Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft
File:                     BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json)
Hash identifier:          ZHdmi1in150iSmg76aIxMpl+f6erG77A2CCyxMopaKc=
Subject key identifier:   56:43:B1:77:5F:A3:BF:4E:86:9A:82:7A:DE:F0:A5:74:F4:15:FC:74
Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71
Certificate issuer:       /CN=BF97329188204CAD55AEC0D48286FAC81B806C71
Certificate serial:       6F0DDB527DEC0E77F5DB6215B5A18F7B1863DE30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft
Manifest number:          41
Signing time:             Fri 18 Jul 2025 22:51:52 +0000
Manifest this update:     Fri 18 Jul 2025 22:46:52 +0000
Manifest next update:     Tue 22 Jul 2025 00:56:52 +0000
Files and hashes:         1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: W53F/X7ata+lBTz94QfuIKcNtZEakGc2iPGhlagJ2X8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl
                          rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 00:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0d:db:52:7d:ec:0e:77:f5:db:62:15:b5:a1:8f:7b:18:63:de:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71
        Validity
            Not Before: Jul 18 22:46:52 2025 GMT
            Not After : Jul 22 00:56:52 2025 GMT
        Subject: CN=5643B1775FA3BF4E869A827ADEF0A574F415FC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:6a:38:70:fa:4f:64:8a:91:63:eb:82:32:
                    d5:8f:f3:66:29:da:f5:3f:bd:db:80:ce:e8:0f:80:
                    19:f5:d3:c8:55:3e:4f:5f:d0:ca:97:46:47:ac:f1:
                    94:31:fb:ff:ee:89:7e:bf:22:c6:dc:a6:c1:9b:2d:
                    dd:c6:40:42:6e:3e:3a:9f:68:a0:57:d4:c6:78:98:
                    9c:22:88:de:3f:a3:af:ba:a9:cf:9e:fc:1b:29:f1:
                    d1:00:f6:fc:eb:92:21:30:87:4e:93:1c:c4:0e:5d:
                    54:6d:2f:aa:d6:a2:62:6a:fc:4b:cb:0e:2c:b6:3c:
                    48:e9:41:43:a5:3b:12:97:7c:f3:22:af:0d:82:3c:
                    37:cc:8b:3f:63:e5:10:2e:de:4a:d8:7d:db:82:ce:
                    03:46:33:10:5b:14:53:02:ec:fa:99:cf:33:95:e0:
                    a9:d6:2c:f5:14:5a:c7:92:7e:1d:1a:99:bb:36:9b:
                    77:d6:ae:72:b0:03:8e:f2:de:bd:2c:18:80:87:2f:
                    7f:e4:77:31:1d:08:42:cb:5a:6b:43:68:9e:b4:c3:
                    d4:54:26:b3:80:bb:d9:96:b2:b0:d9:7e:23:f9:f4:
                    cd:88:ee:06:f1:d4:e7:ba:92:c4:d4:22:96:87:cd:
                    86:55:e6:0b:f4:a9:d4:96:89:41:da:db:91:f0:5e:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:43:B1:77:5F:A3:BF:4E:86:9A:82:7A:DE:F0:A5:74:F4:15:FC:74
            X509v3 Authority Key Identifier:
                keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:99:ea:b3:88:b4:2c:5d:91:cd:3c:f3:1c:36:21:12:55:a5:
         db:bc:67:c2:de:2d:eb:a4:31:d4:f0:e5:0a:10:a8:6f:30:35:
         6a:dd:25:5b:d8:99:d2:d0:bb:6e:0a:eb:5a:31:77:a2:0a:7e:
         13:3d:97:c6:5c:cb:ee:cb:ec:ea:c5:b2:30:1a:27:8d:36:41:
         f9:df:53:2c:81:cb:d8:59:e2:9b:7b:03:f9:9c:e9:f7:23:3b:
         20:8c:e3:aa:e4:77:a4:4d:e9:ac:26:e4:cb:c8:be:69:ae:0c:
         bd:fd:b8:f1:48:70:2d:50:d2:df:6c:d6:41:89:92:ea:97:58:
         b9:bf:c7:43:f7:f0:ca:00:02:a4:f6:ff:95:e2:ea:64:4b:6b:
         92:42:a5:8a:4a:03:9a:06:6f:18:c1:34:f7:7e:bb:9d:aa:26:
         cc:03:55:4c:d5:55:a2:f6:1d:7a:4a:94:ab:3d:49:df:71:1f:
         2f:b8:98:76:98:36:a9:06:5d:a6:c4:87:73:f2:77:6d:4f:fd:
         85:3b:c3:dd:f4:af:e6:90:2f:e9:7f:70:57:24:b4:27:93:1a:
         da:24:b1:d4:df:ea:df:a8:f0:e5:b1:93:f5:d4:40:36:1a:14:
         b1:d0:bb:dc:af:e4:36:c3:12:6e:2d:27:dc:bf:1b:b6:fb:88:
         04:f1:42:c2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbw3bUn3sDnf122IVtaGPexhj3jAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx
QjgwNkM3MTAeFw0yNTA3MTgyMjQ2NTJaFw0yNTA3MjIwMDU2NTJaMDMxMTAvBgNV
BAMTKDU2NDNCMTc3NUZBM0JGNEU4NjlBODI3QURFRjBBNTc0RjQxNUZDNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3L2o4cPpPZIqRY+uCMtWP82Yp
2vU/vduAzugPgBn108hVPk9f0MqXRkes8ZQx+//uiX6/IsbcpsGbLd3GQEJuPjqf
aKBX1MZ4mJwiiN4/o6+6qc+e/Bsp8dEA9vzrkiEwh06THMQOXVRtL6rWomJq/EvL
Diy2PEjpQUOlOxKXfPMirw2CPDfMiz9j5RAu3krYfduCzgNGMxBbFFMC7PqZzzOV
4KnWLPUUWseSfh0ambs2m3fWrnKwA47y3r0sGICHL3/kdzEdCELLWmtDaJ60w9RU
JrOAu9mWsrDZfiP59M2I7gbx1Oe6ksTUIpaHzYZV5gv0qdSWiUHa25HwXrgTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVkOxd1+jv06GmoJ63vCldPQV/HQwHwYDVR0j
BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4
MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw
NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4
YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB
QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ6Z6rOItCxdkc088xw2IRJVpdu8Z8LeLeuk
MdTw5QoQqG8wNWrdJVvYmdLQu24K61oxd6IKfhM9l8Zcy+7L7OrFsjAaJ402Qfnf
UyyBy9hZ4pt7A/mc6fcjOyCM46rkd6RN6awm5MvIvmmuDL39uPFIcC1Q0t9s1kGJ
kuqXWLm/x0P38MoAAqT2/5Xi6mRLa5JCpYpKA5oGbxjBNPd+u52qJswDVUzVVaL2
HXpKlKs9Sd9xHy+4mHaYNqkGXabEh3Pyd21P/YU7w930r+aQL+l/cFcktCeTGtok
sdTf6t+o8OWxk/XUQDYaFLHQu9yv5DbDEm4tJ9y/G7b7iATxQsI=
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:28 2025 by rpki-client