Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
File:                     9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json)
Hash identifier:          xFf4Y86FbRQrhKKEBRzqz0iZP0wimzZ8hn4fvxw9l7A=
Subject key identifier:   29:29:6B:AE:53:FC:E8:54:D4:F2:12:82:EB:E8:87:45:B2:D0:00:FD
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       5823F112A1CD507CD64EE7A778D4E5A0F271CD26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
Manifest number:          0505
Signing time:             Sat 06 Sep 2025 04:02:24 +0000
Manifest this update:     Sat 06 Sep 2025 03:57:24 +0000
Manifest next update:     Tue 09 Sep 2025 05:18:24 +0000
Files and hashes:         1: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: 0v8AgN7r/4c1TsSHnJh2jh4MvGOfXWjrDArdHCr4Jyk=)
                          2: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=)
                          3: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: B8v+5OLLcgnWlWwVtS3ODg38W4GkJOStN+BbOzzdm+4=)
                          4: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=)
                          5: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=)
                          6: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=)
                          7: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=)
                          8: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=)
                          9: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: EK9rY9vWtmYUd01V3dBua2aCRXikcRS54y0+DlHE8Ko=)
                          10: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=)
                          11: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 05:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:23:f1:12:a1:cd:50:7c:d6:4e:e7:a7:78:d4:e5:a0:f2:71:cd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Sep  6 03:57:24 2025 GMT
            Not After : Sep  9 05:18:24 2025 GMT
        Subject: CN=29296BAE53FCE854D4F21282EBE88745B2D000FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:13:93:77:5d:46:a2:74:4a:b3:71:bd:9b:
                    b1:a4:28:8f:91:f1:42:0d:4f:7f:9d:4a:63:74:4e:
                    b8:7b:85:8b:aa:07:f8:ad:f9:98:8d:22:74:6d:3e:
                    21:87:a9:65:02:0a:7a:d9:28:33:62:c2:53:63:02:
                    bb:3c:b5:e8:96:57:c3:64:ec:dd:58:10:68:7b:d7:
                    91:4e:88:75:ea:dc:4a:e9:0f:5f:5f:c2:df:8b:29:
                    f6:d9:14:89:fc:61:1f:4d:12:b4:45:91:5a:f0:ec:
                    eb:8f:de:87:83:c4:36:3b:77:32:c5:3d:18:8d:70:
                    66:82:91:aa:91:41:d8:b6:b0:ab:87:b8:a9:a4:d1:
                    d6:1b:90:a4:14:f3:fc:aa:d6:3c:26:aa:41:45:34:
                    22:10:7f:51:60:52:03:8b:0c:a8:c9:06:35:de:e4:
                    c3:97:1a:d5:a1:7d:18:cd:ae:a9:67:f1:02:a9:30:
                    63:56:6b:c3:7d:72:12:b6:17:60:9c:6f:6a:c0:af:
                    44:73:a1:bd:59:53:24:20:a6:b2:96:b6:d0:13:cd:
                    2c:b7:f4:58:c7:13:9f:c2:6f:3a:3d:08:54:c0:a2:
                    fb:ba:dc:4d:7b:72:96:42:d7:82:d5:36:2a:1e:94:
                    32:fc:4d:a0:2e:dd:36:71:c4:04:13:bd:1d:01:c2:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:29:6B:AE:53:FC:E8:54:D4:F2:12:82:EB:E8:87:45:B2:D0:00:FD
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7e:6b:bf:e0:4d:69:f9:e0:8b:05:5c:f1:11:75:3f:05:d8:
         cd:4d:69:87:a5:8b:67:d5:09:b8:79:2d:0a:35:b0:11:cc:87:
         7e:ce:c2:12:71:0d:4f:e4:91:3e:4f:8e:2b:cf:46:68:c8:b9:
         d0:c8:02:fd:03:71:ee:31:08:46:12:f3:93:2c:83:59:e6:37:
         18:93:59:01:56:6f:ff:8d:c7:f8:af:18:33:0d:5b:c9:30:f9:
         d9:3c:eb:d6:c5:ff:1f:27:d6:c9:37:23:6d:c1:c4:2d:50:ac:
         63:cf:a8:db:20:40:aa:f3:b1:49:ac:a5:d0:10:b1:aa:7c:ed:
         fd:a8:9e:19:3e:6d:dc:35:59:fc:7e:0a:a2:cb:49:b2:2b:2b:
         45:5c:5e:a6:a4:d0:50:37:45:2a:97:e5:29:a3:85:c1:12:50:
         2c:e9:42:76:23:88:99:b1:5f:7e:22:a3:8a:69:80:13:78:c1:
         bb:c9:f3:ae:e0:66:01:28:52:f4:ae:92:8b:4c:6f:77:31:a8:
         d6:06:ea:42:49:6e:43:0a:b7:34:9e:86:2c:a2:db:32:d2:d0:
         35:e6:e2:ab:2d:7d:8c:da:2a:e8:8b:0e:53:26:4f:60:a0:5c:
         c3:52:54:25:23:55:53:78:70:ce:4e:3e:56:9b:17:c4:d9:0a:
         b8:a3:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:27:10 2025 by rpki-client