Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
File:                     26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json)
Hash identifier:          umH/qD9cEgNFQgY5/Bn/hfPbEKb45EDOz7DAx6tv0j8=
Subject key identifier:   6D:A6:83:53:87:3A:B7:FE:99:C9:E4:D6:43:6A:BE:F9:38:F8:93:C5
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       18C39ADE2CDAA8DC472E368D7D6FABB4A3F0939A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
Manifest number:          04F1
Signing time:             Fri 25 Jul 2025 02:30:01 +0000
Manifest this update:     Fri 25 Jul 2025 02:25:01 +0000
Manifest next update:     Mon 28 Jul 2025 07:21:01 +0000
Files and hashes:         1: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=)
                          2: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=)
                          3: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=)
                          4: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=)
                          5: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=)
                          6: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=)
                          7: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=)
                          8: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=)
                          9: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=)
                          10: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: v9x6FFKc5YBM7YjjjhWnh+cgr4TE8pVruU/rs5/MlL4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 06:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c3:9a:de:2c:da:a8:dc:47:2e:36:8d:7d:6f:ab:b4:a3:f0:93:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Jul 25 02:25:01 2025 GMT
            Not After : Jul 28 07:21:01 2025 GMT
        Subject: CN=6DA68353873AB7FE99C9E4D6436ABEF938F893C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:c4:91:a0:3a:37:e9:43:50:02:89:42:6c:
                    76:d8:00:39:48:85:ce:2d:aa:93:29:72:87:7b:5f:
                    57:b6:74:09:81:1a:47:59:12:82:ba:cb:a1:3b:e0:
                    0a:5d:8f:26:95:8b:6f:93:a3:e0:9b:1b:c1:0e:24:
                    bb:82:82:81:e9:89:24:5b:5a:2d:76:c8:59:ae:fd:
                    6f:a0:0f:46:dd:88:7c:fc:1c:a7:5c:ba:b7:c5:7e:
                    38:44:ed:94:38:97:4a:7f:34:c9:39:47:87:2a:10:
                    71:75:14:3b:1d:65:38:8d:ed:b8:d0:70:a1:8f:b2:
                    1c:95:35:a6:41:9a:a0:24:93:36:52:aa:dc:1f:81:
                    4d:34:f3:a9:6b:e9:74:b5:1b:cd:36:d3:5b:4b:6e:
                    24:af:6d:a2:90:ed:70:63:85:ff:96:1d:09:d1:76:
                    bc:bf:c5:55:1d:b1:4a:88:65:cb:bc:87:1f:4d:77:
                    09:15:7a:7f:30:50:b4:34:5c:e4:cc:d6:7a:90:23:
                    51:50:48:91:27:7a:54:21:2e:cf:6a:3b:9c:82:fc:
                    76:4a:fd:05:ab:2a:5d:73:b9:49:55:91:51:37:fb:
                    de:d9:cd:96:fb:8f:b7:d6:10:63:3f:2c:6a:a6:df:
                    2a:fd:8f:fd:3b:ac:c7:54:0c:e4:58:67:6a:4f:36:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A6:83:53:87:3A:B7:FE:99:C9:E4:D6:43:6A:BE:F9:38:F8:93:C5
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a4:9f:c0:eb:ae:07:b4:ee:f5:0f:04:32:b0:fb:99:05:51:
         1d:c3:b9:6e:f9:de:bb:5d:39:ae:a2:19:31:5e:d8:9c:2e:2a:
         fb:2d:a5:01:34:62:fe:0d:5a:5f:da:64:02:e0:9b:15:a9:27:
         12:ff:b8:cd:8b:74:dd:b5:94:fa:6a:6e:6f:e8:f5:97:fe:67:
         90:d2:c2:ed:f1:f1:13:5f:9d:70:80:29:4e:c9:3c:10:21:19:
         8b:9a:6e:b9:33:45:26:84:11:d6:34:89:38:7a:aa:25:74:e0:
         75:5a:52:9a:2b:51:b9:f4:34:21:94:4d:b0:4f:83:18:71:80:
         55:5c:30:df:3d:81:d4:5f:cf:6e:fc:2a:dd:df:3e:8c:d5:64:
         f7:44:e6:d7:69:61:6b:dd:6e:5f:18:92:6f:f0:d8:32:04:c7:
         fa:3c:c7:ae:51:72:d6:36:fd:6e:ef:14:20:b3:48:e7:12:30:
         02:fd:2a:f4:0f:9f:3a:6e:6a:e5:b7:f8:5b:c2:04:10:51:f2:
         fd:68:1d:23:93:e6:ed:71:bb:8b:fc:93:84:b5:ed:67:b5:3b:
         a0:61:5f:b8:6c:87:42:7f:50:54:2f:44:12:6d:b7:8d:c1:7b:
         c0:29:24:ae:d7:af:ea:b8:e6:42:24:06:b9:6f:ff:79:72:e1:
         bb:e1:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:23:18 2025 by rpki-client