Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft
File:                     A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json)
Hash identifier:          y/YMX9seiA1DrhufgTedCYVAfQbz56KTgatjEwF/h9I=
Subject key identifier:   9C:13:80:36:47:23:39:C5:F2:46:0A:18:06:FC:C2:2F:6C:5C:10:0F
Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A
Certificate issuer:       /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A
Certificate serial:       51A92258F41D961E249F1CD5187A9833B707CE79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft
Manifest number:          04FD
Signing time:             Wed 20 Aug 2025 09:02:13 +0000
Manifest this update:     Wed 20 Aug 2025 08:57:13 +0000
Manifest next update:     Sat 23 Aug 2025 14:35:13 +0000
Files and hashes:         1: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: ZhEUfuPbNUVTe1WvwlGQtT4sXYmuJTZpmdvNtcAawQM=)
                          2: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=)
                          3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl
                          rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Aug 2025 14:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a9:22:58:f4:1d:96:1e:24:9f:1c:d5:18:7a:98:33:b7:07:ce:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A
        Validity
            Not Before: Aug 20 08:57:13 2025 GMT
            Not After : Aug 23 14:35:13 2025 GMT
        Subject: CN=9C138036472339C5F2460A1806FCC22F6C5C100F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:49:b0:83:2a:fe:02:5d:fc:3a:ba:34:25:
                    bc:2e:71:83:f1:36:f5:a3:71:be:67:86:ee:ef:f3:
                    3e:ae:32:e2:f3:91:60:94:08:20:17:8a:30:00:c4:
                    b3:84:42:b5:ae:bc:19:9e:53:87:8c:05:12:56:91:
                    a6:80:8f:7b:27:80:9a:47:59:9b:f2:76:0b:fa:ae:
                    4c:e5:a1:9e:f6:5e:45:d4:76:f9:e6:58:de:9c:45:
                    9f:e5:48:0f:83:f8:d5:3c:d6:df:fd:4b:0c:00:6e:
                    36:95:eb:0f:32:88:2a:70:50:02:5e:d6:ab:1f:78:
                    23:2a:3d:2f:62:29:ad:40:e4:21:b3:b9:27:e8:0c:
                    c9:54:37:cb:37:fa:9e:33:95:fa:35:0c:cd:46:3a:
                    28:58:6f:c1:b8:47:13:8a:bd:d0:89:85:a0:b1:5c:
                    9f:3c:1c:63:3f:87:11:d2:69:e6:a8:8f:f4:f6:30:
                    b3:19:30:e8:a9:e3:28:71:cd:1e:07:fe:5c:62:1a:
                    43:28:ff:0c:41:5f:7b:9e:2f:ce:6e:0c:40:bb:0a:
                    18:3b:df:c5:17:7c:1a:46:5f:eb:2c:69:02:09:59:
                    f7:0e:54:91:15:79:7a:09:9c:46:3a:3e:a0:6f:5e:
                    bb:e9:7c:55:4c:24:e5:46:5c:06:13:65:2c:4e:80:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:13:80:36:47:23:39:C5:F2:46:0A:18:06:FC:C2:2F:6C:5C:10:0F
            X509v3 Authority Key Identifier:
                keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b7:a9:4d:a9:0e:37:6a:5d:78:45:98:2f:11:c6:af:4a:7c:
         94:cb:13:42:f3:18:2d:d4:27:59:6b:e4:87:76:a7:b5:b8:c4:
         40:ea:06:ff:dd:93:7d:c4:76:0f:b9:aa:ab:55:76:04:e8:30:
         67:f7:2a:d2:d5:ca:53:d4:6a:ac:07:7c:b2:ad:47:ce:a6:d5:
         94:4f:e7:68:cb:ca:ed:2a:4e:e8:36:fe:a5:e3:8d:89:8d:e4:
         30:ef:b2:b1:6c:fc:c6:1d:65:35:dc:5b:aa:b0:d4:34:29:0a:
         76:96:d8:7f:73:5e:b4:91:6a:2b:c2:c0:51:3d:e1:f8:06:a6:
         a7:ae:19:09:33:17:be:06:41:c3:7e:6c:0e:33:02:1b:4a:ce:
         83:1e:8c:39:49:38:eb:c3:94:fa:88:22:fe:e0:05:81:40:52:
         d4:26:3f:a7:29:96:15:84:81:5f:f6:b8:19:2f:d5:dd:13:aa:
         81:a0:70:2a:40:b0:ea:2b:70:39:fa:78:75:cd:9a:50:cc:7c:
         ca:6a:09:42:33:1d:b1:6f:ad:5c:83:9b:f9:97:03:d3:c6:11:
         9f:94:c6:54:c3:ef:3b:6d:6b:39:35:35:1c:4c:67:5e:98:aa:
         25:a1:aa:20:9f:65:b9:38:90:22:37:c7:bd:36:63:be:44:fd:
         11:ad:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:53:22 2025 by rpki-client