Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
File:                     295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json)
Hash identifier:          dxJpFrX2nLsusryNTeHSKmBdsZhhHNq6aw6gGDFurV4=
Subject key identifier:   62:5E:26:D9:48:2F:B6:4B:6C:CF:96:EC:B9:F8:CF:36:35:AC:59:F0
Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33
Certificate issuer:       /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
Certificate serial:       678DEDE1E1F853FE17305413EA4493046E29161B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
Manifest number:          0501
Signing time:             Fri 08 Aug 2025 07:41:41 +0000
Manifest this update:     Fri 08 Aug 2025 07:36:41 +0000
Manifest next update:     Mon 11 Aug 2025 13:52:41 +0000
Files and hashes:         1: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=)
                          2: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=)
                          3: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=)
                          4: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=)
                          5: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: YSL/0fyhvDF/UJ/5HL7miehLTTYKGjWbCrAAuKvI9Mw=)
                          6: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=)
                          7: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=)
                          8: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (hash: 7z/4k9uh8qc3CYPaIfLqUwfu/s9Fgtg25t7b4ka8UOQ=)
                          9: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=)
                          10: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=)
                          11: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl
                          rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 08:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8d:ed:e1:e1:f8:53:fe:17:30:54:13:ea:44:93:04:6e:29:16:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
        Validity
            Not Before: Aug  8 07:36:41 2025 GMT
            Not After : Aug 11 13:52:41 2025 GMT
        Subject: CN=625E26D9482FB64B6CCF96ECB9F8CF3635AC59F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:f6:9a:35:23:c7:ee:4a:e2:8c:86:7c:f4:
                    a4:10:e7:41:7f:01:00:87:81:50:24:14:aa:6e:84:
                    35:a7:60:8d:82:98:db:16:dc:c3:40:67:a0:a3:cb:
                    91:e7:80:e9:5b:20:42:f8:a0:89:68:f8:13:49:b0:
                    d4:34:7b:40:94:b1:5f:5c:39:8b:34:44:c5:f5:12:
                    3c:79:3b:ab:c2:57:9f:ee:1d:1a:48:b7:ea:8e:1b:
                    30:68:d5:b6:42:ea:0c:70:41:30:28:c2:46:c5:58:
                    14:91:8e:2c:41:88:e0:ef:72:ba:ac:50:11:73:c5:
                    03:4b:2a:c1:4f:8d:b9:34:57:0c:e3:c5:f9:35:b9:
                    23:8f:f6:95:79:6a:e1:11:fe:7e:c5:6d:5e:3e:54:
                    e4:86:20:8a:42:e4:b2:a5:1d:5d:8e:e9:01:50:01:
                    37:a7:ff:f8:f0:1c:d7:5b:57:1b:f0:88:fe:d5:6e:
                    4b:c7:53:50:2f:9c:d3:cc:e7:b1:a9:5d:20:9c:a1:
                    14:d8:62:3f:a3:70:62:02:cf:6f:92:62:cb:d6:3e:
                    e3:99:93:1d:a8:e8:9a:27:16:6d:52:70:f9:e4:5a:
                    54:9d:da:8e:17:0c:a4:be:41:c8:6c:4a:04:9e:1b:
                    f3:94:ba:c3:35:4b:bd:9e:d9:5b:6a:bd:4f:7a:10:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5E:26:D9:48:2F:B6:4B:6C:CF:96:EC:B9:F8:CF:36:35:AC:59:F0
            X509v3 Authority Key Identifier:
                keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:69:b4:fe:37:59:67:ef:ce:60:43:32:08:a7:4e:92:c1:cc:
         6e:07:f4:4f:ba:76:a6:d2:86:95:49:3d:f0:92:60:ca:bc:ca:
         6a:8e:54:7f:3a:8d:22:e6:6d:76:01:02:e4:8a:42:4c:b7:27:
         d5:52:07:d2:84:4a:6f:88:65:bf:a4:d1:30:89:9d:1b:95:22:
         3f:95:6c:d9:3e:33:a9:9a:4b:e0:58:04:bc:92:4d:49:91:f7:
         3d:96:e0:56:05:d5:44:22:67:53:00:ec:5c:ec:9b:5a:9b:95:
         6e:26:7b:c0:e8:69:03:3f:72:ac:48:c0:39:24:ef:87:9e:71:
         f5:2f:ce:70:ad:70:e3:a9:73:5c:9f:78:94:bc:aa:18:43:8c:
         8c:69:4f:16:86:70:a0:88:48:5c:70:34:66:c3:24:b6:e7:c2:
         55:ec:e9:a1:1b:67:28:4b:5c:f0:dd:55:6b:69:60:dd:34:ae:
         75:83:c5:9e:74:8a:de:57:83:a5:78:e3:e0:3d:20:58:dd:67:
         12:1c:58:9c:99:9e:ff:32:40:93:96:59:6e:e7:c9:94:b3:c7:
         29:32:60:23:42:07:7e:7a:74:4d:d9:66:0b:f0:e4:66:ff:f3:
         af:9a:35:8f:40:4c:82:9d:00:e6:13:28:c2:8e:1e:da:70:48:
         8d:ea:05:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:19:37 2025 by rpki-client