Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
File:                     5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json)
Hash identifier:          6CaKYfYdPV5Jl+MrzjUXxw3dRA8tCHae2zH/Eg8HrbQ=
Subject key identifier:   F8:EA:F5:37:0C:A5:B2:85:41:8A:9B:6A:CF:75:84:77:03:FD:AB:D5
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       68040EAC644DDAB235CB4F7E46A7DE4328646586
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
Manifest number:          04FC
Signing time:             Sat 23 Aug 2025 09:10:01 +0000
Manifest this update:     Sat 23 Aug 2025 09:05:01 +0000
Manifest next update:     Tue 26 Aug 2025 09:50:01 +0000
Files and hashes:         1: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: qGI/gZ+/LHiM5HYO/jSSY227nu7Rlo4VufnCOUnRtK4=)
                          2: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: orPkEwdvzbgAdBqwJx5fyoqFz6nU1AjYY7pCrQmrMAU=)
                          3: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: mp213bICEXwH+LqnHma8nvPV6BFgfv4aiHAHQpn9yQs=)
                          4: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: +WLcU7bAo8VK4H0MiRy9WLOIOhwuVIPxVQx6AWDK6Sw=)
                          5: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: ghDv+E88LbsHp+yiOmZsjAqDuH4NzWOqybkoMe5BmV8=)
                          6: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: r/svlrZcSr5sJUDVP99x6FJY548aywPcFlNv37DJt2Y=)
                          7: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: dTEDIPJlLGDlRHB30/PzLB90DYFKiiQue74QgGKHEVI=)
                          8: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: tUFNikuzZ5Dxu83zUyF9psB1ZAXrbnO+JVBeZVWaO4g=)
                          9: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 9KZ9F45elzM13kws/U0IoAzbbI/YdymyAIpoe5+fMUI=)
                          10: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: oriUzK7mgQPCjaTV1H4IccgCRtyIm4Y5jf+70OM+bhw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 09:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:04:0e:ac:64:4d:da:b2:35:cb:4f:7e:46:a7:de:43:28:64:65:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Aug 23 09:05:01 2025 GMT
            Not After : Aug 26 09:50:01 2025 GMT
        Subject: CN=F8EAF5370CA5B285418A9B6ACF75847703FDABD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:e8:d7:69:0a:cb:2f:7b:28:48:1a:93:c2:
                    fb:e1:a8:60:84:da:28:f6:1e:67:e6:13:fa:11:a6:
                    5a:b6:d0:84:e4:7e:6f:a3:c3:9a:00:4a:f3:3b:09:
                    44:5b:bd:e6:87:44:46:d4:5e:44:31:67:cc:05:d8:
                    4c:0d:1f:76:89:21:65:6f:4f:76:1f:f9:d1:0c:a1:
                    0f:39:97:f9:a8:1f:b7:2e:b7:fd:fa:8d:b7:16:5f:
                    7a:98:94:eb:9d:63:e2:f1:35:33:3f:b1:43:51:dd:
                    94:5b:a6:35:d7:f3:e9:b0:ae:b2:59:54:69:a0:a8:
                    fa:3b:a6:70:5d:5e:37:8d:bf:05:8d:ff:82:52:9f:
                    70:93:ad:84:09:e7:9a:88:6d:bf:ee:2a:dd:62:f5:
                    0a:0f:db:cd:c1:49:7b:89:67:5a:a8:07:0d:c3:9d:
                    09:c3:80:c3:70:64:c5:8e:77:00:be:db:9f:5b:85:
                    55:75:19:3e:6c:11:f9:87:0f:0d:e2:ac:d6:b3:62:
                    1b:85:08:b7:d5:cc:78:33:ac:84:a9:8c:fe:25:5d:
                    12:0e:d7:01:74:ce:45:f8:f7:25:73:04:bf:08:cf:
                    b2:a2:60:e6:58:b1:09:48:21:9d:79:e2:86:f1:31:
                    a6:5e:7b:80:ff:24:4b:2a:72:4d:b6:0a:15:e1:a6:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:F5:37:0C:A5:B2:85:41:8A:9B:6A:CF:75:84:77:03:FD:AB:D5
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2e:d9:17:8c:5c:32:dd:9c:11:4a:01:a4:8e:67:b0:51:bd:
         c5:87:63:54:dd:d4:ee:9c:02:b1:4b:4d:40:d1:df:86:d8:b8:
         4a:3e:6f:a0:b1:c7:e9:ff:1e:61:7b:fa:64:43:c7:b3:fb:59:
         57:63:3d:7a:eb:ec:c1:c4:dc:31:39:ae:f1:2c:55:d1:8e:06:
         10:d3:dd:71:43:d5:94:3b:db:e9:dc:42:fa:a3:2f:7b:52:1d:
         ab:79:b0:0e:d3:a3:3b:10:06:61:59:ef:15:d5:93:2e:03:8f:
         a2:59:32:94:d9:15:61:3a:45:7d:f6:57:09:0b:72:68:34:f3:
         d9:cb:fd:06:c7:63:b9:af:c9:3f:8a:89:2b:3b:76:b9:ca:01:
         c6:72:78:22:01:de:2f:ff:cf:50:75:c2:fb:7f:be:bc:e3:a9:
         02:a8:56:00:d1:dd:d1:e9:0d:35:ce:1e:df:97:61:be:56:e7:
         63:0c:54:83:b8:c9:3a:d9:e0:fe:2e:cb:97:95:12:9c:4b:c8:
         68:0f:64:7e:1a:2e:f3:71:80:d2:b5:34:be:11:a5:e3:7c:d9:
         86:dd:49:00:53:e2:f3:09:e6:28:fe:38:8c:55:e4:29:5c:6f:
         15:48:ed:2d:9b:75:ff:e1:f8:4b:9f:2e:e7:e2:d7:c3:9f:71:
         be:2f:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:33 2025 by rpki-client