Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft
File:                     6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft (raw, json)
Hash identifier:          OhFM+wMrG8a8epKapWj5z7CMq8+Od7CVqc2DKdk+PiE=
Subject key identifier:   E8:6B:7A:F6:20:CA:3B:80:EC:71:E0:04:C6:4A:1A:7C:3A:FB:33:93
Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32
Certificate issuer:       /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32
Certificate serial:       4B60C2CD9E59BC763B66F257B92C8B87ECE7C5E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft
Manifest number:          011F
Signing time:             Fri 22 Aug 2025 22:22:17 +0000
Manifest this update:     Fri 22 Aug 2025 22:17:17 +0000
Manifest next update:     Tue 26 Aug 2025 01:57:17 +0000
Files and hashes:         1: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: kI4GK1miuL8zvjM4rLASPraKVyslKl4McqJeefiMXSg=)
                          2: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl (hash: ixMMMT6ieWI2idgNzj8rYSledJS/T/Su8FwL4x168ks=)
                          3: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: F8gVzqK4Hbz0Z6s+Ltl0BOnl1HF8YZ7ceJ/yBja8KLc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl
                          rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 01:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:60:c2:cd:9e:59:bc:76:3b:66:f2:57:b9:2c:8b:87:ec:e7:c5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32
        Validity
            Not Before: Aug 22 22:17:17 2025 GMT
            Not After : Aug 26 01:57:17 2025 GMT
        Subject: CN=E86B7AF620CA3B80EC71E004C64A1A7C3AFB3393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4e:9d:d5:8d:1e:b6:55:7c:dd:b9:ab:58:8e:
                    0d:77:3b:6a:3e:5a:18:67:75:97:eb:60:9a:12:fd:
                    fa:6d:a6:19:bb:50:45:9c:be:fa:8a:74:b6:43:9d:
                    72:92:33:95:40:ad:09:f9:8e:7c:1c:56:cb:36:a1:
                    f0:81:56:d6:59:e8:28:9a:60:a3:11:b3:b3:83:5e:
                    a8:e6:d1:73:c5:09:3d:6c:dc:34:c9:c5:61:2e:d4:
                    6c:9b:c5:80:b9:5e:86:44:2e:f1:b1:ce:29:47:cc:
                    d3:b4:fa:3c:45:3e:8f:87:b1:7c:2b:ca:47:3a:9a:
                    65:d5:5d:4d:b1:2b:b1:44:0f:0f:a5:3f:22:97:28:
                    73:a8:04:72:c8:b1:c7:0a:86:0a:21:e3:f2:d9:b4:
                    93:81:e3:d7:e1:9c:95:9e:15:08:ca:94:8e:48:e5:
                    66:b8:f5:b2:ea:05:50:81:a3:8d:8e:34:96:f8:2b:
                    76:cc:7b:ee:81:b5:36:88:8e:cf:c3:84:8c:2d:59:
                    57:b3:6b:58:e9:44:45:e3:e7:a5:0c:ab:a3:d5:91:
                    2d:6d:a8:ee:23:cb:13:58:21:e4:e9:6d:4c:84:3d:
                    56:bd:b5:d9:9b:e2:67:68:55:41:40:01:85:70:a6:
                    35:4b:b1:e4:00:c5:c5:0c:61:cc:c6:f4:22:78:d0:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6B:7A:F6:20:CA:3B:80:EC:71:E0:04:C6:4A:1A:7C:3A:FB:33:93
            X509v3 Authority Key Identifier:
                keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c9:f8:79:eb:4c:b0:76:85:b0:4f:3f:54:51:ea:b5:3d:51:
         a2:ca:55:aa:f7:59:10:c1:29:73:eb:ba:81:9b:38:0e:3e:64:
         54:20:6b:1d:d4:c4:8c:ef:0d:7b:f2:a7:bc:83:2d:ab:0c:6f:
         de:19:1a:7b:1b:1e:a0:13:db:8e:f3:79:3b:f7:5a:97:34:e1:
         e0:51:7a:b7:1b:1a:e1:08:31:61:30:90:b0:b5:54:45:83:94:
         25:c8:49:f0:32:5f:ed:f2:82:13:6f:d0:34:98:86:98:55:c1:
         e2:bc:63:a2:4c:80:be:70:b4:7a:32:17:fc:28:9f:ae:1a:d9:
         54:b6:93:e2:d3:54:c7:3c:40:1b:e0:87:0a:d1:2b:1b:9a:8d:
         23:dd:e5:8f:c7:1e:90:ad:07:a1:a4:a2:1b:59:bb:2a:1f:ef:
         8a:3a:0b:a2:72:46:bf:1b:7f:78:1e:0c:9e:53:a0:46:de:d3:
         91:d4:d0:34:7e:f5:60:ca:a2:19:d5:53:61:07:c5:36:f8:93:
         1b:e7:1e:04:a5:10:10:09:91:21:2d:ed:24:61:d5:e0:d2:ea:
         a7:e9:9b:51:62:77:b5:ff:35:9d:64:d6:6d:a5:74:4d:47:7c:
         af:97:2d:73:96:ab:f7:5c:76:81:9d:bb:1b:04:6b:17:58:d3:
         c2:33:13:f2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUS2DCzZ5ZvHY7ZvJXuSyLh+znxeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1
MUZFNkQzMjAeFw0yNTA4MjIyMjE3MTdaFw0yNTA4MjYwMTU3MTdaMDMxMTAvBgNV
BAMTKEU4NkI3QUY2MjBDQTNCODBFQzcxRTAwNEM2NEExQTdDM0FGQjMzOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvTp3VjR62VXzduatYjg13O2o+
WhhndZfrYJoS/fptphm7UEWcvvqKdLZDnXKSM5VArQn5jnwcVss2ofCBVtZZ6Cia
YKMRs7ODXqjm0XPFCT1s3DTJxWEu1GybxYC5XoZELvGxzilHzNO0+jxFPo+HsXwr
ykc6mmXVXU2xK7FEDw+lPyKXKHOoBHLIsccKhgoh4/LZtJOB49fhnJWeFQjKlI5I
5Wa49bLqBVCBo42ONJb4K3bMe+6BtTaIjs/DhIwtWVeza1jpREXj56UMq6PVkS1t
qO4jyxNYIeTpbUyEPVa9tdmb4mdoVUFAAYVwpjVLseQAxcUMYczG9CJ40PT5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6Gt69iDKO4DsceAExkoafDr7M5MwHwYDVR0j
BBgwFoAUazuij+w2icj4jOQTej1kWlH+bTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZTFkZWI5My1jMTkwLTQ2ZWUtYmE4My0yZDkxOTMwYTQzOTUvMC82QjNCQTI4RkVD
MzY4OUM4Rjg4Q0U0MTM3QTNENjQ1QTUxRkU2RDMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1MUZF
NkQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh
ODMtMmQ5MTkzMGE0Mzk1LzAvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0
NUE1MUZFNkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAHJ+HnrTLB2hbBPP1RR6rU9UaLKVar3WRDB
KXPruoGbOA4+ZFQgax3UxIzvDXvyp7yDLasMb94ZGnsbHqAT247zeTv3Wpc04eBR
ercbGuEIMWEwkLC1VEWDlCXISfAyX+3yghNv0DSYhphVweK8Y6JMgL5wtHoyF/wo
n64a2VS2k+LTVMc8QBvghwrRKxuajSPd5Y/HHpCtB6GkohtZuyof74o6C6JyRr8b
f3geDJ5ToEbe05HU0DR+9WDKohnVU2EHxTb4kxvnHgSlEBAJkSEt7SRh1eDS6qfp
m1Fid7X/NZ1k1m2ldE1HfK+XLXOWq/dcdoGduxsEaxdY08IzE/I=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:50 2025 by rpki-client