Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft
File:                     708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json)
Hash identifier:          TPr28lTQC+WT0B4NDQ2rZGiHPz0ajCYyxsE+QLHmVFU=
Subject key identifier:   4D:F7:4D:B3:2A:FD:6E:BF:4D:A7:1C:C2:3E:C2:68:84:A3:50:DA:63
Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20
Certificate issuer:       /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520
Certificate serial:       7BAEA4E56716008DF2A7E6C5999D886719B443D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft
Manifest number:          010F
Signing time:             Sat 19 Jul 2025 02:51:00 +0000
Manifest this update:     Sat 19 Jul 2025 02:46:00 +0000
Manifest next update:     Tue 22 Jul 2025 03:59:00 +0000
Files and hashes:         1: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: pL8MiCoMOBsIF79ZgKINrnTG4TBChWyONR8phyW+eiQ=)
                          2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: xFoVEBixfaV59f5eLoKvzCfI+maBpFsE/LQmHoFGuNo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl
                          rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 03:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ae:a4:e5:67:16:00:8d:f2:a7:e6:c5:99:9d:88:67:19:b4:43:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520
        Validity
            Not Before: Jul 19 02:46:00 2025 GMT
            Not After : Jul 22 03:59:00 2025 GMT
        Subject: CN=4DF74DB32AFD6EBF4DA71CC23EC26884A350DA63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:6a:be:03:38:85:21:7c:85:ed:d8:1b:6e:
                    4c:83:15:fa:e1:16:f2:ab:ff:95:d3:73:93:f2:88:
                    b5:eb:17:f0:cc:2c:06:4b:1c:b6:34:56:10:60:42:
                    d9:c4:c3:1f:9c:76:ac:a3:06:73:55:b4:d8:e8:e0:
                    12:a6:a8:ba:fa:ae:c7:ad:89:22:b2:fa:84:e4:83:
                    3e:d0:ea:ad:fd:b1:9c:24:6e:ee:a1:99:22:b6:93:
                    42:cc:9f:54:1e:87:76:b2:49:22:b1:7e:85:c5:80:
                    32:ce:ee:b4:59:d4:b8:f8:f8:e6:5e:39:42:db:46:
                    1f:2e:26:7f:0f:d4:3d:52:ac:e1:5c:1a:c1:73:68:
                    fd:5f:6e:29:94:1f:bb:2a:97:4d:69:a5:31:33:c6:
                    76:22:a3:4d:5c:80:d5:3c:f2:71:b3:a9:e2:da:e5:
                    ca:66:1e:2f:d7:ff:92:32:13:78:1f:37:0e:9e:a2:
                    67:da:54:da:3e:28:89:ca:7e:88:53:08:9c:3c:bb:
                    c3:56:e8:63:c6:4d:3d:48:d9:38:23:6d:4e:75:e0:
                    3d:36:68:13:26:08:a1:48:0b:2a:d5:be:46:6f:ae:
                    3c:ba:3a:ec:b7:39:8f:89:fb:02:f8:a6:ca:29:96:
                    8d:6e:71:20:49:36:9c:80:99:48:e5:26:3a:48:1d:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F7:4D:B3:2A:FD:6E:BF:4D:A7:1C:C2:3E:C2:68:84:A3:50:DA:63
            X509v3 Authority Key Identifier:
                keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7f:65:7f:b9:dc:3e:67:a2:d9:90:7c:7b:de:b4:e1:60:7d:
         b4:aa:d3:16:f7:98:c5:ce:34:89:de:5e:f8:17:93:99:b4:8e:
         2a:2f:0f:9d:35:7c:47:8e:34:8e:4e:0f:fc:72:71:98:49:09:
         3a:5a:36:f8:b0:e8:da:9c:ef:16:01:13:da:c8:c4:c2:69:3f:
         ba:c0:1b:c8:78:17:d9:4e:48:ce:a9:3a:8a:12:72:cd:b7:5f:
         e4:e8:8d:31:08:15:a8:96:30:63:11:ff:ba:20:59:a6:ce:28:
         9b:eb:ac:77:7e:e0:fd:be:97:4b:29:d6:ce:c7:5b:68:36:f4:
         69:26:3d:47:2a:4c:53:da:6e:cf:93:29:91:ae:f8:2e:6a:56:
         fd:8d:71:30:6a:8b:31:ce:70:50:a3:c3:69:0b:6d:55:c8:d4:
         43:0e:fe:be:ac:a6:e2:6c:e1:56:65:6d:4a:a1:2c:dc:0a:ac:
         ff:98:f5:eb:02:d8:7a:5a:11:3b:8f:31:26:1b:6b:7c:50:7c:
         46:dd:da:89:5d:1a:88:d6:41:1f:cd:3b:b6:42:c6:8d:84:ac:
         a8:d4:c6:d0:38:67:3d:a9:cd:3b:48:f8:76:84:64:22:35:8f:
         5d:f4:ac:c2:d5:21:51:7e:78:d7:96:bb:2f:90:06:9a:d3:08:
         1d:c0:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:56:23 2025 by rpki-client