Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft
File:                     1D5FBED26611C99226941DBD91139C594B399F46.mft (raw, json)
Hash identifier:          Vigo/sZN05pdrPQLd11UKnGVA6nNZhd/kHcj1LOK8Dc=
Subject key identifier:   14:81:B2:54:30:FB:88:AA:70:5E:C3:B7:62:E5:80:08:11:E2:26:0B
Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46
Certificate issuer:       /CN=1D5FBED26611C99226941DBD91139C594B399F46
Certificate serial:       1396F8EB4769752886F0FEDCAB711DBF8A865F83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft
Manifest number:          029E
Signing time:             Mon 21 Jul 2025 14:01:30 +0000
Manifest this update:     Mon 21 Jul 2025 13:56:30 +0000
Manifest next update:     Thu 24 Jul 2025 19:11:30 +0000
Files and hashes:         1: 1D5FBED26611C99226941DBD91139C594B399F46.crl (hash: QC0t5OA6i1N7dYW0vzhyztwPIyEhzoCg0UsGMYvAp38=)
                          2: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: fmmesiS1WcI4ovgUB3oEnMzQaroROS18Jh1l+/FK5Mw=)
                          3: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: 0HKqUWxZbI9n+PEVKoTLIbRadeKyFkIWvHvlRbtvAq0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl
                          rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 19:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:96:f8:eb:47:69:75:28:86:f0:fe:dc:ab:71:1d:bf:8a:86:5f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46
        Validity
            Not Before: Jul 21 13:56:30 2025 GMT
            Not After : Jul 24 19:11:30 2025 GMT
        Subject: CN=1481B25430FB88AA705EC3B762E5800811E2260B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:23:0e:25:56:7c:f5:a0:fb:a1:85:03:c7:
                    ab:fb:31:7f:90:9d:e5:bb:03:91:7f:b2:04:e8:2b:
                    a6:e4:77:55:43:92:b5:1e:4e:6a:c0:1b:62:ea:1d:
                    4e:c6:6e:bd:95:cf:74:e3:6b:ce:ff:87:28:ca:9d:
                    ed:40:b0:c4:78:bf:88:3e:3f:13:ff:1e:11:bf:8b:
                    5f:46:71:cf:8f:15:d8:7f:04:c8:cf:9c:e3:90:55:
                    aa:6f:e2:8d:ee:0a:9d:d5:33:df:11:60:d2:41:35:
                    ee:f1:f5:62:9e:8f:97:0a:c1:c3:6d:59:af:90:e5:
                    f0:fa:39:b5:05:ed:c3:15:02:7f:76:c5:49:54:ca:
                    32:19:32:a5:81:3b:43:b7:b6:79:43:0d:5c:04:25:
                    20:95:b4:8e:68:48:0f:76:49:a3:de:18:38:70:2d:
                    4d:af:b3:b1:2d:3c:a3:7d:19:77:36:cd:ba:43:fa:
                    1f:aa:0d:3e:d6:5e:7e:e7:11:d8:a9:61:a3:12:19:
                    27:b5:a0:41:9a:02:ad:0d:e6:61:9f:da:81:73:75:
                    e7:b0:7a:84:cf:e0:47:db:f1:98:0d:78:51:6a:de:
                    d9:9b:56:52:7f:79:9a:03:a9:20:03:e3:58:3e:a9:
                    bd:d7:bb:c7:76:41:6c:21:91:ec:22:c7:a3:ee:0c:
                    16:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:81:B2:54:30:FB:88:AA:70:5E:C3:B7:62:E5:80:08:11:E2:26:0B
            X509v3 Authority Key Identifier:
                keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:be:19:44:69:ac:89:ea:6c:27:4d:e3:e9:01:da:27:78:23:
         6c:95:1a:18:22:1e:0a:74:cc:f2:3a:4e:c9:72:aa:f3:b8:be:
         46:a8:4c:d6:b7:c1:1b:a7:c1:d9:ea:ea:52:06:ca:fb:83:90:
         6b:5e:6d:0b:1a:eb:8d:b9:d3:a9:b6:32:07:aa:e9:9b:92:29:
         d2:65:9c:46:6f:0f:7f:cb:81:14:21:73:21:74:3a:02:4c:4b:
         20:8a:dc:42:c0:59:86:6c:a5:08:d7:49:f8:4e:fe:f7:c2:c0:
         be:70:10:53:97:b1:83:df:8c:3f:4d:5a:f8:74:08:f5:13:ee:
         73:e3:d9:9b:56:8a:3a:dd:cb:d8:41:5b:00:76:c7:c6:4b:7f:
         01:6c:76:70:13:79:8d:52:66:06:87:f6:34:48:d5:d4:f6:90:
         84:07:4a:c5:86:25:2c:bc:b2:1f:1b:07:34:8c:38:45:25:24:
         01:1e:29:14:d2:8c:78:ec:b1:79:2f:24:59:9a:62:08:32:ab:
         6c:30:00:73:62:92:61:fe:18:ea:8e:97:6a:47:40:07:ee:62:
         07:e0:02:3a:6a:86:a5:07:b0:16:c5:65:d0:e0:76:3e:dc:1a:
         7d:94:5c:a5:8f:e4:65:72:8d:e8:3d:4f:04:6f:7f:86:7c:74:
         0c:c0:35:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:19:33 2025 by rpki-client