Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
File:                     108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json)
Hash identifier:          y8jdnEquSHBwWcONuCXgXJR+XBlj3Wr9TLptRhoDD1w=
Subject key identifier:   5C:61:FD:18:BD:A6:F1:5C:69:5A:BC:AE:DB:59:F4:D7:D4:58:F1:65
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Certificate issuer:       /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial:       148104DC9FDB16D3A0FE1E471237E9BC67A36A7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
Manifest number:          C9
Signing time:             Tue 01 Jul 2025 00:51:32 +0000
Manifest this update:     Tue 01 Jul 2025 00:46:32 +0000
Manifest next update:     Fri 04 Jul 2025 03:31:32 +0000
Files and hashes:         1: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c=)
                          2: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: KSUbvXfR6wqgEtV1jcjWsrQSqy5TRuM5IxH97Spd5gE=)
                          3: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: 02uGPdQ9hFird7xTsc25uxwhcDH5++RrfPud5wB034E=)
                          4: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=)
                          5: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: abJz0HXL4r3WKDjsYu+oZiEGGhSowngdRONlkzkes1A=)
                          6: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: dta96fOO5R3KY41745HRH3tf4b61/DKoGwUN3Q11U24=)
                          7: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU=)
                          8: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: U1+UJYOPqeG7oUJWUM0ECQEyGoOhn9MsVuuE8ER7syk=)
                          9: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 2MPbE9DHmM30NHKgthoS9sI03vGrnEvS4h+kAcqNSBY=)
                          10: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: 9hXtWKXDKF25BvR4R43ti+1zuVd/Z8XubadilAkGw4k=)
                          11: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: YLUa9f9Ix42SsoAFmSGmhnlKGmYHofqL4ey07MvkUwA=)
                          12: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: wR+IWZMCxrwb5/faol2/GF6hZhc853OeCuHNs3ivUEk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
                          rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 03:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:81:04:dc:9f:db:16:d3:a0:fe:1e:47:12:37:e9:bc:67:a3:6a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
        Validity
            Not Before: Jul  1 00:46:32 2025 GMT
            Not After : Jul  4 03:31:32 2025 GMT
        Subject: CN=5C61FD18BDA6F15C695ABCAEDB59F4D7D458F165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ee:81:74:dc:35:4f:14:22:b3:ef:2d:1a:dc:
                    be:6e:9d:83:4d:e6:68:f8:3b:97:7c:3a:04:5f:4a:
                    1a:bd:42:7b:12:49:fb:9e:6d:59:5c:d8:b4:f9:31:
                    4d:8d:da:95:17:5a:9a:12:15:b7:3d:e0:46:a9:f2:
                    2b:ff:f8:05:e4:66:b6:14:c7:91:d8:cb:78:9c:d7:
                    6a:85:1e:11:d5:4e:25:fc:68:a8:e5:b7:17:92:29:
                    1b:63:77:08:92:36:cc:b9:a9:86:02:c2:d5:50:c5:
                    8d:26:6a:68:3c:57:3d:51:94:49:cb:9d:70:a0:9e:
                    01:9a:8e:24:5d:e9:8a:47:03:34:70:6d:5f:61:48:
                    e8:ad:ab:3d:0c:cc:b9:12:0f:59:4e:de:f9:29:95:
                    33:09:c0:fc:ae:e5:aa:f0:81:6e:c3:5b:f7:3b:0d:
                    68:66:d0:26:6b:b8:fa:3f:a2:4a:ef:ee:0f:21:df:
                    e3:6f:7a:91:23:98:f4:8e:18:89:2c:f2:64:46:4b:
                    96:a5:10:f7:0f:5d:0b:a1:c4:e7:47:1a:c5:62:fc:
                    07:7d:6f:bc:a2:71:c3:f3:b8:f1:86:22:3f:6f:3b:
                    8a:ad:35:03:1b:ac:94:3a:f0:72:99:d0:4c:dd:21:
                    e0:d0:4e:7f:bd:43:93:a4:54:74:6b:19:00:16:5e:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:61:FD:18:BD:A6:F1:5C:69:5A:BC:AE:DB:59:F4:D7:D4:58:F1:65
            X509v3 Authority Key Identifier:
                keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:12:a3:52:a2:ea:2d:26:44:1b:04:a7:5e:0c:44:39:1a:
         fb:69:40:cb:07:17:99:b6:10:5c:6d:19:60:bf:41:9e:4f:a6:
         94:1a:c1:20:9a:6c:da:df:c1:40:f5:3c:71:0f:c4:ea:ae:82:
         4e:c4:b6:2b:4b:ce:a4:13:5f:82:99:31:7e:b4:77:36:ee:2d:
         3c:db:d6:d4:24:85:f1:fb:05:7f:d6:30:ab:67:c8:2c:d3:05:
         27:11:27:77:24:88:a5:c2:1a:f0:d6:a4:3c:ec:d6:3f:51:d9:
         f0:95:cb:2b:c3:18:c7:5c:31:9b:6e:30:ce:31:1b:31:f1:70:
         7c:b1:87:91:eb:64:64:10:c2:d8:92:10:6b:c9:12:d6:3a:04:
         4b:b3:aa:20:fe:d8:48:72:97:fe:bd:0b:22:37:c6:c0:21:09:
         7b:0f:b8:57:7d:e5:ca:10:75:41:9b:4d:2d:8b:2b:0a:d6:1b:
         38:07:a4:01:f2:f5:53:d1:b7:e5:b5:7a:a4:06:dd:65:4a:80:
         7f:f7:44:aa:28:8d:37:6b:9b:60:44:88:27:49:7a:cf:38:4e:
         8d:f6:76:48:44:c3:bf:f0:db:02:bc:14:b0:da:11:79:c9:4a:
         64:0c:7f:cb:8c:f9:e8:09:b3:e9:27:fc:ed:4f:96:d8:09:fa:
         3c:c7:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:23:25 2025 by rpki-client