Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft
File:                     D714F468978E86AB39DC1CFD7B22A6CED936605D.mft (raw, json)
Hash identifier:          GTzyjDWrEQGoayJOqE19smxNHpa3h7wNAe3ttkY8N5c=
Subject key identifier:   E5:15:F9:F3:30:52:22:D7:21:CB:8D:6C:B8:F8:26:48:E0:6E:95:FD
Authority key identifier: D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D
Certificate issuer:       /CN=D714F468978E86AB39DC1CFD7B22A6CED936605D
Certificate serial:       0E17A250998C1133389E6F24B8D09CBBC2D05DB7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft
Manifest number:          0195
Signing time:             Sun 20 Jul 2025 01:22:14 +0000
Manifest this update:     Sun 20 Jul 2025 01:17:14 +0000
Manifest next update:     Wed 23 Jul 2025 10:09:14 +0000
Files and hashes:         1: D714F468978E86AB39DC1CFD7B22A6CED936605D.crl (hash: AlaNaJCIfubaQbpVN8qzy39GeaDLCDX45z1xCQQIlfg=)
                          2: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: qNLSNSyoRSqq66rE3tVrbbxeIYZqB1Bw0+wP79LTdOY=)
                          3: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: LIbGQcjTGWGxJqCR/9o7Sf1Rl1mg0hzyvdT64dJ+oqM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl
                          rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 10:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:17:a2:50:99:8c:11:33:38:9e:6f:24:b8:d0:9c:bb:c2:d0:5d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D714F468978E86AB39DC1CFD7B22A6CED936605D
        Validity
            Not Before: Jul 20 01:17:14 2025 GMT
            Not After : Jul 23 10:09:14 2025 GMT
        Subject: CN=E515F9F3305222D721CB8D6CB8F82648E06E95FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:93:94:1f:57:54:cf:73:0f:f0:ee:72:4d:
                    8d:3b:7c:54:de:fb:4f:08:1c:75:9b:5c:ad:d1:a3:
                    34:a3:52:d7:97:bd:aa:e7:c9:07:1c:54:c5:62:a7:
                    3e:85:5a:70:d2:6e:ab:5d:f2:6e:04:5d:42:5b:71:
                    e5:81:bc:11:93:11:94:09:11:cd:54:ac:2c:96:0a:
                    4b:aa:e9:d6:3f:08:db:aa:f7:a7:ab:56:3a:23:c0:
                    b5:d8:17:fd:3c:35:75:3e:68:3c:93:ca:22:4c:98:
                    1a:29:58:12:b1:76:3c:0b:17:e0:50:d1:2f:23:15:
                    39:2a:6c:81:79:0f:10:eb:51:53:13:b9:e3:6d:ab:
                    4e:d6:a7:67:74:04:1a:2a:89:1b:bb:06:d5:c3:58:
                    c5:15:e2:8b:0e:3d:6f:55:92:ca:09:ac:96:01:f2:
                    37:31:1c:7f:16:00:0d:42:68:6e:2e:61:21:2f:7e:
                    5a:45:41:93:26:b8:a2:4b:cc:95:00:b3:30:cb:f6:
                    01:b8:cc:be:b9:b4:ae:bd:eb:95:d7:c6:92:67:76:
                    4b:9c:3f:fc:d8:cc:0d:08:50:ac:cd:13:99:b9:cc:
                    da:83:fd:3e:63:53:36:9d:9a:d8:7f:dd:de:99:1f:
                    26:1f:31:ce:f6:88:f0:6b:a4:82:63:ba:3d:c4:0e:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:15:F9:F3:30:52:22:D7:21:CB:8D:6C:B8:F8:26:48:E0:6E:95:FD
            X509v3 Authority Key Identifier:
                keyid:D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c5:59:c6:fc:54:b4:a9:48:5e:20:e6:47:33:b9:19:6f:66:
         a6:d8:cd:45:f3:2f:96:a0:37:c0:c9:4c:ee:f9:d0:35:d4:d3:
         98:cf:76:ef:30:b4:41:14:76:12:42:37:72:87:01:19:79:9e:
         3a:08:47:fb:62:9a:29:4a:cc:37:d2:63:2b:41:c6:c6:73:6a:
         bf:4c:6a:ec:0c:62:3d:a6:b4:9a:05:b2:f5:b5:7c:64:0b:5c:
         58:8c:2d:1f:88:ad:60:70:85:6c:1f:13:e1:39:e0:d4:dc:e6:
         b2:c1:18:d2:24:97:cb:55:e7:5d:da:c1:1c:f5:86:d1:8e:b2:
         21:c6:a6:b0:11:0a:58:70:21:46:1a:fd:eb:19:78:98:d8:78:
         62:ef:95:83:9f:d4:ca:ab:24:0b:2b:cb:fd:98:8b:46:82:1f:
         be:bc:78:71:df:2e:98:59:b2:74:52:92:a9:ba:e7:dd:c4:30:
         01:40:9f:8a:5f:bf:40:ec:37:70:70:a6:09:56:61:00:fc:37:
         f4:af:b9:87:50:e3:25:3d:66:0a:43:a5:ee:65:0e:fb:f3:dc:
         e5:95:ce:87:58:76:bc:20:62:22:11:47:91:3b:51:82:85:3e:
         91:82:65:47:7a:9f:88:7f:c7:55:2b:ae:56:da:99:fb:c7:0e:
         42:6e:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:29:24 2025 by rpki-client