Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
File:                     1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json)
Hash identifier:          QPlUJz9crdBG/IKx4j7wE1qMZj0FUCbIGFDxUw6RcYQ=
Subject key identifier:   04:3E:92:9A:35:07:6D:5B:C5:46:E7:8A:2E:17:12:65:0C:07:2B:99
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       7BA5E64737E7CC1A6ABBD95A80D13CBD08F5B9AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
Manifest number:          0257
Signing time:             Fri 22 Aug 2025 23:21:51 +0000
Manifest this update:     Fri 22 Aug 2025 23:16:51 +0000
Manifest next update:     Tue 26 Aug 2025 02:45:51 +0000
Files and hashes:         1: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: RIaxQt2BdMly6jZqFEt6v4+R9ZCRoPt0bRRhz87aHRQ=)
                          2: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: I2GxvF+hElG1yAh007aM/yMEViDm+JYfJmwRWj1ftM0=)
                          3: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: KyjP36QU2B5WmwOGj/w2MpttC7+1bk2GysORLqVSxsM=)
                          4: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: Q0qOJ/lZFg5h7UgexbzOBngIpLcaN5DOfBR3Xnw+miE=)
                          5: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: qx0GKHW1FS5tHrsvUCVWgH7+ott04Nq/cKPKtOYX9sQ=)
                          6: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: zszkuvV/DGJtyi38SwI+iyz6P0zwyMAcKOGOc8uu7vs=)
                          7: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: m+iFf6x78xMNG3cgj5SBa8woS/ACjDi5PHEdG0OXJdQ=)
                          8: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: s5VhGyqquShG7gVjj17riZ/dr+Nk1vl6gg38DZ33Yns=)
                          9: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: 1LTZq4OamLGaIEc7s8hORwOna9UqTifBlZPqeEuXpEA=)
                          10: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: qNzsGiJwf7XGjGP4j+CDhg7oJnuuTy/kX7unl+wQ3hg=)
                          11: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: E4iTR8Q5yRd2xqm73cSReMJhPE43rWiQEDXt848sGy8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 02:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a5:e6:47:37:e7:cc:1a:6a:bb:d9:5a:80:d1:3c:bd:08:f5:b9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Aug 22 23:16:51 2025 GMT
            Not After : Aug 26 02:45:51 2025 GMT
        Subject: CN=043E929A35076D5BC546E78A2E1712650C072B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:74:e4:c1:40:e8:9f:8a:87:a1:58:08:6c:
                    fc:b6:07:b8:72:c5:8e:2d:00:89:e7:9e:e5:87:32:
                    04:d2:d0:d8:f6:bd:6b:f4:72:f0:51:e9:e4:83:a2:
                    9e:71:ba:27:ab:cb:56:2a:e2:d0:88:7d:29:d2:9e:
                    04:95:c5:4a:40:cc:9d:55:69:b6:00:1c:bf:f5:d9:
                    7e:51:58:da:6a:02:47:63:4b:5e:2e:36:2a:8f:39:
                    0c:5b:3e:4e:26:24:86:3a:0e:67:00:15:9f:ee:51:
                    9d:4c:8f:33:98:51:1b:1d:ec:ad:2a:90:82:b4:82:
                    50:51:e8:3a:2c:ba:33:67:37:ee:32:9a:2f:8a:79:
                    e3:c7:fb:86:ae:b6:f8:6f:bc:0f:b2:da:4b:da:5c:
                    52:96:74:b9:65:21:ee:fe:55:11:01:ce:10:dc:d0:
                    1b:ca:3a:fc:45:20:f1:87:16:d2:70:22:ef:72:bc:
                    ed:6f:99:d9:05:f2:5e:80:96:e9:ce:f8:94:ae:af:
                    f6:6b:f4:c2:5f:e1:3b:ca:bc:dd:93:5f:2a:64:84:
                    a3:19:01:13:2e:bc:5f:a6:2f:7d:30:e4:52:00:74:
                    67:c0:54:58:3b:60:cd:de:0b:5f:e4:97:08:fe:75:
                    bb:33:b3:b6:cf:d2:f8:ed:7f:ca:28:8d:59:8d:f9:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3E:92:9A:35:07:6D:5B:C5:46:E7:8A:2E:17:12:65:0C:07:2B:99
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cc:29:7a:84:1f:ad:70:24:bb:1f:65:04:fc:3d:72:24:6e:
         82:20:66:6a:8e:a2:48:53:76:be:5a:81:66:d0:c1:cb:17:3a:
         36:da:5d:04:af:17:7a:59:e6:28:ec:a0:12:d9:d7:f9:41:a7:
         93:ce:6f:f5:9f:88:32:e4:59:cb:e2:99:3a:9f:56:ac:4f:36:
         2d:4a:b4:1b:bd:c9:8f:fb:a3:fa:ee:8c:a4:9b:ff:44:69:1a:
         85:4d:19:76:1d:e3:60:9a:3b:6f:10:1e:ec:5c:af:d7:2d:3f:
         31:9f:06:59:ee:aa:b4:74:08:02:e4:cf:f2:6f:35:26:36:e7:
         e2:3a:e0:9d:f0:0a:a8:82:0e:0e:d8:b7:96:b4:e7:a1:a4:a4:
         23:45:63:0b:04:26:4b:c4:e2:d1:f0:e8:8d:ec:65:40:61:6d:
         aa:6d:85:dc:77:a3:c6:65:82:45:82:fa:ca:b6:4b:b8:6f:13:
         2e:e6:a6:ed:c5:1e:cf:2c:ba:8f:1f:9c:bb:34:32:02:84:78:
         75:a3:75:84:49:79:28:fe:b8:dd:b1:65:98:52:e5:61:0b:39:
         80:ec:48:a9:99:88:cc:4e:c3:d8:d5:3a:b6:9f:dc:01:07:39:
         22:60:22:ab:3e:ae:1c:37:64:83:3f:eb:7b:23:60:4f:d8:1f:
         2a:0d:d7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:37 2025 by rpki-client