Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File:                     735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier:          2Bh73IGxsDXYgtC6LV6sXM0a3Iq6j/ko/de4yn2wnyI=
Subject key identifier:   5D:7F:D4:6E:F4:53:46:DA:D9:03:BB:3A:30:30:66:AB:68:6D:18:5E
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       22529A8074F46DD24F55CB84685DCCB75263C373
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number:          0230
Signing time:             Fri 22 Aug 2025 12:11:09 +0000
Manifest this update:     Fri 22 Aug 2025 12:06:09 +0000
Manifest next update:     Mon 25 Aug 2025 21:13:09 +0000
Files and hashes:         1: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: SoFui+6+9U4okutKDEEDEO8cNoDM72pJozwIgVHrak0=)
                          2: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: cA/F4dRQqVseyocCpcE2agAw/XVimr3HwwnooMdskYo=)
                          3: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: cuW15q9SnbE27U2Jg8nnNYvxOwHbFyEv1g42R3Sx4E0=)
                          4: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: bNf7w52cmLw3GYp+mMaw3papmg1ZcgmFTgd1v4VSUIU=)
                          5: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: Vj9b7eOBgij03V9LOKkEMCElDrFIB3RU0Drnp1lzskU=)
                          6: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: aAWy3npzDzxCpHqIKTUWzQD5M1azXXfzfVesPyRRxAk=)
                          7: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: MNca57frzbraXQ+A5sffHCuXC7kbkp16cgNgxDCrZrE=)
                          8: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: hML4QQ0UsZ/MNuzlhXm7ZxAfBsEoo8p/TG6zTdeHPYA=)
                          9: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: ixUeVPdiiujjqdz2cxBs4b9W1yytwj3hYRmTEjubFdc=)
                          10: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: MYkgPF54ZFrZUvgyAUVZduFZA6VqGujX+c3smzb0mEg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 21:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:52:9a:80:74:f4:6d:d2:4f:55:cb:84:68:5d:cc:b7:52:63:c3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Aug 22 12:06:09 2025 GMT
            Not After : Aug 25 21:13:09 2025 GMT
        Subject: CN=5D7FD46EF45346DAD903BB3A303066AB686D185E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1b:98:54:72:66:73:5c:61:93:91:04:6c:02:
                    d6:d8:28:95:30:ab:9b:74:d5:28:59:a5:53:81:6f:
                    82:c9:30:35:4d:06:cb:b8:70:94:a3:fe:7e:fa:29:
                    9e:6f:23:ac:8d:fc:4a:53:b9:09:2d:ce:db:e7:8a:
                    6e:c0:76:b0:9a:c8:9c:eb:96:5f:1c:ad:fd:43:82:
                    d6:c6:cc:e1:fa:a7:db:81:04:43:f2:df:bf:d7:29:
                    6c:1d:65:06:77:f4:3e:77:11:85:28:44:5a:49:81:
                    00:a7:4e:fc:85:19:ce:03:25:1b:8c:7b:d9:58:25:
                    27:ca:7d:b8:a5:19:15:94:ca:69:b8:8f:e5:b1:7a:
                    76:5d:0e:63:d4:b0:9a:0c:38:71:ca:fb:35:3d:3d:
                    40:ec:9f:f5:03:7e:d1:b4:6d:a2:2f:6f:69:33:37:
                    78:69:f5:3d:9b:27:de:ba:16:2c:eb:71:47:b4:7e:
                    e8:a3:81:f1:a7:03:f4:80:3a:37:30:a4:90:7b:68:
                    05:b1:30:a3:c9:e4:26:ec:b5:f9:25:76:78:05:12:
                    ff:0d:27:34:7a:66:9b:08:1e:f2:07:f5:aa:aa:63:
                    ce:21:f9:d2:5a:41:9e:3e:4b:1e:ff:3b:58:df:c3:
                    4e:e4:00:5f:9d:1f:b0:33:8b:c3:97:d5:cf:bb:3c:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7F:D4:6E:F4:53:46:DA:D9:03:BB:3A:30:30:66:AB:68:6D:18:5E
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:bb:81:8b:1a:98:ea:f1:22:08:e7:bc:c7:6d:f6:2b:b6:5e:
         78:17:25:41:1d:c4:31:75:63:62:39:c5:37:8a:8b:78:f8:51:
         d9:b2:39:5b:f8:4e:62:53:d9:7a:e5:23:c7:d0:36:56:b7:c7:
         1f:85:d3:c5:d5:f3:24:86:e2:79:d0:5f:e5:5b:63:d5:f5:ba:
         0f:dd:06:67:3a:f8:5f:d2:16:9a:3d:3b:63:43:0d:c2:e4:7d:
         b5:61:6f:87:59:c6:b7:d2:75:24:2f:70:7a:1e:37:ef:e2:a9:
         a4:4b:89:6c:9c:8b:42:20:ae:9f:17:18:8b:36:14:2f:fd:ef:
         73:df:b7:f7:a1:ee:2d:7e:e6:9d:cc:bb:b9:32:40:ba:4c:5d:
         3a:ef:75:c2:7d:89:9d:5e:ed:b7:6a:2d:af:e7:0f:5f:c5:78:
         96:44:f3:89:3c:a0:ba:95:ed:a8:b4:63:a2:a0:8b:b4:9f:6a:
         81:9d:ca:3c:fc:87:b5:19:82:3f:e8:c8:ee:2c:82:76:37:0a:
         c8:7a:25:c0:49:43:f4:57:d3:3b:e0:19:d1:00:c8:3b:6a:00:
         55:ed:ab:a4:a2:c1:b2:71:14:77:1c:98:0d:ff:57:d1:51:54:
         d5:1b:2d:f5:fb:e2:5d:29:b4:b9:96:ab:3b:1d:8b:de:cc:c7:
         e0:a9:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:19 2025 by rpki-client