Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File:                     BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier:          c14r/X52scnNfthqzLBMeBtFDp/5NFQydlX2CaJSwBA=
Subject key identifier:   61:13:E7:10:F8:02:06:59:7A:C0:47:AF:31:00:41:E1:E3:57:1A:09
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       18A5C7E4B36B7D79C61DBAC63B8730D3C9A90815
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number:          0510
Signing time:             Fri 05 Sep 2025 04:52:22 +0000
Manifest this update:     Fri 05 Sep 2025 04:47:22 +0000
Manifest next update:     Mon 08 Sep 2025 14:16:22 +0000
Files and hashes:         1: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=)
                          2: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=)
                          3: 3131312e36372e38382e302f32332d3234203d3e203234353337.roa (hash: Kkkq08Mmxr8hsDH69JGbHxLxb84nfHJXao32g/p1mFQ=)
                          4: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=)
                          5: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=)
                          6: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=)
                          7: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=)
                          8: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: MO4YZl2w8opPG04qiq+hwnrGEeXGP5ZrlAnyvXHpkwo=)
                          9: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=)
                          10: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=)
                          11: 3131312e36372e38362e302f32332d3234203d3e203234353337.roa (hash: tDz28BGDnFd3MGcS96yd4J0BbOjvcShV8THChhLQTrA=)
                          12: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 14:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a5:c7:e4:b3:6b:7d:79:c6:1d:ba:c6:3b:87:30:d3:c9:a9:08:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Sep  5 04:47:22 2025 GMT
            Not After : Sep  8 14:16:22 2025 GMT
        Subject: CN=6113E710F80206597AC047AF310041E1E3571A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:1f:93:9f:6c:97:55:0a:8a:4e:79:8d:c5:
                    83:52:85:2a:50:0f:12:30:c3:4a:99:a6:f3:63:35:
                    93:d8:36:55:75:ba:20:74:fa:34:95:b5:08:3a:37:
                    53:d4:b4:cb:de:a3:6a:f3:cd:89:2a:00:80:20:f0:
                    fb:01:fb:e4:76:b2:08:25:1e:79:b4:6a:2d:5f:be:
                    f3:2b:b2:e0:32:b6:21:55:e2:47:89:5a:1a:59:4b:
                    b4:56:da:9f:80:6e:9d:5f:86:18:a5:99:f5:0f:ba:
                    aa:98:96:6a:05:6a:e2:66:87:ef:b2:5d:d7:d2:8b:
                    49:7b:aa:15:b4:dd:1e:57:ff:45:dd:d3:b9:67:d3:
                    9f:01:da:f1:e4:67:24:ff:71:27:a1:c7:37:1a:a0:
                    ac:c5:ab:b5:8a:9a:ec:28:5e:52:0d:3c:79:0e:ea:
                    1b:6f:a2:f4:09:12:2d:0c:4c:20:41:e0:c4:22:00:
                    ab:9c:38:25:09:51:19:14:8d:ab:74:5a:3a:90:cb:
                    89:e8:9e:12:6f:11:e7:c1:c7:ca:fc:b6:89:39:7a:
                    4b:b4:0b:10:51:84:27:9c:9a:66:34:eb:bb:ff:cf:
                    29:e6:84:16:e7:d1:b4:4b:c6:a3:ce:4f:ab:78:d0:
                    8e:e8:52:20:77:ce:7a:57:d4:ec:b4:2f:23:72:24:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:13:E7:10:F8:02:06:59:7A:C0:47:AF:31:00:41:E1:E3:57:1A:09
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b1:ee:f2:b6:94:a6:8c:3e:17:f7:1a:95:ce:20:6f:cc:80:
         dc:11:ff:28:48:12:31:ba:de:a6:ef:78:3e:53:2d:7c:33:f7:
         57:55:11:5c:b1:a2:bd:2b:f4:4c:18:ed:61:ab:aa:b2:8e:12:
         9f:2a:53:af:6c:b5:93:9b:66:05:65:fa:a1:60:54:ef:f7:b1:
         7b:b2:c7:da:89:14:24:0b:7a:a5:5c:1f:64:cc:cc:a1:88:39:
         f3:e5:41:67:f6:1b:2e:44:b8:9e:72:cf:07:6d:46:e1:a7:11:
         12:1d:18:84:70:49:eb:7f:0e:3d:42:50:ee:fd:79:68:20:98:
         75:9c:0c:07:79:dd:a0:5e:38:85:4c:65:eb:eb:71:2c:24:10:
         73:b4:3c:f8:09:6e:c0:cd:ac:29:07:11:bf:a1:24:bb:56:38:
         fa:c3:89:3f:72:7c:66:14:e4:f3:9c:21:9e:70:ba:be:98:e7:
         32:be:2f:fb:45:06:b7:57:69:6a:d4:ca:9e:72:50:b1:11:45:
         19:60:01:cf:95:2a:b1:8c:0b:01:c4:ab:5a:a0:e6:27:5c:e3:
         2b:5b:9c:80:13:7d:d8:95:f1:b9:a1:0f:1b:24:f3:98:28:9a:
         01:8f:d5:5a:15:bc:cb:b4:d4:4b:20:06:1f:50:09:19:e0:08:
         4c:4b:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:51 2025 by rpki-client