Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
File:                     5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json)
Hash identifier:          wNI8MUXrwryzMrQJ5fb9wqvCChaS6QAcR8Rz5QAUQV8=
Subject key identifier:   18:5A:00:56:9A:08:DB:7B:09:67:67:4F:A8:45:3C:A5:E8:35:91:B1
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       5B6E72205B6456BF50DD3AEF846B587F87A54637
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
Manifest number:          04CE
Signing time:             Sun 11 May 2025 03:10:01 +0000
Manifest this update:     Sun 11 May 2025 03:05:01 +0000
Manifest next update:     Wed 14 May 2025 13:43:01 +0000
Files and hashes:         1: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: ii86NXnr/WYmHnry427PiBTknuSG/osb8uEvWhmtijc=)
                          2: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: zXSqQBvlzL5Qd7ukUJxUD+iaVT3g/E6NjHe1W2xTBhw=)
                          3: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: bcv9+A8fnNa4nTKxyLUpprqdZBOoY3R/2lzSPgws1GM=)
                          4: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: 07PYNeC0WDQUF0+zMod6MePJR+FOCJEfR13IEAgxnsc=)
                          5: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: U7QS9bMS2+t1XHExH+JHZSXP/9sTh8XHPZioautpjoI=)
                          6: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: 5kphXit/LNBkVw8osIk/3vijQtN+EbxCtDf6F2cC7lU=)
                          7: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: RQ8qS3znXvVJvNtPWPBA0wk2ih45H6PiyFCH7LH26So=)
                          8: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: nZcY2gfxAEyBR5vBIabcGR8YJ3boENfhzaPlLrFWCrY=)
                          9: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: 7RROuYODVVhNO2+bjbdOGIl/UFrzyWOSbw909j2VmTo=)
                          10: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: QT2s5B9t6PnCCcNGSmiWwWVIE1Y3OmnLse/XbCIYmGE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 May 2025 13:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6e:72:20:5b:64:56:bf:50:dd:3a:ef:84:6b:58:7f:87:a5:46:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: May 11 03:05:01 2025 GMT
            Not After : May 14 13:43:01 2025 GMT
        Subject: CN=185A00569A08DB7B0967674FA8453CA5E83591B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e4:51:e4:4d:db:ea:2e:2b:ab:f6:ad:0a:b7:
                    58:81:cf:1d:c8:02:e0:45:dd:ce:5a:2f:1e:a0:a9:
                    be:5e:89:73:09:d5:54:c4:a5:e6:85:42:1e:00:df:
                    a5:9b:80:a7:25:df:c4:50:21:40:ac:a6:8f:dc:b6:
                    de:5b:77:40:1f:f3:c2:86:38:cf:b2:25:44:f5:26:
                    de:b6:2f:2d:5b:46:2f:d5:03:60:38:90:31:df:7f:
                    9c:a7:f4:17:70:34:09:51:0b:db:d2:d2:d6:85:66:
                    35:fa:ee:69:98:c0:08:ff:76:47:e1:86:f4:cf:b4:
                    ff:6e:5d:94:a0:e1:f9:2e:6f:07:ec:ae:2f:40:0a:
                    23:4b:7f:13:c3:33:89:51:5b:6c:2f:2c:7b:f2:80:
                    b4:1a:7f:58:90:e9:d4:b2:9e:f5:e1:05:4a:2f:d3:
                    82:ea:4d:b4:b5:fa:e6:a2:78:75:e5:b7:57:8c:79:
                    f4:b4:f1:d3:23:9d:55:7a:7e:84:2f:4d:39:d2:58:
                    ff:aa:78:e5:65:3e:76:72:dd:d1:6e:b2:14:c8:c2:
                    a3:95:5a:30:22:b4:cb:0d:d0:f5:6a:6a:e8:54:1d:
                    70:43:b5:9f:f8:9a:9a:e1:b7:a1:3a:70:aa:26:2d:
                    77:f3:28:a7:34:bd:33:57:5f:3f:cf:f7:fe:d0:ed:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5A:00:56:9A:08:DB:7B:09:67:67:4F:A8:45:3C:A5:E8:35:91:B1
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:bc:05:86:0f:41:1d:33:ed:24:76:b5:e6:f4:c3:7b:a2:f4:
         4b:9d:d3:d3:8f:57:89:23:e5:b4:e7:a4:84:8b:d9:d4:80:40:
         5a:3a:b2:d6:96:04:b7:35:b8:4c:1c:bc:52:8a:e0:ba:06:03:
         ab:f6:b6:cf:56:7f:dd:2d:b1:d9:4b:dd:83:5d:bf:c4:8d:c9:
         fb:5f:7b:96:25:2e:6b:44:cd:8f:1d:6e:37:66:42:03:06:dc:
         c2:8d:a0:4b:00:a6:a4:32:48:99:5b:9c:d6:0b:f0:19:b3:04:
         98:cf:f4:00:de:62:7a:61:e7:c0:f6:61:17:1d:a8:2c:b2:35:
         a8:98:16:f8:48:23:c0:ed:e9:b7:a8:82:54:bb:42:e9:ce:d0:
         17:42:13:a2:6f:00:00:65:b3:9b:0a:67:e9:a0:8a:8c:9b:3d:
         e3:f5:26:6a:37:68:77:a2:dc:83:dc:7a:90:43:a9:08:60:6b:
         0a:55:b2:24:3d:fb:a2:6c:64:2c:f5:54:49:5e:ec:75:70:8d:
         93:69:0a:10:fd:72:27:11:c1:53:17:b6:96:a3:ae:ff:21:46:
         2d:6f:a2:fe:8b:71:e3:d0:ff:08:1f:9c:69:9e:b2:80:70:2e:
         33:09:93:a8:9b:e0:da:cc:8a:81:f6:2b:8e:00:06:a7:10:eb:
         04:07:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:57:27 2025 by rpki-client