Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft
File:                     0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json)
Hash identifier:          uWjIO9xOtD6it8RcOAVbn3HwunarYNQ5rk7vSqla93w=
Subject key identifier:   76:00:1A:42:84:A2:CB:72:64:6C:74:B2:D8:D8:1C:E2:3E:22:C5:1D
Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F
Certificate issuer:       /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F
Certificate serial:       2AF6EE42BDD813220F57ADB934D7F673BC3B4624
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft
Manifest number:          01FA
Signing time:             Tue 22 Jul 2025 03:31:13 +0000
Manifest this update:     Tue 22 Jul 2025 03:26:13 +0000
Manifest next update:     Fri 25 Jul 2025 13:04:13 +0000
Files and hashes:         1: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: OAqPn590KkjrnmJB0jzAeUd+3waCLHTTfH0VLnwOX08=)
                          2: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: uiZFjhvQ9ciRjJRK7vZMZHXsl+bdrRUmgcpl6MwjW4M=)
                          3: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: 5yT7jld1qwMjQ1Wxg8xXgEk9H98NQ/9bvOuTLpVK3wE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl
                          rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 12:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f6:ee:42:bd:d8:13:22:0f:57:ad:b9:34:d7:f6:73:bc:3b:46:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F
        Validity
            Not Before: Jul 22 03:26:13 2025 GMT
            Not After : Jul 25 13:04:13 2025 GMT
        Subject: CN=76001A4284A2CB72646C74B2D8D81CE23E22C51D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:0f:f2:0f:72:95:03:c4:3e:59:90:d8:06:
                    9b:0f:c0:aa:02:3f:f7:9b:bd:83:fc:5e:e3:3e:31:
                    2b:ec:a5:ab:80:b3:0a:24:18:a3:96:0c:6d:ee:62:
                    d4:d3:72:9a:2b:ae:92:89:78:94:6a:72:5f:53:8f:
                    69:c5:70:ae:fa:38:90:0d:be:a3:fe:a5:6d:72:5e:
                    27:85:eb:4d:2b:aa:b2:8b:21:bb:b7:20:67:85:33:
                    7f:2f:00:37:8f:31:f7:d9:d9:a7:11:11:0a:c1:36:
                    ac:6b:c3:0f:04:31:4a:09:c9:9a:5f:6d:d5:d5:7b:
                    6b:4f:37:32:1c:bf:7c:c6:7a:0a:b7:53:49:10:83:
                    14:a6:9e:8d:85:83:58:17:0f:04:61:03:93:c6:22:
                    1c:b2:84:de:d6:78:b5:0e:e7:4c:b1:85:4d:1f:e6:
                    89:ef:b8:07:49:99:cc:3a:7d:b1:c5:10:75:f9:5e:
                    46:f8:de:14:4d:5f:d1:65:e0:a4:12:e5:90:c6:59:
                    17:75:fa:8f:ec:c4:eb:cf:3a:7b:d9:f3:9d:c1:26:
                    58:fc:52:96:08:8d:c6:47:78:27:9e:1c:57:2e:b7:
                    1f:40:83:84:89:d5:0f:b8:5a:55:7f:53:30:25:0a:
                    0e:58:9e:c1:cc:c8:fa:58:19:4a:b6:1f:50:6b:ae:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:00:1A:42:84:A2:CB:72:64:6C:74:B2:D8:D8:1C:E2:3E:22:C5:1D
            X509v3 Authority Key Identifier:
                keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:16:41:d6:88:35:1f:9b:0f:00:6e:79:38:4d:34:ff:ee:f9:
         fb:71:d6:31:3f:dc:ac:dc:27:e1:55:f3:f2:e3:44:de:4b:8a:
         e3:76:28:8a:5a:d0:51:ad:c5:2c:fe:11:f5:97:e4:03:66:81:
         a7:dd:a0:29:33:0b:de:bc:59:b6:f6:d3:8f:d5:0f:df:c7:13:
         99:40:26:10:b3:1b:f4:5b:f1:0e:4d:8d:e9:e1:0c:44:54:b4:
         d3:c2:8e:2c:26:37:e1:7b:ab:5b:84:26:90:33:f8:9e:66:fa:
         8a:d5:37:21:c7:df:de:a5:9d:4e:d5:bb:8b:97:91:69:04:67:
         0c:e9:9e:df:28:4e:78:bc:8c:ba:08:b3:8a:2c:b6:0a:f0:ad:
         77:5c:df:78:c4:70:c9:af:b2:3c:7f:5c:57:77:52:27:d7:48:
         c1:c6:4b:a6:58:a9:ad:00:a8:1a:6f:6c:07:7e:d2:28:90:87:
         4a:5c:9f:cb:4a:31:51:07:67:62:c4:1b:e8:b9:c0:b2:2b:c3:
         de:2c:c3:ff:aa:d3:4d:26:4b:2e:4e:0d:3e:1e:da:d6:6b:46:
         7a:b9:ab:b7:08:88:8f:31:e8:f3:f4:7c:04:d1:59:89:3f:e2:
         d0:3a:1c:e9:47:5a:82:6a:d4:29:0b:ed:52:52:7f:7a:07:46:
         be:ff:ee:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:47:30 2025 by rpki-client