Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
File:                     9EDE64DBC4098881F11B70123DF514D38F7881EE.mft (raw, json)
Hash identifier:          nJwtV4MvQmKVGrMTMQXf37f7S1tHelwBqwxAeG1hNu0=
Subject key identifier:   CE:6C:BD:22:0D:59:CB:D3:20:52:09:93:CE:2A:CE:15:B0:87:F1:11
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       71B4A9A3B2799B14DE8A6A48F664944CD5A704AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
Manifest number:          04F9
Signing time:             Tue 05 Aug 2025 17:02:10 +0000
Manifest this update:     Tue 05 Aug 2025 16:57:10 +0000
Manifest next update:     Sat 09 Aug 2025 04:22:10 +0000
Files and hashes:         1: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: 5QPif0gj1bjrqgACnfODfusTFmrjqdVRY0shct/itK4=)
                          2: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: GdxXTcqOs77ZDWh2maZVFcjOZNFSKj6ecuomfp+ELnY=)
                          3: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: z35rtBPMp8YFiSMqabTLze0z5N+QVHUo3BCJ9n9BLFY=)
                          4: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: 4JRHGlgTjiQ2E4ohNDpjmFcrV1mqUH90bgY8D6I5glU=)
                          5: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: EZK2HW82EoviLvpddG+zTsR++pGZRfxBTBEevg15VUQ=)
                          6: 3230322e37322e3230372e302f32342d3234203d3e203538353532.roa (hash: SgsotEI1SZ9oJNKPcNIzjjmNECtgKeHbBcJfhx89iX4=)
                          7: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: Jse+7YyAFU6B19QF+EnGon6ubeg0wEMkIY6HtcfnBwc=)
                          8: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: puFXisSoUi7NizeL8UnUBZSF9nSgq80apGurKcIfDx4=)
                          9: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: IOVVBORu5O/pgeUVzl7VawBTg7EM0DqmgCa3hNVO+Xc=)
                          10: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: V8XIKsuHM3AcbKg6tSx3WP5UFaD99XoTgjHedx3ebJM=)
                          11: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: RQlHQFKjRMocIaoJ23CKpmV6pCLM6t6aYekY3LLmG4U=)
                          12: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: bEx2L/DI98HUxCv/5pxB9Xae6pY7P92MPJV4QBKaeJ0=)
                          13: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: dCgYQVEarcna28gmSfUk7VoXXuxd4x7SFqSDwv0sDbY=)
                          14: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: ClWieUUujizdV+v3zWqEr3zcFrew9Y3pcCg166brANs=)
                          15: 9EDE64DBC4098881F11B70123DF514D38F7881EE.crl (hash: Sa+E0O7TcFg+LMmFtV8T/yzQpML6mDsc74OpwvJRzeM=)
                          16: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: gVVEZCabi7tKzG7WnkOcz1INBITtjz6Gg7pU/p/uLbE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 04:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b4:a9:a3:b2:79:9b:14:de:8a:6a:48:f6:64:94:4c:d5:a7:04:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Aug  5 16:57:10 2025 GMT
            Not After : Aug  9 04:22:10 2025 GMT
        Subject: CN=CE6CBD220D59CBD320520993CE2ACE15B087F111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2b:6f:75:f5:e4:ab:cb:82:08:b4:53:47:16:
                    e9:5e:4a:23:82:a2:d0:24:c2:0b:24:67:fc:9a:71:
                    24:88:7c:2d:14:d2:c3:f3:ce:a8:94:df:83:f5:12:
                    fe:ba:a1:ea:4a:db:24:19:76:f6:ae:b2:fc:cb:9b:
                    c3:6a:18:1d:ad:fd:2a:4e:4f:0f:fc:c4:9b:2d:18:
                    10:82:1e:74:0d:6a:2b:8d:5d:48:9e:3f:41:af:1f:
                    73:62:5b:bd:2c:43:e3:ad:ed:07:ed:c6:2b:89:91:
                    c2:f0:af:56:80:bf:f7:b9:10:8b:f5:2c:80:7f:97:
                    f0:76:8e:96:d3:4a:36:23:28:5f:0f:33:e3:27:0f:
                    3d:55:13:32:f5:6a:7b:a4:6b:3c:95:80:1c:e7:1d:
                    c8:73:5e:d4:d0:d0:74:09:47:d2:59:94:63:6d:ad:
                    65:64:5f:71:2f:92:b4:f6:29:90:81:ec:29:65:d3:
                    f6:17:5a:7d:a3:35:4e:64:55:10:99:a7:7e:ff:2d:
                    be:f5:da:63:9f:09:5e:49:a3:4d:72:3c:d2:69:54:
                    7d:49:88:c4:85:2b:15:3e:50:da:50:30:24:d7:e3:
                    22:89:6d:2e:ca:97:c2:7d:4e:67:aa:95:12:e8:df:
                    b1:21:5e:31:b7:da:03:10:a1:ee:b4:66:94:15:e4:
                    05:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6C:BD:22:0D:59:CB:D3:20:52:09:93:CE:2A:CE:15:B0:87:F1:11
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:09:c0:37:52:23:45:61:73:58:48:19:7f:45:cd:56:5b:78:
         a3:52:01:77:ab:5f:24:22:37:85:f9:53:31:26:e5:c4:ad:3f:
         74:8a:0e:aa:f4:f1:c1:68:1e:b1:cd:68:69:e8:fe:0b:b6:e0:
         91:28:36:2c:fc:36:9e:bc:52:07:4a:2e:e9:b4:18:bc:8a:36:
         d7:c9:72:da:00:b4:f1:2e:d8:c9:1b:5f:c0:4f:bb:d3:91:83:
         98:2d:0e:5f:ad:a9:b2:e2:86:5a:0e:5f:5c:17:6b:42:13:2f:
         66:fc:c6:06:95:2b:8f:58:2d:51:e2:e1:2f:18:53:b2:24:b7:
         c8:a1:9a:24:22:7a:e1:b9:77:8f:ab:df:1f:8b:f5:aa:5b:b4:
         39:13:cf:ec:a5:37:8d:f7:11:d2:36:07:10:75:92:f6:d7:07:
         e2:17:a2:f6:25:44:62:77:f2:89:45:eb:74:17:96:66:55:ee:
         f0:7e:93:a0:b3:fd:f9:5c:c3:66:dd:61:8a:39:61:2c:bc:db:
         d9:42:5a:1a:19:4e:d2:9c:1d:a1:21:bd:a5:b8:4f:5e:d5:b0:
         c5:78:59:b5:8f:3e:e7:d9:0f:40:35:50:c8:57:b2:3d:31:14:
         05:1d:f3:c5:b0:a3:ca:f1:ac:35:c6:2c:60:a4:6a:1e:a2:f0:
         6e:19:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:11 2025 by rpki-client