Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
File:                     8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json)
Hash identifier:          /1GgdsQL5vT5Dxl9B9/jKsyiPg5lDmfrwF/EwKySNSE=
Subject key identifier:   F3:C0:FE:CB:D1:39:A7:4A:B2:D2:E1:0F:E4:F4:57:0C:D0:8A:66:16
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       1C2E556BB56E3D51165919779FB24EBB885F2DA7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
Manifest number:          0503
Signing time:             Sun 29 Jun 2025 20:32:19 +0000
Manifest this update:     Sun 29 Jun 2025 20:27:19 +0000
Manifest next update:     Thu 03 Jul 2025 06:43:19 +0000
Files and hashes:         1: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: 0on0Zr09JZO2uwExsn4al/aKrzhro4Rbk1hM7yfdFaI=)
                          2: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: zqqM4+D0YvV3kzADDLg9UoTtA+fv3LSZ59niExdp6h4=)
                          3: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 8kcmZ4RG24jB44cBv71IJKv0c+Dtp9Ygk9nrjPzZQxo=)
                          4: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: t5dSILf0M9LETh0ONTCtPeHbE5Gq+eulQJzX449lTa8=)
                          5: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: 6BZFe33/a07P77heVgE/RRa/s7Eo4pTfBbM0ftWFlFs=)
                          6: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: 7eIeGtUaPSSCMI9OwCzjbwOdbsZDULYIVeTj3VK9eg8=)
                          7: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: LN+YrVCzUblkTbFghEN9RcfZWB+oIkio+9woygN18Nk=)
                          8: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: q6gnQ689gbyPRWkFyTqwu7clrVFZi6YA0qntQoU052Y=)
                          9: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: lejxupJB/ypozilIjk9IOKEOtlHup4PnPlCfI+BqLVI=)
                          10: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: w3mgpqsf+QCQ0IESSJ7u/cpRjR0jksdX+ZR9wNYh8rI=)
                          11: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: nBHgJ9scpxnDLh4WsmH3WPakx6Rx02RsuPBuZbUxKAs=)
                          12: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: 1wEjJgzGmGFQx1qLaHwF1vXvoQd7g22cQT5tuVMpCSs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 06:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2e:55:6b:b5:6e:3d:51:16:59:19:77:9f:b2:4e:bb:88:5f:2d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Jun 29 20:27:19 2025 GMT
            Not After : Jul  3 06:43:19 2025 GMT
        Subject: CN=F3C0FECBD139A74AB2D2E10FE4F4570CD08A6616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:8d:b1:1e:38:9c:1a:f1:d9:67:ce:06:44:
                    a4:5f:b8:45:6f:be:22:b0:d3:88:f9:a4:9b:c5:84:
                    eb:4a:51:81:ae:20:f6:1c:c3:9c:f5:c1:e3:0d:8e:
                    06:92:13:b8:11:7e:ac:bd:f2:6e:a6:1a:be:61:b0:
                    6b:99:8b:77:66:b0:3b:0b:c3:66:84:aa:38:44:27:
                    04:40:30:76:fc:e6:0a:4f:b0:30:5c:42:4c:c3:70:
                    62:91:eb:ba:9e:39:8e:15:36:41:5e:7f:02:07:59:
                    39:e0:f0:77:fa:f0:40:04:4c:8b:e6:75:8b:12:58:
                    23:00:02:35:d6:26:5d:89:25:73:3f:3c:55:ea:eb:
                    e6:2d:8c:16:dc:f8:e8:db:60:af:70:3c:94:f1:c7:
                    4d:6d:ee:de:74:14:29:87:e1:04:6f:97:20:a6:b3:
                    f0:8e:f4:ff:b2:5b:08:0a:70:37:4b:1a:5f:4c:c3:
                    77:f5:f6:58:61:00:e9:b2:3e:dc:35:20:c3:d7:50:
                    83:0c:bd:ff:7f:1f:47:c4:94:48:a4:03:7b:d9:27:
                    f3:ac:4e:65:e9:0b:1b:02:6d:cd:a5:87:a6:4f:ad:
                    dd:f6:9e:6f:e0:20:64:e7:5c:2c:17:99:9e:2a:e0:
                    32:ba:2c:e7:0d:51:6a:12:95:87:04:05:ed:3c:ad:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:FE:CB:D1:39:A7:4A:B2:D2:E1:0F:E4:F4:57:0C:D0:8A:66:16
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c4:0b:74:b8:c2:8a:42:c0:4b:c8:16:ad:b3:64:11:5f:c8:
         f3:c1:03:1e:18:8e:9c:11:7f:25:dc:81:cb:bf:26:b5:5b:f1:
         bc:fd:7a:f6:8e:cb:6b:b5:94:db:03:56:aa:e2:73:0a:39:11:
         fa:86:9d:e0:c5:85:36:ee:26:cb:d2:55:39:ef:83:e8:6f:bd:
         8f:a4:47:81:7c:c8:d8:d8:d0:9f:71:96:8b:0a:3e:86:13:77:
         85:8e:a9:ee:83:0d:f1:31:3c:c6:36:62:3b:de:ee:5e:6e:8d:
         5e:04:1e:c7:d1:c0:c3:89:5e:61:89:e5:01:71:ea:b4:0c:13:
         1c:38:f0:5c:47:80:cf:ba:69:c5:40:67:45:7f:b7:a5:ca:be:
         e6:8e:91:61:ad:64:5e:74:33:ab:d4:23:e6:52:8a:82:0a:99:
         41:ff:c8:28:32:c0:e2:39:8d:7e:c7:4f:fa:45:d7:2e:c0:79:
         d3:ae:b6:2d:21:b9:db:5a:03:07:c9:b1:2e:e6:21:26:2f:17:
         bb:b3:c7:e8:48:2c:d1:ab:b4:a9:7d:62:2b:41:ff:7d:b7:de:
         91:de:2a:64:bc:6c:9a:d0:89:ef:1d:ab:2e:30:55:8e:51:f4:
         eb:b3:f0:c7:da:db:e3:8a:a9:b0:57:f7:cd:a1:33:28:ef:54:
         2c:4b:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:14:52 2025 by rpki-client