Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft
File:                     9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json)
Hash identifier:          7jF3Vva7PLgBa7nyeGrOEWl7JnsnMXqPmM8Zy4hCeyA=
Subject key identifier:   0C:15:2C:4A:3D:A0:AA:07:12:B4:1F:7B:DF:D9:D2:B4:A6:A2:E2:4F
Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3
Certificate issuer:       /CN=9D21366ED4E3738A5F50E524109806C98D710BD3
Certificate serial:       07D9ADC661625E4565EBEAE7CF338DA831E86770
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft
Manifest number:          87
Signing time:             Sun 08 Jun 2025 20:40:00 +0000
Manifest this update:     Sun 08 Jun 2025 20:35:00 +0000
Manifest next update:     Wed 11 Jun 2025 23:17:00 +0000
Files and hashes:         1: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: 1H3IKAx7UXRMU3wtvDvmP+OHRrM19D65H1BvyoXZOOA=)
                          2: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: CBQ7BcTAX1WXp7Ylcc4yi/0Cf14WakzZ7YKG6S9yjVU=)
                          3: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: WdZyFn5A7sgJjqFP/l/6nJAn+QMzXj7r7aTiyUUsllM=)
                          4: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: 1k/F9QvhsWyHzMYSAMED8rAGgh3NCF/Y7RiQpGt2sak=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl
                          rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 23:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d9:ad:c6:61:62:5e:45:65:eb:ea:e7:cf:33:8d:a8:31:e8:67:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3
        Validity
            Not Before: Jun  8 20:35:00 2025 GMT
            Not After : Jun 11 23:17:00 2025 GMT
        Subject: CN=0C152C4A3DA0AA0712B41F7BDFD9D2B4A6A2E24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:44:1d:58:75:3e:13:73:5a:86:65:38:cb:
                    88:69:c0:fa:04:8c:1f:07:ee:79:5d:36:a1:49:4f:
                    53:ae:d3:6d:52:30:a9:50:7e:7e:78:e6:1f:ec:54:
                    36:00:5a:b0:ef:87:05:4c:b4:69:d7:77:33:ab:b1:
                    28:47:96:bd:12:90:ca:f6:30:43:e5:85:a0:9d:3a:
                    f6:98:dc:7d:f6:13:85:8d:ec:99:62:08:91:07:a1:
                    f0:0f:3e:82:73:c3:8c:df:c8:50:b9:e3:81:cd:59:
                    86:53:5f:a0:2c:7b:2d:25:a8:a0:b8:af:02:7c:ad:
                    ca:c5:b7:8e:3b:4b:d3:82:d0:7f:9f:7e:71:11:a0:
                    2a:f0:24:84:a6:89:57:ff:a1:de:39:d7:44:b2:34:
                    1e:4b:93:47:e0:ed:68:d4:fd:39:54:d2:3b:e3:ee:
                    0d:fe:e6:f5:39:62:23:83:f6:bf:3b:73:67:dd:f3:
                    71:8f:6c:1b:d1:5d:2a:9d:ed:f1:45:d8:d2:6a:11:
                    de:56:c5:dc:32:33:ea:35:7e:86:bc:c9:26:3c:7f:
                    53:e2:9e:57:bf:a2:b7:90:cc:02:3c:cf:53:00:58:
                    a9:35:77:cf:d6:24:5a:1c:b2:2f:19:be:fc:10:4c:
                    72:0a:d2:c5:d8:37:ff:c6:96:30:e0:42:22:c7:31:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:15:2C:4A:3D:A0:AA:07:12:B4:1F:7B:DF:D9:D2:B4:A6:A2:E2:4F
            X509v3 Authority Key Identifier:
                keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:df:65:f2:f7:9e:82:93:e1:d9:e8:3d:a3:5e:7d:34:b2:a8:
         bb:16:bf:12:f2:e3:74:96:c6:92:64:af:36:16:39:e9:1b:bc:
         b2:88:5d:e9:38:c0:5f:b0:bf:3a:64:36:c2:1d:a6:ea:37:6d:
         58:dc:c5:06:72:5f:24:2d:be:bc:2b:b5:86:5e:af:2e:8f:f6:
         84:67:e4:9a:ea:16:fc:d5:d5:39:16:ee:aa:1a:7c:a1:19:22:
         89:7f:ef:84:60:32:8c:82:27:bf:fd:e4:3b:dd:5d:f4:be:8a:
         43:2b:69:59:a6:7e:cc:5a:fd:d9:6a:3b:3b:cd:73:7b:6d:23:
         01:bd:0b:0a:a1:24:f1:33:f9:ee:4d:f9:df:29:26:ea:f6:40:
         a9:41:67:a2:0d:e6:7b:18:ac:2e:c5:c1:ea:8b:7f:1f:d2:83:
         01:51:20:a4:81:78:eb:f6:0c:0a:01:70:37:2c:e5:57:a0:41:
         ef:7d:fe:86:a8:7a:88:90:10:f5:72:f6:45:8f:87:fa:27:28:
         54:a3:e1:d2:4a:af:d1:15:6b:64:ec:b8:19:d7:03:75:6b:ce:
         7a:cb:6f:1f:61:88:6e:df:e0:cb:21:ab:ff:7f:9c:b9:c0:30:
         22:79:2e:e3:b6:94:22:44:2f:71:1a:92:93:dd:94:b3:f2:11:
         e0:2f:0a:75
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUB9mtxmFiXkVl6+rnzzONqDHoZ3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4
RDcxMEJEMzAeFw0yNTA2MDgyMDM1MDBaFw0yNTA2MTEyMzE3MDBaMDMxMTAvBgNV
BAMTKDBDMTUyQzRBM0RBMEFBMDcxMkI0MUY3QkRGRDlEMkI0QTZBMkUyNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UUQdWHU+E3NahmU4y4hpwPoE
jB8H7nldNqFJT1Ou021SMKlQfn545h/sVDYAWrDvhwVMtGnXdzOrsShHlr0SkMr2
MEPlhaCdOvaY3H32E4WN7JliCJEHofAPPoJzw4zfyFC544HNWYZTX6Asey0lqKC4
rwJ8rcrFt447S9OC0H+ffnERoCrwJISmiVf/od4510SyNB5Lk0fg7WjU/TlU0jvj
7g3+5vU5YiOD9r87c2fd83GPbBvRXSqd7fFF2NJqEd5WxdwyM+o1foa8ySY8f1Pi
nle/oreQzAI8z1MAWKk1d8/WJFocsi8ZvvwQTHIK0sXYN//GljDgQiLHMdClAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDBUsSj2gqgcStB9739nStKai4k8wHwYDVR0j
BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0
RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx
MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh
MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2
Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIXfZfL3noKT4dnoPaNefTSyqLsWvxLy43SW
xpJkrzYWOekbvLKIXek4wF+wvzpkNsIdpuo3bVjcxQZyXyQtvrwrtYZery6P9oRn
5JrqFvzV1TkW7qoafKEZIol/74RgMoyCJ7/95DvdXfS+ikMraVmmfsxa/dlqOzvN
c3ttIwG9CwqhJPEz+e5N+d8pJur2QKlBZ6IN5nsYrC7FweqLfx/SgwFRIKSBeOv2
DAoBcDcs5VegQe99/oaoeoiQEPVy9kWPh/onKFSj4dJKr9EVa2TsuBnXA3VrznrL
bx9hiG7f4Mshq/9/nLnAMCJ5LuO2lCJEL3EakpPdlLPyEeAvCnU=
-----END CERTIFICATE-----
Generated at Tue Jun 10 17:13:37 2025 by rpki-client