Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
File:                     6862B9697E607C0C4861E56917A18D87AC33A721.mft (raw, json)
Hash identifier:          2cOC/13n4PYqFFjOibs4qtBplF5RVKzr/y6SO+7qQ70=
Subject key identifier:   B2:18:1B:2B:15:C3:D3:B9:F6:57:4D:08:41:49:B7:67:0F:17:02:4E
Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21
Certificate issuer:       /CN=6862B9697E607C0C4861E56917A18D87AC33A721
Certificate serial:       0BED53EF6AAF94A18E78CF69DDF7DAC871FBC01C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
Manifest number:          01A2
Signing time:             Tue 22 Jul 2025 00:52:08 +0000
Manifest this update:     Tue 22 Jul 2025 00:47:08 +0000
Manifest next update:     Fri 25 Jul 2025 09:45:08 +0000
Files and hashes:         1: 6862B9697E607C0C4861E56917A18D87AC33A721.crl (hash: pNxx/0xN++X4LYDNjA/w6xliWmZf1NJVQmk4tQLsg+M=)
                          2: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: mAaFNkz4VS/8CUTW6nLj8oCW6VaOOiFXLJeViPHtvE4=)
                          3: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: dF+8Wtg6B9yArRChkZjRjTgsTdgcRkNXBMlkqZFq73s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl
                          rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 03:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ed:53:ef:6a:af:94:a1:8e:78:cf:69:dd:f7:da:c8:71:fb:c0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721
        Validity
            Not Before: Jul 22 00:47:08 2025 GMT
            Not After : Jul 25 09:45:08 2025 GMT
        Subject: CN=B2181B2B15C3D3B9F6574D084149B7670F17024E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:35:48:fc:7b:de:b2:99:2d:83:18:91:0b:
                    58:66:b2:c5:07:dc:c3:13:7a:40:bb:65:0a:6d:0f:
                    33:c6:ba:f1:ed:f1:ba:90:08:35:74:c4:0d:c0:3f:
                    db:c3:58:bc:a8:94:c1:63:21:d1:0f:d9:04:51:75:
                    e1:e4:7d:cf:c7:34:ae:b8:27:80:f3:c1:95:1e:ef:
                    d9:76:9f:97:ed:0d:e9:18:16:24:99:e4:53:46:3f:
                    55:9a:9a:18:57:fb:1f:64:b0:a8:43:73:4d:eb:40:
                    8f:43:b8:0a:f3:33:0e:a9:f2:48:f9:c6:79:91:83:
                    60:0f:ed:d3:90:d7:33:fc:8f:5b:96:16:b6:3a:02:
                    87:34:6c:20:b6:a6:08:48:86:b1:e9:91:09:b8:b5:
                    b5:b9:b6:f1:aa:f6:f3:95:11:dd:e3:9d:83:08:07:
                    38:3b:40:7b:b2:17:b2:29:55:6e:8b:b3:34:60:0d:
                    97:6c:10:4c:57:b0:9b:c4:3c:f5:b5:8c:76:3a:52:
                    6a:8d:ac:07:ed:98:37:92:78:ef:68:1e:c9:67:39:
                    cf:9e:da:14:ab:59:8b:56:56:a4:1f:6f:48:d4:f4:
                    14:78:63:a1:1b:2a:70:93:1a:b8:67:0d:98:26:4a:
                    a3:5d:40:3f:67:d6:d8:a0:df:98:2a:62:96:1f:41:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:18:1B:2B:15:C3:D3:B9:F6:57:4D:08:41:49:B7:67:0F:17:02:4E
            X509v3 Authority Key Identifier:
                keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:30:39:98:2b:03:52:43:14:4d:8a:a8:32:10:80:6c:10:84:
         f2:b7:15:c0:69:94:d8:fd:d0:78:56:91:de:86:f9:40:17:b2:
         f1:c3:c7:b4:68:95:7d:57:8f:10:8b:b1:09:82:d5:0d:3b:55:
         81:4a:50:5f:2f:2e:e5:41:bb:9c:77:cf:42:61:ab:75:a4:e7:
         d0:e0:6b:f7:4c:43:87:1c:2d:17:b0:9c:00:17:23:61:fc:fd:
         4a:a6:29:88:e9:dd:ce:36:32:7f:52:de:ef:fc:b4:87:66:bc:
         f2:bc:89:ed:b0:19:71:27:31:a7:1a:30:da:80:8a:35:68:c9:
         76:98:93:fb:7d:d2:14:94:14:e9:28:1c:11:86:a7:db:14:d7:
         46:04:61:34:16:3c:3c:fc:8f:fd:d3:39:5b:7e:1f:82:45:bb:
         81:3d:13:f4:87:d8:a0:4f:a6:ee:80:52:1a:7f:ce:4a:af:05:
         cd:6e:bd:cc:a7:cf:1a:4b:e2:70:c7:e9:0a:24:b0:29:dc:c3:
         a6:25:a7:1d:7b:0f:12:ad:5f:bc:bb:df:0c:3f:c0:24:5d:c2:
         8a:b4:8e:5a:88:62:df:a3:38:6d:93:8f:f6:48:40:11:d7:ef:
         63:ac:94:1d:e7:fa:36:73:2f:14:a9:a8:99:0b:3e:fe:da:20:
         88:16:ed:fb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC+1T72qvlKGOeM9p3ffayHH7wBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdB
QzMzQTcyMTAeFw0yNTA3MjIwMDQ3MDhaFw0yNTA3MjUwOTQ1MDhaMDMxMTAvBgNV
BAMTKEIyMTgxQjJCMTVDM0QzQjlGNjU3NEQwODQxNDlCNzY3MEYxNzAyNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GjVI/HvespktgxiRC1hmssUH
3MMTekC7ZQptDzPGuvHt8bqQCDV0xA3AP9vDWLyolMFjIdEP2QRRdeHkfc/HNK64
J4DzwZUe79l2n5ftDekYFiSZ5FNGP1WamhhX+x9ksKhDc03rQI9DuArzMw6p8kj5
xnmRg2AP7dOQ1zP8j1uWFrY6Aoc0bCC2pghIhrHpkQm4tbW5tvGq9vOVEd3jnYMI
Bzg7QHuyF7IpVW6LszRgDZdsEExXsJvEPPW1jHY6UmqNrAftmDeSeO9oHslnOc+e
2hSrWYtWVqQfb0jU9BR4Y6EbKnCTGrhnDZgmSqNdQD9n1tig35gqYpYfQRKTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUshgbKxXD07n2V00IQUm3Zw8XAk4wHwYDVR0j
BBgwFoAUaGK5aX5gfAxIYeVpF6GNh6wzpyEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MjVlODhiZC03NWUyLTQ1ZGYtODg2Ny00NTQwMmZjN2M0YjEvMC82ODYyQjk2OTdF
NjA3QzBDNDg2MUU1NjkxN0ExOEQ4N0FDMzNBNzIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdBQzMz
QTcyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4
NjctNDU0MDJmYzdjNGIxLzAvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThE
ODdBQzMzQTcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIUwOZgrA1JDFE2KqDIQgGwQhPK3FcBplNj9
0HhWkd6G+UAXsvHDx7RolX1XjxCLsQmC1Q07VYFKUF8vLuVBu5x3z0Jhq3Wk59Dg
a/dMQ4ccLRewnAAXI2H8/UqmKYjp3c42Mn9S3u/8tIdmvPK8ie2wGXEnMacaMNqA
ijVoyXaYk/t90hSUFOkoHBGGp9sU10YEYTQWPDz8j/3TOVt+H4JFu4E9E/SH2KBP
pu6AUhp/zkqvBc1uvcynzxpL4nDH6QoksCncw6Ylpx17DxKtX7y73ww/wCRdwoq0
jlqIYt+jOG2Tj/ZIQBHX72OslB3n+jZzLxSpqJkLPv7aIIgW7fs=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:28:11 2025 by rpki-client