Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
File:                     F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft (raw, json)
Hash identifier:          +mVG08hVxNTkx7Hsi+i1+I43Tt2y1M8YKFHvF0QN0MI=
Subject key identifier:   E4:FE:A4:77:BB:1B:A4:A3:79:D6:09:66:1F:ED:6A:28:C1:F7:50:FA
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       016125E39C3C4C66B1520F2B108EBFED01C4C005
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
Manifest number:          0294
Signing time:             Tue 01 Jul 2025 01:52:13 +0000
Manifest this update:     Tue 01 Jul 2025 01:47:13 +0000
Manifest next update:     Fri 04 Jul 2025 06:18:13 +0000
Files and hashes:         1: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: VwTNigUnV52ERl4JC5acU3ZlKRaYwPoaUPZcexI3ywI=)
                          2: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: d6Eei0Mi3Z0MIL/gTjyKioJhC1+Xma/Y2mDdx7nO/5M=)
                          3: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: Yi662bRsVhQynKfcqy7qXGygDZ5R6XwwA4ioPRSjZss=)
                          4: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: lYQCgluKRMLdqhxTINGi3YwkFcOJwrOABEOfRjK/jF8=)
                          5: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: W4a/cfhB9oac3lsy90TNAMFErRsxFA2KdB5prppjaDo=)
                          6: F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl (hash: vUpjZtm2/QqAQOe2jj0tGdFS9X04Efpe6mRxKfPoktA=)
                          7: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: z29/6B1kOK/eMjCWZtmvPZLgk+HLmYp/VefCqYrAsKY=)
                          8: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: RgKgrskhhkjPJ/Dk8nbIAuuLnQfC2xLVHfdXQzj2BLI=)
                          9: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: nC9Vz/V7n91DCoxvdGVxW+GzAM9lX59dn3xendBCsjg=)
                          10: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: ZffeIBEtnLg/Ujj93wFNolRHO6kiysPo5MQ8XNigO0w=)
                          11: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: ESipPGaWYxRGOLDa3lXlGJb3f8FCnj+2d4bGvhqlgIk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 06:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:61:25:e3:9c:3c:4c:66:b1:52:0f:2b:10:8e:bf:ed:01:c4:c0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Jul  1 01:47:13 2025 GMT
            Not After : Jul  4 06:18:13 2025 GMT
        Subject: CN=E4FEA477BB1BA4A379D609661FED6A28C1F750FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:1b:81:c0:56:74:42:31:47:09:3f:d0:9c:
                    e3:4f:a0:b9:29:e1:6e:e7:0f:c3:f8:f2:2c:c5:4f:
                    c4:c9:60:dd:8e:9c:00:da:c2:f2:9f:cf:8b:de:b9:
                    9c:da:1d:39:02:2e:27:b3:30:d2:b2:33:07:89:af:
                    da:9e:aa:32:01:9a:7d:91:05:e3:9b:86:71:98:90:
                    2d:46:3f:5e:60:ff:a2:98:dc:f6:e5:86:a4:60:9c:
                    13:6a:69:ae:bf:42:70:d0:41:3d:32:57:ce:f6:41:
                    a7:4c:eb:43:17:3e:7f:b6:04:39:ac:5c:e8:16:95:
                    d2:da:2a:11:60:ab:76:13:4e:4f:90:c0:04:a6:b4:
                    5f:0c:bb:ed:21:2c:93:09:f6:4c:90:04:b2:7b:f5:
                    57:29:fe:2e:2f:97:cb:5f:5b:7d:d1:ab:41:a0:19:
                    9e:96:52:db:24:74:4d:06:7c:5d:17:ed:89:98:16:
                    74:a0:c9:b9:70:fd:19:7e:63:69:b3:79:4f:f2:69:
                    e2:b3:58:1e:67:77:1a:98:0c:a9:46:cd:b9:58:bd:
                    e6:f7:f4:2e:f2:ea:71:07:58:3e:86:c1:81:bd:6f:
                    13:2a:c4:80:72:e6:8a:24:99:9c:d7:05:59:f2:55:
                    b7:f7:36:ab:1c:9d:c3:6a:cf:b1:59:2b:33:3e:03:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FE:A4:77:BB:1B:A4:A3:79:D6:09:66:1F:ED:6A:28:C1:F7:50:FA
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:3f:16:fc:15:72:df:f3:65:00:63:28:5d:d7:72:33:1f:9e:
         40:d1:7d:6a:00:f7:a2:e9:11:95:0c:13:72:9d:b0:0d:03:74:
         c7:5f:3e:80:ac:58:3c:78:06:6f:15:ba:3a:49:a5:8d:63:a9:
         37:b6:8e:d4:18:d8:dd:ef:7c:69:97:a1:15:b7:b2:2f:61:1d:
         e9:96:f8:a8:d3:60:ba:56:61:de:8d:86:60:50:67:63:32:42:
         8c:c0:44:91:d0:85:2e:5c:ce:e7:26:f9:d9:ea:8a:8f:98:fc:
         9c:14:b7:a2:82:24:f6:9c:86:77:17:e5:99:46:fb:14:25:af:
         fd:55:ec:14:3b:94:c6:15:3c:41:5b:72:27:88:64:bf:cc:e1:
         29:aa:73:96:ea:43:d0:7a:5f:5b:19:23:e7:b8:a7:d2:cc:01:
         36:5f:34:ab:ac:e0:23:a4:93:33:c9:e8:e4:ce:13:fe:45:b9:
         e9:95:df:60:d4:65:c7:b5:34:48:31:bc:74:6b:ce:35:56:0f:
         60:80:e2:cf:2a:37:63:b5:1a:46:91:54:7c:c3:cc:36:d7:ce:
         cb:fa:61:c1:4c:00:cb:e3:f9:23:e4:9d:1d:40:4e:52:da:8a:
         17:e2:a9:73:ea:65:94:93:7e:6d:52:ae:d5:82:82:07:2d:5a:
         05:a7:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:01:12 2025 by rpki-client