Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
File:                     9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json)
Hash identifier:          dkPvWoatUa6P7VeciPpIxQ/97t46/beHeRxCN4in2FM=
Subject key identifier:   79:9A:9D:F8:FA:F4:C9:56:C4:D6:43:99:E7:F9:F1:49:2F:FC:F2:96
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       0E420823880F5A63E9C9DE2C3A58EBBF567E62DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
Manifest number:          04E6
Signing time:             Sat 28 Jun 2025 23:41:47 +0000
Manifest this update:     Sat 28 Jun 2025 23:36:47 +0000
Manifest next update:     Wed 02 Jul 2025 00:15:47 +0000
Files and hashes:         1: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: E6dG5xzAhmGOOI9hqLkzzpPLdq+Po/vVFCvAL/IU7eU=)
                          2: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: /8WH+FMs5cXmNpSbcYxWSOu3RjPqrup9Ddv2vAI7J18=)
                          3: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=)
                          4: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=)
                          5: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=)
                          6: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=)
                          7: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=)
                          8: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=)
                          9: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=)
                          10: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: T9ji1AFTzEEWIaCqcH/iO3+RUFaFMnvEmXw1DWc4R/E=)
                          11: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 00:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:42:08:23:88:0f:5a:63:e9:c9:de:2c:3a:58:eb:bf:56:7e:62:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jun 28 23:36:47 2025 GMT
            Not After : Jul  2 00:15:47 2025 GMT
        Subject: CN=799A9DF8FAF4C956C4D64399E7F9F1492FFCF296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:54:59:f1:f6:50:3f:e7:2b:3b:55:50:28:
                    8e:46:65:19:0a:f6:7a:06:f8:4e:98:f6:8c:68:04:
                    5f:93:f5:2f:09:10:a3:36:4d:08:4d:c0:b3:7e:e1:
                    22:45:0e:51:4e:e7:b1:a9:cf:7b:22:93:6e:72:ef:
                    d9:46:d6:4c:b7:40:ff:fe:48:eb:71:46:b4:21:f1:
                    d5:ab:d1:23:2c:bd:0c:3e:3d:0f:4d:ea:80:52:1a:
                    11:28:f5:ec:33:10:d7:7d:30:09:d6:01:2d:e9:f4:
                    0a:d5:43:82:d8:b0:d0:84:3e:42:47:c1:73:7a:82:
                    5d:e1:cd:5f:88:63:9e:09:74:ff:a3:97:8c:8f:56:
                    f9:fc:49:bc:78:d6:5c:48:cf:e9:00:3e:f0:62:13:
                    0a:43:33:1c:a7:ea:f9:15:3a:f5:f1:30:31:22:60:
                    77:0e:e9:9a:f5:fe:33:ff:f2:df:77:9c:5e:fa:18:
                    81:93:f5:0d:6c:99:6c:28:d3:2f:d4:31:e8:3b:7d:
                    df:cc:8e:2d:23:3d:b1:01:9a:a2:8e:c9:64:a6:57:
                    0c:b1:fb:a7:27:0e:a4:01:75:d2:4a:fc:e9:e0:1f:
                    da:e0:dc:e3:c3:57:38:db:3b:5f:af:3d:37:b9:98:
                    f1:7c:97:79:ea:0a:d9:50:b2:7b:81:43:a4:0d:35:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9A:9D:F8:FA:F4:C9:56:C4:D6:43:99:E7:F9:F1:49:2F:FC:F2:96
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5e:26:6b:7d:a2:d3:7a:88:83:4d:80:7b:1c:6a:1d:2b:63:
         cf:eb:e0:cd:49:81:a1:cb:c0:6e:87:b6:bf:ef:b5:5b:a2:32:
         98:9e:b3:5a:96:52:da:4a:91:d7:eb:01:29:73:38:7f:21:0e:
         dd:1a:03:e5:67:db:96:f2:26:e9:13:0c:3b:d6:44:5c:b0:2e:
         d5:ec:b3:7a:86:0e:ad:ec:22:ad:e5:18:48:3f:64:fe:a3:c0:
         90:52:d4:28:12:71:cb:98:40:54:82:3e:91:3d:4b:4a:e7:39:
         c1:dd:e5:22:04:7e:e6:a8:66:bf:83:22:9f:49:51:f6:a1:14:
         a9:c4:17:bf:a7:af:25:a1:01:b4:ed:d2:29:dc:c7:0c:d2:fa:
         3d:25:1c:11:b1:8b:ba:56:40:4d:47:43:17:38:4e:f1:f1:fd:
         32:72:b7:b5:a4:72:ee:f0:ef:3f:a2:c5:d2:d9:53:ce:76:e9:
         19:c5:3a:bd:2d:5a:d1:bf:a6:27:d6:2d:0c:46:0e:08:5c:42:
         ae:71:25:2a:3e:39:c3:0c:fd:42:78:be:51:84:90:f1:6b:d0:
         af:a2:41:89:f5:69:0f:62:0c:ec:57:a5:e8:18:f9:b2:d7:f6:
         49:c4:f4:b1:a2:5f:72:5d:17:63:dd:fe:93:d7:a0:4a:98:b8:
         64:8a:52:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:50:08 2025 by rpki-client