Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
File:                     C451166D49539649063AF8F493F51CB1ACE0AB09.mft (raw, json)
Hash identifier:          lGTWjMC1I8Yg5JYKJ1TUVF+OO92dDfeco9NWAowfJfU=
Subject key identifier:   1D:E0:61:D7:A6:27:37:65:4A:92:2D:F7:E9:04:29:31:16:75:B5:78
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Certificate issuer:       /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial:       15682CC498672BD3D9EE4CCD09B9AB0A5CD3CE57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
Manifest number:          01C1
Signing time:             Sat 19 Jul 2025 05:00:56 +0000
Manifest this update:     Sat 19 Jul 2025 04:55:56 +0000
Manifest next update:     Tue 22 Jul 2025 13:35:56 +0000
Files and hashes:         1: 3230322e35352e3136352e302f32342d3234203d3e203137373639.roa (hash: EnBylqGRkHck1P/w6gsiqwIs4ZiF2BWlNLshGkPWj1w=)
                          2: 3230322e35352e3137322e302f32342d3234203d3e203137373639.roa (hash: 1RNEIimWls5L1YA+6LvVON5gsGW9KYIAg/Gbxl/jXeo=)
                          3: 3230322e35352e3136342e302f32342d3234203d3e203137373639.roa (hash: gJiPfcs7x+QPwd46zsyy0LC5MIR9E7LSEG+4rdoSXqA=)
                          4: 3230322e35352e3137352e302f32342d3234203d3e203137373639.roa (hash: WXEDDDPWB5FVkZshm54puF6BbpeClu5z65OQiUmZWzQ=)
                          5: 3230322e35352e3136302e302f32342d3234203d3e203137373639.roa (hash: 1+BV/NTZwsd8/f/6SrmjQsaN3Cxn5HVV92bi1Tr6Udg=)
                          6: 3230322e35352e3137302e302f32342d3234203d3e203137373639.roa (hash: 4bj3MXGoZaT4Igt7DvfRdU3lCEctq8NmmP9+BphbuzU=)
                          7: 3230322e35352e3136382e302f32342d3234203d3e203137373639.roa (hash: UCKUGGRJkmZTnZ328lhxhPO1YBrE7sa3RsSw2CUGUbU=)
                          8: 3230322e35352e3137332e302f32342d3234203d3e203137373639.roa (hash: KsBanZtrFrCcxMbzafZ0aONiDKdqsDpHhmyfMWYDBwE=)
                          9: 3230322e35352e3137342e302f32342d3234203d3e203137373639.roa (hash: TOicGjX8vcWkrijZarpkF1YRbk4fvyDvP+6bb+eWkQo=)
                          10: 3230322e35352e3136362e302f32342d3234203d3e203137373639.roa (hash: /uN/gRWvxMAuWk8UTjPgmb7AlZbY5wXA7sl/iVtprNo=)
                          11: 3230322e35352e3136332e302f32342d3234203d3e203137373639.roa (hash: 8mQvVYsNu1MgIuS85Ekeeuz1vVHgVHOVsmhN5uaPP2Q=)
                          12: 3230322e35352e3136372e302f32342d3234203d3e203137373639.roa (hash: 81RZ2WuSRSNrswgyRZXjYvG3Ysm+qlLZYds2FFDcp40=)
                          13: 3230322e35352e3137312e302f32342d3234203d3e203137373639.roa (hash: HY2Lm/Wv56q0jC2Eykf082uzU9W7rCpdXShoCfWdI5c=)
                          14: 3230322e35352e3136312e302f32342d3234203d3e203137373639.roa (hash: AMZA6poYk3LsQX36BjatntHHqUJ3uNfC32cqYqHULzA=)
                          15: 3230322e35352e3136392e302f32342d3234203d3e203137373639.roa (hash: 44mRlsx4iVAKs6V8CS8fG/JX89Mk1KlAJik4Z/oAau4=)
                          16: 3230322e35352e3136322e302f32342d3234203d3e203137373639.roa (hash: GxlygWgwwXSgX7kQBxUFnJkMJD7Fxqb8DLIN6hy94xY=)
                          17: C451166D49539649063AF8F493F51CB1ACE0AB09.crl (hash: T8/3LZ8K1ERhMW7p41bKXYZvHxiURWQx6FUj762ju4Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
                          rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 13:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:68:2c:c4:98:67:2b:d3:d9:ee:4c:cd:09:b9:ab:0a:5c:d3:ce:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
        Validity
            Not Before: Jul 19 04:55:56 2025 GMT
            Not After : Jul 22 13:35:56 2025 GMT
        Subject: CN=1DE061D7A62737654A922DF7E90429311675B578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:60:1c:e7:1d:83:2c:ca:80:00:34:70:17:8d:
                    12:cf:da:a8:e9:b1:47:73:87:39:0f:6c:cb:28:e6:
                    ec:94:46:a0:d6:f0:0c:9a:04:94:cc:1d:42:18:52:
                    2a:c3:ae:0f:bf:b4:7d:90:fb:c2:85:d8:2a:06:65:
                    70:5f:17:1b:32:e9:30:f1:25:7e:3e:d9:f6:e8:36:
                    8f:7b:b3:b2:a1:b5:e2:8e:fe:44:df:d8:1a:77:11:
                    cf:3a:50:dd:a5:d6:47:29:b7:a3:61:9e:f9:d2:9c:
                    10:23:5e:dc:df:34:0e:39:5b:28:5f:6c:29:ec:73:
                    66:3a:12:49:18:af:ba:03:3d:8b:68:2c:e3:3f:dd:
                    22:89:7a:59:5b:67:64:e3:b9:6a:4f:ab:d6:e6:53:
                    8b:15:3c:c1:d2:ca:fa:b6:fe:68:05:cf:bf:24:b1:
                    f3:ff:11:25:7a:8d:ee:d8:03:aa:f1:2d:04:14:46:
                    d7:d5:ea:c0:ca:b8:8f:91:3d:2f:14:8c:be:b1:62:
                    c6:0f:df:f8:42:9b:20:5a:7a:e5:75:3f:11:e4:0b:
                    16:f0:2c:14:d8:74:28:99:e0:3b:83:d0:ad:93:6f:
                    b2:96:94:e6:27:bd:7e:24:45:a3:85:46:d3:85:52:
                    dc:db:84:90:94:be:ce:28:5e:33:b2:3b:ec:05:31:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E0:61:D7:A6:27:37:65:4A:92:2D:F7:E9:04:29:31:16:75:B5:78
            X509v3 Authority Key Identifier:
                keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:68:a7:96:cd:be:d1:a6:52:a9:f5:a0:a1:3a:5f:1e:d9:b5:
         a4:b0:96:2d:18:38:97:4c:8e:cb:db:30:42:aa:e4:91:40:21:
         d6:cd:55:bf:e1:5c:3a:f1:32:e0:4a:bc:0e:f1:90:94:13:2c:
         45:b5:00:ff:da:84:e4:e4:7a:5c:06:68:c2:8a:8f:d2:a7:2d:
         0d:4f:57:cc:8b:fa:cd:9d:77:63:b8:71:a8:38:b8:a9:a9:fb:
         26:6b:2d:0a:8d:14:82:55:d7:63:c9:db:ef:59:1e:6e:f5:ce:
         45:2f:f8:c8:e1:76:b3:eb:03:ed:e9:d2:76:3a:2c:d5:bc:4e:
         aa:6c:44:72:bb:67:e9:e6:07:0e:13:cd:8c:d8:f7:b9:fb:b9:
         94:6a:72:d3:f9:3a:42:5a:e6:60:62:f1:78:7e:d3:a8:d8:22:
         cc:2c:e4:12:6e:8f:5b:be:be:55:a3:0c:4a:ba:23:5c:bf:4f:
         16:27:c1:1e:db:4c:60:d6:01:bd:91:46:ee:d7:eb:b7:fb:dc:
         35:50:9d:06:f2:89:07:47:c4:5b:89:a3:f3:6b:60:e3:03:c0:
         73:28:91:a0:4a:1f:88:7f:56:ff:a8:56:01:3b:71:e0:6d:b1:
         0c:c9:0f:92:c3:c9:21:b9:d0:12:54:dc:98:eb:98:bf:cb:00:
         d8:ad:d8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:48:19 2025 by rpki-client