Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft
File:                     967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json)
Hash identifier:          C1Dl7JiRR5zXZoLdYTf9JR9eLnD7UnM79mqEs2jj5oA=
Subject key identifier:   E8:04:1B:B0:6A:F4:99:01:62:19:A3:33:37:80:8D:8B:67:22:4A:C8
Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39
Certificate issuer:       /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939
Certificate serial:       5D2631DEF1D6CEB71650416AF742665E43501564
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft
Manifest number:          94
Signing time:             Wed 23 Jul 2025 08:12:04 +0000
Manifest this update:     Wed 23 Jul 2025 08:07:04 +0000
Manifest next update:     Sat 26 Jul 2025 15:40:04 +0000
Files and hashes:         1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: lxW818mKTKY/fc7aHekxTQJ7Lc2xkRenscQF10SAgNs=)
                          2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl
                          rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 15:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:26:31:de:f1:d6:ce:b7:16:50:41:6a:f7:42:66:5e:43:50:15:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939
        Validity
            Not Before: Jul 23 08:07:04 2025 GMT
            Not After : Jul 26 15:40:04 2025 GMT
        Subject: CN=E8041BB06AF499016219A33337808D8B67224AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:2b:4f:8f:42:35:2a:80:54:c8:ea:60:97:
                    b3:d8:b6:63:a5:63:20:c1:44:9f:0c:b6:28:89:ef:
                    a8:30:e2:c5:df:4e:bd:ef:39:b4:83:e9:5b:0c:2a:
                    4e:05:e6:ad:62:c5:05:d4:ea:5b:12:1d:af:7a:d5:
                    7d:52:ab:69:6d:09:ab:78:65:d5:49:ce:b4:9b:08:
                    39:ac:fb:ae:6f:59:14:0e:cd:77:50:1f:6b:c5:bd:
                    7d:49:1a:4d:b8:7e:8b:2e:ec:a6:92:d4:b4:1a:39:
                    8e:3d:1b:8d:79:2e:1d:a9:7e:51:d4:34:95:2d:c7:
                    21:1a:27:4f:ed:35:de:28:9f:29:27:dc:24:81:12:
                    56:4b:3a:c6:d4:27:c1:12:4a:da:ed:2f:20:d2:e4:
                    9c:9f:59:9e:2e:f6:f3:db:da:a7:8f:29:f6:98:5e:
                    a5:58:ee:e1:1a:2a:51:b7:ab:06:bb:21:fc:98:7c:
                    28:18:48:40:59:42:43:58:ae:bf:1c:8d:b2:f9:dd:
                    a7:7c:4f:e9:f6:47:f0:8f:fa:3b:53:f8:92:97:14:
                    c1:3c:06:5b:24:01:82:f3:d4:15:f2:b7:63:97:36:
                    ba:fa:39:cb:6a:ab:0c:83:5d:47:d4:51:17:a5:4f:
                    6f:ec:9d:15:80:85:d0:ba:c5:88:83:c6:de:0d:79:
                    9f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:04:1B:B0:6A:F4:99:01:62:19:A3:33:37:80:8D:8B:67:22:4A:C8
            X509v3 Authority Key Identifier:
                keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:38:c0:43:7c:fb:8d:eb:e0:08:f6:5c:bf:27:3a:c6:ea:51:
         d3:c0:92:c5:1d:83:41:f1:df:a6:f6:90:57:8b:7f:da:52:18:
         99:20:ea:97:b9:07:5c:2f:7f:79:9f:1f:43:ee:07:32:bd:74:
         60:66:44:b2:1d:96:eb:88:83:69:9c:7c:27:38:8f:64:59:f2:
         27:40:bf:95:41:17:31:52:e3:a5:f8:16:6f:56:b9:a7:ef:4a:
         9e:21:19:4e:24:1d:41:d1:00:73:85:78:ca:69:84:05:17:91:
         a4:f2:e2:10:f9:99:06:ed:8d:50:55:49:03:f3:ab:e7:9d:01:
         87:53:16:49:39:fb:f3:1c:94:d5:c6:9e:e8:46:91:41:62:9a:
         8b:7e:29:cb:08:da:30:ba:f7:03:eb:94:c2:c8:78:f6:cd:3f:
         4d:78:80:db:d2:a0:0c:92:1f:87:3f:af:61:d9:66:83:9c:d9:
         11:2b:ca:ed:12:72:b3:86:39:57:c4:8f:41:7b:6d:30:3a:95:
         88:68:25:6d:f8:a0:21:6e:22:ab:88:c5:59:eb:be:eb:da:43:
         58:e4:5e:1c:e3:9e:44:5c:d7:ce:34:57:3c:d1:90:05:6a:39:
         c9:3a:32:78:18:55:a7:6b:d4:b4:9b:92:06:e3:61:4a:00:fb:
         63:d5:c8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:56:10 2025 by rpki-client