:6c:3d:f3:ce:32:
         53:13:35:94:e7:c0:57:8c:7c:ca:fe:55:84:d9:40:cc:43:df:
         bb:0c:4b:bf:16:65:8f:c5:e7:41:4f:00:39:4d:1c:fc:fb:43:
         a7:52:52:f2:4b:ee:a2:cc:74:93:17:b3:3f:d6:d6:f6:31:3e:
         e7:56:2c:61:c9:1f:5d:05:12:d7:3e:a1:49:e7:ea:bb:e2:3e:
         9b:6d:2a:6c:c8:2a:a2:cb:be:03:cf:49:63:76:cc:be:a5:18:
         65:80:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:47:09 2025 by rpki-client