Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft
File:                     901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json)
Hash identifier:          oH3/TlJN+EwZ1ynfuAbu5O+yS7BrSCK60AEjHblAkQ4=
Subject key identifier:   C8:3D:5D:9C:C4:4B:CA:42:3A:EC:08:1C:76:DC:7C:BE:B8:EA:47:48
Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78
Certificate issuer:       /CN=901FA7FD9132963972C91517CDC7E5EE9077E078
Certificate serial:       01E77283777E31CCD29AEEE6C1B1FF150582548E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft
Manifest number:          011C
Signing time:             Wed 06 Aug 2025 10:30:47 +0000
Manifest this update:     Wed 06 Aug 2025 10:25:47 +0000
Manifest next update:     Sat 09 Aug 2025 12:18:47 +0000
Files and hashes:         1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: +3kwXzq0NoZ9SssbZ5P9GHOrhuvwv3P2ZeGbRDOZroA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl
                          rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 12:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e7:72:83:77:7e:31:cc:d2:9a:ee:e6:c1:b1:ff:15:05:82:54:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078
        Validity
            Not Before: Aug  6 10:25:47 2025 GMT
            Not After : Aug  9 12:18:47 2025 GMT
        Subject: CN=C83D5D9CC44BCA423AEC081C76DC7CBEB8EA4748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:c5:d4:dd:83:05:2b:53:b8:3d:7f:cd:a1:
                    49:43:ca:2a:cf:b0:c1:14:77:67:ed:c2:a4:d4:13:
                    e4:45:60:6d:7e:d7:ac:9b:55:46:1f:f8:bf:72:e4:
                    ce:23:58:7d:e5:bc:6d:83:e9:8a:8e:a2:bb:12:51:
                    ce:9f:1c:34:6d:da:ee:8e:52:c6:51:17:23:0c:eb:
                    d8:04:3f:74:c0:08:8b:87:ba:70:3f:3c:c1:7c:e5:
                    f0:a1:c3:51:46:75:7b:52:a1:48:18:1e:19:28:8d:
                    08:1c:eb:c3:fc:d5:7b:de:27:68:68:87:ce:7d:55:
                    a2:67:1e:6a:14:29:2b:9c:20:45:0c:98:68:b4:38:
                    e7:9d:cc:4e:0b:16:d3:a3:6e:21:b1:d3:e1:b9:61:
                    3d:cf:99:61:87:11:00:14:38:91:93:e7:24:41:62:
                    df:94:7c:09:8a:6b:56:45:29:fa:59:ca:7e:31:33:
                    94:48:a2:aa:4b:c8:06:76:b5:20:e5:a8:cc:d1:23:
                    b6:c3:f8:41:22:2d:18:5f:83:04:43:0a:fc:16:ed:
                    09:cc:5b:4e:99:ba:5b:ef:ab:99:2b:a9:96:e1:98:
                    cb:74:f6:a2:8b:a8:2c:7a:5e:2e:36:25:b7:a0:d9:
                    9b:00:24:26:dc:40:c3:2c:94:49:50:d2:1a:a6:a3:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3D:5D:9C:C4:4B:CA:42:3A:EC:08:1C:76:DC:7C:BE:B8:EA:47:48
            X509v3 Authority Key Identifier:
                keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c9:6a:47:f2:7b:f4:5a:4c:9d:10:65:dd:83:c7:16:e6:09:
         9d:ca:76:13:37:29:3e:9d:2c:d8:fd:de:7b:a5:41:fe:a2:dc:
         3c:7a:64:40:2a:8c:27:45:4e:f1:c3:34:88:37:0f:fd:72:82:
         b6:33:65:43:c8:cb:98:89:e1:4d:1c:cf:c9:47:58:4d:f8:53:
         3d:b1:d5:b3:7f:b9:60:bd:cf:0b:b0:0f:6e:60:4a:6e:91:4b:
         ef:96:00:b3:3b:1a:14:55:80:67:90:4a:de:6a:e9:70:d1:4f:
         81:9f:4e:69:1c:cb:11:a1:1a:58:1f:e1:d6:67:ea:00:b6:5b:
         5a:fa:82:7c:5b:b3:6e:0b:92:3c:c4:51:8b:65:80:e1:fd:b8:
         02:97:32:0a:dd:ee:be:b5:a1:d2:e2:d4:8f:a4:6f:00:e1:9e:
         d1:84:c4:9e:3c:6d:df:b2:4d:d3:ea:81:d2:1c:ee:ab:3d:74:
         2a:fe:a4:29:a9:d3:ff:35:77:95:8b:a8:10:e9:fe:5d:b2:a7:
         74:ff:51:97:ba:f3:15:68:57:ce:86:8c:42:99:2d:14:94:1f:
         83:58:91:00:90:44:5f:83:0d:a6:56:cc:50:b7:e3:c4:40:2e:
         61:48:94:01:48:ab:48:4d:e0:c1:d9:57:0f:f7:cd:74:1c:1c:
         98:44:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:20 2025 by rpki-client