Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
File:                     10FC4D9D2403FC433C19BB76131325B776505E51.mft (raw, json)
Hash identifier:          xqy0nUgE8J5u8JNS4zCLBxVhz6Spkmu4c+uBLqm/Y0U=
Subject key identifier:   4B:11:AB:29:F6:19:E4:C8:58:27:1E:BA:0E:B0:12:D1:58:24:78:2B
Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51
Certificate issuer:       /CN=10FC4D9D2403FC433C19BB76131325B776505E51
Certificate serial:       5B35E516EF9A0D03E608D217043407947EFEE0B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
Manifest number:          048F
Signing time:             Mon 04 Aug 2025 15:30:42 +0000
Manifest this update:     Mon 04 Aug 2025 15:25:42 +0000
Manifest next update:     Thu 07 Aug 2025 22:39:42 +0000
Files and hashes:         1: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: TFWcJe7P8Qs88Vg5FhFLSAp9T62akG9eg+btkWY8D/w=)
                          2: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: t69ZmB5AfQefXh46d6riQKv97oXcLxZ4rvdZWRyfuzY=)
                          3: 10FC4D9D2403FC433C19BB76131325B776505E51.crl (hash: GcImhKmc7v46CXn2AmIlvCyEoSaximNjgvWl0wDvUd4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl
                          rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 22:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:35:e5:16:ef:9a:0d:03:e6:08:d2:17:04:34:07:94:7e:fe:e0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51
        Validity
            Not Before: Aug  4 15:25:42 2025 GMT
            Not After : Aug  7 22:39:42 2025 GMT
        Subject: CN=4B11AB29F619E4C858271EBA0EB012D15824782B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:ea:cc:56:d3:a9:0c:7f:80:b0:cf:56:1e:
                    e0:af:ec:d5:e4:bc:0f:73:5b:8a:83:08:03:50:39:
                    9f:db:5a:3b:d5:4b:9e:70:03:d4:b3:2b:77:92:f5:
                    88:4f:4b:ea:4c:95:5c:67:3e:c0:c1:83:3f:f3:9d:
                    16:94:b5:6e:dd:86:52:d8:1f:f0:89:c7:2e:d5:a1:
                    41:df:a4:95:e8:24:17:b1:7e:6b:72:a9:20:bb:b8:
                    93:d7:c7:8c:82:91:e6:1d:e1:7e:f6:52:5c:0d:41:
                    de:ee:08:37:4b:97:dd:fe:96:5a:ea:59:d2:f5:0a:
                    0f:21:a2:39:2e:9d:32:fd:5f:cb:d4:fe:a7:5e:20:
                    e3:e0:f2:49:fb:f9:9b:e7:f4:15:5a:7c:9c:be:6f:
                    66:67:af:b5:74:48:37:1c:a6:9e:ff:9e:8b:a1:52:
                    4f:fb:5e:33:4b:58:1c:ba:4c:50:71:e5:e3:d3:05:
                    90:3f:27:fa:69:44:8b:84:56:80:ed:f8:dc:54:88:
                    b2:49:98:c2:6b:d6:cb:42:a9:be:ed:96:d8:9e:95:
                    38:bb:92:fe:e1:09:10:ad:c4:7c:8f:40:ee:6a:20:
                    3b:73:cb:4e:2f:2e:af:38:a2:35:b6:84:2e:fa:34:
                    87:6d:58:8e:ae:44:76:7b:e1:81:2e:2c:30:bc:6a:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:11:AB:29:F6:19:E4:C8:58:27:1E:BA:0E:B0:12:D1:58:24:78:2B
            X509v3 Authority Key Identifier:
                keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:82:7a:d2:c4:4e:a0:8b:c1:09:44:db:38:a9:9e:d6:a3:18:
         8f:e8:0c:fb:c2:23:01:94:aa:89:3f:95:2d:ce:7e:9b:5d:fe:
         5a:44:c2:5b:80:d2:a8:80:8a:ef:4b:fc:56:24:a4:f1:8b:8f:
         1d:4c:d4:21:df:be:d4:8f:4c:4c:c3:d9:17:d7:82:bf:95:2e:
         be:a7:a7:6a:be:1d:f9:39:49:94:f9:b5:a8:51:5e:79:58:42:
         24:3c:7c:d1:47:e5:53:82:43:ed:f8:c2:97:9f:3c:fa:05:f6:
         66:f0:45:09:ec:73:37:1b:72:49:f4:87:b7:dd:38:11:6d:23:
         51:a2:e8:cc:6a:95:92:77:08:37:1a:6f:77:15:59:81:bb:21:
         e1:a0:a6:ab:ad:48:e4:1e:ef:c4:5b:e7:ec:9f:d9:f5:0b:79:
         15:f8:0c:8e:c4:c1:d4:77:c1:3b:a1:a5:cc:b7:d6:f0:de:6d:
         3b:77:ea:21:df:19:3c:e9:c3:37:28:5f:7f:91:ba:38:e2:65:
         d3:c1:fd:ba:d7:b8:b4:91:7a:bf:fc:9a:d5:57:68:17:ef:a5:
         85:fb:56:32:21:1e:63:96:16:8a:c4:cf:30:62:95:6d:f4:ab:
         1d:e6:10:1e:91:fc:c9:fc:15:27:7b:51:9d:a9:f8:da:07:0e:
         31:40:d1:6c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWzXlFu+aDQPmCNIXBDQHlH7+4LYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3
NjUwNUU1MTAeFw0yNTA4MDQxNTI1NDJaFw0yNTA4MDcyMjM5NDJaMDMxMTAvBgNV
BAMTKDRCMTFBQjI5RjYxOUU0Qzg1ODI3MUVCQTBFQjAxMkQxNTgyNDc4MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9+rMVtOpDH+AsM9WHuCv7NXk
vA9zW4qDCANQOZ/bWjvVS55wA9SzK3eS9YhPS+pMlVxnPsDBgz/znRaUtW7dhlLY
H/CJxy7VoUHfpJXoJBexfmtyqSC7uJPXx4yCkeYd4X72UlwNQd7uCDdLl93+llrq
WdL1Cg8hojkunTL9X8vU/qdeIOPg8kn7+Zvn9BVafJy+b2Znr7V0SDccpp7/nouh
Uk/7XjNLWBy6TFBx5ePTBZA/J/ppRIuEVoDt+NxUiLJJmMJr1stCqb7tltielTi7
kv7hCRCtxHyPQO5qIDtzy04vLq84ojW2hC76NIdtWI6uRHZ74YEuLDC8apUTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSxGrKfYZ5MhYJx66DrAS0VgkeCswHwYDVR0j
BBgwFoAUEPxNnSQD/EM8Gbt2ExMlt3ZQXlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZGYwNjhiZC04ZTNhLTQ2OTUtODllZC0zYjMyNTBmODc1YzkvMC8xMEZDNEQ5RDI0
MDNGQzQzM0MxOUJCNzYxMzEzMjVCNzc2NTA1RTUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3NjUw
NUU1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RmMDY4YmQtOGUzYS00Njk1LTg5
ZWQtM2IzMjUwZjg3NWM5LzAvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1
Qjc3NjUwNUU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIiCetLETqCLwQlE2zipntajGI/oDPvCIwGU
qok/lS3Ofptd/lpEwluA0qiAiu9L/FYkpPGLjx1M1CHfvtSPTEzD2RfXgr+VLr6n
p2q+Hfk5SZT5tahRXnlYQiQ8fNFH5VOCQ+34wpefPPoF9mbwRQnsczcbckn0h7fd
OBFtI1Gi6MxqlZJ3CDcab3cVWYG7IeGgpqutSOQe78Rb5+yf2fULeRX4DI7EwdR3
wTuhpcy31vDebTt36iHfGTzpwzcoX3+RujjiZdPB/brXuLSRer/8mtVXaBfvpYX7
VjIhHmOWForEzzBilW30qx3mEB6R/Mn8FSd7UZ2p+NoHDjFA0Ww=
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:28:18 2025 by rpki-client