Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft
File:                     394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json)
Hash identifier:          Qr9iwrqGkl3gOlROAGK4MysEN9hGOQs96ch7PBx1hJk=
Subject key identifier:   B3:10:1E:EF:F3:43:61:BE:9F:39:7B:44:30:81:68:1E:F4:EF:01:39
Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88
Certificate issuer:       /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88
Certificate serial:       2830B2F5578BDEC415996DC04DC0E80E85AC154A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft
Manifest number:          98
Signing time:             Mon 05 May 2025 18:00:46 +0000
Manifest this update:     Mon 05 May 2025 17:55:46 +0000
Manifest next update:     Fri 09 May 2025 01:11:46 +0000
Files and hashes:         1: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: r2hXreEY+VRAQGcl/v1nEspZ0+VSQl3vloIjw9JG664=)
                          2: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: zkDOi81YelZky7vl12JQ/ZJFHJ5/vNKXBi+uAxAfJg4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl
                          rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 01:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:30:b2:f5:57:8b:de:c4:15:99:6d:c0:4d:c0:e8:0e:85:ac:15:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88
        Validity
            Not Before: May  5 17:55:46 2025 GMT
            Not After : May  9 01:11:46 2025 GMT
        Subject: CN=B3101EEFF34361BE9F397B443081681EF4EF0139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:6a:86:a1:f8:34:18:1c:d4:5d:ae:48:3a:
                    51:86:ef:7e:b8:1b:73:e2:4a:38:ca:54:0e:50:4a:
                    56:19:f3:3f:0c:57:a8:2f:e9:49:3d:ed:64:43:6f:
                    f4:fa:e7:c3:f7:b7:ce:d6:90:f7:3a:bb:3f:67:ce:
                    11:40:a2:80:e1:cc:9f:f6:9c:9e:a7:0c:65:f8:dd:
                    90:0c:0b:47:92:68:ff:73:5a:08:14:4d:01:29:3a:
                    1d:0e:4c:08:07:40:0c:db:f9:8a:79:f8:bb:6f:b5:
                    74:1f:0a:91:01:97:06:68:d5:20:d1:46:2b:26:30:
                    ff:6f:4a:c0:cc:2f:66:cd:89:e4:86:bc:69:de:61:
                    23:3f:bf:fd:0e:4d:1f:d5:c2:f9:ae:ef:dc:e6:18:
                    e1:53:ec:04:87:0d:55:f0:cd:1d:dd:70:ed:b4:be:
                    6d:a5:a8:06:3c:a4:8a:95:99:2a:4f:aa:60:e3:b6:
                    17:fd:31:19:2f:0c:3f:99:18:7f:af:b3:20:01:05:
                    da:e7:86:15:c8:fa:eb:78:ab:85:86:69:0f:6e:4e:
                    6d:2b:db:b4:d3:72:d2:5f:39:f8:c6:f3:9f:ff:aa:
                    9f:c0:5d:98:5a:4d:e3:23:63:ec:c5:d4:06:f0:03:
                    4c:a5:60:14:a6:62:7e:16:90:72:3b:fc:e3:e3:2d:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:10:1E:EF:F3:43:61:BE:9F:39:7B:44:30:81:68:1E:F4:EF:01:39
            X509v3 Authority Key Identifier:
                keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b1:d5:a0:64:47:c4:18:f7:fc:0b:4a:f3:ef:73:98:96:8d:
         0d:64:bc:28:5a:e7:71:d1:91:7c:01:dc:ab:ec:92:ce:06:e7:
         78:97:e6:c5:49:5d:87:39:03:49:74:9c:31:eb:b1:b8:bc:23:
         50:48:fa:95:b1:a6:43:f3:aa:64:e4:4c:95:00:ae:f4:c4:9a:
         1a:f0:90:85:11:5b:e7:39:1d:31:a4:8f:71:0c:93:c4:ef:b1:
         cc:58:39:57:6b:fc:e8:7a:e3:37:5b:4e:ce:03:67:f3:71:90:
         ca:35:a2:11:3e:11:11:3c:c4:f2:a4:c1:f7:3f:37:60:46:4e:
         e6:40:09:0f:75:69:60:33:0a:22:a8:0b:d0:73:d9:81:82:58:
         83:8d:5d:84:4f:74:28:a6:33:7a:c9:b9:76:97:ee:da:32:82:
         05:72:b2:c6:51:b6:d8:ac:2a:cf:b3:9e:5f:8c:3f:2c:99:81:
         e3:82:e5:a2:b9:ac:48:70:4c:37:f7:1b:08:b0:80:cd:17:c9:
         16:e7:43:d7:21:66:7c:68:d4:69:91:f3:dd:a2:3c:0e:46:ec:
         b7:c8:15:52:3d:20:c6:35:98:b7:5e:3d:bd:fb:c2:22:9f:92:
         c5:dc:17:c0:32:27:be:8b:a4:c4:f1:aa:a9:7d:44:af:0a:1c:
         f8:2b:a7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:42:36 2025 by rpki-client