Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
File:                     146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json)
Hash identifier:          TT5tE1ULaN8VjzUSWguIS6IKH9LYk2j7Wus9Bib1HP8=
Subject key identifier:   25:3C:5A:F0:98:A3:38:7D:76:55:31:76:BA:EB:93:C7:96:BE:10:A7
Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF
Certificate issuer:       /CN=146B42876A5C2AB0705F67F1A3918D76984989AF
Certificate serial:       3958FF13444C3297CEFBB928E7E4DC8D31AF0E93
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
Manifest number:          01F1
Signing time:             Thu 21 Aug 2025 14:51:24 +0000
Manifest this update:     Thu 21 Aug 2025 14:46:24 +0000
Manifest next update:     Sun 24 Aug 2025 20:51:24 +0000
Files and hashes:         1: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: eZj26iX37skISboJcuW4ApvTpoib5l23XWhFM8hw/LA=)
                          2: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: f2ET0xnRE9tVugcZTeUjwdpllzI9UCr68L6pTafrq5U=)
                          3: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl
                          rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 20:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:58:ff:13:44:4c:32:97:ce:fb:b9:28:e7:e4:dc:8d:31:af:0e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF
        Validity
            Not Before: Aug 21 14:46:24 2025 GMT
            Not After : Aug 24 20:51:24 2025 GMT
        Subject: CN=253C5AF098A3387D76553176BAEB93C796BE10A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f3:67:43:07:d3:fc:39:ef:13:f2:d7:b1:33:
                    0f:1c:ed:12:75:7c:8f:68:11:c8:4f:de:c5:6b:02:
                    b1:e7:74:78:1d:fd:e3:1b:5f:a7:71:01:ca:a7:e2:
                    32:1d:55:c4:2d:c9:4c:f5:ea:f8:77:79:4d:17:92:
                    df:1d:87:67:43:5a:5f:9f:70:33:15:2c:46:77:37:
                    26:ca:fb:ed:9a:03:5c:ad:65:06:49:a3:af:dd:34:
                    ff:31:45:17:39:a1:99:39:b7:91:aa:04:ea:51:7a:
                    fe:0b:75:78:73:b1:cd:21:27:1a:a9:7c:bb:94:6a:
                    52:e2:45:10:b8:58:89:07:39:3b:ef:82:35:9f:60:
                    ac:f6:bc:d6:ae:25:4d:06:ea:41:8b:09:65:c9:e7:
                    7a:65:b2:1b:a6:6b:95:d1:ea:20:2b:be:96:77:fb:
                    80:c7:1e:7e:ba:be:49:87:04:59:14:77:04:35:c0:
                    f4:42:78:9a:68:c0:8d:45:e4:94:89:38:5d:2a:7a:
                    b0:1c:b7:da:c5:c7:28:0a:b6:05:89:b3:e4:4f:d4:
                    b0:d5:14:39:3a:a2:98:be:2c:88:60:9b:e6:40:36:
                    c0:23:1a:cb:32:e7:63:e2:72:ca:e0:e9:22:6f:77:
                    26:d8:df:d0:34:2f:56:19:49:9e:8f:08:0a:aa:58:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3C:5A:F0:98:A3:38:7D:76:55:31:76:BA:EB:93:C7:96:BE:10:A7
            X509v3 Authority Key Identifier:
                keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2a:2c:11:c5:c5:3f:e9:52:9c:8f:7a:a7:b4:f5:ed:00:f4:
         ed:0d:4d:c3:39:33:bd:98:a8:5b:af:e2:b7:61:8d:5e:b4:67:
         6a:9d:b3:d1:ec:ad:07:e9:6e:ac:b5:7b:42:81:2a:a4:78:e1:
         86:7b:87:65:58:ca:0e:c7:c4:71:84:b9:2d:d1:38:ce:12:fe:
         95:d3:a7:68:25:d7:c7:9b:c1:cd:3a:bc:a9:03:fc:6b:6c:2b:
         41:13:98:f1:84:fe:26:e7:4a:0a:e0:2a:0c:65:5b:e1:ad:8b:
         6b:53:41:14:db:bf:cd:f1:a8:ab:5c:c5:8c:6e:f3:0a:f1:aa:
         05:a5:11:50:4e:e5:c8:43:38:5d:86:26:52:f3:40:9c:fa:a9:
         ee:ec:3b:15:fe:8c:ca:04:22:70:ca:78:7f:1e:d6:20:a4:5f:
         b4:5b:a5:a4:06:63:84:c4:c8:4d:fc:e8:f5:74:e8:ab:a8:53:
         55:ef:14:25:53:32:23:c6:4b:95:cb:b6:9f:e7:6f:2f:88:47:
         77:65:0d:9d:72:b2:97:d9:33:a7:2b:d4:01:56:fb:46:af:b0:
         eb:bc:ad:ca:f9:62:3e:86:87:60:a8:90:c0:8d:1e:a8:98:e5:
         97:4b:ad:6d:bf:7a:33:db:e9:62:8a:f2:3d:1a:a1:be:0e:46:
         38:c3:56:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:08 2025 by rpki-client