Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
File:                     C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft (raw, json)
Hash identifier:          MiaJQmgueLPP5vWwSAMqvSPi0boyamvxl5Oys0daAPY=
Subject key identifier:   94:4D:59:28:E4:C9:EE:B7:B6:24:5B:3E:2A:23:6F:69:DD:13:C9:FA
Authority key identifier: C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7
Certificate issuer:       /CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7
Certificate serial:       616845442AA0DC02C07A4D1742BA5EF7661D44BA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
Manifest number:          04CF
Signing time:             Thu 08 May 2025 02:31:32 +0000
Manifest this update:     Thu 08 May 2025 02:26:32 +0000
Manifest next update:     Sun 11 May 2025 10:40:32 +0000
Files and hashes:         1: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (hash: zzI9rCP/tfewJ6DIUZ/QCdxSlaG3S+TwyllnR3goWuU=)
                          2: C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl (hash: MP6Qd49yEKe+8t71jcdErf1G+UKvB5G2PCHGwK4zfz4=)
                          3: 3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa (hash: qMa8VNCuuJLXNhUhRN1sStP1okTraTFw6PaJMBRqoY8=)
                          4: 3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa (hash: MnIWCZLpskzO5+rSDRIo46Sg3tLFswLOGAMMC9mWnL4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl
                          rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 10:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:68:45:44:2a:a0:dc:02:c0:7a:4d:17:42:ba:5e:f7:66:1d:44:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7
        Validity
            Not Before: May  8 02:26:32 2025 GMT
            Not After : May 11 10:40:32 2025 GMT
        Subject: CN=944D5928E4C9EEB7B6245B3E2A236F69DD13C9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:40:a7:72:ef:ed:f0:31:08:46:9d:3c:0c:81:
                    d9:ad:00:86:46:9f:1a:3a:ab:17:40:67:bb:c8:7e:
                    be:e7:29:09:45:f4:31:b0:98:2f:f6:60:86:eb:a0:
                    1e:5e:25:2c:cc:99:19:2a:4a:1d:41:00:97:fa:47:
                    8a:12:b1:55:d8:58:a1:85:e1:2d:73:c5:07:67:7f:
                    40:ed:66:9b:41:70:81:ac:67:d6:ef:ce:48:a5:22:
                    35:0c:1a:89:e6:dd:39:f8:0e:72:db:98:3a:a4:c5:
                    71:90:9c:f4:77:1e:2d:76:bf:af:d7:18:c6:16:ab:
                    83:a8:9e:29:20:b6:bd:e3:5c:f2:8f:25:fc:bd:c8:
                    d4:49:89:8d:56:74:79:6f:d5:98:1b:ec:fd:8a:55:
                    21:54:a1:37:af:16:4f:f3:93:17:36:e0:ee:32:a7:
                    e3:1b:6a:3f:63:9a:f0:f2:df:a7:cc:48:8c:c8:a9:
                    53:f1:17:05:05:67:e6:c2:7d:4f:ef:3d:2d:e2:8f:
                    91:03:7a:03:e5:ad:01:1d:55:68:ee:6e:85:85:22:
                    c6:e3:b7:ad:81:34:6f:51:f5:86:b7:2a:3e:d8:6d:
                    4d:1e:37:67:6c:c5:66:10:25:84:90:05:eb:9b:63:
                    6a:04:a8:c2:c8:18:ad:55:46:49:0c:2e:55:1e:b1:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4D:59:28:E4:C9:EE:B7:B6:24:5B:3E:2A:23:6F:69:DD:13:C9:FA
            X509v3 Authority Key Identifier:
                keyid:C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a1:df:9c:6e:0a:c8:33:9a:2f:9d:0e:2e:77:a2:67:92:a2:
         b8:e2:60:ab:72:35:02:16:10:b3:d0:8c:45:d0:d5:e5:b0:5e:
         9d:68:17:10:38:f2:e0:b3:4f:70:60:da:b0:8e:72:8b:61:64:
         01:57:86:92:75:79:e9:c4:42:c5:5d:44:a4:1f:d8:41:c0:af:
         b8:84:16:fe:a7:b2:36:32:6f:e4:8e:8d:a5:e6:2c:58:d5:68:
         ae:7a:68:7f:7a:42:94:61:76:07:d7:7f:e8:26:2e:66:a0:e4:
         8b:aa:21:cb:70:6c:6e:84:3a:c8:87:73:bc:70:4b:f8:6f:65:
         4b:c6:f1:b7:a1:20:1e:4a:3c:e5:05:81:f4:65:5a:0b:f6:e8:
         b9:61:59:e9:74:f0:63:f7:d4:17:d7:57:9c:b0:2e:d8:83:0e:
         12:bd:ff:3e:c5:c4:03:cc:d8:8d:44:fa:ea:59:fa:47:6f:fb:
         e2:96:ba:21:89:68:c2:5f:8d:57:78:fc:9f:1c:8b:64:bf:24:
         9c:c0:5d:1b:eb:7e:11:57:d7:89:cb:93:15:de:2e:56:3a:90:
         30:f5:ee:f8:1a:8f:58:13:74:94:98:5b:63:db:6d:45:42:db:
         ee:6b:57:0f:16:84:d4:d8:53:68:ad:99:36:c5:a3:3b:eb:8d:
         98:37:4f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:25:41 2025 by rpki-client