Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
File:                     2FEC60739EF087F0D4F947C7230A725109EC6178.mft (raw, json)
Hash identifier:          OTlfkX9roo2cB5qoINhjprA6GwZ/y9Tg8PlTGfdY538=
Subject key identifier:   27:70:5A:43:4D:8C:D1:79:5D:4B:43:F6:58:82:57:3E:04:15:0C:B5
Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78
Certificate issuer:       /CN=2FEC60739EF087F0D4F947C7230A725109EC6178
Certificate serial:       1EE82BA3FB3B0C5AC2C2CB904C826924E1A25A82
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
Manifest number:          01B5
Signing time:             Sat 06 Sep 2025 23:00:59 +0000
Manifest this update:     Sat 06 Sep 2025 22:55:59 +0000
Manifest next update:     Wed 10 Sep 2025 08:10:59 +0000
Files and hashes:         1: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: zWeyoVA0qOIjaDafAvIQb12jZYR0oaDd22mIF8oHmpo=)
                          2: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: H/sQHGm23pHeiM29QxCCnpOLF9jsO1FQ1jBVySyo3Cs=)
                          3: 2FEC60739EF087F0D4F947C7230A725109EC6178.crl (hash: Cb5BMjLhaHrMtcToW/Hl5IoiVcvVIJPUWOwqqkyoIHs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl
                          rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 08:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e8:2b:a3:fb:3b:0c:5a:c2:c2:cb:90:4c:82:69:24:e1:a2:5a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178
        Validity
            Not Before: Sep  6 22:55:59 2025 GMT
            Not After : Sep 10 08:10:59 2025 GMT
        Subject: CN=27705A434D8CD1795D4B43F65882573E04150CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:83:24:a7:82:a1:f8:bf:9a:81:96:b6:2a:
                    de:ed:16:05:23:28:c9:f1:dc:dc:dd:9e:76:5f:77:
                    80:fd:db:8b:72:34:29:ea:a1:f7:3b:60:7f:f6:06:
                    4e:fb:d7:f1:34:b8:e3:bb:a3:26:d8:1a:52:4f:b2:
                    03:d6:44:21:c1:f2:22:99:bb:c6:e7:a8:71:68:33:
                    59:4a:d8:55:18:6a:b1:d8:20:ac:d0:03:1c:12:0a:
                    0e:40:a4:3c:98:8a:bd:3d:8a:e6:ff:93:f0:9d:f8:
                    72:c0:8e:90:8f:5e:0c:38:8e:d7:81:79:8f:79:31:
                    ca:0b:7c:b5:d6:18:50:e2:ed:22:e2:41:8e:29:54:
                    4c:ed:1c:f5:cd:b8:69:0c:50:92:3d:62:23:18:50:
                    16:1a:0a:a9:31:70:10:8e:ea:44:1e:3d:b7:0c:ff:
                    4d:ba:2f:d0:8d:cd:1b:de:b1:cb:c6:07:15:99:ac:
                    1a:30:45:d5:ff:d0:b3:46:1d:68:e9:42:ff:6e:fc:
                    32:64:f9:16:6a:70:5e:ca:e2:20:32:e8:a1:35:d8:
                    75:74:63:d6:df:d8:43:b1:b2:73:d7:35:58:81:59:
                    3b:7a:61:61:36:03:d8:ac:6a:91:96:aa:8d:9b:1c:
                    cd:7a:b6:1a:32:38:44:39:69:62:b7:cb:4d:07:f8:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:70:5A:43:4D:8C:D1:79:5D:4B:43:F6:58:82:57:3E:04:15:0C:B5
            X509v3 Authority Key Identifier:
                keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:14:7f:b9:6b:bf:4e:8c:40:92:5e:10:63:e7:0d:df:8d:93:
         15:59:4b:72:a4:f8:4f:59:27:b0:c1:b9:db:39:ec:9f:f5:e2:
         65:2f:a9:22:2b:23:d0:d8:19:22:be:fc:a6:60:0f:ce:40:a6:
         71:47:f1:73:9b:b9:e6:76:a1:72:c2:1f:46:2b:4e:ed:cd:39:
         e1:f1:20:6f:63:cb:5a:8f:57:5a:83:65:b2:bc:22:fc:0b:8d:
         91:0a:e5:7e:fd:3a:fe:79:ff:26:8f:a3:63:a4:da:f3:45:a5:
         57:86:43:56:00:73:31:7c:22:6f:3f:8d:c0:db:fa:4f:88:72:
         f8:ba:ee:21:49:8e:37:6b:8a:1f:01:3b:cf:ae:61:0d:6c:d4:
         39:5e:8d:36:33:69:3c:29:31:79:5b:95:f4:a7:23:37:54:b5:
         e0:da:a6:4c:94:f9:51:de:fd:37:e8:5e:23:da:8c:90:a7:5e:
         66:2c:7b:5b:23:22:8a:41:36:e0:a6:93:2c:d0:34:b8:8e:6c:
         e7:42:6a:2a:f3:4a:e8:be:5d:a4:6b:9a:7b:a0:97:97:77:c5:
         d8:1e:2c:37:86:b7:45:6a:6a:8f:6e:7a:dd:96:89:d5:2b:1f:
         34:fb:b4:bc:b5:12:1d:07:30:b2:fa:15:c9:7a:e3:66:88:9d:
         e3:f0:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:05:26 2025 by rpki-client