Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
File:                     95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft (raw, json)
Hash identifier:          bnuyOwfwfONdbMVqs2NhYyemZOJ4lDpu83l+X1YUHsQ=
Subject key identifier:   6B:9F:49:E0:F8:7E:0D:FE:16:0C:22:31:2F:8A:66:E3:83:7E:2B:90
Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
Certificate issuer:       /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Certificate serial:       7B1C71E7794A238DDFBA802F3058C3339417AB2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
Manifest number:          050F
Signing time:             Sat 06 Sep 2025 19:31:38 +0000
Manifest this update:     Sat 06 Sep 2025 19:26:38 +0000
Manifest next update:     Tue 09 Sep 2025 21:17:38 +0000
Files and hashes:         1: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: KABMcwwuj0PcVg0DF+2S7mT8pkOrI1Q8USpOkuuxMXI=)
                          2: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: 2rfcy4tUpo7HgU2cGwZC6pQYZQAR7WSsi/1k28TkJlU=)
                          3: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: I3OA1TXXrn7Ho4Bbdaoik2HHmIJMRdT3vdvqOadCgWc=)
                          4: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: GggD4UAIQuJ2Ici9kI1FCxhBRH2erQ0+Zgb75d0bwAQ=)
                          5: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: T0GxcffUorQqKvKWvoQBmwT56g/pt1WC0GNCeIbnIXI=)
                          6: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: lJiN/1jPk6sVzBu+b+dWtXwNwMFWgXWbUliAdUar1AU=)
                          7: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: SVVnOcpEzNW3GyvGQSrBzvX2ix4zPecYqTfJmTpW5Ek=)
                          8: 95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl (hash: ZLRMIzpcC/VmAsf5d7OvXT1p6ubRLKTs1Nvbpspb56w=)
                          9: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: lS8odvouHADOZvGcEIZX6cESZX3v05ZwGGbLJRnmmPg=)
                          10: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: RKuA2CS77/iBc1MhX2FD3Oj8MLTo/sw4r4vfbH4WpPI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
                          rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Sep 2025 21:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1c:71:e7:79:4a:23:8d:df:ba:80:2f:30:58:c3:33:94:17:ab:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
        Validity
            Not Before: Sep  6 19:26:38 2025 GMT
            Not After : Sep  9 21:17:38 2025 GMT
        Subject: CN=6B9F49E0F87E0DFE160C22312F8A66E3837E2B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6e:21:00:16:a2:3d:a4:8a:7d:c9:30:17:e1:
                    9b:1c:ff:72:7f:d6:e2:0d:ae:42:9e:7c:38:ff:b5:
                    6c:e2:ca:a5:a5:e8:36:37:67:b7:38:a7:72:14:df:
                    97:83:6e:76:5b:24:c8:e7:f2:9e:76:28:58:62:04:
                    18:2e:8c:77:f7:f3:09:dc:a5:60:ef:72:3f:86:3c:
                    04:ab:5b:93:8b:80:cf:be:61:11:69:8a:ed:26:da:
                    0a:74:bd:0f:97:bb:28:9e:fb:38:2b:44:77:64:21:
                    21:1e:77:f5:3f:05:33:f1:fd:03:98:a9:83:82:11:
                    92:1d:d6:41:36:a3:c4:32:fe:89:0a:18:da:39:36:
                    1e:a9:47:23:b6:ed:aa:10:29:7a:10:7f:e4:e0:a5:
                    6e:fb:4f:07:b5:ba:d8:e8:a4:72:7f:4c:f2:1e:34:
                    b0:dc:a5:c8:fd:e6:77:e6:38:af:32:1d:3f:56:6b:
                    4b:84:95:b6:24:79:b5:2c:52:99:e7:04:ec:3e:4d:
                    c7:7e:10:91:c4:ea:3c:49:d1:b7:b8:58:d4:f9:bc:
                    4f:80:b4:6f:12:18:8c:af:d3:f0:a1:3e:cc:84:75:
                    0c:f0:95:96:c3:27:a3:85:84:54:5d:e0:09:a9:dd:
                    6e:4b:c4:bb:24:e9:72:22:7f:8b:2d:18:d6:41:6b:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9F:49:E0:F8:7E:0D:FE:16:0C:22:31:2F:8A:66:E3:83:7E:2B:90
            X509v3 Authority Key Identifier:
                keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ee:67:b5:32:f3:e5:03:c9:3b:9b:1c:9b:48:bd:7c:b0:1e:
         01:f6:f0:98:f8:8e:c2:3d:9e:23:32:df:eb:1d:0d:39:22:c9:
         3a:bc:e2:7e:fa:ff:d4:f4:fa:08:df:bc:40:96:8b:a4:aa:8b:
         f6:c5:aa:c0:fa:af:cf:eb:18:a5:5c:03:79:ad:6f:6f:a8:23:
         cd:b9:99:58:52:5e:9e:58:f5:ea:78:b9:44:14:88:fa:60:c6:
         98:0e:1a:c2:d0:ef:9e:06:c2:02:b5:9b:ad:89:6f:4c:22:09:
         79:a8:fc:ae:86:fc:af:37:5b:d1:f5:12:43:70:b8:14:2c:57:
         15:0b:1b:b3:5f:61:15:d6:6c:2e:e3:a7:93:9b:d0:2d:42:fb:
         43:0f:1a:ca:cf:cb:51:e4:62:55:e5:d4:98:71:2f:9e:c6:21:
         52:61:2c:ec:ef:f3:79:ec:bb:0b:a5:0a:1c:e4:e4:62:39:85:
         a2:17:15:39:48:ac:17:cb:76:8b:39:a6:c0:9f:94:5c:a0:57:
         b1:71:ea:7e:fc:48:c8:df:37:86:ae:b1:7f:d8:cb:be:de:92:
         8b:c6:29:0d:93:30:37:42:85:c1:bb:0e:e8:59:0e:05:2d:7d:
         b8:fc:3a:37:ce:1b:98:8f:01:d5:eb:59:a7:28:e7:ef:78:60:
         1f:75:76:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:02:42 2025 by rpki-client