Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
File:                     F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json)
Hash identifier:          xfg4cDJnzmWVh4/P+eXRP1f6RtvKy3Iw35Le73ZktXE=
Subject key identifier:   A8:53:F3:F6:A7:09:DF:44:15:BD:E4:B2:90:DC:F3:F5:E1:98:68:A5
Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C
Certificate issuer:       /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C
Certificate serial:       575F5B871344FEA679EE290F4781BFC6F945494A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
Manifest number:          01CA
Signing time:             Thu 24 Jul 2025 19:51:09 +0000
Manifest this update:     Thu 24 Jul 2025 19:46:09 +0000
Manifest next update:     Mon 28 Jul 2025 06:40:09 +0000
Files and hashes:         1: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: uAnhgc3GFKLKxI4dQlIREurM8FSec2ezUi5bd3kOngk=)
                          2: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl
                          rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 06:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5f:5b:87:13:44:fe:a6:79:ee:29:0f:47:81:bf:c6:f9:45:49:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C
        Validity
            Not Before: Jul 24 19:46:09 2025 GMT
            Not After : Jul 28 06:40:09 2025 GMT
        Subject: CN=A853F3F6A709DF4415BDE4B290DCF3F5E19868A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:d4:9f:85:a9:bb:ad:af:bf:23:fd:3a:4f:
                    22:e6:88:c3:63:af:04:d3:b3:29:40:ea:31:6c:72:
                    b8:30:45:76:14:6d:e5:68:08:58:4e:46:e2:28:bf:
                    30:90:d6:a4:68:e3:1e:c6:27:05:7a:18:20:40:96:
                    02:cf:f0:22:8a:26:dd:31:22:4a:12:ba:74:b3:ee:
                    b8:32:89:91:b8:a9:89:e1:1c:d0:0d:20:59:eb:89:
                    04:1a:47:ab:16:b2:74:d3:b2:a1:ed:c3:9b:db:4a:
                    1c:e9:50:4c:9b:b1:2d:15:72:ce:37:b4:17:10:2f:
                    e9:bf:9e:0c:52:bc:bf:5b:fd:8f:51:a2:ce:1f:6b:
                    68:ed:be:a2:5e:ac:8f:c0:85:b5:e7:63:62:8e:4a:
                    dd:21:66:1b:24:79:17:3a:ec:72:98:eb:32:cb:77:
                    26:40:69:8c:d6:2b:08:34:e5:d2:20:e6:75:a1:1c:
                    17:4e:c9:d5:f7:49:10:dc:1f:73:38:ec:c1:e5:51:
                    7f:f5:bc:11:e2:45:d7:b3:21:0d:dc:08:6e:6b:18:
                    51:d7:a6:5c:f9:46:7f:3b:25:f3:8c:ed:4b:1b:d4:
                    b1:d3:cb:4c:a3:13:c0:bc:89:bb:fe:a4:ed:5d:b0:
                    78:bc:57:24:81:81:e3:59:e0:aa:29:08:bd:99:0d:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:53:F3:F6:A7:09:DF:44:15:BD:E4:B2:90:DC:F3:F5:E1:98:68:A5
            X509v3 Authority Key Identifier:
                keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:89:02:18:3a:c2:50:65:47:bb:1c:ed:bf:95:1d:93:78:4a:
         54:ab:9a:03:a0:25:cc:bf:43:fd:a6:46:7e:0f:a8:55:3c:88:
         27:2e:0a:71:59:c0:4b:95:f1:9d:53:e2:f9:cb:31:81:f6:4e:
         b7:9d:2a:dc:f3:02:2a:b1:a5:99:88:92:5e:38:4c:9a:3e:33:
         16:8e:ac:58:55:6c:07:fa:81:49:c7:22:cb:6f:2b:ac:7e:fa:
         f4:e2:1f:1f:24:b3:5f:d6:b2:2b:91:91:69:43:d5:0c:da:25:
         88:f4:1f:e4:82:15:8f:73:cc:0f:18:87:eb:19:25:1d:1d:e1:
         c8:6c:48:cb:05:00:2d:17:9b:c7:87:e3:61:52:75:a5:0b:e4:
         03:51:29:10:1d:1d:16:74:4a:0b:09:cd:59:fc:87:15:5d:60:
         df:46:01:c5:68:af:96:21:2e:02:19:16:7d:55:28:94:81:23:
         6f:b3:0a:b5:b0:02:e9:e3:e6:7a:18:86:8f:a9:ab:11:6e:53:
         e1:ff:85:07:2d:1c:99:76:24:d5:e5:72:b6:70:cc:56:22:ad:
         cc:5f:d2:7c:77:2b:6c:eb:b1:d3:cb:0b:4d:20:2c:72:34:1f:
         11:ea:4d:20:4d:34:2d:57:2d:6b:cc:f5:09:5b:8e:7c:bc:dc:
         72:b9:e7:9b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV19bhxNE/qZ57ikPR4G/xvlFSUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3
MEYxQUM1QzAeFw0yNTA3MjQxOTQ2MDlaFw0yNTA3MjgwNjQwMDlaMDMxMTAvBgNV
BAMTKEE4NTNGM0Y2QTcwOURGNDQxNUJERTRCMjkwRENGM0Y1RTE5ODY4QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRw9Sfham7ra+/I/06TyLmiMNj
rwTTsylA6jFscrgwRXYUbeVoCFhORuIovzCQ1qRo4x7GJwV6GCBAlgLP8CKKJt0x
IkoSunSz7rgyiZG4qYnhHNANIFnriQQaR6sWsnTTsqHtw5vbShzpUEybsS0Vcs43
tBcQL+m/ngxSvL9b/Y9Ros4fa2jtvqJerI/AhbXnY2KOSt0hZhskeRc67HKY6zLL
dyZAaYzWKwg05dIg5nWhHBdOydX3SRDcH3M47MHlUX/1vBHiRdezIQ3cCG5rGFHX
plz5Rn87JfOM7Usb1LHTy0yjE8C8ibv+pO1dsHi8VySBgeNZ4KopCL2ZDbAJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqFPz9qcJ30QVveSykNzz9eGYaKUwHwYDVR0j
BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2
ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx
QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi
YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG
QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHqJAhg6wlBlR7sc7b+VHZN4SlSrmgOgJcy/
Q/2mRn4PqFU8iCcuCnFZwEuV8Z1T4vnLMYH2TredKtzzAiqxpZmIkl44TJo+MxaO
rFhVbAf6gUnHIstvK6x++vTiHx8ks1/WsiuRkWlD1QzaJYj0H+SCFY9zzA8Yh+sZ
JR0d4chsSMsFAC0Xm8eH42FSdaUL5ANRKRAdHRZ0SgsJzVn8hxVdYN9GAcVor5Yh
LgIZFn1VKJSBI2+zCrWwAunj5noYho+pqxFuU+H/hQctHJl2JNXlcrZwzFYircxf
0nx3K2zrsdPLC00gLHI0HxHqTSBNNC1XLWvM9Qlbjny83HK555s=
-----END CERTIFICATE-----
Generated at Sat Jul 26 01:53:02 2025 by rpki-client