Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft
File:                     0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft (raw, json)
Hash identifier:          BIfIRTaIvir6OmePiiGSdJgEjg94ZrWWWgHQXBeeUrU=
Subject key identifier:   C6:AA:15:D0:56:C0:A1:F8:D8:82:E5:17:1A:DD:46:99:59:79:48:CC
Authority key identifier: 0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5
Certificate issuer:       /CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5
Certificate serial:       48F2832FAA48F0C45C80F679F8C3DDD7FBFDB5B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft
Manifest number:          010A
Signing time:             Mon 16 Jun 2025 10:51:15 +0000
Manifest this update:     Mon 16 Jun 2025 10:46:15 +0000
Manifest next update:     Thu 19 Jun 2025 22:26:15 +0000
Files and hashes:         1: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: lxplHllIEQbjFSzZnnx3SEX7vaIurCC8TrKQIq2OFQI=)
                          2: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl (hash: k+C7AHOwVBKI8yQV/KpFhVMgT5kUYW5dp93fPQYYFQs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl
                          rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f2:83:2f:aa:48:f0:c4:5c:80:f6:79:f8:c3:dd:d7:fb:fd:b5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5
        Validity
            Not Before: Jun 16 10:46:15 2025 GMT
            Not After : Jun 19 22:26:15 2025 GMT
        Subject: CN=C6AA15D056C0A1F8D882E5171ADD4699597948CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:40:ac:50:85:cd:ab:77:5c:d1:35:e6:ff:db:
                    3e:3f:3f:72:76:84:1b:38:33:ed:f7:16:2d:02:37:
                    3e:0a:b6:fd:d7:fc:68:18:06:45:72:37:eb:fc:72:
                    d2:32:8d:60:93:1c:93:3b:10:87:84:b3:46:87:11:
                    ff:ba:7f:7b:a5:45:1b:6a:11:f6:14:72:d1:c3:f3:
                    f6:0d:99:18:67:07:16:de:27:1a:e8:f5:e2:4c:06:
                    f4:78:ee:67:81:3d:c8:f4:6a:5a:ee:59:06:b5:da:
                    ac:b7:56:d2:86:ef:65:0c:8b:6a:3f:9c:73:3b:81:
                    cc:60:17:39:37:08:d3:17:4f:09:bc:a4:55:a0:51:
                    6f:98:55:31:57:1c:13:95:32:0d:16:9e:f6:71:a6:
                    a0:6f:07:7c:e9:46:6c:6f:65:15:83:31:b7:21:d1:
                    1c:70:4e:d0:05:ee:a0:67:1c:2e:99:a4:84:a1:72:
                    3e:39:7d:e1:cb:cb:65:0f:9c:de:b8:9e:b2:0f:aa:
                    b8:d3:bc:e2:9b:2b:97:d7:d3:3f:1f:e0:09:c6:d1:
                    9c:eb:68:03:7a:0e:e2:c9:5b:4b:e2:ca:d9:bf:97:
                    0f:f5:1f:22:de:71:70:20:30:6b:4a:3d:ed:1f:f3:
                    2e:0d:2f:c1:37:eb:fa:9b:53:ee:e4:ea:9b:c2:2d:
                    7a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AA:15:D0:56:C0:A1:F8:D8:82:E5:17:1A:DD:46:99:59:79:48:CC
            X509v3 Authority Key Identifier:
                keyid:0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b2:56:0b:f2:ec:02:9e:c2:d1:1f:73:84:53:b2:01:60:48:
         d5:45:73:51:ab:89:ad:1f:e4:eb:33:ca:0b:b3:bc:f4:f6:25:
         df:01:8a:29:c6:a3:93:7f:68:9d:27:fd:61:8d:06:32:7d:83:
         83:13:cb:24:4f:54:6e:0c:1a:0a:f4:11:dd:e7:b8:2b:7b:23:
         b7:4d:c6:ae:e5:1c:ba:4a:24:6e:f4:24:48:06:14:86:de:47:
         db:d5:d5:bb:44:73:ea:a9:40:c4:29:9e:12:71:35:a7:10:e7:
         a5:0e:56:40:56:70:26:1a:42:83:13:b0:0f:de:1a:7b:f2:ad:
         75:77:c8:d2:52:74:bb:6e:4f:60:5e:c3:51:92:c1:df:c8:b9:
         7d:f0:24:07:06:e5:a5:7d:18:a9:e6:ec:1e:62:18:fc:8b:8c:
         4a:82:b0:42:36:78:86:c1:ff:2a:5b:f2:58:2b:08:09:92:97:
         3e:aa:c5:84:d4:9f:62:02:09:14:83:d3:d7:f5:4e:f8:8f:b7:
         69:6e:af:18:7b:b2:50:2d:01:14:5b:66:b4:fb:77:d6:cf:40:
         6e:28:f5:a7:35:29:3a:c2:a9:87:3f:7c:e6:5e:7f:29:83:25:
         e4:d0:67:db:ae:2d:57:c3:ed:f9:1f:38:3c:2b:e2:c6:ea:7f:
         84:a6:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:44:41 2025 by rpki-client