Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
File:                     F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json)
Hash identifier:          eaReUjL7W/TeUkRktn/+kSbjRst7zbFLHUswxihvObA=
Subject key identifier:   C9:1B:BB:A3:2A:DE:A7:4D:22:73:BC:7B:12:C5:31:4B:B2:75:45:0A
Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C
Certificate issuer:       /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C
Certificate serial:       42B6A79B911B147C9E071128A98426DDBEEC4681
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
Manifest number:          01C8
Signing time:             Sun 20 Jul 2025 13:02:40 +0000
Manifest this update:     Sun 20 Jul 2025 12:57:40 +0000
Manifest next update:     Wed 23 Jul 2025 13:17:40 +0000
Files and hashes:         1: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=)
                          2: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: dAQY+mLzx7kcD5BCPfP0AO5D8c/IneUBxwP+BsjKCsk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl
                          rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 13:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b6:a7:9b:91:1b:14:7c:9e:07:11:28:a9:84:26:dd:be:ec:46:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C
        Validity
            Not Before: Jul 20 12:57:40 2025 GMT
            Not After : Jul 23 13:17:40 2025 GMT
        Subject: CN=C91BBBA32ADEA74D2273BC7B12C5314BB275450A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:d0:6e:dc:b1:b6:fe:72:3c:4c:99:5e:ba:
                    46:ff:e8:76:b8:52:1e:79:3c:43:84:4e:86:aa:e4:
                    d2:25:ac:18:b6:70:27:65:56:2a:70:dd:60:c5:d0:
                    77:22:11:3b:88:36:62:b0:65:5d:94:ea:34:b1:89:
                    ba:fd:3f:27:9e:0f:22:63:98:96:1e:67:71:86:8c:
                    3a:43:ec:a1:aa:58:49:81:e0:e7:9d:7a:67:4f:ca:
                    65:4a:a8:12:6a:d7:c8:04:47:22:f5:1c:0e:8f:0c:
                    c4:e9:6e:9b:1f:f1:78:d9:26:45:7d:a9:d5:66:b3:
                    2a:3e:41:8d:ba:be:ce:63:0d:0c:05:e4:8b:cc:d8:
                    f6:30:f6:b2:c4:a4:b9:e1:6d:f9:18:0d:4c:d3:84:
                    06:2c:2f:d8:a1:7e:ae:10:b2:f1:5b:c9:cb:84:b9:
                    0b:73:c3:1b:8d:0f:92:7d:cb:2b:2a:fe:c6:ba:2c:
                    8f:67:ba:80:45:19:64:b6:89:ab:64:62:6f:8d:fd:
                    c5:af:0e:fe:03:5c:58:87:02:ce:cc:c4:c2:0d:74:
                    e0:7b:7a:73:54:fd:cf:9e:3c:c9:de:5d:49:05:ec:
                    05:73:a3:59:b9:a6:c1:ec:ea:2a:88:b4:5d:c5:f4:
                    5a:ad:98:88:a5:82:0c:0d:51:d6:08:0c:07:3f:87:
                    9a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1B:BB:A3:2A:DE:A7:4D:22:73:BC:7B:12:C5:31:4B:B2:75:45:0A
            X509v3 Authority Key Identifier:
                keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:17:91:4b:34:2c:07:c5:bc:ab:00:19:fe:06:07:88:7d:a3:
         ae:c5:18:d7:5e:bc:f1:4f:14:88:86:cf:8c:71:78:6e:97:10:
         3e:07:bd:75:53:ac:ed:a2:8a:9d:a5:07:d7:ad:86:fe:09:a9:
         33:e9:d7:ea:68:87:08:53:53:64:7e:62:d1:93:d7:4d:db:a4:
         67:fd:19:1c:74:74:b9:cd:7d:01:75:08:55:94:68:44:07:21:
         c4:8a:f8:87:6d:74:0f:54:0c:f6:01:9e:65:ae:ff:66:66:c0:
         a9:4d:97:0d:0c:4e:68:80:93:32:33:0c:94:de:3a:59:95:e1:
         88:db:e8:60:f5:d3:b8:51:aa:06:c4:89:d7:31:14:04:5b:e8:
         2a:19:38:a8:bb:7c:5a:e3:f4:f1:8a:d9:73:c8:7b:59:10:3f:
         bd:74:64:01:95:af:1b:e1:b4:99:e3:e1:96:17:44:5d:52:06:
         51:13:b7:9f:41:83:1f:9e:02:37:fe:17:f3:57:8e:70:39:ed:
         8b:34:a3:c6:db:5a:b3:cf:cb:66:4f:7a:99:ea:cc:4c:cc:d2:
         7b:bd:b9:de:18:3a:3c:53:cb:83:a3:58:cc:06:2a:b8:c3:6c:
         2d:22:88:d4:c0:0a:98:8c:cd:4f:9f:eb:d2:44:5e:6f:a9:d8:
         11:ab:09:1d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQranm5EbFHyeBxEoqYQm3b7sRoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3
MEYxQUM1QzAeFw0yNTA3MjAxMjU3NDBaFw0yNTA3MjMxMzE3NDBaMDMxMTAvBgNV
BAMTKEM5MUJCQkEzMkFERUE3NEQyMjczQkM3QjEyQzUzMTRCQjI3NTQ1MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8j9Bu3LG2/nI8TJleukb/6Ha4
Uh55PEOEToaq5NIlrBi2cCdlVipw3WDF0HciETuINmKwZV2U6jSxibr9PyeeDyJj
mJYeZ3GGjDpD7KGqWEmB4OedemdPymVKqBJq18gERyL1HA6PDMTpbpsf8XjZJkV9
qdVmsyo+QY26vs5jDQwF5IvM2PYw9rLEpLnhbfkYDUzThAYsL9ihfq4QsvFbycuE
uQtzwxuND5J9yysq/sa6LI9nuoBFGWS2iatkYm+N/cWvDv4DXFiHAs7MxMINdOB7
enNU/c+ePMneXUkF7AVzo1m5psHs6iqItF3F9FqtmIilggwNUdYIDAc/h5oXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyRu7oyrep00ic7x7EsUxS7J1RQowHwYDVR0j
BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2
ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx
QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi
YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG
QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKAXkUs0LAfFvKsAGf4GB4h9o67FGNdevPFP
FIiGz4xxeG6XED4HvXVTrO2iip2lB9ethv4JqTPp1+pohwhTU2R+YtGT103bpGf9
GRx0dLnNfQF1CFWUaEQHIcSK+IdtdA9UDPYBnmWu/2ZmwKlNlw0MTmiAkzIzDJTe
OlmV4Yjb6GD107hRqgbEidcxFARb6CoZOKi7fFrj9PGK2XPIe1kQP710ZAGVrxvh
tJnj4ZYXRF1SBlETt59Bgx+eAjf+F/NXjnA57Ys0o8bbWrPPy2ZPepnqzEzM0nu9
ud4YOjxTy4OjWMwGKrjDbC0iiNTACpiMzU+f69JEXm+p2BGrCR0=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:53:31 2025 by rpki-client