Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft
File:                     676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json)
Hash identifier:          qSkFZVpcLR94VpZ5Xj/I2keJ7ipcD56cafa7Z0vF9QU=
Subject key identifier:   39:D0:D6:1A:92:E1:11:AC:76:F8:B8:9C:52:80:15:F9:D1:FF:00:0B
Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41
Certificate issuer:       /CN=676E12EDA912B67493E88316A428CFDBCAB51941
Certificate serial:       02DDB5DCFB25E8FCA3CC33A8644014E94273D51B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft
Manifest number:          BF
Signing time:             Mon 21 Jul 2025 22:40:05 +0000
Manifest this update:     Mon 21 Jul 2025 22:35:05 +0000
Manifest next update:     Fri 25 Jul 2025 04:53:05 +0000
Files and hashes:         1: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=)
                          2: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=)
                          3: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: O8IMT0MYth/g2SbqXSfxK2evhgs/BkIwQttoqP1nwZ8=)
                          4: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl
                          rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 16:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:dd:b5:dc:fb:25:e8:fc:a3:cc:33:a8:64:40:14:e9:42:73:d5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941
        Validity
            Not Before: Jul 21 22:35:05 2025 GMT
            Not After : Jul 25 04:53:05 2025 GMT
        Subject: CN=39D0D61A92E111AC76F8B89C528015F9D1FF000B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:69:3c:d1:cc:fd:3b:6e:e5:6d:99:ee:82:
                    af:3c:b4:e4:48:3f:49:d6:68:3b:5f:25:72:04:da:
                    68:00:89:f5:a0:f7:89:11:a7:5f:d0:96:c2:69:f8:
                    01:19:17:8d:b2:09:5b:b2:57:8f:1f:63:c4:be:9e:
                    95:04:07:3b:ad:15:46:a2:0f:70:04:80:3c:e8:2f:
                    78:63:31:b7:c5:83:08:7a:72:d1:2e:95:0e:fa:a7:
                    a9:0c:1c:17:00:1a:c7:67:5e:b5:54:d5:a3:2d:e5:
                    df:f8:72:46:3f:e4:3c:e0:3c:2b:7b:23:36:8a:1c:
                    82:a4:6d:42:c0:63:15:b8:9e:4b:76:4c:43:de:fe:
                    2a:3c:af:98:5f:57:9a:c5:5d:06:72:84:77:7e:2c:
                    69:9b:2f:d0:3c:91:f8:12:16:0f:63:91:44:21:5d:
                    08:cf:16:41:b5:8e:76:f4:52:57:ef:7e:88:a3:f2:
                    5a:6e:25:15:1f:41:aa:df:e2:4d:f0:73:57:1e:58:
                    2e:69:71:34:39:a2:d4:ef:67:8b:fd:a6:7c:46:39:
                    56:1e:46:41:f2:16:d6:3b:7c:5d:a6:c2:61:40:17:
                    90:a0:79:4e:6e:62:8d:66:d1:04:ef:69:23:42:21:
                    c5:b9:6c:b9:ba:75:a9:19:ac:4a:e5:48:c0:1b:b2:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:D6:1A:92:E1:11:AC:76:F8:B8:9C:52:80:15:F9:D1:FF:00:0B
            X509v3 Authority Key Identifier:
                keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bd:7f:52:5b:9e:8b:89:24:c3:18:ab:eb:1a:33:6f:62:85:
         e0:30:1a:f4:b6:a2:f2:f2:6d:74:27:50:be:a2:e7:d4:a9:81:
         6e:c9:88:bb:5e:70:f1:dd:27:c8:27:b5:a9:3c:95:90:11:38:
         c4:ef:7e:2a:c9:60:61:89:a5:65:e9:80:9d:32:ec:ec:6c:b4:
         71:ae:8f:68:b6:17:23:f0:00:1d:8c:e8:e0:c0:34:ef:2b:7c:
         fc:ab:f9:3e:07:1e:eb:bc:9a:5d:27:f9:09:fe:d1:0b:8f:dc:
         ef:76:9c:db:fc:fa:ea:9a:98:1e:e1:44:ff:78:ec:50:57:99:
         a6:d0:13:88:c8:3f:5b:8c:90:2c:12:fa:eb:0d:b7:82:fd:71:
         6d:5d:2a:14:98:29:18:92:f4:af:b3:0a:c1:bb:fa:1c:2b:78:
         8b:0a:44:c0:41:f7:4a:28:95:fc:56:ae:e4:34:25:6b:45:fc:
         35:46:e7:9e:67:c7:fb:c4:bf:da:85:be:74:c5:93:54:84:9d:
         e9:97:e4:d9:1b:9a:4e:e4:20:62:ff:d9:16:73:a2:f4:2b:1e:
         29:37:60:9a:e7:1d:ee:d2:38:7f:7c:06:7a:d3:29:6b:c4:d7:
         d0:72:02:10:eb:ca:e9:91:45:4d:60:4d:ca:5c:5e:cb:42:c4:
         f7:2a:00:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAt213Psl6PyjzDOoZEAU6UJz1RswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD
QUI1MTk0MTAeFw0yNTA3MjEyMjM1MDVaFw0yNTA3MjUwNDUzMDVaMDMxMTAvBgNV
BAMTKDM5RDBENjFBOTJFMTExQUM3NkY4Qjg5QzUyODAxNUY5RDFGRjAwMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzmk80cz9O27lbZnugq88tORI
P0nWaDtfJXIE2mgAifWg94kRp1/QlsJp+AEZF42yCVuyV48fY8S+npUEBzutFUai
D3AEgDzoL3hjMbfFgwh6ctEulQ76p6kMHBcAGsdnXrVU1aMt5d/4ckY/5DzgPCt7
IzaKHIKkbULAYxW4nkt2TEPe/io8r5hfV5rFXQZyhHd+LGmbL9A8kfgSFg9jkUQh
XQjPFkG1jnb0Ulfvfoij8lpuJRUfQarf4k3wc1ceWC5pcTQ5otTvZ4v9pnxGOVYe
RkHyFtY7fF2mwmFAF5CgeU5uYo1m0QTvaSNCIcW5bLm6dakZrErlSMAbsrxLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOdDWGpLhEax2+LicUoAV+dH/AAswHwYDVR0j
BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5
MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1
MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5
MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG
REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEW9f1JbnouJJMMYq+saM29iheAwGvS2ovLy
bXQnUL6i59SpgW7JiLtecPHdJ8gntak8lZAROMTvfirJYGGJpWXpgJ0y7OxstHGu
j2i2FyPwAB2M6ODANO8rfPyr+T4HHuu8ml0n+Qn+0QuP3O92nNv8+uqamB7hRP94
7FBXmabQE4jIP1uMkCwS+usNt4L9cW1dKhSYKRiS9K+zCsG7+hwreIsKRMBB90oo
lfxWruQ0JWtF/DVG555nx/vEv9qFvnTFk1SEnemX5Nkbmk7kIGL/2RZzovQrHik3
YJrnHe7SOH98BnrTKWvE19ByAhDryumRRU1gTcpcXstCxPcqAEQ=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:03:57 2025 by rpki-client