Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft
File:                     98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json)
Hash identifier:          k0BlGl77e/PmelMPBNoZ7SnsUv/9Ae9pOoS1ZzYA8CU=
Subject key identifier:   DA:66:B0:30:43:29:9C:37:03:F1:FD:95:7F:04:96:CB:48:3E:16:AF
Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04
Certificate issuer:       /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04
Certificate serial:       654540FB0366665D92BFA83D9979D1C100D31400
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft
Manifest number:          6C
Signing time:             Tue 06 May 2025 22:40:39 +0000
Manifest this update:     Tue 06 May 2025 22:35:39 +0000
Manifest next update:     Sat 10 May 2025 06:51:39 +0000
Files and hashes:         1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: /kA9aLyxKYRcyUTDzlfBCyifa9C250UcLe3ruSewV7o=)
                          2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: /kxVXvW+4JMo0cMJmuI74e4oyIKyiDzkq7xDogBLkn4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl
                          rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 06:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:45:40:fb:03:66:66:5d:92:bf:a8:3d:99:79:d1:c1:00:d3:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04
        Validity
            Not Before: May  6 22:35:39 2025 GMT
            Not After : May 10 06:51:39 2025 GMT
        Subject: CN=DA66B03043299C3703F1FD957F0496CB483E16AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ea:dd:f3:bb:75:80:a6:0d:39:ee:23:5b:e7:
                    3e:8d:b7:a3:82:f7:6f:de:69:17:ac:6d:22:b9:6f:
                    d6:bb:06:cb:c5:8a:c6:51:1e:03:64:62:a3:45:d4:
                    b3:f5:b4:75:12:7f:1b:d1:f0:50:28:ab:68:f0:a9:
                    30:bd:d6:c2:4f:95:94:b8:4a:64:ed:67:b1:97:b4:
                    06:30:b4:af:e6:ef:7c:ab:9a:0b:f1:fe:11:a5:c7:
                    d4:c2:46:99:eb:84:83:70:07:ed:7a:a0:23:72:c6:
                    45:7b:66:17:c1:56:62:d3:20:9d:83:2f:5d:9f:1d:
                    4d:6f:1a:6e:60:a2:fd:7c:25:74:d4:9d:15:87:91:
                    3e:b3:47:3e:f6:2a:8a:a1:87:89:c8:07:2c:d1:ea:
                    30:74:0b:a7:36:e7:e9:75:29:81:e7:c9:a4:66:78:
                    6e:8e:8a:f8:22:d1:4a:e6:5d:04:11:0f:47:41:76:
                    a8:ec:24:9c:6e:9c:92:2d:78:a1:70:c1:71:e7:aa:
                    cf:e9:2a:d8:67:3b:7d:eb:2d:45:0b:55:cb:15:6f:
                    cc:44:5d:74:70:a4:aa:d3:f5:72:ec:10:49:cc:2d:
                    82:d0:be:de:58:de:ab:0e:4a:da:8f:01:28:73:80:
                    86:da:10:52:f8:12:18:db:4e:73:2a:13:d8:db:2a:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:B0:30:43:29:9C:37:03:F1:FD:95:7F:04:96:CB:48:3E:16:AF
            X509v3 Authority Key Identifier:
                keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:18:35:0b:76:6b:70:f0:b2:fb:79:e5:ba:b7:7b:96:7b:51:
         5e:a0:f1:a2:98:90:71:5f:13:7d:94:5a:1e:6a:db:68:48:dd:
         1b:24:f3:b9:c8:7c:19:c3:4f:da:5d:0f:69:cf:be:89:b0:29:
         8f:67:cb:99:72:a8:65:99:e2:07:82:63:00:08:45:a6:3c:e0:
         fd:c6:09:05:00:25:ce:db:fd:73:c0:06:6f:ff:a1:15:76:b9:
         3e:e7:28:a6:4f:4c:4a:41:40:fe:77:de:43:1c:19:e1:14:bc:
         44:38:9f:0e:dd:54:a1:05:b1:7e:c2:4e:54:28:42:35:d0:1f:
         a8:62:6b:94:24:9e:9e:93:a1:08:3b:a8:4d:08:73:85:cf:9c:
         63:2d:06:1f:cc:ea:9c:46:45:a7:a6:ff:c3:83:86:5c:28:22:
         b9:09:dc:83:42:d8:59:01:3a:39:a8:cb:9b:75:ce:43:7c:4f:
         6a:53:d7:0b:6f:2a:e8:26:80:ac:ce:15:c5:87:46:ce:b1:f1:
         63:70:16:fc:88:02:55:7b:82:01:4c:cd:d9:a7:65:e0:a4:86:
         66:01:80:51:f3:26:01:e9:4b:ed:d9:e2:a1:ee:c3:6a:4b:ba:
         de:56:b6:c7:ed:02:63:41:8a:bd:e3:ce:3b:bd:28:65:b0:f2:
         a4:98:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:01:05 2025 by rpki-client