Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File:                     735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier:          PbZa2IIA9Y1TPV8R9yjEQWEer5urbU5ZAafGyLwODH0=
Subject key identifier:   76:26:6A:2F:2A:10:19:9E:12:96:85:D8:21:BC:F7:12:84:DC:35:1B
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       0196DA2DA8DBFE61AB9731AB4A003EBADC91CC52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number:          0219
Signing time:             Tue 01 Jul 2025 09:21:04 +0000
Manifest this update:     Tue 01 Jul 2025 09:16:04 +0000
Manifest next update:     Fri 04 Jul 2025 18:46:04 +0000
Files and hashes:         1: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: MYkgPF54ZFrZUvgyAUVZduFZA6VqGujX+c3smzb0mEg=)
                          2: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: ixUeVPdiiujjqdz2cxBs4b9W1yytwj3hYRmTEjubFdc=)
                          3: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: bNf7w52cmLw3GYp+mMaw3papmg1ZcgmFTgd1v4VSUIU=)
                          4: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: SoFui+6+9U4okutKDEEDEO8cNoDM72pJozwIgVHrak0=)
                          5: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: cA/F4dRQqVseyocCpcE2agAw/XVimr3HwwnooMdskYo=)
                          6: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: Vj9b7eOBgij03V9LOKkEMCElDrFIB3RU0Drnp1lzskU=)
                          7: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: hML4QQ0UsZ/MNuzlhXm7ZxAfBsEoo8p/TG6zTdeHPYA=)
                          8: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: MNca57frzbraXQ+A5sffHCuXC7kbkp16cgNgxDCrZrE=)
                          9: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: oklvLd73P4WhUGrG82mjY/a68v+N0RQ85QeaHlR1zrU=)
                          10: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: cuW15q9SnbE27U2Jg8nnNYvxOwHbFyEv1g42R3Sx4E0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 18:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:da:2d:a8:db:fe:61:ab:97:31:ab:4a:00:3e:ba:dc:91:cc:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Jul  1 09:16:04 2025 GMT
            Not After : Jul  4 18:46:04 2025 GMT
        Subject: CN=76266A2F2A10199E129685D821BCF71284DC351B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:47:f6:8b:28:ed:06:51:23:e8:8e:3c:f6:
                    92:91:96:e8:44:84:fb:fd:48:ab:c8:81:57:d3:ed:
                    1e:ac:03:3b:11:6b:00:a6:b1:89:88:49:cf:06:16:
                    13:95:9b:e7:4c:39:2b:b4:42:64:a8:d6:16:3b:3a:
                    ef:ef:d7:0a:69:e7:59:6c:da:55:88:86:8f:54:6e:
                    b0:0b:2b:d1:4b:a6:29:68:19:ca:d4:ca:2f:1e:d5:
                    6e:4a:d1:9b:97:62:2c:f5:1d:40:2f:21:ba:8b:50:
                    46:e3:9e:b0:75:39:1b:77:0a:4a:82:d0:14:91:0a:
                    ce:0b:b7:25:16:4b:4f:4a:30:61:d4:dc:50:08:b0:
                    9b:6d:94:52:5e:f9:72:2f:c4:27:a8:86:a0:28:c7:
                    db:85:f9:dd:ba:80:47:37:5f:a9:4f:6a:1a:44:cc:
                    3b:88:a6:8b:6c:f6:6d:db:4d:0f:be:a3:14:b7:7d:
                    4c:d4:1e:3c:3f:d2:66:2f:aa:85:24:f2:b4:bf:f0:
                    26:0b:bc:61:47:bf:f6:4e:9d:6b:1d:04:f9:36:7f:
                    11:5c:eb:5a:a2:04:53:2a:af:4e:23:5c:11:ca:36:
                    ee:24:95:51:6d:f1:e0:3b:3a:42:ce:d5:1c:ea:6a:
                    de:bb:f8:76:dd:a9:82:63:7f:1e:53:67:5a:1a:1f:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:26:6A:2F:2A:10:19:9E:12:96:85:D8:21:BC:F7:12:84:DC:35:1B
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1f:84:56:e6:cf:08:0d:98:b5:f4:98:75:77:c6:2f:db:b4:
         d7:00:70:17:e9:6d:97:2e:3b:54:48:c7:c5:56:98:5a:3d:7c:
         05:72:94:39:81:7f:93:98:a8:c5:4c:25:0e:93:1e:bf:3f:7e:
         8c:86:12:0e:e5:30:18:45:47:20:a3:42:4b:c6:73:42:f5:9d:
         8f:3c:8d:c2:85:11:6a:c7:1b:62:32:89:de:99:31:22:3b:ce:
         65:4a:a2:7e:28:ff:76:1e:31:cf:e5:a2:40:02:3b:31:58:ae:
         f0:84:10:f7:fd:48:d3:32:96:91:96:74:72:09:45:ed:d0:fa:
         ea:8f:1b:45:f5:f8:7a:34:ee:1e:53:f2:5e:89:f9:f4:c4:cc:
         e6:7a:46:f2:b8:10:0b:76:41:00:7b:fd:1b:f8:f2:38:8e:28:
         17:22:4c:b4:de:71:64:6a:f8:1f:7f:5b:7a:0b:e8:8c:47:ad:
         58:39:64:89:0b:ee:50:1c:0a:be:10:31:f3:19:0e:7d:ca:33:
         f1:cb:ec:7e:cf:07:71:7b:90:4b:c3:c8:b4:5f:56:72:7b:ed:
         4a:a2:b4:23:c2:04:29:48:c1:fd:47:84:48:f6:d4:65:c6:74:
         a6:e3:eb:69:a0:bc:c7:17:8d:db:0e:ec:2d:16:59:c6:ad:0a:
         0f:bb:20:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:05:06 2025 by rpki-client