Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
File:                     AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json)
Hash identifier:          v5MGzb+C/RiWFeXZbdqLdNCDW13MEN2YRMk/7Phsq4g=
Subject key identifier:   39:6C:09:56:A6:3D:93:49:B8:76:76:79:67:08:70:AD:E8:D4:9D:F1
Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7
Certificate issuer:       /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7
Certificate serial:       5C3E2344CE30B22E62FE41E7312383F1138CF04D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
Manifest number:          0181
Signing time:             Fri 22 Aug 2025 09:03:00 +0000
Manifest this update:     Fri 22 Aug 2025 08:58:00 +0000
Manifest next update:     Mon 25 Aug 2025 11:43:00 +0000
Files and hashes:         1: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=)
                          2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=)
                          3: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: JYh088N/DmSr4PeZaDgh5P1lgHhc5lUqKeTe1jjN17U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl
                          rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 11:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3e:23:44:ce:30:b2:2e:62:fe:41:e7:31:23:83:f1:13:8c:f0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7
        Validity
            Not Before: Aug 22 08:58:00 2025 GMT
            Not After : Aug 25 11:43:00 2025 GMT
        Subject: CN=396C0956A63D9349B8767679670870ADE8D49DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:52:66:17:0c:90:b5:1c:f0:f9:18:ee:07:
                    c4:0c:7a:d5:82:8e:8c:04:ef:a8:70:31:8e:02:97:
                    46:aa:84:2e:af:fe:da:0c:18:05:e2:85:f8:d8:cc:
                    18:6b:4c:ae:31:63:f9:7f:2d:29:b0:78:bc:ba:17:
                    25:02:9c:cf:4f:77:37:40:c0:ff:f3:fa:48:77:1f:
                    dd:cb:f3:31:df:b8:dc:10:e7:17:91:64:76:86:9c:
                    6d:6c:e3:df:80:b1:cb:ab:4c:a9:74:a5:c2:fc:38:
                    bb:e6:03:66:8e:fd:e1:74:20:b0:79:ee:55:2d:e5:
                    07:a6:23:b0:86:67:50:a6:60:ce:af:65:ed:d2:66:
                    fb:b5:2f:58:dc:57:d1:82:3f:cb:50:26:9e:1b:b5:
                    b4:6e:58:05:31:05:34:89:a0:ed:9c:3d:f7:07:4f:
                    e3:5e:84:7f:12:cd:f3:af:75:bf:d3:3e:b9:4c:30:
                    ca:6f:70:f8:d3:9d:8c:bc:98:0b:0f:9f:00:1d:9b:
                    20:f1:af:90:d8:fd:35:8b:90:a5:9c:80:8f:a8:dd:
                    43:bd:be:8f:47:ce:19:51:af:09:98:75:02:2c:a1:
                    ca:47:d8:b6:10:ce:5b:22:72:77:62:88:cd:97:be:
                    f0:5a:ac:36:dd:88:d8:fa:a1:a4:53:30:11:c2:ba:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6C:09:56:A6:3D:93:49:B8:76:76:79:67:08:70:AD:E8:D4:9D:F1
            X509v3 Authority Key Identifier:
                keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:13:7e:f6:f0:3b:6e:7d:92:69:50:ec:fe:47:a3:5e:fb:3f:
         ed:aa:14:e2:ba:80:85:79:9a:21:20:9e:ed:cb:1a:53:c2:7c:
         86:07:bb:4f:cb:9d:77:0f:03:1d:63:10:fa:c9:99:aa:5b:2f:
         1c:be:e7:04:c6:a3:27:b3:cf:c1:46:74:44:86:cb:dd:f9:7d:
         97:7e:62:4d:46:25:e2:59:6b:15:b9:de:ea:fd:60:79:5d:e6:
         78:4c:78:96:78:25:a9:fd:0e:c6:80:80:69:9a:70:42:9f:b9:
         8a:93:86:ec:fe:14:8e:bd:77:f8:e1:6f:b1:2a:78:e0:b9:2b:
         6b:71:06:2f:85:12:9b:de:74:76:d2:9a:b4:ee:0b:2a:d5:cc:
         9a:c7:73:ae:54:5b:b9:70:4d:d6:86:46:ce:72:b6:55:78:71:
         62:a6:95:62:94:5b:e9:34:07:86:6a:57:fc:7b:dd:29:ef:53:
         95:95:93:08:7b:eb:a9:b3:51:e9:ca:92:e4:13:68:b4:6e:e6:
         5c:41:21:10:64:78:95:de:00:2b:16:33:da:07:66:72:73:14:
         65:d5:33:85:66:9b:6c:49:8e:40:a7:99:3b:ec:85:66:ae:2d:
         0b:47:01:15:4b:58:bc:32:3f:a4:a2:f5:62:25:26:29:73:fa:
         9b:0b:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:45 2025 by rpki-client