Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
File:                     882209E37356E0512FBE4E81B00E4F2481865087.mft (raw, json)
Hash identifier:          4kqfxhx0rFnuD6YRtdJMBa8kRKQ2jbWReaoPRyVRZBc=
Subject key identifier:   93:EA:AE:7F:03:21:79:65:58:2F:9F:A6:F7:BF:F2:29:57:F2:A5:E7
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       3C203A42AF17CE9C060C0CAFB561F600DC278E74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
Manifest number:          04CD
Signing time:             Thu 08 May 2025 20:32:00 +0000
Manifest this update:     Thu 08 May 2025 20:27:00 +0000
Manifest next update:     Mon 12 May 2025 00:49:00 +0000
Files and hashes:         1: 882209E37356E0512FBE4E81B00E4F2481865087.crl (hash: 0DkjWJIVq6N8+VtWuzInMcpg9rOyrDU55R5276YX6Fg=)
                          2: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: xpET03ZY7J+readhaJ1QYHRYS1mjCgsf+hUmxPF8BxA=)
                          3: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: Rb28NXlYt2i42cKjjOk5iENFCUNoEfsw3NtDJbjO8H8=)
                          4: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: uQXGM2cnzjEJ+e+qYTRcu8Q2bkfF87zDJZZFwMyns1U=)
                          5: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: /cpzswwTNxt4PA+y5NQBd3j9f6qF16C52KUQtHtdF0o=)
                          6: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: w3Ks91mwkS7NztUtNLKYf1Zt3ODkRQznfK1tF6ldT8k=)
                          7: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: +orAdsz6eB8/rfzFzwo7jDI03fKrjW+cdaqzhCiMpmg=)
                          8: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: ax01vkbIK29IQaPMOtL4UaEdAFFntCppP1NSNhQX5iY=)
                          9: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: NOw/zlirvTqoOX6sm1/vix2ODTXn4yeECfZvuo38lBs=)
                          10: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: e+Om61XELdd62RuYWQyB46Ok2HY1yu4g+v0tQE3Vs9M=)
                          11: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: Xew1w+gXgylH740u1c4Z60dTjHU8+UmrHSS0NUpHOoU=)
                          12: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: 5OLfvTl6gcSwQBrapeYjNQFXfGFP7wdrUnoFQhbTuyE=)
                          13: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: sJb8leavmPnYQkhyoTizATUpn0Qf48YJaugxYyG/DSE=)
                          14: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: JZOCGNrXopoaPI4jZi8eXqzn2wPKF8AfdVx1G95vRF4=)
                          15: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: zFwcJRk1pIStXgYvOW6EJ+sh6WfmyVgLQT18K9kq+Sw=)
                          16: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: XT+BpWNDktvWNwFTQkLNNS/w5oWhizouaSiWM8/abUU=)
                          17: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: rpd32ZUdwQpFXx4Nv2RhdtnfkJHyyuemJCQ3vprxsb0=)
                          18: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: tJ8ZvI46pqkm8zQNc8mw5mnCsJpq72czgdRpZYAABAU=)
                          19: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: y6nyZ4wEj4h4my4pTHsmLYPMQpLcieoKxLYPlH4EY2A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 00:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:20:3a:42:af:17:ce:9c:06:0c:0c:af:b5:61:f6:00:dc:27:8e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: May  8 20:27:00 2025 GMT
            Not After : May 12 00:49:00 2025 GMT
        Subject: CN=93EAAE7F03217965582F9FA6F7BFF22957F2A5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e3:e6:41:09:df:33:4d:67:c6:0b:97:28:29:
                    5a:07:21:38:c8:0b:fa:72:2d:2d:a7:4b:2c:4f:fb:
                    21:51:cb:83:f1:25:b5:75:ad:21:0d:f2:72:8c:18:
                    1c:d2:5a:a4:35:36:dd:8d:aa:b9:2a:1e:3c:f2:b5:
                    41:16:d9:f0:19:7d:bb:30:db:6b:62:6c:c9:7c:80:
                    20:2d:ea:83:29:ac:e5:60:5c:c7:dc:fe:d8:fa:3d:
                    9c:43:9c:e7:13:55:05:5d:db:8c:01:bc:04:09:17:
                    49:55:02:2a:68:91:7c:98:7c:2e:3c:ff:f7:3f:57:
                    91:17:c1:ac:1e:d9:7a:36:2b:aa:00:ec:4f:76:bd:
                    77:e1:18:5c:5a:38:b7:10:6c:2d:d6:dd:ff:73:44:
                    45:13:b6:01:68:80:ca:63:3d:ec:8b:1c:a3:d8:4b:
                    d3:36:ef:9d:06:02:72:7b:53:ed:d5:48:06:72:07:
                    1d:9d:2f:9f:22:dd:e1:64:52:05:8e:f5:6b:c7:73:
                    6a:81:bf:e0:f4:22:01:ba:a0:5d:4d:90:b8:da:f6:
                    7d:d9:87:1d:3e:cc:91:09:0a:ac:25:86:35:1a:c0:
                    f1:89:62:8f:85:0b:92:dd:8a:c4:b4:79:4b:c0:c5:
                    bf:fe:58:40:80:88:7d:41:0d:cd:1d:7d:2e:15:38:
                    23:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EA:AE:7F:03:21:79:65:58:2F:9F:A6:F7:BF:F2:29:57:F2:A5:E7
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:9a:8e:d2:fd:fa:38:d2:db:26:ef:9b:ac:ba:cd:87:bd:bc:
         82:78:dd:0a:a4:74:73:94:0e:fa:07:5b:ae:8b:a3:71:44:4a:
         3d:16:e5:53:e1:a8:25:26:b3:f7:24:68:2a:82:ed:aa:22:75:
         8d:b1:91:ee:f3:44:c4:30:f9:b1:6a:e0:8c:24:b8:09:1b:36:
         75:ac:a8:34:cf:17:c6:0e:88:72:e2:0e:e1:8f:c6:83:47:f5:
         0b:65:e8:f7:45:db:4b:43:5b:1d:2e:dc:4a:19:e7:32:cd:62:
         8e:a0:79:ee:60:de:57:a0:a2:76:e6:b2:97:dc:34:b7:47:59:
         89:d5:d4:3d:94:23:2a:b5:9b:7c:fa:28:0d:81:7a:1f:77:79:
         38:80:2c:20:3d:62:51:a0:07:37:11:51:25:dd:0a:00:b6:d2:
         de:95:76:77:79:de:ae:33:a0:ad:b1:2f:15:19:d7:de:b5:e4:
         fd:be:83:c1:82:f4:be:77:91:ca:46:ce:41:e1:b4:5c:43:75:
         56:88:01:6b:60:e7:02:cb:4f:68:77:e7:6e:05:d7:76:eb:f5:
         0b:b6:44:80:7d:fb:d9:99:38:78:a6:6e:59:bc:24:fb:a3:d6:
         f1:29:09:d7:d0:91:42:a8:8f:3d:97:3c:b5:66:c1:f7:c6:5e:
         09:c1:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:37:50 2025 by rpki-client