Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
File:                     BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json)
Hash identifier:          6cxfFlCgyJF428i7luoSVgWVxvgs4/+0z6rJvxhQ7As=
Subject key identifier:   DF:F4:3A:2C:11:0E:F1:A4:0A:A1:6D:DE:EA:F9:6A:94:02:12:62:76
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Certificate issuer:       /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial:       5F53BDDB397D67320E21E4277A61771C76B9CAE8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
Manifest number:          04F2
Signing time:             Thu 24 Jul 2025 05:30:48 +0000
Manifest this update:     Thu 24 Jul 2025 05:25:48 +0000
Manifest next update:     Sun 27 Jul 2025 06:59:48 +0000
Files and hashes:         1: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=)
                          2: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=)
                          3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=)
                          4: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=)
                          5: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: wAbZ28BhxZSCttNAjouxhwErtTrMhTFBAkcwOGLqqC0=)
                          6: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=)
                          7: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=)
                          8: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=)
                          9: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
                          rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 06:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:53:bd:db:39:7d:67:32:0e:21:e4:27:7a:61:77:1c:76:b9:ca:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
        Validity
            Not Before: Jul 24 05:25:48 2025 GMT
            Not After : Jul 27 06:59:48 2025 GMT
        Subject: CN=DFF43A2C110EF1A40AA16DDEEAF96A9402126276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:3b:3f:09:93:4d:90:57:1c:f4:9b:c0:c4:
                    15:c8:bb:7b:e3:66:51:ef:47:42:c0:d6:00:b7:7f:
                    26:91:fb:68:be:99:0e:d1:ac:bb:90:e8:5b:33:29:
                    c4:46:d9:f3:c0:cc:ca:36:f4:66:e2:38:7d:df:5d:
                    78:f2:f5:06:2e:42:8f:bf:60:ed:e6:d9:d7:be:c4:
                    2f:31:ba:0a:cb:00:8d:ae:45:3c:fc:57:ad:73:30:
                    9c:6b:bf:b8:72:84:48:f2:2c:d9:75:dc:75:cd:0e:
                    e5:ea:c4:ef:cd:a2:fd:c2:85:7b:2d:97:5a:40:61:
                    dd:2e:4d:11:f7:c6:ba:fd:24:7f:8b:bf:12:90:92:
                    37:cb:88:03:c1:c9:9e:dd:99:38:9d:35:77:89:83:
                    b8:d8:fb:b2:c1:68:f1:bb:14:6e:ce:ee:29:7c:d3:
                    de:f5:8a:03:4e:13:77:4f:3b:d6:2c:6f:c8:d0:88:
                    2b:97:80:c7:fd:6d:1e:f0:02:73:4b:8a:8d:1e:b7:
                    f2:d9:c5:75:bd:a5:d4:63:7d:14:38:7f:31:5f:57:
                    b5:80:cf:04:5c:d3:82:81:17:ba:48:c8:b4:3a:93:
                    d0:56:80:e8:56:8a:77:5e:90:a0:28:01:52:06:9c:
                    15:40:af:e6:a7:2e:ac:4a:41:3b:a8:65:62:8f:4d:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F4:3A:2C:11:0E:F1:A4:0A:A1:6D:DE:EA:F9:6A:94:02:12:62:76
            X509v3 Authority Key Identifier:
                keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9d:92:4f:d0:ba:a4:bc:0d:36:a7:67:6a:8c:ef:2a:ac:c2:
         09:59:d3:76:3b:7e:34:ae:a2:b5:8f:d7:2d:62:28:ea:98:5f:
         0c:f7:08:f2:01:20:ed:d7:ac:da:d7:a3:99:a9:6d:40:7c:91:
         e9:3f:57:a7:54:ea:9b:86:c2:a2:ab:85:6e:de:79:47:f4:9e:
         78:a7:9c:b4:9c:c9:7f:ed:0c:22:2d:39:df:e4:90:8d:3b:58:
         8b:9f:14:f6:a8:a6:ff:55:9f:04:61:52:e0:f5:fc:3a:f1:ca:
         a4:8c:84:58:c3:6a:86:20:4f:eb:0f:7d:b1:f0:26:51:bb:d7:
         e1:ab:51:43:90:d7:6d:ef:81:86:9b:64:99:1d:36:d9:cd:00:
         4b:ff:9b:b8:44:72:1e:0d:97:bc:82:80:bf:a4:e0:ba:0b:6f:
         8f:3f:35:2a:4e:01:4a:47:76:39:d1:d4:44:6a:39:7c:e2:3e:
         90:b7:2a:a4:8a:41:f2:07:33:8d:b9:a7:d6:4d:23:bd:5b:70:
         d8:ab:5e:36:8f:ff:ba:a9:89:5b:ab:f6:25:5f:08:c2:ce:57:
         29:98:f6:21:ab:19:19:20:12:40:66:3b:34:d3:d6:44:fb:c2:
         41:25:72:51:de:ed:77:2d:e8:b9:e4:4b:ca:fc:df:fc:e5:55:
         47:dd:d0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:03:03 2025 by rpki-client