Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
File:                     780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft (raw, json)
Hash identifier:          bo9NjBDayGkqM4aJRqdaU6WGOfDceK2528nmm9WPkOY=
Subject key identifier:   2C:40:70:81:49:EB:65:B1:BA:CF:8E:6C:FE:07:0A:4C:42:FF:A6:7A
Authority key identifier: 78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9
Certificate issuer:       /CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9
Certificate serial:       2420E7E0BA1EC52270FF3A305F4B142274ED6E34
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
Manifest number:          D4
Signing time:             Tue 09 Sep 2025 21:31:47 +0000
Manifest this update:     Tue 09 Sep 2025 21:26:47 +0000
Manifest next update:     Sat 13 Sep 2025 08:29:47 +0000
Files and hashes:         1: 323030313a6466333a643234303a3a2f34382d3438203d3e20313336303839.roa (hash: M+NRbpCUskaX1vYH/4jaIAMXTEk8snO9JlvCQ9TdRYk=)
                          2: 780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl (hash: Mxkb2Hj7j37uXFy8mla66bApx/yfVVWnDl/BWa4vddw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl
                          rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 01:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:20:e7:e0:ba:1e:c5:22:70:ff:3a:30:5f:4b:14:22:74:ed:6e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9
        Validity
            Not Before: Sep  9 21:26:47 2025 GMT
            Not After : Sep 13 08:29:47 2025 GMT
        Subject: CN=2C40708149EB65B1BACF8E6CFE070A4C42FFA67A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:1a:a5:48:56:d0:6d:75:34:96:c0:e8:5f:
                    e6:85:45:77:2c:74:5b:e4:5e:cf:5d:00:6c:26:09:
                    13:0e:e7:c4:ea:a9:4f:7e:23:11:90:45:ba:c9:20:
                    04:15:73:a2:60:3f:f8:a7:04:b9:b3:4d:e5:df:18:
                    8b:5c:f6:d3:ae:d9:f1:ed:fb:5c:93:49:2b:b4:19:
                    d0:dd:ee:4a:21:8c:00:32:5b:4f:7f:7a:d4:48:22:
                    39:c4:bd:de:d3:21:00:af:d7:23:6d:ea:9f:a2:c9:
                    ac:43:e0:43:0f:40:c4:83:40:a5:48:ee:d5:c7:7e:
                    57:69:f7:f0:b9:16:12:9a:c2:1e:34:38:ad:94:01:
                    cd:dd:e7:6d:b5:6f:31:10:87:d3:95:08:46:16:41:
                    37:0d:e0:d6:f2:ad:bf:a0:ef:32:b4:f8:72:90:d6:
                    4c:76:3f:2e:eb:30:92:b7:3e:ab:4a:74:ce:b1:a9:
                    ad:ac:dd:69:36:64:b6:1d:09:fb:c9:f9:0e:46:f8:
                    f4:56:81:e0:f9:0b:36:83:6b:82:5b:51:8e:30:19:
                    00:52:3c:1a:64:15:00:09:49:c4:72:24:46:1b:92:
                    5c:44:78:20:2d:24:9e:aa:7b:41:21:88:b0:66:15:
                    7e:6d:1c:22:7b:8b:6c:23:87:81:8c:5b:76:18:e5:
                    19:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:40:70:81:49:EB:65:B1:BA:CF:8E:6C:FE:07:0A:4C:42:FF:A6:7A
            X509v3 Authority Key Identifier:
                keyid:78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:3f:48:10:3c:f6:69:a8:b0:35:db:ef:a5:e2:90:eb:e6:
         d6:05:31:ba:8c:34:2d:b1:27:5e:c1:26:ee:40:ee:90:ac:88:
         3b:13:2c:83:2a:f8:93:b6:ae:d5:20:82:45:84:d6:9b:f7:0d:
         91:b8:d3:31:55:57:85:72:14:68:ba:90:45:a9:9f:2c:69:af:
         6d:f0:6b:19:e8:f5:88:ab:8b:34:4e:3a:0c:77:b2:10:0e:51:
         5e:d2:82:e5:37:e0:f6:39:96:1b:4f:b0:0a:e6:42:ed:cb:e4:
         f9:d0:ce:ad:72:49:d6:bf:6e:ae:2b:5d:0b:ab:c1:38:c1:ed:
         b7:be:ee:37:97:a7:f4:d3:32:1e:4a:0d:a2:19:39:5c:fb:8e:
         1c:0f:70:1a:0c:89:2c:b5:a7:7f:f7:62:52:e3:f5:a4:3c:4c:
         21:72:21:ee:14:7a:ec:bb:ad:f5:78:87:53:f9:29:61:39:84:
         30:af:18:c6:de:a9:77:28:ed:b4:51:d4:7e:96:76:34:4a:dc:
         f6:b5:c2:4f:52:08:8e:de:8a:e2:36:95:a3:30:73:28:d2:8a:
         11:65:56:51:f6:a1:4f:a1:20:d7:22:6c:91:86:d3:2f:93:58:
         74:dd:28:46:cf:56:6a:ba:6e:03:5a:8c:7d:ee:a5:6d:6d:00:
         8a:2d:27:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:07:20 2025 by rpki-client