Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft
File:                     4F022459BA46CF30700E070671C752B44729E249.mft (raw, json)
Hash identifier:          EEZamQ98Bc7W1ZaK4uCtJpOLfvCkfvJSpnauZ7jnOqI=
Subject key identifier:   D6:A5:4A:85:B0:50:0C:47:06:2E:AB:5B:D0:87:E1:8A:A4:6C:8B:D0
Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49
Certificate issuer:       /CN=4F022459BA46CF30700E070671C752B44729E249
Certificate serial:       3CA032D8B3F432F6C8669EFDA833FC321D07753B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft
Manifest number:          018B
Signing time:             Mon 30 Jun 2025 15:32:09 +0000
Manifest this update:     Mon 30 Jun 2025 15:27:09 +0000
Manifest next update:     Fri 04 Jul 2025 01:52:09 +0000
Files and hashes:         1: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=)
                          2: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: A4y5XpEBWiIpIeK/8wX3tvkTicpj5/2x83aB4Bo0KCU=)
                          3: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=)
                          4: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: VvIxYiO1vpW4N2M0c206efZBd+dmDTRrTwPYKqia/UQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl
                          rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 01:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a0:32:d8:b3:f4:32:f6:c8:66:9e:fd:a8:33:fc:32:1d:07:75:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F022459BA46CF30700E070671C752B44729E249
        Validity
            Not Before: Jun 30 15:27:09 2025 GMT
            Not After : Jul  4 01:52:09 2025 GMT
        Subject: CN=D6A54A85B0500C47062EAB5BD087E18AA46C8BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:98:7c:27:89:77:9e:4c:88:9d:1e:d9:0a:
                    94:a9:1c:07:9e:af:10:cc:6b:eb:b3:0d:c8:5c:fa:
                    f9:51:07:ac:90:d1:14:4b:48:10:62:cd:75:b7:0d:
                    b3:69:ca:74:b3:b5:e9:7e:af:ce:3d:6e:eb:0d:bd:
                    b5:1f:47:af:e2:94:cd:75:94:f8:84:77:2e:44:c1:
                    40:a2:01:bb:7d:a8:1d:13:f2:92:11:1e:74:33:a9:
                    92:97:42:ad:c3:a4:07:ed:cf:b3:26:8c:f4:00:a0:
                    dd:97:8a:cd:18:79:40:07:4c:f3:bc:bf:b6:01:22:
                    55:34:ab:f3:89:82:57:7f:9f:d0:70:08:44:e4:d2:
                    af:e8:15:fb:00:07:24:4a:3e:9d:61:c6:0f:7e:ad:
                    a4:19:65:f2:5b:43:57:b8:6d:19:2b:79:13:d5:a0:
                    91:99:bf:be:03:0d:a7:3c:47:9c:dd:a6:4f:73:14:
                    0a:1d:cb:d8:3c:69:05:fd:19:2a:7b:6c:29:95:4b:
                    73:3c:31:37:80:15:4f:00:a5:0b:fb:bc:0d:d3:2a:
                    55:c0:36:9e:44:88:d9:32:13:f0:0c:76:b5:44:0d:
                    e3:a8:89:7a:10:59:02:20:6e:b3:fa:f8:d5:38:7d:
                    c4:ec:0e:d5:dc:06:2b:45:13:1a:87:44:e9:31:5e:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A5:4A:85:B0:50:0C:47:06:2E:AB:5B:D0:87:E1:8A:A4:6C:8B:D0
            X509v3 Authority Key Identifier:
                keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:02:76:69:c2:b5:1b:0b:e4:14:b5:f3:05:24:74:f5:9b:1d:
         d0:7e:11:fc:4f:ed:4d:c8:e3:56:c8:2a:40:1e:2f:a9:1b:93:
         4d:02:69:61:c2:36:53:3b:02:7a:0d:d2:95:1f:0e:75:50:69:
         bb:20:b0:78:da:64:61:bc:14:63:9e:69:7a:58:76:e4:7a:de:
         9d:c1:b0:66:b7:60:d5:86:d2:66:42:c7:12:29:a9:87:a2:68:
         e1:df:a5:2c:cd:39:13:46:9c:1a:9b:9f:ff:6c:de:fb:6b:18:
         3a:b6:41:63:e2:10:1f:8f:d6:b0:d5:64:a6:0b:ca:32:cd:48:
         65:5f:1a:cb:5a:1b:08:61:f9:70:fb:fe:29:bc:db:c8:3f:af:
         6d:cf:85:2d:8c:a5:78:d2:e6:22:14:6a:2e:68:50:86:9b:9e:
         4e:12:96:43:27:bf:9a:3a:17:f4:6c:a2:96:44:99:88:73:e6:
         1d:74:b2:92:53:8f:a6:f4:04:20:0a:1c:4e:b4:ed:42:69:88:
         20:44:da:56:0b:4a:92:cb:6b:b5:d7:4f:7b:4b:d0:22:21:e1:
         d8:a7:7d:7a:d2:d2:f6:6c:d1:29:df:a1:1f:5b:89:21:d1:e3:
         54:ff:50:a8:6e:e4:fc:4e:fc:20:01:00:65:cf:d5:d7:65:7e:
         89:5d:32:cf
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPKAy2LP0MvbIZp79qDP8Mh0HdTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0
NzI5RTI0OTAeFw0yNTA2MzAxNTI3MDlaFw0yNTA3MDQwMTUyMDlaMDMxMTAvBgNV
BAMTKEQ2QTU0QTg1QjA1MDBDNDcwNjJFQUI1QkQwODdFMThBQTQ2QzhCRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqJh8J4l3nkyInR7ZCpSpHAee
rxDMa+uzDchc+vlRB6yQ0RRLSBBizXW3DbNpynSztel+r849busNvbUfR6/ilM11
lPiEdy5EwUCiAbt9qB0T8pIRHnQzqZKXQq3DpAftz7MmjPQAoN2Xis0YeUAHTPO8
v7YBIlU0q/OJgld/n9BwCETk0q/oFfsAByRKPp1hxg9+raQZZfJbQ1e4bRkreRPV
oJGZv74DDac8R5zdpk9zFAody9g8aQX9GSp7bCmVS3M8MTeAFU8ApQv7vA3TKlXA
Np5EiNkyE/AMdrVEDeOoiXoQWQIgbrP6+NU4fcTsDtXcBitFExqHROkxXlZRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1qVKhbBQDEcGLqtb0IfhiqRsi9AwHwYDVR0j
BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB
NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5
RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3
YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy
QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEcCdmnCtRsL5BS18wUkdPWbHdB+EfxP7U3I
41bIKkAeL6kbk00CaWHCNlM7AnoN0pUfDnVQabsgsHjaZGG8FGOeaXpYduR63p3B
sGa3YNWG0mZCxxIpqYeiaOHfpSzNORNGnBqbn/9s3vtrGDq2QWPiEB+P1rDVZKYL
yjLNSGVfGstaGwhh+XD7/im828g/r23PhS2MpXjS5iIUai5oUIabnk4SlkMnv5o6
F/RsopZEmYhz5h10spJTj6b0BCAKHE607UJpiCBE2lYLSpLLa7XXT3tL0CIh4din
fXrS0vZs0SnfoR9biSHR41T/UKhu5PxO/CABAGXP1ddlfoldMs8=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:41:37 2025 by rpki-client