Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
File:                     F9CF581400AB7EE53AB913B25561ED007481F16F.mft (raw, json)
Hash identifier:          vFO4bfJlC83ySp4b68Vjq53M4pt7045xqrreTacq7hw=
Subject key identifier:   5C:DF:BD:48:42:0B:A5:75:0C:E8:F3:F7:0B:4A:75:B1:CC:CD:16:11
Authority key identifier: F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F
Certificate issuer:       /CN=F9CF581400AB7EE53AB913B25561ED007481F16F
Certificate serial:       0BC608DE45F198C49D29CA39491AA1368110E532
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
Manifest number:          01D1
Signing time:             Wed 03 Sep 2025 13:41:35 +0000
Manifest this update:     Wed 03 Sep 2025 13:36:35 +0000
Manifest next update:     Sat 06 Sep 2025 22:08:35 +0000
Files and hashes:         1: 3130332e31382e3131342e302f32332d3234203d3e203435323837.roa (hash: cToTFt90KwlvxZE7MCLFACc5g9QO0So5rb9HSJhKMTM=)
                          2: F9CF581400AB7EE53AB913B25561ED007481F16F.crl (hash: 7H1o+HuA2893utEVsDSQrcy5cpCAHpaKff3H5WDw0nE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl
                          rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 22:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c6:08:de:45:f1:98:c4:9d:29:ca:39:49:1a:a1:36:81:10:e5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9CF581400AB7EE53AB913B25561ED007481F16F
        Validity
            Not Before: Sep  3 13:36:35 2025 GMT
            Not After : Sep  6 22:08:35 2025 GMT
        Subject: CN=5CDFBD48420BA5750CE8F3F70B4A75B1CCCD1611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:d8:3a:ab:d7:b6:f4:b6:85:52:d5:9b:67:
                    f9:00:19:e5:6d:b8:48:81:ad:61:8e:a1:a6:3c:d8:
                    5c:b8:58:5e:ae:48:1b:07:fb:e4:c5:99:a8:9a:81:
                    7b:80:cd:1f:ca:0f:ec:08:44:bb:0a:08:01:41:bb:
                    f9:db:ca:37:c1:51:a4:a1:f8:c8:8f:b4:c6:9a:fc:
                    5b:6d:bb:95:65:16:b9:8a:f0:c7:00:d2:40:a2:b4:
                    7e:03:aa:07:79:51:e4:26:c9:c9:e5:c8:b8:c1:1d:
                    02:ad:b5:74:65:6b:f5:ed:e1:8d:67:5e:4d:fe:85:
                    d8:f0:97:6c:bc:d0:00:0e:0e:cc:8a:4d:41:98:7e:
                    ff:fe:67:b6:d8:48:78:ff:3f:d5:dd:f2:6d:7a:dc:
                    60:99:ce:81:71:41:c7:b7:ab:c8:c2:00:ea:17:10:
                    1f:e2:11:7f:9c:b8:71:6b:fc:db:40:47:7f:e1:2a:
                    ba:2a:e7:ce:eb:5e:91:01:bc:9e:c9:7f:36:7b:cc:
                    a5:1a:85:08:05:b9:cc:78:37:b1:fc:c8:9f:a3:d5:
                    ca:5b:80:6c:44:8b:34:ce:6f:70:e9:31:79:c2:ac:
                    a8:26:42:e3:eb:a4:ea:7e:ba:58:26:9e:a1:52:b7:
                    4f:f1:4c:fc:c5:01:98:70:fb:a4:4c:34:f5:ee:b6:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DF:BD:48:42:0B:A5:75:0C:E8:F3:F7:0B:4A:75:B1:CC:CD:16:11
            X509v3 Authority Key Identifier:
                keyid:F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:3f:c8:36:77:90:62:22:3b:e8:56:d5:b5:b0:c3:1f:4f:
         b1:02:fb:2e:95:28:5a:f5:95:06:9b:60:3b:c9:8a:46:b8:44:
         86:1f:21:f3:5c:6c:d8:ec:3a:8d:67:bc:50:a4:22:b7:8a:dc:
         a8:80:5e:f5:d3:c2:2d:af:87:db:a9:57:d1:77:66:5c:e5:a4:
         94:30:4b:59:c6:51:4d:f4:b6:fd:0b:ea:8d:39:82:27:0f:7a:
         33:2e:ba:a3:39:40:00:89:41:f6:7a:4b:af:04:3d:4a:ab:35:
         23:11:63:39:7b:b1:6a:3e:55:97:d0:b7:cb:ed:fa:df:1e:79:
         1d:b2:61:02:2c:8d:28:a3:ab:b2:b3:31:fb:43:49:23:c8:1c:
         00:39:b4:bd:97:ae:d0:37:fd:0c:df:ae:3e:dc:31:59:b5:40:
         cc:eb:60:1e:b8:2e:6f:d0:21:16:2d:45:7b:93:8d:35:f5:98:
         4d:71:03:f0:2c:ed:17:26:6e:6d:d2:75:14:3a:06:99:88:87:
         f1:e4:99:34:4b:eb:55:07:64:9f:e1:fd:05:52:2c:c1:47:c6:
         ce:86:bb:00:6b:5c:63:af:70:a6:2c:a1:a5:0f:68:87:cf:06:
         fc:3c:ba:0c:6e:f3:19:18:f1:d8:24:18:25:a2:96:52:8f:18:
         95:13:e3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:14:55 2025 by rpki-client