Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft
File:                     7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json)
Hash identifier:          AbdDCqcWiCBJP2T3uZj8JWR3xJy6S8svOh+/1kBXkxI=
Subject key identifier:   30:A9:EE:12:60:22:D5:B8:EA:09:2E:24:BB:1A:D3:98:62:D8:73:18
Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0
Certificate issuer:       /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0
Certificate serial:       1989CF1D236D5511DC0CD392A6DF0924AB4DEADE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft
Manifest number:          01EF
Signing time:             Thu 24 Jul 2025 20:21:01 +0000
Manifest this update:     Thu 24 Jul 2025 20:16:01 +0000
Manifest next update:     Mon 28 Jul 2025 07:37:01 +0000
Files and hashes:         1: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: qKtIrqocYRtH9mFT0B1bJLwWXs7q8vOuLUP4J+rTPCk=)
                          2: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: hlR87plrg0Mkrn0/3oMuMOqtodt3dG44tZOvc9yLIiQ=)
                          3: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: d85h85v2ptQz3vrVN5qkUm0+GStqZnlOAr5LKlkna3k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl
                          rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 06:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:89:cf:1d:23:6d:55:11:dc:0c:d3:92:a6:df:09:24:ab:4d:ea:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0
        Validity
            Not Before: Jul 24 20:16:01 2025 GMT
            Not After : Jul 28 07:37:01 2025 GMT
        Subject: CN=30A9EE126022D5B8EA092E24BB1AD39862D87318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e1:9c:15:75:7b:45:3b:1e:6f:2f:0a:fb:ae:
                    5f:c5:2a:61:64:80:81:de:86:87:b5:7c:0e:08:50:
                    35:d4:2d:a2:23:17:28:34:fa:72:7b:67:68:76:d9:
                    fe:57:39:13:9f:82:51:e2:eb:f8:37:32:e7:ab:23:
                    17:7a:2f:ed:dc:8a:d2:30:50:32:79:7e:e3:67:ba:
                    3e:b6:58:4a:6e:e8:16:69:55:f8:79:15:e5:77:89:
                    c6:03:6c:57:39:2c:f3:98:3f:d7:a6:d3:46:c0:e2:
                    1a:4e:a2:32:5e:dd:a7:f0:bd:aa:13:f1:3c:b6:df:
                    fd:2a:db:72:fc:e8:3e:92:43:91:48:09:1e:d1:12:
                    35:b4:96:13:44:97:60:24:64:95:4d:98:6b:d7:94:
                    c2:3a:80:5b:01:2f:1e:10:9e:7e:d2:9b:05:19:00:
                    e0:19:97:68:fa:53:f9:f9:29:4c:9d:dd:8e:b4:2e:
                    ad:03:6f:55:33:9c:24:26:cd:a7:eb:8a:1b:9a:93:
                    78:3a:0a:41:96:86:d2:da:f9:eb:fa:08:bf:92:03:
                    76:58:6b:45:d7:7e:65:c9:4d:fe:c1:a7:92:ed:d9:
                    e3:68:dd:dc:2e:32:78:2a:7c:6e:08:53:06:07:76:
                    2b:db:08:cc:30:03:51:f8:e0:72:d7:57:45:2e:90:
                    ad:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A9:EE:12:60:22:D5:B8:EA:09:2E:24:BB:1A:D3:98:62:D8:73:18
            X509v3 Authority Key Identifier:
                keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:62:59:61:83:6f:69:2c:28:30:2c:a6:76:96:fc:96:4b:dc:
         de:13:2f:a1:9e:37:4b:ac:be:b6:60:3f:4d:d5:f3:46:1c:d7:
         a1:5f:9b:9f:94:58:08:22:be:2d:3f:ae:ae:1e:0c:60:96:24:
         81:55:68:e7:45:74:89:64:8c:ff:28:63:61:a4:8a:99:51:54:
         dd:70:60:05:9f:c4:e2:8e:dc:e2:5b:08:5d:bc:cb:8d:41:e7:
         b7:89:8f:6f:de:27:70:00:51:ef:99:bd:fc:ad:00:f9:5f:4f:
         b8:ac:b5:9d:3d:7c:c0:cf:a3:a8:e8:fe:18:a6:aa:c9:d4:73:
         1a:55:29:ee:d2:d0:dd:1b:41:a4:cd:f0:ef:bf:5c:1f:25:43:
         cc:34:dd:6c:d3:6b:c7:0d:2d:e1:31:45:50:1f:60:60:cb:d6:
         45:28:15:e3:c4:fc:cd:88:25:c0:d3:fe:54:a6:82:35:5e:11:
         5e:9f:08:a2:4d:5e:e7:cc:12:d2:bb:b9:f8:f0:ec:54:6b:53:
         21:3c:a9:1d:5c:72:77:5d:8f:fc:eb:59:92:c0:4f:59:9b:de:
         d9:b7:86:78:be:79:c8:cb:f3:b6:62:9a:fc:02:1d:9e:3d:a1:
         4a:00:3b:5b:4d:b5:e4:ac:09:d5:44:76:52:4c:8a:95:dd:90:
         a0:48:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:24:59 2025 by rpki-client