Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          Hu8sbAw/VPeqGOR9prY6OFi7XI2ejYv9KL8K541fQlo=
Subject key identifier:   F1:A8:5D:89:36:26:D4:EE:68:1F:4D:F5:0A:9C:BA:6F:62:81:38:59
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       520E8D00A210A1EBB36917AAC6C7B261CB54D722
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          04E5
Signing time:             Sun 29 Jun 2025 21:01:42 +0000
Manifest this update:     Sun 29 Jun 2025 20:56:42 +0000
Manifest next update:     Thu 03 Jul 2025 04:14:42 +0000
Files and hashes:         1: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM=)
                          2: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M=)
                          3: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog=)
                          4: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: RS9Byz+j3EdqEQMObrbAR7PmpA8rmEiuqCAVbbyaqzQ=)
                          5: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: WjmWZuOqqVrHpn2Iht/6D/CnYopSoMqLYwKVON2A9VQ=)
                          6: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: kpFmjz57IgAP8PtBxnCHq8wcPp57kSPI2nlME92Fnyg=)
                          7: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: fpx270ixaq11nCmgYzT3PO4j149L6mmMafh/Cax7edM=)
                          8: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI=)
                          9: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: AMgNEXA3HgeJ9JW4vEN8yPqkkgaxJIY9BD1424Sv1Zo=)
                          10: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: vr66fn8B7rAPP+TZSIsfhj0n+lp991jln8PENhk4tOQ=)
                          11: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: oTh96cvu9N7dUKNXeMRvCfiS16/pskUDIN5zzPcyPFs=)
                          12: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: Y1sAzgdi3cQuL77L6QbJy5AoHRmkWxwJ5p9Am7VFeas=)
                          13: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 04:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0e:8d:00:a2:10:a1:eb:b3:69:17:aa:c6:c7:b2:61:cb:54:d7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Jun 29 20:56:42 2025 GMT
            Not After : Jul  3 04:14:42 2025 GMT
        Subject: CN=F1A85D893626D4EE681F4DF50A9CBA6F62813859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:ba:7b:22:5d:e8:9b:70:92:6b:1e:44:b7:
                    d3:7b:07:65:dd:f6:e6:1b:e4:13:18:ae:5b:f9:a2:
                    59:b4:ad:64:de:3e:3e:04:e3:58:98:42:48:72:dc:
                    99:6d:28:cd:12:b9:c5:0e:6b:ab:94:fb:94:55:e5:
                    da:cf:0e:16:3c:1d:c8:25:2e:97:ca:ad:82:09:60:
                    c2:cd:b6:88:72:56:8e:6a:dc:10:df:f4:ee:80:e6:
                    8f:e3:c0:94:87:f9:85:27:0d:16:21:1d:fd:6b:c6:
                    eb:bf:4b:f1:19:bf:5e:97:02:af:f4:e5:e9:89:a9:
                    cc:46:e5:65:5d:57:88:b8:48:13:9f:af:5a:30:46:
                    f1:33:9a:66:97:87:ec:93:30:b4:3f:1f:f2:78:9e:
                    7d:8a:a7:9d:95:9b:e4:52:16:8d:76:8a:b5:f5:bc:
                    09:19:87:d0:a0:d7:77:04:3b:77:52:88:e1:64:41:
                    5d:8a:bb:89:12:ee:dc:b1:60:26:2e:3d:72:b6:56:
                    50:cd:02:94:bd:e7:c5:c4:96:d1:d0:bf:19:59:2d:
                    9c:be:38:6b:18:99:88:31:9d:44:a9:18:bb:fa:0d:
                    b5:ac:ae:3d:e7:0d:db:90:48:1d:df:08:3b:dd:d0:
                    3b:ed:77:ef:49:75:8d:40:49:13:c8:c6:f3:6d:5c:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A8:5D:89:36:26:D4:EE:68:1F:4D:F5:0A:9C:BA:6F:62:81:38:59
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:11:54:df:91:7e:84:42:c8:5a:48:b9:91:10:e2:48:f6:43:
         a6:ea:b4:0e:81:16:ba:f6:b6:51:66:0a:f8:8b:b0:45:68:9c:
         53:8d:a3:e1:d9:a4:44:26:c0:b4:40:b1:e7:6b:ca:67:08:f9:
         f2:72:4d:57:cf:68:11:ef:af:47:a2:f0:9b:c5:f6:ca:8f:9b:
         18:5d:ec:8d:83:64:af:46:1d:48:43:cf:7d:a2:d3:b4:d2:da:
         18:e2:fb:05:94:83:4b:b3:af:43:20:ae:6c:ae:e7:f6:84:d2:
         a2:e5:c3:ac:51:a0:fa:61:ce:4b:d8:d8:ab:f1:2f:81:cb:07:
         9f:c8:c5:8d:c0:f0:6b:2c:c5:cd:63:56:32:5b:30:8d:b1:78:
         8c:41:0b:f2:2c:63:7d:d0:4b:dd:c1:c6:69:29:6e:5f:f2:0d:
         20:52:3e:68:b0:3e:8d:c8:b0:c6:21:9f:ef:6b:fd:db:5d:12:
         23:32:57:93:08:0f:34:ba:08:63:cd:39:e7:e5:d4:c7:fa:e4:
         c9:ac:03:d9:a3:fb:78:b9:a0:97:b3:1f:a8:8a:98:24:d8:94:
         cc:60:cc:4b:92:9d:2f:d0:44:d4:65:06:68:68:ea:bb:3e:7f:
         48:51:d2:32:fa:1e:61:d9:5f:e3:7f:44:ec:ac:09:58:7f:8f:
         ac:1a:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:48:37 2025 by rpki-client