Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
File:                     229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft (raw, json)
Hash identifier:          qKMnB8KOBorf1rR4y/dEdHaKJapb2CfTk9+8TMGAhaY=
Subject key identifier:   0C:DF:07:35:C0:BB:29:8C:92:91:A5:86:EB:8E:67:B0:B6:9B:40:97
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Certificate issuer:       /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial:       319CB4750C8573FC627CFDFBA8B953574205DF0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
Manifest number:          04F9
Signing time:             Sat 28 Jun 2025 14:11:46 +0000
Manifest this update:     Sat 28 Jun 2025 14:06:46 +0000
Manifest next update:     Tue 01 Jul 2025 17:58:46 +0000
Files and hashes:         1: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl (hash: TWBTf3c+0ojPHHobzhHcmufb/WA1SGlqLBqpsivS7PY=)
                          2: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: nHLhFUO3/d1KOlnJCoDhfh5DYlPgmeAohfDNtzLOH9U=)
                          3: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: ta4+QDMsgit89wEmm8ey/12QjqBluuNGxk0RPu1WcS8=)
                          4: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: hNHUUdaz/xmcgWweg8dc6qW4ZUh/HEb8USitKT+fel0=)
                          5: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: U2g/V+5DkmPDBw3eY9QLKy/ZMSI+q2dEB25C6uu5Yuc=)
                          6: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: gvli+HahlWwpXT6MXiB6a1x0yRZFhPDWq/40wV3mRrM=)
                          7: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: ULCLP9kZZOxNVrlIu58ZSD+j7UQRNK4nHv2XMRgGLuc=)
                          8: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: murX+k5R8h8ESiT+QSuCpzrPj9+7vb21yxp17P+JmVI=)
                          9: 3130332e3130342e3133322e302f32322d3234203d3e20313333383233.roa (hash: txvhHjZQd4OZTYtpVnuV9pyOVezURJio/Glm+Xp4MtI=)
                          10: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: TmlDYYFpoUzNq8ZR6YwWBT4mIzmdRv82c4JZfaIsztM=)
                          11: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: L9PlBnHs/i4t9NLRoSomC1O2F1YqU8jz1M3b0qQhUUw=)
                          12: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: /sxwdh5+OtxXAGTYR7aj++1jHVBESLDkQaA5vts3J0c=)
                          13: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: g58vS0uRqifjFt5po4KOpHYFCF7u3ZSdJUV7sz9xKFc=)
                          14: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: 9vKmERWi+/y+esKTTFswCbGkU/rG05yleJxXiPBZcSM=)
                          15: 34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa (hash: GS0aH+aUalB2W4NZhY06VBijkeZAuZQtiCtdElAwgAA=)
                          16: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: EyFmNpVev4JvWr+WYttkKg/oGZR4UtQfn7nLk3N2X3Q=)
                          17: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: XCuxF6ruUczOzJvMHii/FDEIeSq2U8u1TMO0ZyKrZco=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
                          rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 17:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9c:b4:75:0c:85:73:fc:62:7c:fd:fb:a8:b9:53:57:42:05:df:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
        Validity
            Not Before: Jun 28 14:06:46 2025 GMT
            Not After : Jul  1 17:58:46 2025 GMT
        Subject: CN=0CDF0735C0BB298C9291A586EB8E67B0B69B4097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:85:79:66:32:b1:e3:b9:d8:92:25:f2:94:
                    8e:e2:45:35:7e:0a:b4:56:aa:ae:4b:91:2c:85:3e:
                    89:d6:0b:f3:75:f8:c4:93:9c:ac:cb:04:dc:f9:08:
                    59:ab:02:da:70:fa:90:0e:db:03:b8:b5:58:68:8c:
                    8d:4a:f0:3c:cb:84:36:aa:a8:59:00:c6:5d:8b:5f:
                    54:15:07:b3:f5:4b:ac:07:65:66:75:88:30:75:ba:
                    36:e2:90:ba:08:c8:92:af:8f:2c:91:8d:e6:f3:f4:
                    fa:2e:2f:95:cd:58:e5:02:cb:9c:61:14:9a:c8:ca:
                    df:02:10:56:ae:33:c8:f1:1d:6c:aa:9f:46:84:22:
                    73:7c:4d:76:69:2e:f3:32:b9:a1:57:07:82:b1:4e:
                    0a:39:47:78:b3:cf:3d:d6:31:3b:e4:15:88:bb:d0:
                    ac:6d:b2:26:04:fa:d8:ca:d3:3c:de:c3:c0:2f:42:
                    fd:21:c8:18:dc:c9:16:1d:d2:b8:49:be:b7:39:e8:
                    07:8b:15:d8:0e:91:e4:d0:6d:14:2c:b4:c6:3d:bf:
                    db:82:44:bb:4c:1c:55:2c:99:1d:96:02:73:7d:10:
                    19:c9:69:b8:f8:67:c3:a8:63:2c:8e:4f:74:f5:e6:
                    bc:9d:33:fd:02:98:6e:5a:b9:b7:f8:a5:f8:25:65:
                    fd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DF:07:35:C0:BB:29:8C:92:91:A5:86:EB:8E:67:B0:B6:9B:40:97
            X509v3 Authority Key Identifier:
                keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b9:36:b7:fa:dd:24:b3:23:d4:33:19:42:f1:4b:af:4d:4d:
         23:4f:fd:34:4d:c4:10:17:f3:ea:c3:31:d0:b5:22:e6:7a:25:
         63:39:c1:08:a2:18:b9:30:1a:8b:b9:7b:67:ff:c1:54:46:d1:
         27:92:ac:79:fa:fb:d7:58:10:aa:e3:1f:a5:ec:00:58:c9:cb:
         d2:7a:03:b9:96:13:7e:cf:8c:4f:7b:87:85:fc:58:96:1a:05:
         c4:94:e4:ac:d7:8f:39:22:17:7c:94:74:1e:66:ad:f5:1e:fe:
         33:0d:f7:de:75:6e:69:31:a6:49:b5:5a:5e:b4:e4:77:69:a4:
         e9:0a:d9:74:af:aa:6f:ce:e9:ea:6f:f7:92:3d:87:fa:5e:27:
         75:15:84:ac:5f:6e:73:c6:7a:1e:ae:13:ef:ce:3d:e8:a9:de:
         62:f6:f1:5c:15:0b:1a:ae:39:0b:08:f6:dc:ce:30:31:b8:63:
         45:d8:29:d8:5f:5c:4a:7f:74:7f:12:1f:1f:13:7c:d1:30:b1:
         fe:14:98:42:f0:ee:d7:fe:e3:c8:ec:a2:81:99:2c:af:b5:09:
         43:c8:a6:ef:f0:79:23:90:11:8f:c7:63:4f:63:2e:a6:bb:6a:
         05:4e:57:f1:e0:c4:b0:c9:97:02:82:25:e7:35:a5:1c:cf:e7:
         48:84:2b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:43:50 2025 by rpki-client