Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
File:                     7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json)
Hash identifier:          1+kHUxEFC1bvwzgOKQJ+ReHjAF/yAmbkRgvk20osuwY=
Subject key identifier:   7F:61:5A:A5:4F:C4:9F:57:E9:7C:32:5B:D7:93:24:DF:E0:76:39:6C
Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
Certificate issuer:       /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Certificate serial:       51CF475F46C5080F244DCFD8DCD82239A903B562
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
Manifest number:          02D6
Signing time:             Sat 18 Oct 2025 06:32:14 +0000
Manifest this update:     Sat 18 Oct 2025 06:27:14 +0000
Manifest next update:     Tue 21 Oct 2025 15:27:14 +0000
Files and hashes:         1: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: audNLou8WkSNI41O6Bj42zTe5yNLL3IkDF/evFV7jOs=)
                          2: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: b5FyLXJvwHGEGWwekDTqeQDenx7rZLagZD5M467u+1w=)
                          3: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=)
                          4: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: +SXeoeFpKKlvKBoyMC+o9T/viZRgQ9FNtWoHrgk1QHU=)
                          5: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=)
                          6: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=)
                          7: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=)
                          8: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: eRLttmDRe4S/HXjiFUVifbleZv0UdgB6j9QBQFrEFVw=)
                          9: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=)
                          10: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl
                          rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cf:47:5f:46:c5:08:0f:24:4d:cf:d8:dc:d8:22:39:a9:03:b5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
        Validity
            Not Before: Oct 18 06:27:14 2025 GMT
            Not After : Oct 21 15:27:14 2025 GMT
        Subject: CN=7F615AA54FC49F57E97C325BD79324DFE076396C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:5c:da:d8:c5:fd:f6:12:18:ee:2d:e8:71:
                    e3:a9:39:8e:ee:05:3d:59:ec:9c:d9:bd:15:af:fc:
                    e9:ea:d3:93:9c:04:9f:ad:32:d2:30:d5:f7:0d:93:
                    b7:83:80:30:f9:fc:a0:41:e4:ac:ae:7b:45:89:2b:
                    33:a7:17:1a:d3:f8:2b:7c:e7:95:f0:02:98:e6:55:
                    6d:45:70:0f:07:cf:5d:f7:4f:24:51:74:bb:6a:a5:
                    a6:40:c5:b3:0f:a3:66:b4:ee:68:d3:08:4b:7d:dc:
                    c0:a1:90:c6:17:12:a9:45:d6:dc:91:c5:c1:d9:84:
                    16:32:80:1b:88:1b:ed:c6:1b:e9:78:c1:e8:26:bf:
                    0e:c4:b8:c0:02:f6:bd:a7:ab:87:95:71:6a:bb:e6:
                    68:ea:c4:ed:d4:b3:1f:a7:8c:38:0b:cb:33:a5:02:
                    c0:30:ca:4f:6e:30:95:dc:f7:85:a5:74:fe:58:35:
                    68:ce:b8:e5:f6:dd:80:3c:18:00:d6:79:43:f7:d5:
                    81:bf:f1:92:01:6a:8e:dc:43:ac:93:67:36:6b:a4:
                    0e:de:3e:10:ea:fe:17:a4:35:c0:66:fe:fe:9c:98:
                    a6:4c:f9:15:29:ee:b8:57:4e:ff:5f:72:7b:b7:36:
                    1e:24:32:2f:57:9e:d3:f7:d5:23:20:c9:88:59:dd:
                    d0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:61:5A:A5:4F:C4:9F:57:E9:7C:32:5B:D7:93:24:DF:E0:76:39:6C
            X509v3 Authority Key Identifier:
                keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3b:a5:e2:ab:ae:2a:5e:df:ee:29:71:7d:04:98:d9:96:be:
         2d:0e:0a:48:72:37:92:3b:85:8d:76:13:07:53:db:a9:b1:31:
         03:c5:ad:31:3e:f0:72:8b:43:03:55:21:73:7a:3a:ef:00:02:
         9b:b5:06:0c:64:ea:6e:bd:3c:b5:70:80:96:ec:0f:3d:5c:f8:
         3c:33:25:74:d2:7d:3c:eb:b2:25:0a:61:76:9b:85:ab:60:65:
         15:75:52:a8:02:34:9c:7b:15:33:b0:49:90:7d:ca:33:e1:c5:
         d2:4c:43:20:57:b1:84:30:62:f0:1e:7f:5b:f4:81:77:09:0a:
         0d:73:9a:53:c6:63:df:93:0a:6b:30:9c:95:88:24:ce:36:a8:
         75:8a:b6:2c:cd:07:ec:36:c2:1d:6b:47:56:48:f5:63:47:04:
         96:96:77:cb:40:39:c4:97:70:34:01:52:39:68:5f:db:f8:53:
         41:84:10:55:f5:2f:03:58:1e:0c:ca:11:28:cc:6e:23:0b:11:
         93:6b:eb:b9:00:cd:4c:b6:e2:77:9f:8e:90:91:9f:c1:15:e5:
         2e:9f:b1:c0:3b:b0:ff:cf:64:e5:56:cb:cd:6b:d7:75:b1:06:
         3e:82:f4:3b:70:d6:e9:ce:86:46:d6:cf:7f:68:0e:27:b0:77:
         81:5e:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:57:14 2025 by rpki-client