Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
File:                     9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json)
Hash identifier:          Q9/hGPP4K6mlcq18Bh0jEjooHL/aVvLeFfidd2P8T2o=
Subject key identifier:   40:34:63:D5:D4:5F:35:69:65:65:78:BD:71:29:57:18:6D:49:0D:8A
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       2A2E521739BFD03E19A6E8C39CD6B3D3B9E54933
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
Manifest number:          04DB
Signing time:             Wed 04 Jun 2025 03:41:49 +0000
Manifest this update:     Wed 04 Jun 2025 03:36:49 +0000
Manifest next update:     Sat 07 Jun 2025 13:11:49 +0000
Files and hashes:         1: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=)
                          2: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=)
                          3: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=)
                          4: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: veGqMN3mL70S0EuSthlH/20iTMIW3vUkNk9k0JoKyx4=)
                          5: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: E6dG5xzAhmGOOI9hqLkzzpPLdq+Po/vVFCvAL/IU7eU=)
                          6: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: T9ji1AFTzEEWIaCqcH/iO3+RUFaFMnvEmXw1DWc4R/E=)
                          7: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=)
                          8: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=)
                          9: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=)
                          10: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=)
                          11: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2e:52:17:39:bf:d0:3e:19:a6:e8:c3:9c:d6:b3:d3:b9:e5:49:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jun  4 03:36:49 2025 GMT
            Not After : Jun  7 13:11:49 2025 GMT
        Subject: CN=403463D5D45F3569656578BD712957186D490D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:43:a9:39:4f:cb:97:67:f3:29:de:11:77:
                    1f:02:6e:94:b4:1c:cc:c2:a3:71:03:33:3a:71:65:
                    79:e5:da:29:d9:20:a4:07:cc:74:6d:84:f7:e2:75:
                    55:6d:67:d8:6a:6b:d8:5c:64:09:73:13:6a:c3:05:
                    95:35:eb:22:10:e7:d1:73:37:c4:d9:91:6a:f7:45:
                    a5:08:cf:eb:d9:af:d7:a6:12:24:8d:16:35:4b:30:
                    cd:2c:2a:e8:33:e8:28:b7:03:5a:d0:be:ab:89:54:
                    c8:ab:3f:87:1c:8d:a5:37:8b:2c:cb:0e:7b:44:a8:
                    0d:d7:70:f1:7b:68:72:1b:8a:7a:14:83:5b:ed:23:
                    d7:3b:61:5f:0e:04:2e:88:0f:2f:0e:5b:0b:c1:03:
                    c4:d1:00:1b:c8:ca:00:57:29:15:8f:83:b9:f0:88:
                    07:b9:68:e6:f5:df:11:ce:a2:68:5d:da:49:d4:a5:
                    14:fd:f9:71:0f:85:1d:c5:6b:60:22:69:a6:48:9a:
                    02:2f:4a:58:8b:8c:f5:a4:7e:d9:3e:dc:2d:5a:2b:
                    d9:2c:c8:50:f8:6f:a3:a1:2a:cc:65:f1:21:8e:87:
                    50:f3:67:a1:17:6d:8c:eb:9b:ff:98:a0:dc:8c:62:
                    1e:64:e7:76:fd:3e:41:9f:92:3e:a6:ec:0d:cf:a1:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:34:63:D5:D4:5F:35:69:65:65:78:BD:71:29:57:18:6D:49:0D:8A
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:6e:ac:1b:db:78:c4:5b:2f:76:4f:46:e1:be:5e:c5:32:
         30:74:95:a1:28:60:c8:24:e1:7c:e4:44:b4:c2:8b:1b:cc:4b:
         d3:3b:76:e0:d8:f5:73:8e:08:2a:c9:5c:56:c3:d1:7b:12:e1:
         1a:e6:75:38:1b:a4:02:a5:29:a7:09:6f:1c:7a:0f:92:ce:f7:
         bb:d6:e7:b5:85:57:58:a6:b5:72:22:a5:9d:f4:f5:41:47:7c:
         ff:31:3f:ee:56:49:d3:4b:d2:03:92:b3:6c:7d:6f:2c:12:8a:
         89:ed:03:5f:7e:14:41:21:12:70:a4:60:4b:78:8c:6f:84:89:
         fd:af:78:67:10:56:99:dd:1f:38:a8:55:6c:d3:c4:12:1c:47:
         a8:ea:73:8e:13:b3:7c:ce:8a:05:61:c4:71:1d:24:e7:ea:c3:
         4f:0f:93:77:c7:82:a4:ea:03:2b:81:2b:8d:3c:fb:cd:b7:09:
         c5:8c:4f:f3:b2:99:8c:1b:3d:64:fc:a6:f2:c6:3f:34:47:e7:
         0c:db:6a:c6:fb:92:10:4a:a1:70:ba:61:32:2c:cc:f0:77:d5:
         3d:4c:9e:21:16:5e:ff:53:3e:fb:57:67:f5:cd:7d:e2:12:fc:
         41:fe:70:fc:0a:f7:53:fb:fd:db:9a:7e:8e:e4:0d:77:f9:43:
         41:f9:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:51 2025 by rpki-client