Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
File:                     D9B568DACE796AFC606BD299D9DA57F714CD7970.mft (raw, json)
Hash identifier:          BQC6PcCuGZe0U48xi7z87KwaNTw5HiTJ8kr//ZRTs0A=
Subject key identifier:   36:21:9F:0F:01:A6:87:17:B2:29:C0:21:5C:4F:14:21:4A:99:81:07
Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70
Certificate issuer:       /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970
Certificate serial:       4F0CB3433E1DC4D341882109C8ACC9629BD93196
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
Manifest number:          0105
Signing time:             Wed 06 Aug 2025 01:21:03 +0000
Manifest this update:     Wed 06 Aug 2025 01:16:03 +0000
Manifest next update:     Sat 09 Aug 2025 05:07:03 +0000
Files and hashes:         1: D9B568DACE796AFC606BD299D9DA57F714CD7970.crl (hash: fZnH3stKj8I9u54DFkiNmfTr5l5Q+MImLjyy2dh0ge4=)
                          2: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: 5Xv6mrgfWe+rWcCn7CecS/d4Z1XQ/6GwMQiiafaEOqI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl
                          rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 05:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0c:b3:43:3e:1d:c4:d3:41:88:21:09:c8:ac:c9:62:9b:d9:31:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970
        Validity
            Not Before: Aug  6 01:16:03 2025 GMT
            Not After : Aug  9 05:07:03 2025 GMT
        Subject: CN=36219F0F01A68717B229C0215C4F14214A998107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:e8:c5:15:a8:f6:64:71:f7:85:a4:87:b5:
                    45:41:39:cb:1e:a7:6e:cf:2c:39:52:ae:c2:19:b3:
                    fb:17:57:39:d6:58:d2:97:1f:b9:63:91:0a:ba:79:
                    00:d5:c4:a8:6a:15:b3:6f:e1:e2:24:b7:bb:91:77:
                    01:a2:5a:c0:7a:80:04:51:d2:d9:24:cb:bb:4a:b4:
                    b0:d9:7d:18:15:08:b7:9d:80:df:60:8e:0c:30:0d:
                    4d:82:86:53:2e:61:c3:ef:c5:b2:0e:c7:3b:e0:17:
                    c6:01:7b:9f:96:7c:9f:ce:94:12:d2:cf:78:b7:3c:
                    b7:a8:a2:dc:3a:7b:20:e8:42:3f:40:17:64:98:fb:
                    10:0b:fa:5b:ba:fd:7f:a3:3b:f0:70:7e:27:20:2a:
                    6f:74:c7:04:3c:7c:2c:b1:2b:a4:9a:be:89:4c:a5:
                    b5:f6:3d:6e:ed:16:45:ff:5a:5e:8b:f7:8b:f4:3a:
                    08:d3:aa:dc:17:08:d5:dc:81:2e:a3:95:71:68:68:
                    c1:3a:e7:2e:c8:9a:af:07:81:c0:6d:22:88:47:25:
                    9d:f5:6f:26:0e:78:7f:4e:60:44:a0:26:a0:57:b6:
                    27:12:3f:50:73:aa:de:85:15:40:fc:90:f5:86:ac:
                    7c:c0:ca:25:56:62:ba:cf:ab:3a:c2:ff:1c:a1:83:
                    f9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:21:9F:0F:01:A6:87:17:B2:29:C0:21:5C:4F:14:21:4A:99:81:07
            X509v3 Authority Key Identifier:
                keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:35:e4:57:1d:3e:f5:e4:45:93:0b:73:b4:a0:0d:f7:c3:42:
         a8:5e:5f:9e:a4:f2:b5:69:e7:9b:5c:15:b4:fa:4e:3f:75:80:
         58:34:6b:e0:4c:7e:bb:92:d4:80:f5:bd:c2:f2:2a:7a:8c:67:
         c8:ca:f2:06:82:da:de:c7:b9:64:33:74:43:46:bd:14:38:25:
         a1:29:97:de:95:61:b2:3e:27:2f:bf:75:c1:77:4b:85:f8:bd:
         04:4e:25:bf:37:6a:0a:ab:e6:69:5c:96:42:6c:eb:52:03:3c:
         b2:f9:2f:9a:fd:50:c3:96:69:d6:e9:d5:e7:19:d1:71:8a:61:
         e2:3c:57:b8:01:63:b6:2b:f8:33:a0:c4:c6:4f:49:9a:34:41:
         e3:60:82:06:97:3b:a8:ee:dc:f3:8f:2c:26:ab:e2:b2:0b:7e:
         77:0d:c3:8e:a2:ea:7e:9f:ed:2d:82:71:5e:03:fb:7f:37:41:
         77:5a:48:f8:37:48:61:b8:42:32:bb:05:ac:64:17:35:c9:a6:
         47:92:58:72:68:47:53:05:47:b9:21:ea:98:40:42:49:6b:0b:
         ee:b5:67:29:53:56:83:85:dd:bc:c1:82:81:5b:7f:e0:4e:f7:
         68:c0:24:8d:e3:2d:47:7c:43:03:78:8a:62:48:09:f4:76:96:
         b1:eb:43:ac
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTwyzQz4dxNNBiCEJyKzJYpvZMZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3Rjcx
NENENzk3MDAeFw0yNTA4MDYwMTE2MDNaFw0yNTA4MDkwNTA3MDNaMDMxMTAvBgNV
BAMTKDM2MjE5RjBGMDFBNjg3MTdCMjI5QzAyMTVDNEYxNDIxNEE5OTgxMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29ejFFaj2ZHH3haSHtUVBOcse
p27PLDlSrsIZs/sXVznWWNKXH7ljkQq6eQDVxKhqFbNv4eIkt7uRdwGiWsB6gARR
0tkky7tKtLDZfRgVCLedgN9gjgwwDU2ChlMuYcPvxbIOxzvgF8YBe5+WfJ/OlBLS
z3i3PLeootw6eyDoQj9AF2SY+xAL+lu6/X+jO/BwficgKm90xwQ8fCyxK6SavolM
pbX2PW7tFkX/Wl6L94v0OgjTqtwXCNXcgS6jlXFoaME65y7Imq8HgcBtIohHJZ31
byYOeH9OYESgJqBXticSP1Bzqt6FFUD8kPWGrHzAyiVWYrrPqzrC/xyhg/lrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNiGfDwGmhxeyKcAhXE8UIUqZgQcwHwYDVR0j
BBgwFoAU2bVo2s55avxga9KZ2dpX9xTNeXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNhYjlkZi0wM2I1LTQ4YjMtYTg3Mi1hMGZlMTJhNjc0MjYvMC9EOUI1NjhEQUNF
Nzk2QUZDNjA2QkQyOTlEOURBNTdGNzE0Q0Q3OTcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3RjcxNENE
Nzk3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjYWI5ZGYtMDNiNS00OGIzLWE4
NzItYTBmZTEyYTY3NDI2LzAvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3
RjcxNENENzk3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACU15FcdPvXkRZMLc7SgDffDQqheX56k8rVp
55tcFbT6Tj91gFg0a+BMfruS1ID1vcLyKnqMZ8jK8gaC2t7HuWQzdENGvRQ4JaEp
l96VYbI+Jy+/dcF3S4X4vQROJb83agqr5mlclkJs61IDPLL5L5r9UMOWadbp1ecZ
0XGKYeI8V7gBY7Yr+DOgxMZPSZo0QeNgggaXO6ju3POPLCar4rILfncNw46i6n6f
7S2CcV4D+383QXdaSPg3SGG4QjK7BaxkFzXJpkeSWHJoR1MFR7kh6phAQklrC+61
ZylTVoOF3bzBgoFbf+BO92jAJI3jLUd8QwN4imJICfR2lrHrQ6w=
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:29 2025 by rpki-client