Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
File:                     F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json)
Hash identifier:          mOOJrMXjUIcVw8PFcSvIkAn4oUjNvn5KTS6B8hkesmg=
Subject key identifier:   27:21:FB:40:7A:26:48:38:7B:EB:C2:43:7B:3A:53:80:00:C7:7B:6C
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Certificate issuer:       /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial:       69A6D2FC1EDADDEFA4E4694780B2BC521DFBE857
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
Manifest number:          034B
Signing time:             Fri 22 Aug 2025 11:51:54 +0000
Manifest this update:     Fri 22 Aug 2025 11:46:54 +0000
Manifest next update:     Mon 25 Aug 2025 19:56:54 +0000
Files and hashes:         1: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: KiKi/4BGJg0K48DdjCfOcOBa77JCOo4OxuIg38BvrXI=)
                          2: 3230322e39312e33302e302f32342d3234203d3e203234353238.roa (hash: SRVdqccofthtkv2uwfSLIsY2tVzjR9tDeypT6l5PKBc=)
                          3: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: p6w84x+sTkId9KJBAsf0out+ASQwEBO6MAkMqXPQJmY=)
                          4: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6Gn2L5Gc0xaArWW6fS4YuSQAyW4Nw2vh1NIUwUVsqyA=)
                          5: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: nSNHUbZiqo6P3F9SIZ9EN5nCLPpwycyYrfB+M+PV3zw=)
                          6: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: sxphp4GIGCV7hhFuUuJXQKH7CdkIoeuJ+Uc7gPS1Oeo=)
                          7: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: WLK6N6lYU6j7qmPlWLYHBoNW0CsjIHOLp3K/3Jfw78k=)
                          8: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU=)
                          9: 3230322e39312e33312e302f32342d3234203d3e203234353238.roa (hash: PYlzhe+IAch9XO1on1CijnQRACSSXKfMv/Z8ZKEBHq8=)
                          10: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: NF2iP/tUoUcC2IsqEuVN1u5px4O32KK1+gCdXAiL+uc=)
                          11: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: f+5HOc/sgnjP7t42vcbumcmwD5c7eyke5qlw/e0UPsk=)
                          12: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: tGztSZAQJ35/hLuECvtTcpELlM1IpNOZ8zjyOffPPVE=)
                          13: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 8CMqMpoCs6b6HNia3ifuD/WpzvcJj1kVCsO8zPSQ7wc=)
                          14: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: 3mPJMmSU87HxOCz1kx2GnX89IU0Xnf2eTb3lccTca1k=)
                          15: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: aOzMI9PHIaU1+JYfqj3PgTWOSMZrS1G3wjVf+KJcQuA=)
                          16: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: nikRTC901Bllan4GreFOs5fithEDsAsxTQDrjRSiako=)
                          17: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: FgWk4lEb+N8VyrkhQkA7AsDgO4pzlnxAR+so0eMn0MM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
                          rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 19:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a6:d2:fc:1e:da:dd:ef:a4:e4:69:47:80:b2:bc:52:1d:fb:e8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
        Validity
            Not Before: Aug 22 11:46:54 2025 GMT
            Not After : Aug 25 19:56:54 2025 GMT
        Subject: CN=2721FB407A2648387BEBC2437B3A538000C77B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:14:40:db:40:91:32:e7:1a:64:85:be:bb:
                    75:c1:93:70:23:ab:ca:8e:a2:7c:8d:97:0f:2d:c4:
                    08:8c:02:a2:f2:b2:69:2e:78:61:c8:bb:4c:5b:c4:
                    bb:f5:83:cc:b7:14:ff:15:02:e1:73:46:a0:ff:5d:
                    e6:33:35:c3:4c:77:46:dc:5c:4f:e2:f5:04:a8:85:
                    3a:28:e6:86:1f:b7:1f:e9:69:f9:3a:56:8a:94:54:
                    ef:39:d4:a0:ca:8c:36:e9:7e:fd:01:42:18:e2:09:
                    ae:ab:8c:1d:e5:2c:92:47:70:cf:ab:65:1b:c9:f7:
                    b5:98:b8:dc:6d:da:62:4c:b7:2e:4f:4d:93:d4:ed:
                    6b:29:33:ef:5d:ff:20:5d:58:f2:42:ba:39:75:3f:
                    5c:32:e4:7c:fe:81:0f:32:ff:45:fd:c4:92:f9:b0:
                    7d:14:c7:4e:3c:97:ab:33:a3:3e:37:42:66:b6:cb:
                    1a:a9:c2:65:1f:cf:f9:47:42:bf:ee:d6:16:60:b4:
                    9a:32:21:c8:19:e0:6c:8b:3a:ad:1a:2a:40:54:dc:
                    f7:7c:fa:8e:40:e7:15:8d:6f:e2:eb:8b:f2:67:a0:
                    fb:ff:dd:b4:30:5f:b0:87:43:b0:e2:f6:a3:39:03:
                    98:bb:17:47:ed:9c:65:f8:29:43:f1:58:63:dc:29:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:21:FB:40:7A:26:48:38:7B:EB:C2:43:7B:3A:53:80:00:C7:7B:6C
            X509v3 Authority Key Identifier:
                keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:21:bb:ef:ce:9f:7e:6e:9f:e9:90:94:d8:55:34:be:0b:
         1a:82:6e:a7:35:91:64:30:67:50:33:79:15:f7:e7:97:67:02:
         f9:b2:fe:00:af:65:cf:f5:9b:71:ce:ec:00:d3:e8:da:4a:e9:
         ff:33:50:a8:09:9d:f4:16:a0:5d:96:fb:eb:34:63:c2:d7:d4:
         0c:61:11:00:b1:eb:cd:cf:86:4c:77:d7:3f:8a:4f:5d:53:b3:
         a4:ae:f6:82:f1:92:ba:15:78:e9:71:23:08:bc:1e:eb:2e:52:
         98:bc:ff:30:3a:e0:ee:b6:d8:75:e3:87:8a:cd:ad:70:75:db:
         a8:e6:0d:29:6e:b7:3a:36:9c:de:d7:02:50:04:e7:14:99:67:
         e7:5a:8b:6d:ee:c7:c6:e7:df:b0:fa:d7:83:32:92:fe:5d:a3:
         b0:57:fc:ea:c9:dc:49:d7:0e:a5:c3:29:e8:b6:0a:9f:b5:41:
         a0:95:25:7b:9f:9e:0c:d9:e2:87:22:73:a2:08:e2:d1:87:75:
         fe:02:59:c8:97:77:0f:a5:d0:0d:c3:12:fb:fc:e9:bc:93:21:
         2c:56:f5:b4:fc:81:b7:5f:8d:c6:8c:f4:b6:a4:5a:1b:ff:f9:
         ba:25:05:eb:8d:42:a4:6a:b0:b3:79:21:c9:13:7f:68:6f:5e:
         5c:0f:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:42 2025 by rpki-client