Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
File:                     2FEC60739EF087F0D4F947C7230A725109EC6178.mft (raw, json)
Hash identifier:          y5o8W3JpfB9veMeWAljaQtziTuMm63QXUUcYi6b9m7M=
Subject key identifier:   AF:C3:BC:4F:73:6C:D7:BD:17:00:DF:7F:0D:EB:AA:93:AC:39:EF:D8
Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78
Certificate issuer:       /CN=2FEC60739EF087F0D4F947C7230A725109EC6178
Certificate serial:       7E11F69D75CD725655862AEB6899DC9A7FC6267B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
Manifest number:          0196
Signing time:             Sat 28 Jun 2025 08:10:58 +0000
Manifest this update:     Sat 28 Jun 2025 08:05:58 +0000
Manifest next update:     Tue 01 Jul 2025 13:12:58 +0000
Files and hashes:         1: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: zWeyoVA0qOIjaDafAvIQb12jZYR0oaDd22mIF8oHmpo=)
                          2: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: H/sQHGm23pHeiM29QxCCnpOLF9jsO1FQ1jBVySyo3Cs=)
                          3: 2FEC60739EF087F0D4F947C7230A725109EC6178.crl (hash: rUnMVBjwz6c4WXo36FaWiygfoai+rhi2pHhs7JRBYlY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl
                          rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 13:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:11:f6:9d:75:cd:72:56:55:86:2a:eb:68:99:dc:9a:7f:c6:26:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178
        Validity
            Not Before: Jun 28 08:05:58 2025 GMT
            Not After : Jul  1 13:12:58 2025 GMT
        Subject: CN=AFC3BC4F736CD7BD1700DF7F0DEBAA93AC39EFD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:6b:5b:c5:a6:29:ec:80:ea:46:e3:33:0c:
                    94:c2:71:05:cd:d0:dc:f1:c8:79:f4:fe:3f:91:93:
                    6c:68:26:19:3b:0c:a3:fe:7b:da:a6:b0:30:6e:9c:
                    07:18:db:40:5e:3a:4e:9a:4c:68:a4:f5:dc:27:65:
                    48:51:3d:f6:17:89:da:6a:50:91:72:f7:1a:30:50:
                    16:ec:fd:05:aa:af:ab:b8:69:71:77:64:5e:7d:5d:
                    43:82:2e:36:35:26:72:51:b9:e5:83:fd:31:54:07:
                    5a:f0:56:8e:f4:4d:8f:91:43:4f:17:83:6b:68:9c:
                    83:ad:d5:90:8e:d5:f9:a1:de:b6:ad:84:41:34:60:
                    e6:6d:ca:2e:e0:7a:16:7c:bb:ef:aa:df:6d:49:7d:
                    5f:01:1f:d5:56:cc:3c:93:10:ac:9f:77:31:af:79:
                    66:30:33:6f:e3:5b:0a:4c:31:74:ca:26:50:93:5c:
                    76:e0:18:15:3c:c0:c0:52:e6:4f:68:ad:09:8a:8e:
                    f4:bd:34:9c:f8:e1:50:08:b5:56:47:2f:7d:b2:da:
                    ce:ff:f9:1e:8f:30:86:ac:ae:51:44:32:ee:2d:81:
                    df:a1:a2:f6:d8:75:73:9c:e7:08:37:7b:57:20:50:
                    13:4a:16:f7:0f:4a:b5:aa:96:17:73:89:8c:c0:88:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C3:BC:4F:73:6C:D7:BD:17:00:DF:7F:0D:EB:AA:93:AC:39:EF:D8
            X509v3 Authority Key Identifier:
                keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:12:89:e2:66:f6:c1:cc:e9:7c:dd:37:95:29:83:aa:e4:d4:
         d7:ef:d1:62:7d:23:b1:d5:cf:9c:69:27:ca:67:b6:4f:1e:6a:
         68:66:b6:e9:f6:46:c4:76:17:6f:fd:9a:bc:bc:50:50:3b:e2:
         1a:15:e3:a0:e6:5f:de:2c:96:0e:f1:e1:56:56:42:49:da:08:
         7c:28:ed:1f:74:dc:d8:9a:30:bf:4d:28:91:9d:38:6c:87:0b:
         10:eb:a3:fa:35:cf:52:99:17:a2:fb:53:29:bd:97:76:9c:ee:
         23:d8:8f:51:d4:88:21:f7:56:e3:56:28:e8:d9:53:ac:a7:5a:
         71:d1:cb:0f:c6:1b:b7:33:38:de:8f:ee:9d:24:65:da:08:b4:
         4b:45:a4:11:4b:0d:e7:ed:26:93:ce:b5:d5:e3:db:a0:ac:2f:
         ef:b8:07:76:42:fa:97:2f:5e:10:21:03:46:79:9e:21:4d:a2:
         c2:58:0f:60:63:96:f7:7a:5f:83:4d:df:4a:59:73:82:4b:d4:
         b3:db:f2:21:20:ea:cd:24:c5:3c:44:6e:03:04:87:24:8e:ae:
         6c:16:06:c5:e0:df:61:00:54:55:9f:c9:60:3a:e4:f5:48:3d:
         ef:03:be:72:af:4b:cb:48:1e:e5:10:62:6f:1d:24:1c:1f:e5:
         86:dd:1b:11
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfhH2nXXNclZVhirraJncmn/GJnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEw
OUVDNjE3ODAeFw0yNTA2MjgwODA1NThaFw0yNTA3MDExMzEyNThaMDMxMTAvBgNV
BAMTKEFGQzNCQzRGNzM2Q0Q3QkQxNzAwREY3RjBERUJBQTkzQUMzOUVGRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3GtbxaYp7IDqRuMzDJTCcQXN
0NzxyHn0/j+Rk2xoJhk7DKP+e9qmsDBunAcY20BeOk6aTGik9dwnZUhRPfYXidpq
UJFy9xowUBbs/QWqr6u4aXF3ZF59XUOCLjY1JnJRueWD/TFUB1rwVo70TY+RQ08X
g2tonIOt1ZCO1fmh3rathEE0YOZtyi7gehZ8u++q321JfV8BH9VWzDyTEKyfdzGv
eWYwM2/jWwpMMXTKJlCTXHbgGBU8wMBS5k9orQmKjvS9NJz44VAItVZHL32y2s7/
+R6PMIasrlFEMu4tgd+hovbYdXOc5wg3e1cgUBNKFvcPSrWqlhdziYzAiJrvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUr8O8T3Ns170XAN9/Deuqk6w579gwHwYDVR0j
BBgwFoAUL+xgc57wh/DU+UfHIwpyUQnsYXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NTE3ZTJmYS0yZjY4LTQ1MmUtYTQwNC04ZTdjY2I2ODcyMTUvMC8yRkVDNjA3MzlF
RjA4N0YwRDRGOTQ3QzcyMzBBNzI1MTA5RUM2MTc4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEwOUVD
NjE3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzUxN2UyZmEtMmY2OC00NTJlLWE0
MDQtOGU3Y2NiNjg3MjE1LzAvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcy
NTEwOUVDNjE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMMSieJm9sHM6XzdN5Upg6rk1Nfv0WJ9I7HV
z5xpJ8pntk8eamhmtun2RsR2F2/9mry8UFA74hoV46DmX94slg7x4VZWQknaCHwo
7R903NiaML9NKJGdOGyHCxDro/o1z1KZF6L7Uym9l3ac7iPYj1HUiCH3VuNWKOjZ
U6ynWnHRyw/GG7czON6P7p0kZdoItEtFpBFLDeftJpPOtdXj26CsL++4B3ZC+pcv
XhAhA0Z5niFNosJYD2Bjlvd6X4NN30pZc4JL1LPb8iEg6s0kxTxEbgMEhySOrmwW
BsXg32EAVFWfyWA65PVIPe8DvnKvS8tIHuUQYm8dJBwf5YbdGxE=
-----END CERTIFICATE-----
Generated at Sun Jun 29 18:42:17 2025 by rpki-client