Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File:                     BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier:          LuGWIsPcduSqcO4qxWZTssWMpmloixHrC1WylWc9/p4=
Subject key identifier:   B4:AC:C5:A4:50:40:09:79:C2:F5:43:9E:83:CC:1A:9D:96:78:93:50
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       51C894E23EF12845F3CBC4B6598D9B73D1D69B7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number:          04D8
Signing time:             Wed 07 May 2025 06:12:18 +0000
Manifest this update:     Wed 07 May 2025 06:07:18 +0000
Manifest next update:     Sat 10 May 2025 17:54:18 +0000
Files and hashes:         1: 3131312e36372e38382e302f32332d3234203d3e203234353337.roa (hash: LOzYi7IlYeMp9QOHAGBPza4xIVDFMZkY2F5HPF37I6E=)
                          2: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: lrS/GSSKQ2J7NdJ/xy82TzU+/28NXl295mMItZF0aBM=)
                          3: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: 2uhmj0dfbqVvDGktakJ5oY8OeRuRcTikYjNHLnaMjxQ=)
                          4: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: WpCc5wWIke3cUlXvQPfU10u+vQT2+u4asQ1kuTfrBhw=)
                          5: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: ev9kwx7xYfGQ0wqa7vOCRk3KIttSxKV6RHvfveIzVEs=)
                          6: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: n62tsL2z93EkvJ5FJ6Ucd+CAqKUW8/RP9Dy3KqIDqZs=)
                          7: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: 79szJlSxFEM6vGgihAOETNzSQWjHNJBKmnEw59Gq12g=)
                          8: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: vhSbfr4PwcH2c1j4QZ7NODAAE3UKxSP2hh5xHxbrnvM=)
                          9: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: XgOwfmlShjsaTtVhFA0tafpRgt60KXgzvUS/OzLBANM=)
                          10: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: /tYDlm+7FzJ8gja/IWkTc+vVL+l3/jcPAKHO2Fo8Pbo=)
                          11: 3131312e36372e38362e302f32332d3234203d3e203234353337.roa (hash: 9PsTzehCSaVj3oVEGKfLHdsO6UamUj63Cby7WZOY4Lc=)
                          12: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: ndzf/dY/nmXxj2I9KPRlglxDyJBwxAj+OgRvw2hK3Yo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 17:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c8:94:e2:3e:f1:28:45:f3:cb:c4:b6:59:8d:9b:73:d1:d6:9b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: May  7 06:07:18 2025 GMT
            Not After : May 10 17:54:18 2025 GMT
        Subject: CN=B4ACC5A450400979C2F5439E83CC1A9D96789350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:0c:0e:2e:8a:32:70:0d:8d:b7:6c:07:c2:
                    b4:41:f6:bb:a8:4e:28:4a:06:52:cd:ed:8d:1d:1b:
                    76:d3:80:bf:18:2e:31:f2:3b:66:01:40:99:88:91:
                    df:12:e3:92:10:ad:4f:30:eb:a8:d4:b9:27:d8:ef:
                    c3:ce:7c:96:5d:b4:4c:a6:1c:3b:59:bd:b7:49:40:
                    0a:02:51:67:9f:9c:87:2e:87:db:2f:21:19:7c:db:
                    7c:77:6a:c8:34:a3:d4:ff:c5:a6:87:2e:45:e4:2e:
                    ef:79:59:ae:2c:09:17:77:9a:c5:fe:82:e6:0c:5f:
                    75:d7:bb:f5:df:0b:5a:a3:4e:44:af:d4:53:e3:f9:
                    d9:40:ab:ca:3c:f4:41:e4:ae:cb:d3:06:2f:a7:d5:
                    80:3f:a5:03:1a:c5:f4:39:03:77:ec:05:57:92:ee:
                    9a:c8:47:55:08:02:95:ac:e4:30:d0:3d:41:76:72:
                    95:69:f7:07:4a:07:6e:1d:33:e8:30:a2:47:5e:69:
                    9c:fe:1f:62:25:94:dc:84:3a:1d:53:59:a1:ba:89:
                    9c:cf:52:51:6b:9c:00:f7:b0:07:dc:c9:db:5a:30:
                    9b:7a:75:b5:80:86:58:72:80:91:6b:bd:53:d8:5d:
                    54:28:88:9d:e8:28:94:13:4c:99:38:8d:df:18:32:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AC:C5:A4:50:40:09:79:C2:F5:43:9E:83:CC:1A:9D:96:78:93:50
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:20:a8:71:25:69:63:3e:ca:8f:b9:11:6c:d2:8c:e3:86:99:
         c3:9d:77:c1:bb:f9:51:75:63:dc:e7:16:53:08:0e:8e:cd:b0:
         29:1d:2f:72:e1:9e:2a:bc:51:0e:67:2e:4c:2e:7d:29:ad:b7:
         23:0c:0c:64:a7:b4:66:a4:5d:de:74:71:72:f2:fe:1c:a9:2f:
         d8:56:7b:b7:db:71:62:97:4f:c3:7c:06:47:5d:cb:4f:74:7c:
         d3:34:33:05:ab:c9:b3:e9:e1:04:74:58:69:aa:0e:b2:b2:72:
         dc:50:47:2b:f9:3b:bb:70:e2:89:29:6b:94:36:b3:42:2b:36:
         a2:43:28:e2:13:2d:9f:2d:8e:f5:f3:25:30:14:f8:5c:2c:08:
         fc:dd:3d:36:f7:b5:ba:0c:eb:a9:62:c9:19:d0:2d:cf:59:a2:
         71:ff:58:2c:70:84:44:e8:7e:20:87:23:06:4f:80:2d:7e:43:
         ad:13:2e:ee:e0:b3:04:3a:11:e7:5a:7b:ec:6b:80:2b:10:ae:
         9c:75:f4:e4:2a:d5:e1:85:f0:0a:3b:47:33:95:df:93:a2:67:
         27:cc:c2:33:a2:25:c0:16:15:f7:bf:6f:62:ae:65:31:a2:4d:
         5b:26:21:61:99:7e:e7:4b:38:5d:91:b1:9a:96:93:61:21:6b:
         ee:6d:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:53:05 2025 by rpki-client