Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
File:                     9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json)
Hash identifier:          O9PwkWDRECbI+OPVplN2Lqv5AKWnzovJnBkURe4yRSM=
Subject key identifier:   8C:98:82:53:CD:5F:F4:CE:FA:2B:7F:75:71:D8:A9:B4:92:F2:B2:94
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       20B15FFDDFEF1F70649FAA3E8EE0095D1D49BC49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
Manifest number:          04FE
Signing time:             Fri 22 Aug 2025 19:02:04 +0000
Manifest this update:     Fri 22 Aug 2025 18:57:04 +0000
Manifest next update:     Mon 25 Aug 2025 19:09:04 +0000
Files and hashes:         1: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: DiWemCwtxOJkn28iMgwhz+VhwzJuFEy2arSGcsbAwj4=)
                          2: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: T9ji1AFTzEEWIaCqcH/iO3+RUFaFMnvEmXw1DWc4R/E=)
                          3: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=)
                          4: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: E6dG5xzAhmGOOI9hqLkzzpPLdq+Po/vVFCvAL/IU7eU=)
                          5: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=)
                          6: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=)
                          7: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=)
                          8: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=)
                          9: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=)
                          10: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=)
                          11: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 19:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b1:5f:fd:df:ef:1f:70:64:9f:aa:3e:8e:e0:09:5d:1d:49:bc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Aug 22 18:57:04 2025 GMT
            Not After : Aug 25 19:09:04 2025 GMT
        Subject: CN=8C988253CD5FF4CEFA2B7F7571D8A9B492F2B294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:6a:25:6e:95:c1:63:af:c3:74:a5:9e:f1:
                    14:21:2a:77:45:f3:ec:ee:ea:44:84:7a:ef:95:ed:
                    29:6b:fd:8b:b0:6e:fb:01:8d:5c:6e:8a:56:32:dd:
                    24:c6:91:ba:60:86:57:1a:35:a6:18:f0:ce:73:94:
                    e0:dc:74:63:62:48:71:e4:e8:bc:74:5b:5e:26:b0:
                    34:03:54:b7:88:62:b3:8d:3a:27:35:88:cd:19:e1:
                    e5:b7:78:0b:97:25:90:fe:4e:9f:02:45:58:53:b9:
                    14:a6:cc:30:70:14:da:25:7e:c9:e6:46:d9:e8:cb:
                    ee:a5:a3:ba:d7:96:ff:a1:fd:f9:03:d3:fe:75:d7:
                    bd:30:92:68:a6:fb:bd:3c:f5:3c:ab:48:33:4c:b3:
                    cd:29:52:5d:0b:f8:97:1c:43:35:22:fb:f8:ce:c2:
                    93:3a:ba:c5:a3:db:3e:93:c1:f4:57:64:36:04:81:
                    59:2e:52:0f:63:4c:e7:5d:47:31:e7:2d:f3:6d:59:
                    6c:69:3e:23:8b:c1:69:29:42:2a:89:cd:a7:3f:c5:
                    5a:d9:e5:de:d9:cd:d0:8e:26:62:c1:d1:88:71:fd:
                    02:35:71:68:69:a1:20:3d:08:ff:17:54:d4:55:6b:
                    dd:5a:70:2b:16:19:76:ca:94:d8:c3:5a:68:f5:e8:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:98:82:53:CD:5F:F4:CE:FA:2B:7F:75:71:D8:A9:B4:92:F2:B2:94
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1c:21:24:3e:1e:9b:a9:e1:07:a7:f9:fb:04:d8:ce:b9:e8:
         c1:f7:3e:3d:41:a7:7e:42:dc:bc:dc:70:a6:1d:28:01:02:7a:
         a0:f3:73:d7:57:8c:fc:90:a5:78:69:46:23:84:76:d8:43:ef:
         4a:db:44:52:12:3d:9d:d4:6e:1b:37:35:ef:fc:29:eb:55:88:
         9c:46:ab:7d:df:68:22:f3:8f:95:d4:a2:ab:8a:ca:97:4c:d8:
         54:fd:ae:f4:4c:3a:97:71:44:63:6c:e5:12:52:53:4b:57:5d:
         f3:1c:97:e4:bd:88:21:51:54:9c:ac:35:51:87:b2:bd:e0:f2:
         eb:e3:45:ed:45:4a:4f:74:f2:db:31:5d:92:09:f2:82:02:83:
         c3:a7:80:79:25:ae:7c:4e:5a:26:0f:fb:77:a5:7f:74:32:d4:
         1c:34:9a:c6:a6:1f:71:a8:7d:cc:4e:38:90:fa:c2:af:05:7c:
         41:70:fb:9f:ed:c5:27:40:04:40:cd:84:c1:16:2d:9c:ef:5d:
         03:13:d0:a7:a5:b7:78:b7:cf:75:6c:6a:2b:d1:fd:05:6c:a5:
         4d:4e:b7:1d:17:b3:ec:aa:ed:53:10:2d:a5:6d:a2:a9:e7:10:
         51:1b:9c:31:eb:47:3e:9b:4e:92:8c:4d:01:63:eb:a9:ba:ad:
         d2:da:5b:c2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUILFf/d/vH3Bkn6o+juAJXR1JvEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEz
RjBCNzBCNTAeFw0yNTA4MjIxODU3MDRaFw0yNTA4MjUxOTA5MDRaMDMxMTAvBgNV
BAMTKDhDOTg4MjUzQ0Q1RkY0Q0VGQTJCN0Y3NTcxRDhBOUI0OTJGMkIyOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgWolbpXBY6/DdKWe8RQhKndF
8+zu6kSEeu+V7Slr/YuwbvsBjVxuilYy3STGkbpghlcaNaYY8M5zlODcdGNiSHHk
6Lx0W14msDQDVLeIYrONOic1iM0Z4eW3eAuXJZD+Tp8CRVhTuRSmzDBwFNolfsnm
Rtnoy+6lo7rXlv+h/fkD0/51170wkmim+7089TyrSDNMs80pUl0L+JccQzUi+/jO
wpM6usWj2z6TwfRXZDYEgVkuUg9jTOddRzHnLfNtWWxpPiOLwWkpQiqJzac/xVrZ
5d7ZzdCOJmLB0Yhx/QI1cWhpoSA9CP8XVNRVa91acCsWGXbKlNjDWmj16LQ3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjJiCU81f9M76K391cdiptJLyspQwHwYDVR0j
BBgwFoAUn1bsUNoU0T0Un1FF1ir8Wj8LcLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YmY3MWM5MS0xNjI0LTRmYzAtOGM2My0yZWZhZmQ0NmZiYzEvMC85RjU2RUM1MERB
MTREMTNEMTQ5RjUxNDVENjJBRkM1QTNGMEI3MEI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEzRjBC
NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJmNzFjOTEtMTYyNC00ZmMwLThj
NjMtMmVmYWZkNDZmYmMxLzAvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZD
NUEzRjBCNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACQcISQ+Hpup4Qen+fsE2M656MH3Pj1Bp35C
3LzccKYdKAECeqDzc9dXjPyQpXhpRiOEdthD70rbRFISPZ3Ubhs3Ne/8KetViJxG
q33faCLzj5XUoquKypdM2FT9rvRMOpdxRGNs5RJSU0tXXfMcl+S9iCFRVJysNVGH
sr3g8uvjRe1FSk908tsxXZIJ8oICg8OngHklrnxOWiYP+3elf3Qy1Bw0msamH3Go
fcxOOJD6wq8FfEFw+5/txSdABEDNhMEWLZzvXQMT0Kelt3i3z3VsaivR/QVspU1O
tx0Xs+yq7VMQLaVtoqnnEFEbnDHrRz6bTpKMTQFj66m6rdLaW8I=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:35 2025 by rpki-client