Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft
File:                     CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json)
Hash identifier:          kJwDG9bBSihyRHtYDe4maCbLRtreS8yWujqvURU74hI=
Subject key identifier:   F4:40:82:86:D4:78:E1:6D:F6:48:E5:35:DF:1C:E5:B8:55:30:C2:B8
Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C
Certificate issuer:       /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C
Certificate serial:       39E2E6523EC825E027027FDAE4B92466CA9C8D3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft
Manifest number:          9B
Signing time:             Thu 21 Aug 2025 18:10:48 +0000
Manifest this update:     Thu 21 Aug 2025 18:05:48 +0000
Manifest next update:     Sun 24 Aug 2025 23:04:48 +0000
Files and hashes:         1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=)
                          2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: ldXwWAawYbp/NNxDkp+3Bp20TTnygS90OhRhma0I4+U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl
                          rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 23:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e2:e6:52:3e:c8:25:e0:27:02:7f:da:e4:b9:24:66:ca:9c:8d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C
        Validity
            Not Before: Aug 21 18:05:48 2025 GMT
            Not After : Aug 24 23:04:48 2025 GMT
        Subject: CN=F4408286D478E16DF648E535DF1CE5B85530C2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6d:99:ae:c9:ff:95:84:bf:31:04:1f:f3:8a:
                    b9:aa:6b:38:68:49:7a:bf:af:6a:cb:52:eb:89:7c:
                    76:49:d7:91:17:af:f8:d5:05:e9:d2:e4:7c:f9:84:
                    f6:b5:91:48:ca:5f:6d:7c:d7:2e:54:2a:06:80:ad:
                    0d:98:38:48:fc:30:7d:94:e8:ef:7e:24:b8:01:eb:
                    67:3f:6e:e5:78:65:2f:ec:fa:90:a3:be:b2:09:16:
                    f2:2d:89:2d:37:17:c0:7f:6b:b5:00:22:03:ef:da:
                    80:b8:ee:61:8b:39:a3:35:50:72:65:46:57:47:bc:
                    e4:f4:9d:60:00:f8:7f:16:03:27:9f:db:2e:31:1e:
                    71:4b:cf:38:b4:e1:4c:4b:ca:fa:ab:38:00:74:89:
                    b0:c3:03:b5:87:0e:34:c7:a9:ec:4c:56:9c:c2:b1:
                    c9:ed:ca:6a:6b:d2:cd:e8:93:e8:3c:65:c8:e6:df:
                    1f:15:ca:25:97:bb:db:65:6b:e2:59:d7:ba:7b:e2:
                    a6:a4:24:2b:61:c7:66:c8:46:08:77:8d:f7:b8:e8:
                    84:9c:b9:37:cb:75:b5:ba:45:08:0b:ec:b3:f4:77:
                    45:c2:d3:ae:73:ac:68:e1:39:e3:1b:42:65:83:77:
                    1d:81:6e:73:58:59:e9:3a:f3:9e:9c:e8:b5:f3:ee:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:40:82:86:D4:78:E1:6D:F6:48:E5:35:DF:1C:E5:B8:55:30:C2:B8
            X509v3 Authority Key Identifier:
                keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:d4:1b:67:05:33:54:b9:46:b8:b2:c8:0b:0b:95:45:40:ff:
         89:06:c1:ae:5d:4d:66:88:00:b2:ab:e7:fb:b8:cc:12:72:5a:
         09:43:07:bb:a1:ed:fb:8b:fd:3e:6e:b0:99:bf:ad:73:d9:e1:
         cc:0a:3a:36:29:b6:f1:cc:35:24:f2:ee:6b:6c:df:9b:1c:85:
         31:a5:70:12:a8:5f:c9:20:ac:83:56:49:00:b4:5e:b7:c2:75:
         8f:39:24:6b:49:11:29:38:67:b5:d1:35:f7:1e:a0:9c:a3:dd:
         14:49:28:2c:67:d9:70:cb:99:cd:6e:69:98:6b:e4:28:73:12:
         4a:1f:ad:7a:0f:af:5e:84:da:75:0f:98:83:64:8b:f4:4c:33:
         78:e4:0e:55:6d:8b:78:71:38:83:90:57:a8:aa:57:a6:a2:5d:
         c5:5d:b3:80:7d:50:df:c8:1a:9f:c2:69:e1:da:0a:cb:82:49:
         8d:69:bb:4a:be:6c:50:d5:fa:8e:56:38:14:c3:47:8d:58:e2:
         85:d5:49:37:49:8a:e7:6b:4e:9c:bd:bd:a6:69:be:30:bf:a1:
         6a:94:ab:19:b4:a5:df:9d:86:fc:2d:c1:b9:68:82:c2:dd:4b:
         20:3b:cc:b3:ea:cd:6d:77:0c:69:8d:d0:84:40:00:d9:19:63:
         ce:83:a3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:16 2025 by rpki-client