Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
File:                     BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json)
Hash identifier:          b0Umx3BzZwV7dsr4lTHLzd7GPvMtEmIL7buImwbkjX0=
Subject key identifier:   BA:CC:F8:19:5A:29:45:83:AC:D4:DA:DC:81:57:B6:DD:40:54:8C:5E
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Certificate issuer:       /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial:       1523308C39F9856D0F60A9E1B7B37341C418B6AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
Manifest number:          04F1
Signing time:             Tue 22 Jul 2025 02:30:48 +0000
Manifest this update:     Tue 22 Jul 2025 02:25:48 +0000
Manifest next update:     Fri 25 Jul 2025 05:25:48 +0000
Files and hashes:         1: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=)
                          2: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=)
                          3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=)
                          4: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=)
                          5: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=)
                          6: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=)
                          7: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: wvFbuA7wMp+0tfv8HJNOGjVcPWbH7bd4W/I3KydKmmA=)
                          8: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=)
                          9: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
                          rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 05:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:23:30:8c:39:f9:85:6d:0f:60:a9:e1:b7:b3:73:41:c4:18:b6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
        Validity
            Not Before: Jul 22 02:25:48 2025 GMT
            Not After : Jul 25 05:25:48 2025 GMT
        Subject: CN=BACCF8195A294583ACD4DADC8157B6DD40548C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:c1:ed:3e:39:c6:43:74:c2:df:2e:22:d9:
                    ea:19:18:40:5c:89:8c:4e:5a:ef:e4:b8:a0:76:c7:
                    5c:1d:5f:d5:61:87:06:c6:34:3d:7a:28:6a:04:1f:
                    52:6e:83:c4:b2:4e:fb:c7:c7:5d:60:fb:a0:ca:87:
                    93:14:01:34:f8:dc:17:7b:ba:69:ec:ee:47:64:0c:
                    f8:0c:de:b6:8b:00:37:c6:ae:e5:af:dd:08:47:10:
                    e3:c8:f8:e2:62:36:ab:0f:e3:09:b4:b6:8b:8c:d7:
                    28:d2:8d:79:5a:85:04:62:5b:75:11:3a:08:a8:3f:
                    65:f2:12:0f:23:b5:62:dd:5b:11:80:55:f6:29:25:
                    63:b0:24:a4:30:1a:14:20:a7:79:e2:63:70:48:41:
                    9f:fb:1c:6b:f5:07:b9:d8:17:a5:a1:4f:c2:a0:25:
                    a5:b9:8f:f2:cc:57:38:ce:27:c6:c2:cb:b5:bc:5d:
                    31:db:2b:0e:b3:c0:10:e0:86:82:e0:af:cf:17:77:
                    a4:0b:b4:8c:c3:31:a1:b3:a6:03:11:63:ff:c5:8c:
                    0f:20:be:02:30:04:7d:9c:0a:41:a7:27:27:e4:65:
                    50:a7:17:3c:91:8c:0f:bc:06:36:de:91:41:5a:2e:
                    df:a1:08:47:8e:6a:12:39:4a:d1:1c:b1:33:bf:7b:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CC:F8:19:5A:29:45:83:AC:D4:DA:DC:81:57:B6:DD:40:54:8C:5E
            X509v3 Authority Key Identifier:
                keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:93:5f:4b:74:69:b5:7c:17:23:79:e6:72:25:47:73:77:5d:
         df:66:7b:c1:86:24:10:05:77:0f:1e:79:39:f1:c2:e2:8d:a4:
         e1:93:c7:97:f6:41:7c:9d:81:8a:ce:f7:71:f9:ab:39:37:eb:
         85:89:58:a3:f4:11:f2:c7:a0:91:6b:3c:bc:a2:bb:76:15:64:
         c4:71:90:d5:47:07:5a:7c:ff:6f:bf:a1:32:65:69:fe:19:cd:
         25:58:af:54:0e:81:f0:9f:72:a8:2d:13:fe:e2:f0:98:c5:30:
         58:4e:c5:5f:86:76:ad:f4:27:d8:9b:67:01:32:6c:21:f3:84:
         f6:72:f2:a5:30:53:19:04:cc:6e:15:b5:43:19:1e:ad:56:9c:
         c8:ce:b2:43:eb:8f:32:cd:ca:d1:71:4f:5c:d5:c9:84:17:43:
         a4:3d:cf:7a:23:a0:49:7b:1e:38:df:fc:08:43:d7:25:24:2e:
         3e:4b:5f:42:db:c8:b7:87:91:b8:85:b0:8a:59:c1:05:21:7f:
         67:84:f6:bf:50:f7:94:00:ed:c9:d0:5f:8b:2c:ed:84:0a:03:
         3b:80:7d:ed:96:e1:34:f6:6f:42:dd:00:f6:d4:b4:6f:37:fd:
         e3:cb:ee:ef:1d:7d:cc:3d:1c:cc:de:b0:44:0d:e6:08:af:2c:
         30:bd:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:22:16 2025 by rpki-client