Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
File:                     D6729321F95E264CBE7373469790C77F8B57E268.mft (raw, json)
Hash identifier:          zgx2ZDYmKhKREeLetYgZ34DoB6DK4Lxy2/iFdCQOeoE=
Subject key identifier:   01:FE:FB:F4:A2:2A:BD:29:C6:F7:9C:EE:8F:92:C7:48:2E:05:FA:8C
Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68
Certificate issuer:       /CN=D6729321F95E264CBE7373469790C77F8B57E268
Certificate serial:       5F7BCD26D82A2BF44DE4C49E0446E0B19C33805B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
Manifest number:          028A
Signing time:             Sat 14 Jun 2025 05:20:00 +0000
Manifest this update:     Sat 14 Jun 2025 05:15:00 +0000
Manifest next update:     Tue 17 Jun 2025 13:20:00 +0000
Files and hashes:         1: D6729321F95E264CBE7373469790C77F8B57E268.crl (hash: wLcn35yHeuQqvzhSHeF7Ny82f+16k/iYtgmqGDuaLvs=)
                          2: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: GzPhe/FHAzKWcFGzhJ3yzciMVW730zuvH2EeYtfsJ1g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl
                          rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 13:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7b:cd:26:d8:2a:2b:f4:4d:e4:c4:9e:04:46:e0:b1:9c:33:80:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268
        Validity
            Not Before: Jun 14 05:15:00 2025 GMT
            Not After : Jun 17 13:20:00 2025 GMT
        Subject: CN=01FEFBF4A22ABD29C6F79CEE8F92C7482E05FA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:a8:83:3b:18:98:c8:ea:8d:fe:69:6a:e5:
                    30:a3:77:11:95:de:43:de:79:9d:e2:46:7d:ff:3f:
                    49:80:b4:d4:96:ec:f4:d2:bf:0b:44:63:d6:45:ff:
                    d7:38:ac:23:52:01:8d:97:5a:ec:08:bf:07:71:98:
                    26:66:a0:62:24:69:ef:36:ea:4e:8c:17:66:df:94:
                    fa:2a:69:db:12:ff:c8:33:56:9b:22:a7:49:9d:62:
                    e5:84:5f:e4:7e:d1:37:97:df:52:f5:02:f0:f2:37:
                    36:4e:6d:67:e4:e0:17:de:24:bf:ce:2c:25:3b:51:
                    b0:13:f6:81:a9:d6:6f:4e:21:1f:f4:9f:15:cc:1c:
                    a7:e0:81:a7:52:5e:c5:ac:e5:64:bf:1d:75:0d:55:
                    86:da:94:86:0a:ed:bb:a5:c5:f4:6b:a0:ba:5c:90:
                    bc:1d:ab:55:b8:8d:20:69:63:20:95:f2:1a:e5:de:
                    31:0e:10:28:69:1b:b3:64:40:71:53:7b:d3:77:8c:
                    81:1b:12:32:ae:b2:cb:00:e1:ab:16:58:91:e6:7b:
                    83:6f:20:e6:9d:e1:ba:3a:b3:cf:30:63:6d:91:74:
                    9c:dd:36:45:c6:99:c7:b4:e1:29:a8:9c:8a:89:bb:
                    03:dd:02:bd:b5:60:55:55:f7:4b:9e:e8:4b:9b:db:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FE:FB:F4:A2:2A:BD:29:C6:F7:9C:EE:8F:92:C7:48:2E:05:FA:8C
            X509v3 Authority Key Identifier:
                keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:ef:72:01:52:47:06:66:ab:d9:a9:b8:3f:71:b8:32:ce:
         e8:53:72:73:f1:d2:ee:a1:52:f9:cd:ee:fe:04:fc:56:cf:6b:
         d6:36:8f:86:78:84:44:08:c0:e5:1a:0f:a6:16:6f:e0:24:29:
         d9:9c:19:ff:f7:ec:d7:61:44:3e:81:8e:54:50:d0:87:78:5a:
         f2:27:67:24:ed:fe:3c:95:d1:08:4b:62:ee:54:bf:64:df:4e:
         ff:6c:15:ce:68:32:92:77:a8:2d:24:63:28:6e:47:62:8e:63:
         30:b5:54:c4:89:69:60:a6:05:ae:52:db:7b:aa:b7:8a:6f:00:
         88:61:e9:0e:4b:c9:9e:97:ed:3d:9c:d4:9d:5e:1a:da:71:5e:
         0c:84:18:b0:28:31:d5:d7:39:76:06:69:07:02:e2:4a:cf:75:
         05:a1:07:0f:e1:4f:f2:ba:6f:fd:7c:91:d0:38:80:01:57:f9:
         ba:1e:3e:ea:7b:10:02:9b:a6:12:c7:ca:fc:e7:91:50:9a:96:
         33:7d:07:08:51:a5:bd:f3:67:a7:f8:4b:66:cc:9a:ff:f5:64:
         ef:32:8f:a6:9e:6a:da:01:e7:7e:13:72:78:21:0f:fe:e6:95:
         f7:e8:6a:23:3c:2e:e6:c2:14:35:33:71:d3:c2:81:38:35:a4:
         00:71:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:12:51 2025 by rpki-client