Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          Wp1REhhBTvlk/8gLSINXfnDQ5ltiZcvhshne0krmhzo=
Subject key identifier:   9B:6C:13:CC:00:33:4E:6D:03:27:DC:C3:33:05:8B:30:BC:32:14:99
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       4296AE59DBBA1569CC78AD1A966FC13A255A1D4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          04DA
Signing time:             Fri 06 Jun 2025 02:41:42 +0000
Manifest this update:     Fri 06 Jun 2025 02:36:42 +0000
Manifest next update:     Mon 09 Jun 2025 09:17:42 +0000
Files and hashes:         1: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: WbF1pLgmigmyWr7v7IYLADJpgn/XxEPxyvVo0cDnG8c=)
                          2: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: RS9Byz+j3EdqEQMObrbAR7PmpA8rmEiuqCAVbbyaqzQ=)
                          3: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: WjmWZuOqqVrHpn2Iht/6D/CnYopSoMqLYwKVON2A9VQ=)
                          4: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=)
                          5: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: fpx270ixaq11nCmgYzT3PO4j149L6mmMafh/Cax7edM=)
                          6: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog=)
                          7: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: AMgNEXA3HgeJ9JW4vEN8yPqkkgaxJIY9BD1424Sv1Zo=)
                          8: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: vr66fn8B7rAPP+TZSIsfhj0n+lp991jln8PENhk4tOQ=)
                          9: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI=)
                          10: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: oTh96cvu9N7dUKNXeMRvCfiS16/pskUDIN5zzPcyPFs=)
                          11: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: kpFmjz57IgAP8PtBxnCHq8wcPp57kSPI2nlME92Fnyg=)
                          12: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM=)
                          13: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 09:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:96:ae:59:db:ba:15:69:cc:78:ad:1a:96:6f:c1:3a:25:5a:1d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Jun  6 02:36:42 2025 GMT
            Not After : Jun  9 09:17:42 2025 GMT
        Subject: CN=9B6C13CC00334E6D0327DCC333058B30BC321499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:46:a3:03:c6:2a:1d:4e:6c:27:d4:b8:0f:
                    01:32:f0:8d:fe:a1:db:df:a3:5c:a1:56:1d:60:46:
                    64:b0:61:d8:8f:8d:b0:9f:07:6a:30:26:85:2a:b4:
                    87:b2:33:6a:45:f8:c6:6f:06:1a:aa:7f:00:95:46:
                    a2:2b:1d:7f:21:c6:15:4b:60:f8:5a:3c:5d:81:52:
                    9f:24:2d:09:2e:23:ab:e9:c5:58:54:74:d0:70:a2:
                    e1:91:de:f1:9f:66:e3:d0:68:54:8a:a6:70:70:98:
                    3c:cd:17:33:dd:a7:db:e6:fb:32:41:c8:72:91:21:
                    54:e0:17:6a:fe:be:31:52:6b:cb:6a:4a:6d:28:9a:
                    0c:e5:25:f6:a3:66:50:4e:e5:04:cb:42:1b:21:6f:
                    3b:64:7c:8c:2b:3e:b9:32:71:76:c2:b6:32:f0:5a:
                    38:10:af:2f:67:c3:80:47:a9:47:24:e3:51:cb:ee:
                    cc:56:30:b1:b5:a8:94:62:d3:16:f4:e4:f3:91:98:
                    4a:8a:9f:44:d9:77:de:39:ba:ed:44:7c:3a:9f:3b:
                    e5:c8:87:42:c3:c5:8b:0b:ae:ed:8c:86:6a:d5:c6:
                    18:12:4e:9c:fb:5e:7c:51:be:5e:f8:1a:c2:fc:53:
                    e8:5b:05:8f:ee:c3:17:73:05:8d:0b:0a:05:7c:6c:
                    c5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6C:13:CC:00:33:4E:6D:03:27:DC:C3:33:05:8B:30:BC:32:14:99
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d8:b2:2f:65:d8:da:cb:27:16:6e:83:06:8a:65:67:f3:ad:
         03:01:5d:ef:aa:fc:7a:cb:ab:a6:91:27:bc:2e:c2:e7:04:a9:
         31:1b:bc:9a:d1:34:98:35:f2:57:fa:68:73:66:78:14:7a:05:
         55:29:c9:47:9c:f3:e4:3d:57:77:87:cd:1a:6f:8f:c8:94:1b:
         60:71:40:f8:dc:0c:90:9e:85:47:db:6e:79:68:52:75:b9:6e:
         25:dd:22:5a:92:a6:f3:7a:4b:51:12:6e:bf:6d:7e:99:17:27:
         07:20:d5:2a:95:46:32:1c:d0:b1:63:c5:18:4d:64:94:45:af:
         66:67:97:e4:6b:b0:ba:46:7c:62:93:8d:0e:9a:0e:ed:be:6e:
         75:c7:c9:78:d9:e4:e0:ca:d3:c3:b8:8a:8f:10:50:1a:d9:9c:
         d2:99:e0:52:9d:70:74:d6:9c:16:f9:f0:c4:02:68:15:86:e7:
         10:a5:84:dd:d7:38:6e:58:b1:45:bd:0a:d7:20:ed:5b:c6:65:
         8f:6f:f1:bf:b5:57:b9:cc:02:31:d3:0b:85:a0:96:c7:76:ab:
         5f:27:ac:3d:90:6b:82:a8:3a:4f:4f:40:d5:00:99:a7:0a:50:
         39:2f:bf:f7:47:91:6c:72:6f:f1:ad:91:39:62:40:16:88:59:
         9d:9f:68:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:33:55 2025 by rpki-client