Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
File:                     F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft (raw, json)
Hash identifier:          xjUMdCNvgffhS+O8gcys/GWvLn9h72rD8vPolEl2tyg=
Subject key identifier:   53:21:50:BC:AB:64:19:D5:1B:34:A1:4C:63:4E:DB:53:3E:37:BC:56
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       54FE597A23DB3BF926CFF134A1BC1D5E8D56F3DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
Manifest number:          02AC
Signing time:             Sat 23 Aug 2025 08:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 07:57:17 +0000
Manifest next update:     Tue 26 Aug 2025 11:46:17 +0000
Files and hashes:         1: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: VwTNigUnV52ERl4JC5acU3ZlKRaYwPoaUPZcexI3ywI=)
                          2: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: W4a/cfhB9oac3lsy90TNAMFErRsxFA2KdB5prppjaDo=)
                          3: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: ZffeIBEtnLg/Ujj93wFNolRHO6kiysPo5MQ8XNigO0w=)
                          4: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: lYQCgluKRMLdqhxTINGi3YwkFcOJwrOABEOfRjK/jF8=)
                          5: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: nC9Vz/V7n91DCoxvdGVxW+GzAM9lX59dn3xendBCsjg=)
                          6: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: d6Eei0Mi3Z0MIL/gTjyKioJhC1+Xma/Y2mDdx7nO/5M=)
                          7: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: RgKgrskhhkjPJ/Dk8nbIAuuLnQfC2xLVHfdXQzj2BLI=)
                          8: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: ESipPGaWYxRGOLDa3lXlGJb3f8FCnj+2d4bGvhqlgIk=)
                          9: F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl (hash: mmoHAd/D0HVjKmb9jygLoKZtO2bmh4ixDlIZSqOVFSg=)
                          10: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: z29/6B1kOK/eMjCWZtmvPZLgk+HLmYp/VefCqYrAsKY=)
                          11: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: Yi662bRsVhQynKfcqy7qXGygDZ5R6XwwA4ioPRSjZss=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 10:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fe:59:7a:23:db:3b:f9:26:cf:f1:34:a1:bc:1d:5e:8d:56:f3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Aug 23 07:57:17 2025 GMT
            Not After : Aug 26 11:46:17 2025 GMT
        Subject: CN=532150BCAB6419D51B34A14C634EDB533E37BC56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:77:4b:3c:e9:79:b6:1b:4e:dd:bd:e2:08:
                    d7:95:26:5f:71:dd:26:c7:9e:ef:07:98:6b:fd:d7:
                    ec:3e:07:b1:63:07:c2:a3:c1:89:d9:ab:3c:d0:8c:
                    6c:a9:03:a5:f6:1b:4d:fe:b5:3d:3b:df:62:0f:21:
                    5a:fa:4d:78:de:bb:e9:e0:ff:a3:65:74:6a:07:98:
                    bf:b2:29:93:a7:73:34:ec:be:cd:5e:b8:9a:2f:a4:
                    1b:7a:f2:f8:cd:5d:f5:3a:22:99:09:ec:64:42:40:
                    43:7b:63:9f:a9:b1:73:b1:fa:11:27:49:1d:ca:46:
                    82:f6:23:28:e8:8e:65:3f:aa:01:21:0b:6c:79:20:
                    cd:84:6b:6a:6e:a1:a9:ef:be:2e:51:ac:be:69:2b:
                    b8:0e:67:38:a7:58:65:95:eb:52:06:f4:00:1c:c9:
                    39:31:d0:72:99:39:bb:5c:9a:32:65:64:b3:b5:44:
                    56:9e:ac:33:ae:f0:f2:93:9a:0c:a9:c3:ab:46:6f:
                    bb:ab:8e:5e:44:5a:0f:26:25:b9:25:df:47:8e:87:
                    a0:c1:ec:fa:a9:e4:c5:a0:bf:08:4f:c4:12:b7:69:
                    95:50:75:7c:3a:05:37:54:c3:46:71:01:0e:bc:26:
                    87:61:a3:0f:db:50:67:36:36:b1:55:f9:b5:f9:92:
                    7f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:21:50:BC:AB:64:19:D5:1B:34:A1:4C:63:4E:DB:53:3E:37:BC:56
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7c:48:5b:3c:74:f2:55:6f:4b:e8:11:7a:18:63:91:45:4c:
         af:a0:29:d6:12:72:e3:e8:7b:5a:ab:5a:3c:35:ef:71:2c:b8:
         1d:02:1a:f6:8a:f3:f2:b6:ce:cc:db:29:0a:e4:79:c7:d5:0c:
         6d:0e:ce:8a:f5:2e:e7:89:41:b7:96:d4:8d:7f:35:bb:5c:f7:
         ba:b6:ad:12:47:7b:d2:9a:9e:f8:54:7f:07:b9:aa:01:72:90:
         fd:d2:48:e0:03:1c:63:ce:0f:0c:34:b8:29:91:e7:f4:58:71:
         d3:23:39:fb:f8:d2:2e:40:a7:67:91:d5:85:2d:04:7f:52:04:
         fc:3a:04:98:af:46:eb:cd:56:68:57:a8:2a:ec:7c:84:20:96:
         22:04:c1:c5:ef:09:6f:81:47:da:b2:af:21:d8:d7:1f:79:0c:
         4f:11:25:82:76:9c:eb:9f:d2:e0:00:25:77:68:7f:81:b3:25:
         76:31:fa:ee:04:15:2f:ea:f1:c9:73:81:ae:c9:85:58:9a:bb:
         f6:be:22:f5:58:2a:6f:ba:bf:d2:c7:36:26:f7:a0:34:70:f6:
         42:a3:18:1c:12:61:d7:09:87:ca:2f:81:14:41:cd:6f:c2:e6:
         57:a7:f0:66:1e:2f:41:76:fd:03:68:80:c5:e0:e7:e5:7d:4d:
         e0:ed:97:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:32 2025 by rpki-client