Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
File:                     4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json)
Hash identifier:          Yu1fb5VNtFIpmVXyTUGOhQG0vqiuhxms2P8XGKsqTfs=
Subject key identifier:   7A:9C:F3:68:9F:F4:02:5D:BB:D9:68:46:4A:EB:36:B1:37:21:FD:8F
Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82
Certificate issuer:       /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
Certificate serial:       6A70E49B0C64C74C3A6845D5FD909A1C4928D105
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
Manifest number:          9A
Signing time:             Sat 28 Jun 2025 21:32:15 +0000
Manifest this update:     Sat 28 Jun 2025 21:27:15 +0000
Manifest next update:     Wed 02 Jul 2025 05:56:15 +0000
Files and hashes:         1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=)
                          2: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: NeaqsBLUv8mqEY/F46uMJ4yZAk263bhEWPinLy1xabc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl
                          rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 05:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:70:e4:9b:0c:64:c7:4c:3a:68:45:d5:fd:90:9a:1c:49:28:d1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
        Validity
            Not Before: Jun 28 21:27:15 2025 GMT
            Not After : Jul  2 05:56:15 2025 GMT
        Subject: CN=7A9CF3689FF4025DBBD968464AEB36B13721FD8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cb:f2:10:72:c3:48:a0:af:10:56:49:d0:6a:
                    c8:39:f1:ee:f3:86:61:12:1c:9f:64:b8:5a:e7:74:
                    25:dd:87:4e:ca:ca:97:ae:49:1e:ba:c5:f7:1c:09:
                    86:17:95:57:bd:39:da:2c:2c:95:08:ef:51:5d:6f:
                    02:a2:30:f4:ee:ff:48:76:66:c1:07:23:df:02:31:
                    eb:00:3f:2b:1a:d2:26:dd:8d:10:e2:63:54:cd:81:
                    be:bd:5d:10:74:75:37:01:ba:57:49:75:bc:6f:84:
                    2c:b1:96:3f:e6:59:96:8f:3c:84:be:2a:32:8d:a5:
                    7d:6a:4e:a1:2c:6b:bf:e1:2e:49:2c:f6:c4:bb:d6:
                    35:ea:04:2a:5f:46:b7:f5:45:5b:9a:79:03:bd:87:
                    c4:f7:0d:85:56:cf:c7:fd:ef:81:a0:3a:c2:d1:c4:
                    51:7e:b2:a1:b5:51:b7:10:2e:0a:12:64:6e:33:14:
                    ae:cd:04:25:e3:0b:c5:ed:2b:91:52:5e:2a:3d:c1:
                    e6:95:37:97:b4:a5:37:de:78:52:eb:1b:7a:a7:8a:
                    98:50:f0:1d:a2:a7:b7:d6:aa:07:23:d5:de:9e:64:
                    07:62:51:99:4f:98:d4:b4:35:da:c1:0d:e4:ed:f2:
                    3f:20:5d:ab:1b:37:5b:91:8d:02:0a:3a:20:44:17:
                    0c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9C:F3:68:9F:F4:02:5D:BB:D9:68:46:4A:EB:36:B1:37:21:FD:8F
            X509v3 Authority Key Identifier:
                keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:05:09:b1:01:6d:19:32:b0:83:b6:33:8d:58:ee:99:00:89:
         a1:f7:96:94:b0:71:d1:b2:79:72:48:71:f8:b7:1f:74:32:57:
         93:e5:25:7b:9a:29:75:00:d1:9a:84:77:80:9b:b5:84:5f:18:
         31:c6:58:72:b6:d9:38:c8:98:2e:e1:1c:18:cf:48:d2:5f:87:
         27:74:04:6a:05:06:49:51:64:19:a5:e4:23:62:f2:6f:5e:a3:
         5c:b0:0f:fa:74:7a:b7:9e:d5:d9:e8:1b:3e:c6:e3:fe:5e:2b:
         f9:b4:2f:24:fe:97:c7:35:57:5e:94:89:0b:bb:b9:14:4e:81:
         16:74:3d:ac:0d:78:bd:bf:ae:f8:4f:bb:25:74:c0:74:46:77:
         7f:1b:27:7d:7a:17:4f:17:da:17:36:3b:80:48:af:5f:b9:7d:
         04:6d:df:16:fd:67:f3:65:8f:5a:a9:1f:63:28:86:ef:e8:45:
         2f:c9:bd:69:58:00:6e:67:da:27:c0:51:7d:f5:e8:aa:72:32:
         35:14:00:ed:b8:fd:1c:09:96:82:be:c9:6b:14:2b:10:f8:59:
         35:1a:ba:72:5d:ef:0b:c1:1c:b9:33:45:e6:7b:bd:29:77:d6:
         fd:c8:9c:c3:c6:13:f8:cd:19:e8:2e:4e:34:e0:12:fa:cc:18:
         1d:80:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:33:20 2025 by rpki-client