Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft
File:                     394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json)
Hash identifier:          RsW71GF4Q6mHWOslOaW/WnyL5dsmkQJiDn3uiKHvFIQ=
Subject key identifier:   1D:F1:7C:BD:A5:24:0F:92:5E:6E:04:90:21:EF:70:70:BE:63:26:DB
Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88
Certificate issuer:       /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88
Certificate serial:       6C68A38B80216CF87BFE78B9D6F47F844251067B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft
Manifest number:          B1
Signing time:             Sun 29 Jun 2025 05:40:47 +0000
Manifest this update:     Sun 29 Jun 2025 05:35:47 +0000
Manifest next update:     Wed 02 Jul 2025 13:57:47 +0000
Files and hashes:         1: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: i6jCi6xBVb2Q9Nm0xQ9ezO8ADonemdvzmOJKHi2wwbg=)
                          2: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: 5Tt3RRAons/MpLAKdI+nVYdG1EV4O6aC9q3gMfZTySg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl
                          rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 13:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:68:a3:8b:80:21:6c:f8:7b:fe:78:b9:d6:f4:7f:84:42:51:06:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88
        Validity
            Not Before: Jun 29 05:35:47 2025 GMT
            Not After : Jul  2 13:57:47 2025 GMT
        Subject: CN=1DF17CBDA5240F925E6E049021EF7070BE6326DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:21:87:b0:a9:da:5f:d9:0d:35:fa:a9:53:60:
                    89:58:e6:ee:f0:b2:29:f4:3b:ae:45:59:87:fa:9c:
                    47:21:72:16:89:78:a7:2b:e7:63:93:51:6c:41:aa:
                    7b:75:f7:74:bb:72:a1:b9:29:de:b4:4b:bc:e2:18:
                    2d:3e:91:fb:88:4d:59:62:4f:bb:83:7e:6d:57:7e:
                    67:f2:15:24:9c:c7:ea:b9:c9:73:cb:2b:7d:3a:28:
                    0f:26:cc:ff:6c:73:1c:19:50:bc:fd:04:0a:18:1f:
                    45:8e:10:6c:2b:da:7c:43:25:1f:4e:4f:c6:a1:ce:
                    22:70:2b:60:51:ff:a7:3c:38:26:59:0a:0c:04:bd:
                    ad:30:6b:c9:d5:cf:59:91:f9:e4:ee:6b:f9:02:21:
                    d6:67:39:36:af:91:29:43:fc:10:fa:d8:4a:e9:e1:
                    14:0a:67:32:38:92:1f:bc:6b:da:e2:8d:f4:0a:24:
                    21:22:ec:00:1f:ab:4e:b9:40:50:63:b7:9c:2a:d9:
                    97:45:9d:c6:54:ab:35:a1:e8:96:96:4d:58:d6:0f:
                    14:05:b4:3f:96:4e:4c:10:39:03:69:30:1c:43:46:
                    c7:d2:18:34:65:42:79:d2:86:04:79:b0:2e:8f:51:
                    ad:6a:11:a5:a5:40:45:99:e4:73:74:28:a8:30:23:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F1:7C:BD:A5:24:0F:92:5E:6E:04:90:21:EF:70:70:BE:63:26:DB
            X509v3 Authority Key Identifier:
                keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:cf:3e:bb:2f:82:45:00:c0:fd:11:43:68:66:81:af:db:f5:
         04:c6:3f:eb:7c:bc:82:49:88:46:fa:55:97:59:99:0b:7e:a8:
         5c:12:b3:04:93:47:bc:ff:a7:b0:0a:19:17:f5:57:7e:82:e3:
         c4:5e:54:13:e5:88:76:9a:3e:82:ca:13:8b:6b:dc:0a:63:9a:
         20:0a:3b:19:e1:c6:cc:d6:3a:c4:ee:c6:3e:50:e1:c0:3b:5a:
         48:23:31:8f:dd:81:53:3e:36:ac:5a:6d:46:10:ea:d1:4c:51:
         0e:9d:33:2b:d6:7d:d2:cb:35:27:77:13:1a:7b:2e:8b:ab:99:
         12:92:9f:05:c4:8c:80:6a:51:eb:96:fd:33:43:71:af:e5:1a:
         12:8b:45:51:a3:01:cc:f8:a1:0f:f5:47:5b:ad:63:56:f6:62:
         03:97:ef:bb:06:d9:ab:c7:20:a9:e4:ff:a6:de:dc:10:1c:49:
         37:08:8e:a2:75:dc:82:bf:10:cb:dd:69:d3:4f:42:98:7d:42:
         a4:51:7f:a2:85:d4:6a:cf:ad:31:24:40:86:ee:1a:d7:ff:b6:
         3e:e9:ca:53:f0:c9:84:5d:4a:66:10:50:1f:83:a3:77:61:bf:
         75:f5:57:76:4c:ed:bc:80:88:b9:be:ea:a3:ea:4e:77:72:75:
         1c:51:d2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:56:55 2025 by rpki-client