Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
File:                     26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json)
Hash identifier:          BTBwubxv7KgUM2g6OvLLFzCzJmCRx7VXe+fW86sbP6E=
Subject key identifier:   D7:4F:DF:BE:3C:5A:1B:A7:23:76:D1:27:BD:A5:52:16:A8:C5:07:CC
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       4F3407A855B31CF8D60130E5EC89AECB8A9117AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
Manifest number:          04F0
Signing time:             Tue 22 Jul 2025 23:20:01 +0000
Manifest this update:     Tue 22 Jul 2025 23:15:01 +0000
Manifest next update:     Sat 26 Jul 2025 02:26:01 +0000
Files and hashes:         1: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=)
                          2: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=)
                          3: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=)
                          4: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=)
                          5: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=)
                          6: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: a8rPm4esQ1XexrHzhv52YwJKzxM1+DNdIQgbm5vcYGg=)
                          7: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=)
                          8: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=)
                          9: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=)
                          10: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:34:07:a8:55:b3:1c:f8:d6:01:30:e5:ec:89:ae:cb:8a:91:17:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Jul 22 23:15:01 2025 GMT
            Not After : Jul 26 02:26:01 2025 GMT
        Subject: CN=D74FDFBE3C5A1BA72376D127BDA55216A8C507CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:2c:c7:71:d6:82:1e:c1:b5:28:b2:14:91:
                    e7:db:c3:be:fa:9f:80:43:94:10:f4:61:5c:c0:43:
                    24:0f:05:81:46:47:19:32:79:48:aa:8d:16:79:55:
                    66:8b:48:4b:89:b7:97:27:ca:7c:f4:a4:17:8b:f2:
                    9a:2d:c7:c4:02:1e:78:f2:60:34:cd:bf:9c:b7:9e:
                    c5:59:ae:5e:99:37:7b:72:0c:14:73:c7:cc:c3:e3:
                    4e:c9:6d:f7:45:b5:78:dc:42:81:9b:9f:77:be:7a:
                    d3:97:73:51:c0:3f:e9:fb:d1:4c:be:a0:88:42:b3:
                    e3:d6:95:67:44:e0:af:08:e4:a3:31:db:5a:fc:a1:
                    90:29:f0:64:1d:7b:cc:72:1d:5a:53:24:c4:5f:92:
                    70:f3:7b:f3:65:e5:c6:80:c7:b4:a9:3f:40:a4:2a:
                    30:16:80:eb:c5:4b:a2:06:3f:58:55:a5:0a:dc:96:
                    94:82:c2:9f:21:54:e8:41:58:e0:5a:c6:13:b5:40:
                    82:b5:f8:cf:8b:cc:a7:2c:d4:f6:25:69:26:93:eb:
                    2e:b5:ff:75:ae:83:b9:55:51:c0:5c:cd:32:d8:9f:
                    f7:90:31:d2:c0:6c:54:6f:6e:a0:a4:3f:a6:a6:ed:
                    ce:e9:c8:3a:d8:31:e2:91:93:3f:a2:b5:f3:ef:53:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4F:DF:BE:3C:5A:1B:A7:23:76:D1:27:BD:A5:52:16:A8:C5:07:CC
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:91:e6:48:58:29:5c:d3:04:cc:0b:81:9d:1a:30:c6:43:c0:
         4d:23:ed:d1:38:19:45:c5:c9:9b:cf:28:e0:8e:bf:ec:4e:6f:
         2b:98:61:e2:51:bd:7e:76:04:34:f0:54:b5:9f:12:84:8b:b6:
         56:e9:82:ae:b3:8e:c6:3f:38:e4:5a:87:78:68:43:2f:7d:a5:
         7d:32:8b:bf:58:28:95:ed:40:df:34:db:32:eb:82:d4:b3:3a:
         67:6e:7f:06:14:84:f6:11:2b:2f:09:00:0a:f0:a4:09:a9:61:
         8d:94:18:ad:bd:50:b8:10:b1:4e:73:4b:5c:70:cf:8c:d0:74:
         ea:10:07:8e:7c:06:5c:65:27:0c:a2:b0:b5:16:31:c5:fb:ec:
         38:de:4d:e7:d9:05:16:1b:fd:49:4c:26:a5:51:ad:bc:e8:2c:
         2b:02:4a:f2:1f:d7:f1:59:5a:1c:5f:19:22:f6:37:03:f9:ac:
         5a:47:75:dc:bd:ec:4a:65:c9:14:1f:2f:57:4f:32:be:16:41:
         1c:61:7a:00:37:aa:bc:17:33:1b:54:f1:c0:a5:e4:ef:8a:ca:
         20:94:dd:1e:86:89:76:a0:cd:42:87:43:77:ba:2b:47:a8:1d:
         7d:db:a4:fb:97:4c:8f:e4:f4:e9:50:db:56:0a:39:ba:1d:e7:
         94:e3:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:24:44 2025 by rpki-client