Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
File:                     C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json)
Hash identifier:          5fToQKvFWTGmKVHbkt91BofsuCKxKNN+lkEJlr5fT7w=
Subject key identifier:   79:B9:4F:FD:85:8D:B7:EC:CA:80:8F:ED:42:D8:3B:6B:44:6A:8D:43
Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7
Certificate issuer:       /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
Certificate serial:       10E3DF1FCD8D9EA4EE5745D497A372F2C4A4F401
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
Manifest number:          04EF
Signing time:             Sun 20 Jul 2025 09:11:48 +0000
Manifest this update:     Sun 20 Jul 2025 09:06:48 +0000
Manifest next update:     Wed 23 Jul 2025 10:00:48 +0000
Files and hashes:         1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: FhHS7kJceIlTiLdH3uYbHff2s2UpyhqNWpxhVaoO/AU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl
                          rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e3:df:1f:cd:8d:9e:a4:ee:57:45:d4:97:a3:72:f2:c4:a4:f4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
        Validity
            Not Before: Jul 20 09:06:48 2025 GMT
            Not After : Jul 23 10:00:48 2025 GMT
        Subject: CN=79B94FFD858DB7ECCA808FED42D83B6B446A8D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0d:7d:f2:d9:a0:a3:63:2c:28:10:67:c9:31:
                    cd:bf:e7:e8:de:8f:fb:79:e6:2d:47:da:38:2e:96:
                    dd:48:d0:2b:0b:11:62:5c:e2:67:ae:b1:59:fd:dc:
                    c0:fa:c7:b0:71:58:da:6f:86:4b:c4:0e:e2:fb:c6:
                    6d:8f:b1:a5:39:a5:5f:69:43:df:c7:3a:ac:e0:53:
                    2a:b1:64:84:90:bd:9a:fb:6b:86:83:ef:a8:37:19:
                    03:38:4a:94:5c:6c:2b:b9:d2:6d:c0:00:38:12:d2:
                    6f:ed:d8:66:0b:de:76:49:78:7c:1a:26:c3:aa:6c:
                    18:e1:0e:74:ef:69:bf:56:b6:92:fe:63:58:ab:8b:
                    c4:cb:d7:35:6b:46:4e:28:13:11:26:df:cd:db:0a:
                    6b:17:0d:59:cb:cd:fc:c9:fb:83:9e:b8:38:e4:ce:
                    0a:ac:fa:9f:23:ed:20:09:a3:91:d2:3e:7f:d1:d9:
                    df:8d:d2:8a:7f:b7:f4:5f:8f:89:e8:8f:9c:c5:43:
                    b9:88:7e:90:a9:9e:be:1d:95:f1:a2:29:9d:55:93:
                    4b:f0:1b:04:a8:ac:40:14:29:f1:56:0a:38:10:c5:
                    45:ce:36:e0:9c:40:49:52:33:42:8c:43:3f:29:3b:
                    26:12:34:f5:b8:be:5e:4a:7d:68:ac:53:3f:3a:0c:
                    99:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B9:4F:FD:85:8D:B7:EC:CA:80:8F:ED:42:D8:3B:6B:44:6A:8D:43
            X509v3 Authority Key Identifier:
                keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:bc:77:e1:f2:d4:18:f0:ef:1f:3b:1f:15:ce:59:f5:e9:b9:
         57:29:16:51:de:42:c1:1a:96:0f:48:38:64:74:6e:b6:fc:b3:
         4d:9a:5d:45:68:2d:d2:9d:03:85:19:82:e0:a3:eb:58:3d:f3:
         d9:a4:e4:90:3f:27:f0:ba:e6:61:a0:0b:b0:c3:f7:8f:89:57:
         f9:c9:46:aa:26:4e:fa:8d:14:1e:3c:c1:85:3b:8a:41:aa:36:
         57:d6:06:5d:c5:af:1a:14:b9:cf:65:61:b6:b4:a3:36:1b:ec:
         1e:a6:69:21:25:e4:13:66:7c:e0:f6:bf:cb:d2:5c:a9:fa:71:
         53:ec:77:76:48:08:c4:3b:f7:5b:ea:26:5a:e2:4a:1b:b1:2a:
         67:a1:50:a5:7d:d7:3e:ce:83:89:b9:28:78:a1:fd:aa:a4:8e:
         b7:42:b7:58:ce:44:dc:1b:32:62:11:aa:ae:2b:2c:6d:bd:dd:
         fa:af:a4:c9:e2:73:36:fa:7f:49:56:39:92:48:a3:2f:0e:aa:
         6b:f5:fb:c5:a7:66:ad:26:0a:82:09:5c:5b:02:a7:ba:84:0f:
         5d:54:32:bc:50:c3:78:97:5f:80:f6:19:7a:21:46:e4:49:ea:
         89:27:2e:c3:fd:2b:3f:5a:8c:c4:d1:3d:05:8a:b7:f7:74:0d:
         45:d7:d6:89
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUEOPfH82NnqTuV0XUl6Ny8sSk9AEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBC
QjZBMjRBNzAeFw0yNTA3MjAwOTA2NDhaFw0yNTA3MjMxMDAwNDhaMDMxMTAvBgNV
BAMTKDc5Qjk0RkZEODU4REI3RUNDQTgwOEZFRDQyRDgzQjZCNDQ2QThENDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZDX3y2aCjYywoEGfJMc2/5+je
j/t55i1H2jgult1I0CsLEWJc4meusVn93MD6x7BxWNpvhkvEDuL7xm2PsaU5pV9p
Q9/HOqzgUyqxZISQvZr7a4aD76g3GQM4SpRcbCu50m3AADgS0m/t2GYL3nZJeHwa
JsOqbBjhDnTvab9WtpL+Y1iri8TL1zVrRk4oExEm383bCmsXDVnLzfzJ+4OeuDjk
zgqs+p8j7SAJo5HSPn/R2d+N0op/t/Rfj4noj5zFQ7mIfpCpnr4dlfGiKZ1Vk0vw
GwSorEAUKfFWCjgQxUXONuCcQElSM0KMQz8pOyYSNPW4vl5KfWisUz86DJkRAgMB
AAGjggH/MIIB+zAdBgNVHQ4EFgQUeblP/YWNt+zKgI/tQtg7a0RqjUMwHwYDVR0j
BBgwFoAUyeynMTqhczoeN7wk/2xNQLtqJKcwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0FS
U0VOLUlELzAvQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBCQjZBMjRB
Ny5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3JlcG8t
cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0M5RUNBNzMxM0FBMTczM0Ex
RTM3QkMyNEZGNkM0RDQwQkI2QTI0QTcuY2VyMHQGCCsGAQUFBwELBGgwZjBkBggr
BgEFBQcwC4ZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vQVJTRU4t
SUQvMC9DOUVDQTczMTNBQTE3MzNBMUUzN0JDMjRGRjZDNEQ0MEJCNkEyNEE3Lm1m
dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG
BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAfbx34fLUGPDvHzsfFc5Z9em5VykWUd5CwRqWD0g4ZHRutvyzTZpd
RWgt0p0DhRmC4KPrWD3z2aTkkD8n8LrmYaALsMP3j4lX+clGqiZO+o0UHjzBhTuK
Qao2V9YGXcWvGhS5z2VhtrSjNhvsHqZpISXkE2Z84Pa/y9JcqfpxU+x3dkgIxDv3
W+omWuJKG7EqZ6FQpX3XPs6DibkoeKH9qqSOt0K3WM5E3BsyYhGqrissbb3d+q+k
yeJzNvp/SVY5kkijLw6qa/X7xadmrSYKgglcWwKnuoQPXVQyvFDDeJdfgPYZeiFG
5EnqiScuw/0rP1qMxNE9BYq393QNRdfWiQ==
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:37:05 2025 by rpki-client