Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
File:                     D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft (raw, json)
Hash identifier:          pqz3cG8HeIbqNWi8N+Ri06x6BqeVYFaOLFl55C4U9Yk=
Subject key identifier:   3D:3B:CB:B1:06:D4:F2:39:92:BA:CC:C5:F1:7F:04:D3:01:BB:9D:74
Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C
Certificate issuer:       /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
Certificate serial:       317F66C3769C1636F6F09F6149B77056F36F3A49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
Manifest number:          01D5
Signing time:             Fri 05 Sep 2025 09:41:40 +0000
Manifest this update:     Fri 05 Sep 2025 09:36:40 +0000
Manifest next update:     Mon 08 Sep 2025 16:48:40 +0000
Files and hashes:         1: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: 4tLHfUAaxrKkU1/ID8Cs3rzd8UlebdYrCEqhL3fN6eQ=)
                          2: D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl (hash: OlHfmdXXxgDrqxtrDZPqrmu4EFR/rSDgm5WIs1VICIk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl
                          rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 16:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7f:66:c3:76:9c:16:36:f6:f0:9f:61:49:b7:70:56:f3:6f:3a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
        Validity
            Not Before: Sep  5 09:36:40 2025 GMT
            Not After : Sep  8 16:48:40 2025 GMT
        Subject: CN=3D3BCBB106D4F23992BACCC5F17F04D301BB9D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:12:10:da:ef:d4:a5:a3:96:83:ff:1c:7d:
                    ca:fa:aa:15:e8:61:7b:c3:b8:a5:be:23:7a:34:8c:
                    a1:d7:ea:65:de:98:f4:13:5e:9c:8a:eb:78:a2:dd:
                    d3:43:ff:cd:8f:9f:2e:08:f3:ea:1b:41:4e:c2:1f:
                    04:4a:94:83:12:cf:fc:39:6e:25:96:97:a0:fd:2c:
                    62:eb:f6:37:51:54:ae:a7:07:99:35:1e:c4:45:01:
                    72:13:b3:ca:df:a7:55:b1:61:4c:be:9c:64:8d:75:
                    88:c7:05:8d:46:ff:d6:69:cd:76:8c:16:87:ba:6b:
                    5f:0a:68:6b:39:cf:69:b2:09:98:d4:59:ac:fb:5f:
                    50:0b:df:54:d5:67:a8:93:14:0c:1e:e0:a0:24:1b:
                    e1:c8:59:b6:f2:b0:68:86:37:5f:e8:a2:7c:ea:42:
                    ca:ad:42:52:d6:f7:62:86:2c:93:0d:01:81:17:24:
                    7e:c2:5d:78:13:0a:b1:eb:0c:1d:64:27:56:25:91:
                    bf:0b:2c:1b:41:21:df:8f:a6:20:c1:37:17:c0:ba:
                    a0:ba:45:b3:e3:38:d3:4a:fd:ac:5a:fb:30:cc:61:
                    51:84:09:bc:1f:d4:bb:7b:bf:4b:2c:91:4a:f3:75:
                    5c:6f:ed:6b:dc:ef:95:ce:ca:18:5b:f4:00:01:17:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3B:CB:B1:06:D4:F2:39:92:BA:CC:C5:F1:7F:04:D3:01:BB:9D:74
            X509v3 Authority Key Identifier:
                keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e4:eb:a3:4b:af:1b:58:97:8c:bb:70:99:29:60:ca:ad:7c:
         61:58:30:01:c8:a1:6e:1c:ae:76:4f:b2:8c:ab:17:f8:7a:df:
         49:74:f3:90:74:fa:3a:77:15:eb:8d:93:16:f5:2a:64:f4:68:
         ac:45:c6:ee:f4:81:3a:8c:81:f0:3d:27:1c:2b:19:05:5a:f6:
         62:76:f4:c2:c3:6c:e8:c0:8b:e2:92:d2:1e:f2:11:a1:f6:bf:
         6a:0b:dd:f7:d4:92:7a:5e:6b:55:98:cb:2c:1c:30:79:64:5c:
         ef:1e:16:39:11:b8:f4:e3:84:45:7f:e3:d1:18:58:ed:9a:f9:
         ca:23:3e:45:08:ef:8c:f6:b9:ad:7a:9c:24:1b:de:97:15:63:
         ce:ae:c4:bc:d0:cd:82:43:4e:9a:00:2e:4c:c5:de:55:3b:cc:
         29:8c:70:5d:d1:98:54:67:0c:1b:26:fa:8f:67:00:93:00:d1:
         ce:44:ee:c4:e4:7b:e2:f4:f7:29:2d:f0:4d:eb:af:e5:34:d0:
         bc:79:59:f3:94:b7:83:e8:ec:2d:8f:8a:9b:8a:19:22:0a:5a:
         cc:c5:b4:3b:28:e8:86:9e:12:0b:79:ea:89:15:36:b3:93:80:
         a7:69:51:ce:4e:50:18:84:f2:a2:f2:8c:0d:46:e0:e0:41:8a:
         39:88:5e:ee
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMX9mw3acFjb28J9hSbdwVvNvOkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVE
OTFEQkY5QzAeFw0yNTA5MDUwOTM2NDBaFw0yNTA5MDgxNjQ4NDBaMDMxMTAvBgNV
BAMTKDNEM0JDQkIxMDZENEYyMzk5MkJBQ0NDNUYxN0YwNEQzMDFCQjlENzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCneBIQ2u/UpaOWg/8cfcr6qhXo
YXvDuKW+I3o0jKHX6mXemPQTXpyK63ii3dND/82Pny4I8+obQU7CHwRKlIMSz/w5
biWWl6D9LGLr9jdRVK6nB5k1HsRFAXITs8rfp1WxYUy+nGSNdYjHBY1G/9ZpzXaM
Foe6a18KaGs5z2myCZjUWaz7X1AL31TVZ6iTFAwe4KAkG+HIWbbysGiGN1/oonzq
QsqtQlLW92KGLJMNAYEXJH7CXXgTCrHrDB1kJ1Ylkb8LLBtBId+PpiDBNxfAuqC6
RbPjONNK/axa+zDMYVGECbwf1Lt7v0sskUrzdVxv7Wvc75XOyhhb9AABF/fRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPTvLsQbU8jmSuszF8X8E0wG7nXQwHwYDVR0j
BBgwFoAU19mLX3vKN0HwGRFIg3LoVdkdv5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MzRkODI3Ny0yOTEwLTQwNzUtYjkzNy02NmY5NDM1MThlMjkvMC9EN0Q5OEI1RjdC
Q0EzNzQxRjAxOTExNDg4MzcyRTg1NUQ5MURCRjlDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVEOTFE
QkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5
MzctNjZmOTQzNTE4ZTI5LzAvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4
NTVEOTFEQkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAADk66NLrxtYl4y7cJkpYMqtfGFYMAHIoW4c
rnZPsoyrF/h630l085B0+jp3FeuNkxb1KmT0aKxFxu70gTqMgfA9JxwrGQVa9mJ2
9MLDbOjAi+KS0h7yEaH2v2oL3ffUknpea1WYyywcMHlkXO8eFjkRuPTjhEV/49EY
WO2a+cojPkUI74z2ua16nCQb3pcVY86uxLzQzYJDTpoALkzF3lU7zCmMcF3RmFRn
DBsm+o9nAJMA0c5E7sTke+L09ykt8E3rr+U00Lx5WfOUt4Po7C2PipuKGSIKWszF
tDso6IaeEgt56okVNrOTgKdpUc5OUBiE8qLyjA1G4OBBijmIXu4=
-----END CERTIFICATE-----
Generated at Sun Sep 7 15:31:08 2025 by rpki-client