Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
File:                     85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json)
Hash identifier:          YEvxRlIQFsaG1Qf+AbppZyYfnEthtGQf1PruC/zY0hc=
Subject key identifier:   18:9C:71:43:43:BC:E5:A1:6A:54:EF:72:FE:B2:D2:2B:65:FF:EC:A2
Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22
Certificate issuer:       /CN=85B934D25B97AC3F22C3D45778109B50456E4722
Certificate serial:       6BF44E635B35C89DC2F9628200A885A41218B942
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
Manifest number:          EC
Signing time:             Sat 19 Jul 2025 00:21:39 +0000
Manifest this update:     Sat 19 Jul 2025 00:16:39 +0000
Manifest next update:     Tue 22 Jul 2025 09:51:39 +0000
Files and hashes:         1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: 2sBbhkku72TZL39YWNAvRlqiuh/uv/7xb/Dne3igStM=)
                          2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: Z67yx8ZcKGwzuTX0HadLjdL6alzCtLMaS1YAjbB729M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl
                          rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 09:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f4:4e:63:5b:35:c8:9d:c2:f9:62:82:00:a8:85:a4:12:18:b9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722
        Validity
            Not Before: Jul 19 00:16:39 2025 GMT
            Not After : Jul 22 09:51:39 2025 GMT
        Subject: CN=189C714343BCE5A16A54EF72FEB2D22B65FFECA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:43:92:26:c8:09:fd:87:39:1e:a6:31:ca:
                    53:71:fa:50:30:aa:e6:99:49:f3:10:69:21:8b:82:
                    cd:24:99:1b:95:ca:b2:8e:ea:42:d5:b2:28:1f:a8:
                    86:2e:63:c8:a8:4f:2d:54:a3:cc:ae:57:8f:ac:e7:
                    8f:1b:7c:52:f7:48:33:5c:c4:5e:dd:58:b7:bf:e5:
                    82:27:0f:c3:74:2c:5d:85:20:06:6f:2e:9c:f3:aa:
                    86:3a:2a:70:2d:fd:83:0b:40:62:ee:d8:48:22:df:
                    ac:5c:d3:75:1c:41:3e:29:01:41:ef:41:70:56:48:
                    f6:b6:4c:1d:c4:63:b9:4a:8f:30:ab:a0:30:b2:f7:
                    d5:29:06:51:15:6a:41:f0:40:f2:92:1b:34:60:13:
                    cd:9c:ee:2a:8e:7d:0a:23:ff:46:b7:3b:9d:29:6e:
                    a1:01:18:38:27:12:06:b7:17:27:c8:cd:28:fc:37:
                    24:dc:22:e5:e4:c0:e6:89:df:24:aa:e1:c7:a6:79:
                    50:f1:b9:6e:69:29:68:ab:85:39:41:41:00:7a:0c:
                    34:b9:51:99:43:03:06:8b:6a:0b:c5:b9:90:34:39:
                    df:18:68:de:ee:08:df:6b:d8:43:1b:ed:52:fb:70:
                    5d:65:4a:a5:a6:65:c3:86:a2:48:67:01:6f:7b:1c:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9C:71:43:43:BC:E5:A1:6A:54:EF:72:FE:B2:D2:2B:65:FF:EC:A2
            X509v3 Authority Key Identifier:
                keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:28:0a:d4:33:76:1b:3a:86:8b:22:50:70:cd:91:7b:87:bd:
         4a:03:f5:dc:fd:2f:db:ab:aa:27:2c:fe:5f:fb:d4:1e:a1:65:
         1c:f7:32:7e:90:5f:64:fd:f3:c6:35:86:ea:30:a6:02:1c:be:
         66:f7:fa:08:55:90:e7:8b:88:32:8a:07:39:7a:c2:b0:ac:6a:
         c1:6d:c2:67:ef:63:bb:c0:1e:18:6d:68:59:92:a4:d0:c5:81:
         2b:c7:c7:97:9c:88:92:c3:80:b0:f1:9f:40:9c:98:0c:7e:be:
         5f:99:f4:8b:37:0d:7b:90:dc:74:e5:cc:9e:ee:46:c3:13:11:
         a7:d0:9b:27:19:00:a3:33:b9:25:7f:d9:f4:78:08:a7:a3:2c:
         de:2b:b2:a2:14:5a:92:db:5e:ab:f7:87:0c:68:77:c2:08:65:
         a3:fa:4a:db:9b:3f:29:9b:dd:70:27:f5:86:e1:a9:2c:9b:51:
         b3:57:27:8c:79:de:02:b4:cb:c1:00:0a:93:cd:a9:a6:85:e3:
         3a:60:e3:6a:7c:f7:68:29:47:75:96:35:48:70:57:13:61:22:
         fe:4d:3f:46:c7:b3:62:6d:22:dc:85:91:66:3f:16:f2:a9:d3:
         3c:39:1e:36:27:84:ba:de:35:a9:4a:0b:1a:d9:5a:28:99:5b:
         3d:34:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:11 2025 by rpki-client