Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
File:                     3E6F306418455683DBA0AC95B4FD41E1846476AB.mft (raw, json)
Hash identifier:          OLKwWr5K/QLd027XZtAvtkbsiQPahw7hGYV3OZbnOxI=
Subject key identifier:   19:F1:E8:9A:B5:6E:8A:CB:80:20:47:2F:0F:3F:52:F6:B5:43:78:A1
Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB
Certificate issuer:       /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB
Certificate serial:       7C6980DDB14404CFB2686D287214A26265DD2198
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
Manifest number:          04F3
Signing time:             Sun 07 Sep 2025 03:10:50 +0000
Manifest this update:     Sun 07 Sep 2025 03:05:50 +0000
Manifest next update:     Wed 10 Sep 2025 08:02:50 +0000
Files and hashes:         1: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: +zMuF2d6C36Qn9OFjFhter7f0zvIprv5Kce2a+7KyYs=)
                          2: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: Usk9JQ2XeRGm39smNUuLoGkN+7yFDsrjSvIs4nhXd0I=)
                          3: 3E6F306418455683DBA0AC95B4FD41E1846476AB.crl (hash: nWAVmh9F88hizDB395Far0dA92UnsgKw/WjAOwT9+wQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl
                          rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 08:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:69:80:dd:b1:44:04:cf:b2:68:6d:28:72:14:a2:62:65:dd:21:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB
        Validity
            Not Before: Sep  7 03:05:50 2025 GMT
            Not After : Sep 10 08:02:50 2025 GMT
        Subject: CN=19F1E89AB56E8ACB8020472F0F3F52F6B54378A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1c:12:a3:75:9f:0f:c3:d1:5b:95:23:41:b9:
                    2b:e7:8e:77:b1:a7:e3:b6:6c:e1:4e:1e:b6:23:9d:
                    77:98:49:7a:5a:5d:4b:e1:b7:f2:0a:c6:17:0a:04:
                    46:0e:32:2f:6a:62:ce:39:bf:61:54:0e:0f:11:93:
                    a0:9e:ca:34:37:26:9e:4f:ee:62:75:9d:70:70:4b:
                    ad:d5:c8:b9:e7:bc:27:82:ab:3a:0a:b6:be:98:6f:
                    c3:b8:c0:9c:cc:68:9d:40:41:98:70:5f:28:f9:5e:
                    d4:ec:85:db:d5:40:77:91:9b:ec:13:b1:3c:c6:fa:
                    0b:3b:6c:c7:24:23:10:44:1d:1f:a9:7f:81:31:23:
                    79:f3:d4:7c:55:08:f5:67:40:48:fd:83:f8:78:2d:
                    e9:45:09:97:71:d8:09:e3:84:b3:fb:d5:17:09:88:
                    48:62:5e:7e:fb:70:7a:39:28:1e:56:00:c5:10:e7:
                    25:47:99:38:c6:a6:30:a8:65:a8:76:df:2f:ca:af:
                    d6:4f:15:b1:a2:df:21:25:82:47:d0:eb:0e:e9:c9:
                    8e:c9:52:d3:dd:3b:be:78:da:13:98:56:0c:75:13:
                    ba:48:6b:80:dc:e4:e2:c3:79:b8:5a:eb:dd:b7:eb:
                    3d:e6:b2:d9:20:2b:c2:2c:00:9c:b2:8d:c3:47:c9:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F1:E8:9A:B5:6E:8A:CB:80:20:47:2F:0F:3F:52:F6:B5:43:78:A1
            X509v3 Authority Key Identifier:
                keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:78:4c:21:e8:2d:c4:d3:89:66:36:4d:43:ec:69:b6:08:
         14:17:4b:22:64:45:31:cd:fc:af:88:7a:f9:42:eb:5e:29:ad:
         e2:95:67:79:92:d9:db:24:69:5f:ad:ef:f8:6a:c3:f3:86:fa:
         4f:63:02:ec:e8:e5:8c:ad:6e:42:b5:8e:30:20:d9:a8:09:98:
         a4:60:15:15:10:9f:3c:2c:fa:39:9f:1a:6c:1f:58:fe:cf:f9:
         24:31:89:ae:b5:2c:ee:ee:73:89:42:80:bb:20:d6:91:55:00:
         ed:a1:2c:94:ad:29:79:b9:36:ab:f7:ab:b7:2b:23:a2:cb:06:
         56:7c:6f:3a:cd:47:90:36:20:57:9a:9b:36:ea:d8:d4:20:cc:
         6b:be:7d:01:4d:70:bc:9b:49:25:14:8f:f2:71:e9:26:4b:ac:
         e9:d2:14:44:5c:1b:c9:4b:05:30:5b:02:1f:98:98:82:29:e8:
         82:ef:56:7c:5b:16:c3:02:87:89:24:59:91:87:43:00:19:31:
         ee:5a:3a:1c:bc:e8:26:58:66:26:cc:83:ba:b0:5f:d2:ab:02:
         7c:e8:7f:ef:06:a8:32:e8:8f:32:20:bb:12:36:19:b4:8d:ea:
         35:64:13:dd:25:0f:f1:e4:40:f2:4c:27:83:96:8b:20:bb:79:
         85:0a:7d:1c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfGmA3bFEBM+yaG0ochSiYmXdIZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4
NDY0NzZBQjAeFw0yNTA5MDcwMzA1NTBaFw0yNTA5MTAwODAyNTBaMDMxMTAvBgNV
BAMTKDE5RjFFODlBQjU2RThBQ0I4MDIwNDcyRjBGM0Y1MkY2QjU0Mzc4QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkHBKjdZ8Pw9FblSNBuSvnjnex
p+O2bOFOHrYjnXeYSXpaXUvht/IKxhcKBEYOMi9qYs45v2FUDg8Rk6CeyjQ3Jp5P
7mJ1nXBwS63VyLnnvCeCqzoKtr6Yb8O4wJzMaJ1AQZhwXyj5XtTshdvVQHeRm+wT
sTzG+gs7bMckIxBEHR+pf4ExI3nz1HxVCPVnQEj9g/h4LelFCZdx2AnjhLP71RcJ
iEhiXn77cHo5KB5WAMUQ5yVHmTjGpjCoZah23y/Kr9ZPFbGi3yElgkfQ6w7pyY7J
UtPdO7542hOYVgx1E7pIa4Dc5OLDebha69236z3mstkgK8IsAJyyjcNHyaojAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGfHomrVuisuAIEcvDz9S9rVDeKEwHwYDVR0j
BBgwFoAUPm8wZBhFVoPboKyVtP1B4YRkdqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMC8zRTZGMzA2NDE4
NDU1NjgzREJBMEFDOTVCNEZENDFFMTg0NjQ3NkFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4NDY0
NzZBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2
ZDYtMzk0ZDgzYjM5MmZjLzAvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQx
RTE4NDY0NzZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACnGeEwh6C3E04lmNk1D7Gm2CBQXSyJkRTHN
/K+IevlC614preKVZ3mS2dskaV+t7/hqw/OG+k9jAuzo5YytbkK1jjAg2agJmKRg
FRUQnzws+jmfGmwfWP7P+SQxia61LO7uc4lCgLsg1pFVAO2hLJStKXm5Nqv3q7cr
I6LLBlZ8bzrNR5A2IFeamzbq2NQgzGu+fQFNcLybSSUUj/Jx6SZLrOnSFERcG8lL
BTBbAh+YmIIp6ILvVnxbFsMCh4kkWZGHQwAZMe5aOhy86CZYZibMg7qwX9KrAnzo
f+8GqDLojzIguxI2GbSN6jVkE90lD/HkQPJMJ4OWiyC7eYUKfRw=
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:00:48 2025 by rpki-client