Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
File:                     98906779AB8F30762B65B3E6AD7F48326A08605E.mft (raw, json)
Hash identifier:          Y7mB3xPRq8VMSNHx8dk68OaubuOh+kn4u4lUEPBa1Zw=
Subject key identifier:   CD:40:D2:2C:2E:45:37:04:B1:B5:8D:D7:6D:C7:69:F5:B2:EA:97:88
Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
Certificate issuer:       /CN=98906779AB8F30762B65B3E6AD7F48326A08605E
Certificate serial:       2967BB71BCE717992383DF21FEC629FD1ADCCFFD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
Manifest number:          0168
Signing time:             Fri 25 Jul 2025 21:22:22 +0000
Manifest this update:     Fri 25 Jul 2025 21:17:22 +0000
Manifest next update:     Tue 29 Jul 2025 02:37:22 +0000
Files and hashes:         1: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: eIcKVswkxVzPLsHeuZgtjUH51030AdVpi+kyPLC0pTE=)
                          2: 98906779AB8F30762B65B3E6AD7F48326A08605E.crl (hash: sM2H3N9LA7kQ2bYgN1aV+3otnyqsuHlBdbY7YKwD32c=)
                          3: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: bdtz3V8NAXQ4FsPLxYoFwHQihtebd8fh/UmhU4gX81I=)
                          4: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 7rcqjDK1en4Ve1PM9Wuc4mrM+RdU8sJ+v75czM9rFEY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl
                          rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 02:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:67:bb:71:bc:e7:17:99:23:83:df:21:fe:c6:29:fd:1a:dc:cf:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E
        Validity
            Not Before: Jul 25 21:17:22 2025 GMT
            Not After : Jul 29 02:37:22 2025 GMT
        Subject: CN=CD40D22C2E453704B1B58DD76DC769F5B2EA9788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7f:31:95:fd:b9:5c:67:5c:26:66:d6:4c:d2:
                    ae:4a:b6:af:ca:b4:6d:e5:72:06:c3:cf:39:1b:57:
                    4b:59:b6:94:97:74:96:65:f9:0f:45:8c:62:7d:02:
                    e2:64:87:70:d0:a3:a5:fd:d3:b1:de:37:76:02:8f:
                    d3:6f:5e:94:70:20:88:5a:de:46:7b:0b:55:60:50:
                    e7:45:cc:c2:a4:a5:c7:a8:b4:59:f6:97:47:21:32:
                    6d:51:d6:eb:c8:5d:68:e9:78:3e:18:cc:64:b4:8e:
                    f2:77:5e:35:09:86:f2:6a:27:b2:7a:db:72:f1:35:
                    0a:34:2b:0c:3c:23:54:60:9c:e0:a7:2a:77:06:0e:
                    cd:23:6f:0b:82:df:60:38:28:0f:33:42:e9:67:7a:
                    c4:f8:81:73:2f:9d:5f:c5:c9:e1:13:a1:b3:7d:96:
                    8c:64:fc:f6:b6:8a:ba:b3:d9:c7:a0:c3:58:22:31:
                    23:f4:53:d4:89:e4:f7:50:fb:1b:5b:e9:7e:31:d1:
                    bf:49:a7:27:bc:1e:c6:ad:fa:fd:05:cd:0d:61:a6:
                    da:a0:37:66:a6:e0:2f:14:b7:cd:9f:c5:1c:e6:49:
                    fe:e3:8e:9d:96:01:f9:05:ee:f7:ef:da:e6:75:24:
                    a1:e9:b4:1c:27:84:f7:77:b1:69:e5:8f:f8:68:fb:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:40:D2:2C:2E:45:37:04:B1:B5:8D:D7:6D:C7:69:F5:B2:EA:97:88
            X509v3 Authority Key Identifier:
                keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:bd:04:d6:db:53:31:c2:48:fd:11:2e:48:9a:b2:4f:e7:17:
         07:c7:3b:b6:c1:79:47:d3:2f:f1:f2:25:93:34:49:d3:95:18:
         ad:10:66:1a:78:41:1c:f2:5c:b1:be:93:72:e8:7f:65:31:ae:
         03:94:b4:b7:f3:c3:ae:75:a2:7d:8c:b9:50:0e:26:f6:4f:d8:
         12:27:eb:8b:10:25:bb:0f:a1:7f:ba:6a:e1:bf:9d:81:78:43:
         f1:c0:92:26:78:39:39:2b:a5:64:30:f6:0c:cb:f2:d8:fb:77:
         2a:54:f2:19:37:5d:4e:4a:57:ac:cd:a2:09:c5:78:f5:db:e4:
         d6:80:1e:e2:61:fb:7b:b7:0b:ab:b7:96:df:d3:0d:8d:9e:9e:
         b0:69:2a:57:16:6e:7b:5d:ed:71:d4:7c:6a:a9:29:99:f6:07:
         0e:64:c5:3d:84:4f:c8:cc:a4:38:73:66:52:e9:9b:b6:d2:a8:
         2f:71:de:dc:93:f8:a4:0e:3d:be:61:4e:81:30:41:ea:ac:6b:
         eb:83:b6:a7:0d:a6:ee:cc:79:bf:07:69:c4:5d:41:2c:24:76:
         4c:11:27:ca:54:6f:54:cb:b9:9c:9a:3d:e6:d3:7f:90:f5:d0:
         8f:ce:d7:bf:5d:9f:66:0b:3c:87:6d:5e:ab:63:ca:ec:68:27:
         ef:67:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:54:18 2025 by rpki-client