Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          IZBC2xDdi7UcOoEJ4gDf6cV4f8HE2bRnocLRe3G0Q5Q=
Subject key identifier:   B0:20:B7:BA:4E:08:6C:28:EA:2D:CE:BE:00:CA:56:27:45:12:E1:D7
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       1E3EC844A0D750BB792BBEA295188F84300F7A58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          04F6
Signing time:             Thu 07 Aug 2025 21:41:45 +0000
Manifest this update:     Thu 07 Aug 2025 21:36:45 +0000
Manifest next update:     Mon 11 Aug 2025 06:22:45 +0000
Files and hashes:         1: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: fpx270ixaq11nCmgYzT3PO4j149L6mmMafh/Cax7edM=)
                          2: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: AMgNEXA3HgeJ9JW4vEN8yPqkkgaxJIY9BD1424Sv1Zo=)
                          3: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM=)
                          4: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: Pwp4Y/oljNByFGVfiaL0GGLB10d/Bfr7voP2ww1FgSQ=)
                          5: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: vr66fn8B7rAPP+TZSIsfhj0n+lp991jln8PENhk4tOQ=)
                          6: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=)
                          7: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: RS9Byz+j3EdqEQMObrbAR7PmpA8rmEiuqCAVbbyaqzQ=)
                          8: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M=)
                          9: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: kpFmjz57IgAP8PtBxnCHq8wcPp57kSPI2nlME92Fnyg=)
                          10: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: oTh96cvu9N7dUKNXeMRvCfiS16/pskUDIN5zzPcyPFs=)
                          11: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: WjmWZuOqqVrHpn2Iht/6D/CnYopSoMqLYwKVON2A9VQ=)
                          12: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI=)
                          13: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 06:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3e:c8:44:a0:d7:50:bb:79:2b:be:a2:95:18:8f:84:30:0f:7a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Aug  7 21:36:45 2025 GMT
            Not After : Aug 11 06:22:45 2025 GMT
        Subject: CN=B020B7BA4E086C28EA2DCEBE00CA56274512E1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:ae:86:df:8d:2e:f4:79:c1:fa:ae:32:bb:
                    fc:db:7f:e0:74:a7:70:6e:64:23:68:4c:b5:22:04:
                    13:fd:72:a1:e2:ed:1b:81:21:84:3d:be:05:19:39:
                    0a:3a:90:2a:29:68:dd:cd:8b:f7:2d:da:54:c7:3f:
                    09:72:55:8c:ed:0d:a5:a3:0f:60:27:ed:80:f4:c6:
                    e6:de:18:cb:7a:c8:f2:36:ab:42:02:58:2b:f5:64:
                    7a:19:c8:21:73:30:0e:2e:7c:46:30:88:37:18:18:
                    ca:21:96:0d:f1:f5:79:d5:97:f0:25:6a:f5:f3:e1:
                    85:52:14:85:a7:fb:f2:f5:02:46:e9:cb:20:9e:42:
                    6e:d5:56:71:eb:1e:de:bc:a4:f7:05:0e:a0:2b:da:
                    6a:fe:b0:2d:f9:8b:bb:b3:6f:28:47:57:39:a3:79:
                    10:49:49:aa:05:68:41:0d:7a:08:c9:71:a0:f1:cc:
                    0f:5d:6b:b8:b0:a9:79:83:f0:05:a9:73:25:ae:a9:
                    af:c4:6b:1c:e3:ca:f6:7b:cb:cf:55:28:3c:5e:6b:
                    5d:8f:2e:40:2a:1d:09:dd:89:f1:f6:f4:48:cf:05:
                    11:0d:7d:64:7f:a6:8d:bc:ba:cf:f6:12:38:5d:13:
                    df:06:a3:56:df:86:0e:69:63:82:c0:60:2f:d6:95:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:20:B7:BA:4E:08:6C:28:EA:2D:CE:BE:00:CA:56:27:45:12:E1:D7
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b3:f4:b7:ac:25:85:91:92:33:35:22:98:3d:30:38:18:cf:
         96:aa:99:f3:43:f7:9a:0c:f9:73:eb:44:36:78:a2:aa:d0:0c:
         d6:63:df:0e:b4:a6:3d:db:57:01:75:07:24:98:7f:2f:53:e7:
         38:db:85:be:57:a7:8b:37:c2:75:29:db:37:a2:2c:1c:70:65:
         0b:d6:f6:e5:bd:f3:60:47:08:5c:97:f4:2a:ab:1a:04:6f:7a:
         32:05:a2:18:f6:13:b2:f5:18:34:7f:d3:e2:e6:b5:19:4a:ca:
         bb:3b:9b:ed:0e:b0:55:ef:c0:f3:4f:a1:05:f7:7e:49:b0:1f:
         8d:b3:92:82:3f:e9:e9:01:b8:53:2a:68:89:5d:4f:f2:24:c4:
         da:bc:d3:c7:9c:22:86:75:56:33:91:23:cd:5d:72:41:e5:9f:
         60:78:62:1c:f6:96:f1:70:e9:f6:bd:cc:d4:0d:ba:6d:57:a1:
         73:1e:00:97:33:7f:57:84:06:a6:72:8b:39:6a:e9:b6:4b:5b:
         14:a4:d9:0b:bb:71:a4:bb:3c:3d:2b:6e:f4:19:1b:d8:d3:c1:
         44:45:74:1b:8f:2e:05:82:7d:fb:6d:83:58:b0:dd:36:80:be:
         e9:42:5b:b6:41:f4:b3:ae:31:46:5c:bb:ea:1a:ad:a1:d9:37:
         e8:46:29:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:03 2025 by rpki-client