Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
File:                     108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json)
Hash identifier:          hXsnrJXQP/jVDDLuhSfWGL229ETzFJOgN+sNIUvZn7w=
Subject key identifier:   F1:FC:C1:2F:E7:6E:7B:DF:3D:61:21:78:AF:54:14:B7:DF:9A:17:98
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Certificate issuer:       /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial:       0943E045F3E350FFDFFFB0D138782F7CDA79A591
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
Manifest number:          B2
Signing time:             Fri 09 May 2025 17:41:35 +0000
Manifest this update:     Fri 09 May 2025 17:36:35 +0000
Manifest next update:     Mon 12 May 2025 23:01:35 +0000
Files and hashes:         1: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: lsgR1/DIsgBL4ppvIqHcMcxBRbw46kIpKIbkSthSL5k=)
                          2: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=)
                          3: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: abJz0HXL4r3WKDjsYu+oZiEGGhSowngdRONlkzkes1A=)
                          4: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: U1+UJYOPqeG7oUJWUM0ECQEyGoOhn9MsVuuE8ER7syk=)
                          5: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: KSUbvXfR6wqgEtV1jcjWsrQSqy5TRuM5IxH97Spd5gE=)
                          6: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: dta96fOO5R3KY41745HRH3tf4b61/DKoGwUN3Q11U24=)
                          7: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: 02uGPdQ9hFird7xTsc25uxwhcDH5++RrfPud5wB034E=)
                          8: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c=)
                          9: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: wR+IWZMCxrwb5/faol2/GF6hZhc853OeCuHNs3ivUEk=)
                          10: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: YLUa9f9Ix42SsoAFmSGmhnlKGmYHofqL4ey07MvkUwA=)
                          11: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU=)
                          12: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 2MPbE9DHmM30NHKgthoS9sI03vGrnEvS4h+kAcqNSBY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
                          rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 23:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:43:e0:45:f3:e3:50:ff:df:ff:b0:d1:38:78:2f:7c:da:79:a5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
        Validity
            Not Before: May  9 17:36:35 2025 GMT
            Not After : May 12 23:01:35 2025 GMT
        Subject: CN=F1FCC12FE76E7BDF3D612178AF5414B7DF9A1798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:e3:6a:cd:d0:26:4e:f6:d0:93:07:a8:0c:
                    b8:13:3f:5b:05:54:09:55:a0:6d:6c:fa:dd:19:39:
                    4f:a0:e6:c7:ef:c7:a3:11:74:a3:98:a2:0b:ad:60:
                    e9:af:1f:da:48:e9:49:3a:30:f0:f3:9b:5d:c3:89:
                    f0:63:43:de:0b:62:b4:a9:68:a6:75:63:a7:00:0c:
                    cd:98:0c:0b:32:49:5c:f9:ab:e8:73:a2:7a:8c:b3:
                    e9:55:8f:01:25:22:59:b0:8e:fb:05:57:2c:9c:0e:
                    d1:4d:77:f0:18:98:cf:ff:46:23:94:e7:94:65:06:
                    64:37:78:b9:1a:34:bb:96:50:95:f8:66:d3:10:02:
                    97:84:09:63:7e:f4:de:a7:53:47:c5:f1:fe:df:e2:
                    c6:12:77:45:98:81:3e:db:b6:47:ef:b3:6e:2e:60:
                    42:81:4a:04:c1:33:ea:20:0f:ba:ae:b1:1d:f6:c6:
                    3c:1d:37:71:35:a0:87:6d:d0:fc:e6:22:ff:5e:94:
                    d4:32:72:9f:d8:a8:6a:ee:45:99:28:44:95:a0:42:
                    c2:69:0a:9d:48:e9:cb:f5:1e:7a:c4:6c:88:b5:04:
                    dc:26:f5:bb:17:fa:aa:4e:3b:9b:24:ee:79:27:d8:
                    53:4f:b3:32:be:81:a3:bf:c4:e4:5e:18:9e:3e:d9:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FC:C1:2F:E7:6E:7B:DF:3D:61:21:78:AF:54:14:B7:DF:9A:17:98
            X509v3 Authority Key Identifier:
                keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:7a:c8:2c:86:10:5f:73:dd:92:de:93:b3:70:3f:14:60:f1:
         6d:22:fc:51:9b:07:38:76:66:cd:9f:07:0a:d8:27:54:24:6d:
         98:20:c2:52:74:86:2d:e7:7d:41:0d:4d:45:95:bd:00:f0:3e:
         50:43:30:83:87:82:4e:72:c2:3f:4d:a5:bf:23:e9:1d:7b:d5:
         25:24:4f:28:c3:f1:9f:14:8b:bd:23:c2:c5:b2:88:20:34:d8:
         4e:bb:65:db:9e:33:d3:72:ff:58:96:22:03:2e:ee:df:5a:d7:
         00:f4:3e:23:60:a8:f3:61:e1:54:f8:ac:e7:cf:77:ef:ba:10:
         53:c0:04:47:1a:72:fe:b0:70:d3:62:81:c1:46:2a:82:aa:82:
         37:ef:78:f4:bd:c8:18:e5:e4:06:7a:df:fd:aa:7e:92:fc:65:
         73:71:9d:aa:7f:14:48:7a:ac:8e:c9:6e:95:20:97:12:87:b1:
         46:de:51:97:70:90:49:6c:c4:15:2f:26:89:4c:e1:26:e3:b3:
         8b:83:f1:bb:35:ae:b2:35:08:2e:5b:8f:7e:85:27:88:c7:8b:
         88:07:ac:0c:b5:11:21:78:54:ed:76:ea:27:ce:27:7b:58:05:
         38:96:a0:99:db:74:00:95:3a:5d:70:77:4a:e3:04:49:fe:f1:
         90:ab:46:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:18:08 2025 by rpki-client