Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
File:                     89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json)
Hash identifier:          UYv/2NrjIr4V6VDQj8Met3HsJBlIFvnBkGO0sdV30Vc=
Subject key identifier:   89:D2:F9:7C:D7:70:FF:1C:7F:75:7D:01:07:AF:9E:12:FF:6B:FB:F9
Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
Certificate issuer:       /CN=89402655017312B8CFCB367BA82966AA21E11F90
Certificate serial:       6F5ACDA8045E59C63E462152A70393BDCF42DF9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
Manifest number:          04BD
Signing time:             Sun 29 Jun 2025 02:01:52 +0000
Manifest this update:     Sun 29 Jun 2025 01:56:52 +0000
Manifest next update:     Wed 02 Jul 2025 05:14:52 +0000
Files and hashes:         1: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: tPobItRGD2Vk5fK4/Oz2ojiatmX4ZdcXGBSqbeWy7Ng=)
                          2: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: DO7ogbI2UpcST5Do0xfAryknKNzHKoFL4YPFX4NOgG8=)
                          3: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: FYvSh1st1IicJh9tmsJCC36iwumwIFXZHMkoJwqA8Qw=)
                          4: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: FioSXezNq56TdLJoVYyUt1xP9voLeHD2iLPqkewsGFk=)
                          5: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 3kwk4UMF9iNYpMSf21W/eUwvYsmaPApbmHcViGehMaU=)
                          6: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: aiifXcdy2AXRocJRKbN8Cd9UOvAE9erAu5vyFTkl88c=)
                          7: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: PwE45jFMLVz2aKNWwjQc8HudCo64xhteJbVEjdFpgd8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl
                          rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 05:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5a:cd:a8:04:5e:59:c6:3e:46:21:52:a7:03:93:bd:cf:42:df:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90
        Validity
            Not Before: Jun 29 01:56:52 2025 GMT
            Not After : Jul  2 05:14:52 2025 GMT
        Subject: CN=89D2F97CD770FF1C7F757D0107AF9E12FF6BFBF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:7b:ce:30:91:e7:d8:a8:7b:e1:3b:9c:98:
                    72:48:1b:8d:9c:bf:ce:cc:ae:aa:d5:ee:6c:8e:0c:
                    da:7f:7f:57:78:57:34:57:cc:30:87:ab:3a:af:ae:
                    c6:93:0a:5e:93:ff:67:b5:21:0d:fe:97:be:6b:9a:
                    64:3d:e7:b4:97:35:e8:d1:79:dd:f9:e1:8c:8c:cd:
                    cc:3f:f6:81:3d:3d:2e:89:f4:f4:8c:61:90:da:ad:
                    c7:61:11:ad:77:2b:e1:4a:94:97:74:aa:f9:20:c8:
                    b6:6b:34:51:fe:d9:29:5f:4a:7b:ad:05:5b:71:e3:
                    ba:73:77:f1:78:41:7b:98:65:b5:44:22:dd:cb:78:
                    59:ac:92:8d:53:35:fd:d9:46:3d:cb:a6:c0:e1:bf:
                    b7:a9:0f:3b:2b:72:c1:20:a4:2d:89:50:b3:5b:eb:
                    22:bc:ed:6f:f1:e1:4f:2d:d6:3b:f0:95:27:af:05:
                    5e:6f:4f:2a:71:46:bc:46:50:56:f2:d3:d5:44:31:
                    5f:1b:e1:10:99:4e:5e:87:31:de:6c:b4:c9:c3:3d:
                    7f:b6:0e:be:b8:b1:0d:1f:34:fd:df:7a:f2:72:a4:
                    25:f2:5a:69:24:70:d0:43:3b:28:3a:22:7a:1f:1c:
                    bf:46:8a:7f:66:94:fa:5a:85:36:37:cd:11:e7:8e:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D2:F9:7C:D7:70:FF:1C:7F:75:7D:01:07:AF:9E:12:FF:6B:FB:F9
            X509v3 Authority Key Identifier:
                keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b0:4e:6a:d0:f1:1f:b1:5d:65:3a:2d:0e:93:f3:32:c2:1d:
         d5:33:fa:f3:20:37:dc:4a:61:d8:ad:c4:b6:38:cb:4e:33:d8:
         9d:83:4a:6a:3e:7c:ea:ac:69:64:22:1d:dd:d2:57:64:da:30:
         3b:82:a8:0f:27:ab:ef:ff:e9:fa:0b:c4:10:b8:31:6e:9b:24:
         e3:8a:a3:a5:03:1b:f6:ee:48:3f:1e:73:8b:ce:aa:e1:36:bd:
         a7:83:ca:fd:92:62:dd:a3:76:b6:ca:b2:6f:32:61:f0:99:69:
         12:99:85:a0:3a:27:a2:0f:55:b7:2d:87:fa:31:94:56:37:b6:
         59:a2:63:95:e7:9d:1e:1b:c3:13:5a:b9:07:2f:70:e5:1f:72:
         73:d6:12:68:e6:d1:c5:ee:f4:16:25:81:b9:d5:17:db:ad:c3:
         a8:b8:15:97:07:97:1d:e2:bd:9a:94:6b:b7:5c:df:dd:22:e4:
         6b:c9:dd:e4:9f:5c:25:7d:ae:3b:8a:93:7c:fd:b4:2a:81:c7:
         d4:29:35:14:19:29:df:2c:28:bd:2e:38:08:1b:d6:76:dc:00:
         b6:bb:1b:9d:ac:8a:22:28:52:fc:ee:ec:8a:d5:6c:a5:28:28:
         0f:56:ae:14:f4:bc:91:18:39:99:b9:55:1d:f0:1d:1e:42:a0:
         26:18:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:07:57 2025 by rpki-client