Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
File:                     9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json)
Hash identifier:          +63/eey8DD2f464MeS6OWuWHM6ttQhIomekR1dmT1rs=
Subject key identifier:   BA:E3:02:12:88:19:D1:7B:8B:7A:98:46:7B:23:7A:5F:EC:8B:2E:6A
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Certificate issuer:       /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial:       567FE5B825A091F2CE5845C401F10E39FD54546E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
Manifest number:          0218
Signing time:             Wed 03 Sep 2025 09:40:02 +0000
Manifest this update:     Wed 03 Sep 2025 09:35:02 +0000
Manifest next update:     Sat 06 Sep 2025 14:30:02 +0000
Files and hashes:         1: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=)
                          2: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=)
                          3: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=)
                          4: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=)
                          5: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=)
                          6: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: plCu4Kx6j8wvQQjI96mXdaeoMvJqyN1ioh9g/XENkn0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
                          rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 14:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7f:e5:b8:25:a0:91:f2:ce:58:45:c4:01:f1:0e:39:fd:54:54:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
        Validity
            Not Before: Sep  3 09:35:02 2025 GMT
            Not After : Sep  6 14:30:02 2025 GMT
        Subject: CN=BAE302128819D17B8B7A98467B237A5FEC8B2E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:a1:75:49:71:6f:30:1e:a9:bf:a1:19:a0:
                    4a:89:eb:d0:3d:e3:05:ce:67:07:ac:df:b3:85:a0:
                    82:54:61:d4:b0:55:d4:4a:a3:cb:87:08:f8:88:a2:
                    7d:f9:e3:ce:90:eb:a7:94:19:26:64:81:63:40:5d:
                    c8:90:8c:7d:03:c8:7b:37:f7:07:3b:6d:13:9d:f2:
                    f9:34:01:7b:cf:6e:1d:a6:54:ee:b6:93:f7:64:24:
                    2a:cb:9f:8a:f0:02:15:cb:26:7e:b5:c7:4d:ef:39:
                    16:e3:ee:8d:e5:22:07:be:03:e0:b9:25:38:96:81:
                    97:38:03:ef:35:6d:fd:93:5a:61:c0:1f:b7:03:ed:
                    3b:30:02:6f:da:dd:ec:15:6e:84:16:de:a8:60:51:
                    a4:88:59:04:88:15:80:80:99:85:f2:2d:c1:50:42:
                    b0:15:4c:43:3c:69:7d:15:74:84:74:a8:80:70:c1:
                    79:b9:a5:11:6d:2e:61:4d:10:f7:77:a0:91:10:11:
                    09:70:ec:c7:f6:2c:61:63:89:1e:b4:d2:08:48:06:
                    1a:48:9d:93:3a:d9:68:c8:ec:a1:8d:a1:6d:28:f9:
                    3f:0d:8c:31:a2:99:7d:89:af:34:ec:69:a9:a6:c4:
                    7a:7a:20:c5:3c:10:3b:da:01:7a:e8:1a:fa:3b:56:
                    4f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E3:02:12:88:19:D1:7B:8B:7A:98:46:7B:23:7A:5F:EC:8B:2E:6A
            X509v3 Authority Key Identifier:
                keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:80:82:ea:7d:8a:b7:ed:a0:d3:52:ef:9c:6a:51:66:95:4d:
         77:71:00:83:89:5b:9c:dc:fb:af:cb:93:a6:05:67:58:a0:56:
         c5:b0:6e:3f:b6:c6:e4:41:fa:3a:37:89:01:92:48:00:a6:e3:
         98:0c:03:9d:5f:d9:05:de:8d:77:12:49:0e:bf:ba:19:0a:f4:
         55:cc:50:60:b6:36:88:ef:a3:57:ca:29:f2:9b:57:0c:cc:ca:
         a5:a2:ec:72:29:65:c6:dc:a7:1f:ad:1b:ba:40:26:a1:47:f3:
         b7:ce:d7:57:ef:ae:ba:d3:c5:ec:e4:e3:85:0b:80:c1:78:4f:
         5b:4c:d1:a1:8f:38:e4:db:05:d0:d5:50:b2:d4:6b:a7:52:39:
         b7:80:25:a4:fb:19:ba:34:9f:01:e0:22:f4:34:ab:97:80:b1:
         bb:d3:a5:dc:65:e0:13:5a:52:26:a1:23:d4:e2:22:9b:32:60:
         47:5f:9b:f9:ae:62:56:a0:3b:f6:45:e4:1e:76:3a:12:03:90:
         04:73:d8:81:30:04:e3:47:64:3a:b1:8e:5d:9c:20:a1:04:2d:
         aa:d7:bd:3a:f3:11:16:c8:f1:4f:a2:3b:7d:bf:48:7e:cc:27:
         59:f5:3b:c6:f1:32:c2:10:24:dc:98:3a:66:66:21:f0:b8:66:
         b0:18:57:2f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVn/luCWgkfLOWEXEAfEOOf1UVG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF
M0I3OTQxQjAeFw0yNTA5MDMwOTM1MDJaFw0yNTA5MDYxNDMwMDJaMDMxMTAvBgNV
BAMTKEJBRTMwMjEyODgxOUQxN0I4QjdBOTg0NjdCMjM3QTVGRUM4QjJFNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XaF1SXFvMB6pv6EZoEqJ69A9
4wXOZwes37OFoIJUYdSwVdRKo8uHCPiIon35486Q66eUGSZkgWNAXciQjH0DyHs3
9wc7bROd8vk0AXvPbh2mVO62k/dkJCrLn4rwAhXLJn61x03vORbj7o3lIge+A+C5
JTiWgZc4A+81bf2TWmHAH7cD7TswAm/a3ewVboQW3qhgUaSIWQSIFYCAmYXyLcFQ
QrAVTEM8aX0VdIR0qIBwwXm5pRFtLmFNEPd3oJEQEQlw7Mf2LGFjiR600ghIBhpI
nZM62WjI7KGNoW0o+T8NjDGimX2JrzTsaammxHp6IMU8EDvaAXroGvo7Vk+JAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuuMCEogZ0XuLephGeyN6X+yLLmowHwYDVR0j
BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw
OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3
OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz
MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF
MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEGAgup9irftoNNS75xqUWaVTXdxAIOJW5zc
+6/Lk6YFZ1igVsWwbj+2xuRB+jo3iQGSSACm45gMA51f2QXejXcSSQ6/uhkK9FXM
UGC2Nojvo1fKKfKbVwzMyqWi7HIpZcbcpx+tG7pAJqFH87fO11fvrrrTxezk44UL
gMF4T1tM0aGPOOTbBdDVULLUa6dSObeAJaT7Gbo0nwHgIvQ0q5eAsbvTpdxl4BNa
UiahI9TiIpsyYEdfm/muYlagO/ZF5B52OhIDkARz2IEwBONHZDqxjl2cIKEELarX
vTrzERbI8U+iO32/SH7MJ1n1O8bxMsIQJNyYOmZmIfC4ZrAYVy8=
-----END CERTIFICATE-----
Generated at Fri Sep 5 10:16:55 2025 by rpki-client