Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          OYLV6Y8bLSdCHlYA3SObTy8iPSy01Bku73YV6gA9Drw=
Subject key identifier:   DF:3C:40:6E:33:BE:EA:7C:88:92:7F:DA:82:28:00:C6:79:4A:0F:F4
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       3D50A4F9981AD759E22BE898E2B41552037BBDD8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          04FC
Signing time:             Thu 21 Aug 2025 08:51:45 +0000
Manifest this update:     Thu 21 Aug 2025 08:46:45 +0000
Manifest next update:     Sun 24 Aug 2025 16:01:45 +0000
Files and hashes:         1: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI=)
                          2: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=)
                          3: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: WjmWZuOqqVrHpn2Iht/6D/CnYopSoMqLYwKVON2A9VQ=)
                          4: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: fpx270ixaq11nCmgYzT3PO4j149L6mmMafh/Cax7edM=)
                          5: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: kpFmjz57IgAP8PtBxnCHq8wcPp57kSPI2nlME92Fnyg=)
                          6: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM=)
                          7: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M=)
                          8: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: RS9Byz+j3EdqEQMObrbAR7PmpA8rmEiuqCAVbbyaqzQ=)
                          9: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: vr66fn8B7rAPP+TZSIsfhj0n+lp991jln8PENhk4tOQ=)
                          10: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: AMgNEXA3HgeJ9JW4vEN8yPqkkgaxJIY9BD1424Sv1Zo=)
                          11: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: BLBITOKIU7JG3Z7I17LWn2H4yvGukOag9GzxvitPei0=)
                          12: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: oTh96cvu9N7dUKNXeMRvCfiS16/pskUDIN5zzPcyPFs=)
                          13: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 16:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:50:a4:f9:98:1a:d7:59:e2:2b:e8:98:e2:b4:15:52:03:7b:bd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Aug 21 08:46:45 2025 GMT
            Not After : Aug 24 16:01:45 2025 GMT
        Subject: CN=DF3C406E33BEEA7C88927FDA822800C6794A0FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:92:ff:50:0c:74:a3:5b:49:74:fd:fb:bf:98:
                    6c:c9:78:55:31:52:21:69:4e:8e:e5:f5:c5:53:a5:
                    b1:d3:b7:af:51:74:b2:e5:36:8d:45:85:60:02:0f:
                    2f:8d:a6:7e:1d:bd:aa:a9:14:df:9c:12:f4:b1:bb:
                    27:c0:1b:28:d5:57:cb:f2:86:ca:df:a8:ff:0b:bb:
                    d6:b9:55:63:75:34:b5:ac:54:ec:b6:16:2a:2f:d6:
                    bf:fa:e5:f4:03:37:ae:d8:cf:ee:c1:5f:1c:f1:cd:
                    7f:04:9c:0c:b5:10:34:54:97:fc:f9:03:51:dd:03:
                    39:a6:69:9b:90:21:f4:68:e3:54:55:39:bb:ab:9d:
                    74:ea:3c:a8:e4:14:a2:c2:6d:09:a0:5a:ac:a7:26:
                    b3:b9:56:b4:28:c1:52:1c:9f:d4:c2:da:89:6c:bc:
                    35:b2:55:ca:dc:db:cd:01:50:99:1b:60:81:be:63:
                    38:dd:c9:7e:a8:a0:82:54:78:dd:48:39:90:51:e2:
                    b3:a7:aa:d7:f9:d9:dc:63:14:67:1a:e3:48:89:93:
                    b9:37:aa:d9:01:6a:cf:d9:3e:6d:1d:79:1f:27:be:
                    d4:49:2b:27:f4:44:44:e8:86:7b:3f:bd:85:c2:19:
                    6b:c1:42:cc:4b:ca:5e:74:27:ea:ce:95:b0:7f:6e:
                    d2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3C:40:6E:33:BE:EA:7C:88:92:7F:DA:82:28:00:C6:79:4A:0F:F4
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:82:ff:fd:77:2e:0c:8f:11:90:d9:cb:be:2c:83:8e:64:9c:
         5d:db:79:17:cd:06:cc:f2:94:88:32:89:0a:8e:fb:c0:d7:e7:
         0e:1d:af:f8:ff:49:64:0c:a8:b8:87:ae:c9:12:34:bd:07:4f:
         bb:8e:a3:93:7f:84:ce:6a:36:f4:ce:25:47:fa:18:42:03:96:
         12:08:50:fc:bc:27:7e:50:ee:a1:1b:9d:db:36:39:1e:9a:11:
         f3:4d:0d:8f:8d:e3:d7:ea:f4:5d:3d:5f:05:7e:08:46:6e:fe:
         bd:99:c1:58:7c:18:d5:24:4e:38:17:0e:94:59:de:9d:51:0d:
         4c:f9:47:4c:86:dc:25:48:52:1e:13:42:c8:6c:a4:f3:3b:7f:
         0c:15:d8:10:dd:08:e7:ea:09:eb:89:d0:88:e0:82:d8:01:42:
         6a:6d:e2:f5:60:c5:72:96:26:41:9f:eb:e6:a4:f1:af:f9:5c:
         b3:b0:0d:1a:32:49:c2:f8:bc:a4:ae:ef:b2:4c:66:91:d4:a9:
         71:a2:ae:56:f4:67:62:e0:12:d9:18:c5:75:fb:32:19:01:7f:
         72:d8:29:84:7a:21:ce:f2:71:bc:35:89:5d:1c:4d:08:95:e1:
         86:74:3b:7d:9f:fa:f9:82:8d:bd:aa:c1:60:e3:85:27:d2:2c:
         00:27:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:43 2025 by rpki-client