Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
File:                     0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json)
Hash identifier:          MUUsQf22tsmXDLV7S/SxXdkcTjvZnJNilzqtGqFWQN8=
Subject key identifier:   EF:39:C1:0C:93:70:1A:48:39:F9:0F:C0:4A:C2:AC:70:05:55:32:52
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       774D3ABF8AD2A8001C957EE0BFDA1EC0FFEE5631
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
Manifest number:          0537
Signing time:             Wed 03 Sep 2025 21:40:51 +0000
Manifest this update:     Wed 03 Sep 2025 21:35:51 +0000
Manifest next update:     Sun 07 Sep 2025 07:59:51 +0000
Files and hashes:         1: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=)
                          2: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: BaIhAekHWsxux/7J410BlykSH0hp/JhDxZ6nNcwYf0c=)
                          3: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=)
                          4: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=)
                          5: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA=)
                          6: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=)
                          7: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=)
                          8: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=)
                          9: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=)
                          10: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: ymwaUvhXT8JXSJrNzjbP7gt7yXJ53LxTJX8Voq/f/74=)
                          11: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=)
                          12: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Sep 2025 07:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4d:3a:bf:8a:d2:a8:00:1c:95:7e:e0:bf:da:1e:c0:ff:ee:56:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Sep  3 21:35:51 2025 GMT
            Not After : Sep  7 07:59:51 2025 GMT
        Subject: CN=EF39C10C93701A4839F90FC04AC2AC7005553252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:e5:38:9d:42:fd:c6:79:7a:44:3a:9e:e1:
                    d1:e0:b5:31:97:de:33:fe:47:58:e9:0d:b0:a5:5d:
                    43:08:d3:38:08:88:1d:bf:b0:cc:70:48:2d:59:0d:
                    f3:b8:4b:02:d5:b2:ea:a2:c4:ad:04:fb:c6:aa:73:
                    8d:ab:36:64:89:c9:b7:97:e0:f2:a6:c0:b6:60:82:
                    c6:15:87:d2:dd:93:ed:af:4a:bd:62:58:88:91:fb:
                    2f:d1:d6:5c:2f:56:f8:0a:f8:0a:98:f3:91:95:9c:
                    bd:25:4a:8c:7e:b7:fb:8a:6b:da:41:41:5b:81:2b:
                    10:90:45:00:a6:2e:a8:4d:6b:30:e8:60:7c:2c:c2:
                    b4:8b:85:1a:e8:46:cc:34:e4:18:92:ea:ca:5a:5d:
                    ce:61:21:cf:bc:6d:d4:aa:71:0e:97:c2:32:36:12:
                    7e:ba:74:75:89:ef:21:eb:aa:ed:2c:6c:ad:67:30:
                    e2:ec:3c:61:5e:14:02:72:87:bc:38:b0:cb:a7:81:
                    a1:61:3a:a9:1e:91:30:84:d0:ef:7a:6c:b5:17:66:
                    ef:7e:72:fc:30:1b:18:35:6d:e8:ef:8f:70:e4:90:
                    41:73:0d:8a:d1:b3:3d:0b:82:bb:e5:71:5d:ed:c8:
                    52:37:c8:18:9b:b8:e0:57:e0:61:b4:7b:ae:cc:fd:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:39:C1:0C:93:70:1A:48:39:F9:0F:C0:4A:C2:AC:70:05:55:32:52
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:00:28:fd:59:75:bd:26:9d:53:01:d6:18:91:62:02:02:40:
         e4:b7:ec:b0:ab:20:da:60:a0:88:b3:8e:48:11:0f:d9:d8:47:
         19:08:85:61:7f:82:39:0f:f0:7c:e2:c4:c1:6e:de:9f:29:d0:
         ee:5d:46:a1:7e:02:fb:1c:e7:7f:13:ab:f0:e9:16:f5:b7:63:
         9a:f7:b4:de:cf:73:b9:10:61:f1:32:66:ff:17:96:d9:ee:81:
         a1:6c:68:72:7c:61:4e:aa:ee:f0:44:f2:f7:fd:fc:92:58:7c:
         55:90:d1:5c:dd:04:8e:2c:6c:7f:0f:0b:8b:c2:a5:9e:e3:16:
         49:42:9d:78:22:0b:79:95:63:72:a0:b9:53:88:2e:1f:0a:07:
         2c:52:fc:91:33:13:a8:35:9a:2a:bf:3c:5f:f6:94:b1:a1:8d:
         0c:e4:1e:88:7a:da:a6:10:82:16:95:f0:4b:e5:d2:a5:ab:10:
         b3:bc:3b:e1:da:ef:aa:85:eb:4a:c8:93:0a:95:e0:80:a3:1c:
         99:3b:09:a3:4d:d8:8b:e1:ea:25:e8:16:e3:c8:a7:3f:dd:01:
         20:b1:52:87:66:1b:c2:72:9f:88:73:23:87:20:20:75:31:c7:
         5c:81:91:c5:18:65:42:86:73:fc:78:69:33:c5:d6:fa:d9:48:
         14:f3:53:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 12:09:14 2025 by rpki-client