Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
File:                     D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft (raw, json)
Hash identifier:          aKQSg9lctgvhIaDZAHCeb1G5M2Hr4vZjm0kX/9VnA9Q=
Subject key identifier:   EA:07:DC:FF:99:56:15:6C:6A:2D:FB:71:A7:4C:BB:E4:20:4A:2A:48
Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B
Certificate issuer:       /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
Certificate serial:       4C4E0C1E21D1D603CFB35B50DF5DA5D51840DF84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
Manifest number:          0197
Signing time:             Sun 07 Sep 2025 07:21:46 +0000
Manifest this update:     Sun 07 Sep 2025 07:16:46 +0000
Manifest next update:     Wed 10 Sep 2025 13:01:46 +0000
Files and hashes:         1: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: yZ3S3VlEg8XhUnYFrYIEtsQAe3osggFJf6UwQXimraQ=)
                          2: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: s4bQxfKSzhThJnV2s35QtgCBE4otyhr6xeMzoqnFm8Y=)
                          3: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: /N5+2aMU3EMAmEX99W6RjuRb23GuWa2brckaj7T7NN4=)
                          4: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: AVCQCYheS5BSoSfK63mymGbndnc3O67DIxifLxMIMRQ=)
                          5: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: Yij8hR3THKb1LJQK8YbFbQB/18X0FAtAoVyRKdcSfao=)
                          6: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: nxP8W10E3LZDtZxP90veGMWm2rYEk3wENcKTTfAcq3U=)
                          7: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl (hash: vOhxFLSIcEefhWk7hi5Vzbj21vsr7e4msc+mq1RXPK4=)
                          8: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: kGo5Z0dQmddNogvMWcoI94YtEIKcIPX6FTz3PKH2TGQ=)
                          9: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: LULC79bR5urCWK9LJ8T/IwclWUcY8RdpHGD/jOzeh8c=)
                          10: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: YKogFc3LCv2smSbI9VS3VlSDt3/kbrsDgP8adJABQHE=)
                          11: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: EBlmqDEWkMyCK1/XHbvpi2pPtqys0z6jD8DKxQ3Fr5M=)
                          12: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: zfUtoWma6yrS91X836rvH56Roq4o4T2ksBJ5tvM84KA=)
                          13: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: iA2jtRPunwvVs+oxAYcMwVPx60+n92IM12/OQGz8E7Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl
                          rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4e:0c:1e:21:d1:d6:03:cf:b3:5b:50:df:5d:a5:d5:18:40:df:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
        Validity
            Not Before: Sep  7 07:16:46 2025 GMT
            Not After : Sep 10 13:01:46 2025 GMT
        Subject: CN=EA07DCFF9956156C6A2DFB71A74CBBE4204A2A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:a0:95:2f:44:25:51:a4:ba:d9:77:4b:aa:
                    4f:a9:27:61:de:be:8f:c8:68:06:eb:b2:14:4a:b6:
                    a5:54:01:6c:c4:55:f2:ac:c6:c3:83:90:34:9f:6a:
                    d7:b4:26:98:df:23:d6:85:cf:3b:9e:9b:80:c8:64:
                    96:fb:7a:b6:8b:d0:82:2e:89:07:29:aa:46:28:ae:
                    74:02:d6:1f:fa:08:a9:29:41:bd:c0:fd:19:e1:c6:
                    c8:2a:de:0f:65:cc:12:69:56:42:3d:41:c0:8e:c4:
                    42:64:c4:d5:1e:73:18:76:24:17:3d:6a:ea:59:66:
                    f4:dd:20:a3:3a:96:d9:24:9e:01:ed:53:a5:1f:ea:
                    3e:c2:b8:94:7e:9b:b9:f5:25:b7:8d:c9:51:e1:1e:
                    65:41:55:77:e2:38:85:cc:d4:17:a3:38:51:e4:85:
                    a4:45:5d:90:e0:ac:7e:8c:5e:df:bf:61:de:26:89:
                    52:2e:98:d9:3c:0d:d7:e1:4d:cf:6e:3a:3c:c2:54:
                    62:34:29:47:0b:0d:6b:66:35:61:c2:b1:00:b6:c7:
                    62:ca:50:9f:93:33:02:be:5f:d1:13:75:fc:2e:06:
                    e1:2e:27:63:3d:87:1e:62:80:d5:c6:2a:a6:1e:c2:
                    63:9c:88:2b:ce:4e:4b:38:17:eb:37:dd:6f:2a:7a:
                    fc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:07:DC:FF:99:56:15:6C:6A:2D:FB:71:A7:4C:BB:E4:20:4A:2A:48
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d3:fe:aa:4a:19:24:3b:61:a8:9b:30:bb:74:c1:58:29:3a:
         65:1d:3a:87:47:da:92:21:0e:9c:93:84:d6:ee:39:31:f5:74:
         59:76:a9:42:5f:5e:e5:09:dc:31:b1:d2:83:59:75:89:c1:0f:
         a3:ac:c9:6b:e4:1f:81:86:43:11:18:28:fd:61:6d:17:b5:e1:
         5d:df:ff:22:f5:f5:41:de:e1:0e:67:98:ca:c0:8d:19:b8:40:
         cd:8d:46:9c:9a:56:75:c4:aa:ff:32:25:39:1e:49:ed:83:99:
         16:57:7a:d8:76:72:1b:a5:f1:04:49:8f:e1:bf:9e:e7:55:19:
         84:a7:0f:80:3e:bb:09:82:59:2d:46:f6:a6:75:81:e9:d4:4c:
         ce:bb:a0:8c:8f:69:3a:91:7a:39:07:75:18:3e:69:fc:7b:4f:
         5a:30:6a:8c:26:aa:fb:e4:b6:da:41:6a:4e:eb:3b:43:cf:ef:
         3f:22:aa:24:d0:0a:68:23:32:01:ba:ff:f8:48:d7:96:21:3b:
         9c:3c:45:3b:e8:98:45:1d:a1:dd:e0:92:47:10:eb:e9:aa:5a:
         fc:0d:30:f2:c6:c1:b7:93:2b:2f:1c:ce:7f:0d:6f:a8:ad:76:
         31:73:2e:4f:f0:54:f4:be:b7:ce:bc:86:ff:40:49:df:15:86:
         aa:5b:f9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:24:43 2025 by rpki-client