Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File:                     735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier:          dghKwg6MKs2Sf+TtOr4kVb8iKgxhU4pjPTAMlRhnLdo=
Subject key identifier:   1D:7C:71:56:8B:95:B4:C8:89:1E:F9:0E:30:C8:4E:7E:45:57:45:6C
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       653E4344C1A77497BC84784664FB8CFDCD37E09D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number:          0236
Signing time:             Fri 05 Sep 2025 05:31:04 +0000
Manifest this update:     Fri 05 Sep 2025 05:26:04 +0000
Manifest next update:     Mon 08 Sep 2025 14:25:04 +0000
Files and hashes:         1: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: MNca57frzbraXQ+A5sffHCuXC7kbkp16cgNgxDCrZrE=)
                          2: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: SoFui+6+9U4okutKDEEDEO8cNoDM72pJozwIgVHrak0=)
                          3: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: MYkgPF54ZFrZUvgyAUVZduFZA6VqGujX+c3smzb0mEg=)
                          4: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: wpiBbA14rFudBX47mLmkM7ybDuOmUlSGkM/kuaSjBCA=)
                          5: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: bNf7w52cmLw3GYp+mMaw3papmg1ZcgmFTgd1v4VSUIU=)
                          6: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: cA/F4dRQqVseyocCpcE2agAw/XVimr3HwwnooMdskYo=)
                          7: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: Vj9b7eOBgij03V9LOKkEMCElDrFIB3RU0Drnp1lzskU=)
                          8: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: hML4QQ0UsZ/MNuzlhXm7ZxAfBsEoo8p/TG6zTdeHPYA=)
                          9: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: ixUeVPdiiujjqdz2cxBs4b9W1yytwj3hYRmTEjubFdc=)
                          10: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: cuW15q9SnbE27U2Jg8nnNYvxOwHbFyEv1g42R3Sx4E0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 14:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3e:43:44:c1:a7:74:97:bc:84:78:46:64:fb:8c:fd:cd:37:e0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Sep  5 05:26:04 2025 GMT
            Not After : Sep  8 14:25:04 2025 GMT
        Subject: CN=1D7C71568B95B4C8891EF90E30C84E7E4557456C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:8c:14:f0:bc:b1:da:2f:3d:90:63:cf:ee:
                    52:a5:69:4d:fc:b1:2f:8a:0b:e1:96:80:16:14:1e:
                    27:51:a1:91:0d:b8:ec:fa:b7:59:c0:ac:10:5f:74:
                    cf:ba:85:56:20:53:81:16:29:cd:44:ad:49:a7:b7:
                    4e:75:98:a6:59:b1:e9:8c:e4:e8:91:8c:f8:a9:76:
                    1d:d3:85:4b:64:ff:b3:de:fe:e0:16:95:c7:31:c7:
                    a6:eb:af:0c:df:2c:9b:9b:e4:4b:9b:b3:0d:13:b4:
                    61:a5:84:27:9b:94:07:2c:35:7c:1f:1e:2d:fa:1f:
                    d6:19:29:dd:1f:cd:af:eb:de:c0:13:29:f6:50:b7:
                    96:ad:b6:cc:0e:1f:90:3e:96:6a:19:a3:43:c5:18:
                    8c:c0:31:01:50:bf:24:1c:64:a0:1d:bd:02:1d:b0:
                    62:80:97:73:19:10:38:de:16:43:16:cc:af:69:94:
                    c4:ac:ba:2a:74:23:45:76:eb:34:ed:5f:d1:62:4a:
                    5f:4e:9b:e1:1d:0e:bb:48:7d:99:ef:a4:ee:a5:85:
                    b7:5a:5a:7a:56:33:a3:44:9b:79:42:b0:e4:91:16:
                    76:f3:2f:78:75:6b:fa:34:63:b9:85:e2:48:b8:9b:
                    27:a4:a6:e9:73:54:77:04:3f:7b:39:77:cb:53:e0:
                    86:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7C:71:56:8B:95:B4:C8:89:1E:F9:0E:30:C8:4E:7E:45:57:45:6C
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:35:34:96:4d:a5:3c:c7:f2:eb:13:da:ea:93:e9:9b:77:c2:
         ea:b8:a8:e9:e0:8b:d1:6f:c8:a1:0c:c2:d1:98:ba:23:08:59:
         5e:2d:82:5a:ca:4b:05:a4:49:05:46:c0:27:ea:a5:f5:87:01:
         d2:11:1c:b2:66:ff:89:e1:df:71:da:1f:a0:0f:0c:14:92:63:
         35:ee:9b:69:88:be:ae:06:67:9b:2c:6a:d8:fe:90:55:0b:10:
         f5:86:9b:39:39:e6:a2:47:61:5a:cd:1f:ad:f9:7f:96:ce:56:
         06:4e:b8:bb:55:c6:49:be:a7:75:e8:c9:74:20:51:12:09:46:
         c9:34:ab:37:8c:9c:ad:b3:dd:27:be:e2:2d:b1:83:03:33:be:
         2c:5e:e1:ab:2a:9c:14:10:e4:1f:a9:9b:ef:f1:be:55:e5:a0:
         95:ec:44:7c:5a:03:a9:bd:60:a7:52:0b:cd:84:22:9a:d8:5b:
         e8:6b:60:24:4c:64:47:12:d7:98:90:2d:1d:75:5d:4a:47:88:
         a2:92:ed:9f:e0:96:3e:03:c4:c8:bb:85:f0:00:b6:79:35:8a:
         b2:9e:b8:d5:f7:98:06:4a:8a:75:44:b1:af:c1:cf:0d:2f:4b:
         ee:f4:46:9f:55:e6:6b:29:8f:a7:98:26:97:a4:49:8d:47:37:
         90:8a:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:21:12 2025 by rpki-client