Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft
File:                     E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json)
Hash identifier:          YkgtOYka5Iqdul8hm7T6QSXQNKY4a0oLjMxxdSmCkEA=
Subject key identifier:   25:F4:A9:82:B5:91:16:D9:E1:3B:AD:E8:C2:B3:D7:FF:16:15:B0:B7
Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6
Certificate issuer:       /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6
Certificate serial:       3308A6CDBDC19B1694D989366CB793F1610EB44D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft
Manifest number:          0206
Signing time:             Sun 15 Jun 2025 08:52:16 +0000
Manifest this update:     Sun 15 Jun 2025 08:47:16 +0000
Manifest next update:     Wed 18 Jun 2025 13:41:16 +0000
Files and hashes:         1: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: Iwyo3QKa4XP1zfD3+2rbxVipJDPnlR/2S8VpfMLn2Ss=)
                          2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: LFOqzDAyDWWdrBcQS4m60ydnXXk+fQv19GMLbDiq/ow=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl
                          rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 13:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:08:a6:cd:bd:c1:9b:16:94:d9:89:36:6c:b7:93:f1:61:0e:b4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6
        Validity
            Not Before: Jun 15 08:47:16 2025 GMT
            Not After : Jun 18 13:41:16 2025 GMT
        Subject: CN=25F4A982B59116D9E13BADE8C2B3D7FF1615B0B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:de:ab:b7:1c:35:34:a5:e2:ee:34:b7:3b:b2:
                    b1:fa:45:5c:cd:0e:b9:7d:e9:5b:7f:bf:94:d9:77:
                    85:24:23:9e:da:a2:19:63:d8:a9:71:99:b5:0d:d7:
                    66:e6:4b:b5:92:44:d8:5d:11:4c:b9:ac:f6:04:f4:
                    fd:31:ef:31:bb:fd:2a:46:e1:18:24:3e:ad:83:da:
                    66:d9:7d:b2:d7:02:04:32:94:1e:a6:12:8a:69:9c:
                    cf:a8:82:77:b8:70:01:1c:df:b5:4a:86:63:e5:0f:
                    fc:e4:75:dd:6c:0e:06:5a:3e:b0:94:2f:bd:71:3e:
                    05:30:43:6d:e5:15:71:e8:d1:44:6d:1f:30:b7:54:
                    09:b2:0f:21:f1:3a:9f:16:66:17:1e:c2:cd:9f:64:
                    15:a5:44:13:b0:0c:a4:73:ae:55:c0:77:9a:09:43:
                    f2:8a:e2:79:68:e8:6a:1b:33:8d:35:ad:5c:a0:1c:
                    53:be:7c:35:e9:6a:9f:d6:18:bc:0e:2c:6c:b6:69:
                    3e:f9:d7:e2:e2:74:86:05:ef:60:00:11:ee:e5:cb:
                    1a:8b:29:07:cb:96:64:4f:c5:60:e8:b4:d3:b3:0f:
                    b6:cf:83:ec:9f:c1:4e:b0:f8:cc:26:97:80:8e:ba:
                    da:4a:96:8d:57:f8:e9:8a:4a:b2:72:5c:73:15:82:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F4:A9:82:B5:91:16:D9:E1:3B:AD:E8:C2:B3:D7:FF:16:15:B0:B7
            X509v3 Authority Key Identifier:
                keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:2a:d6:28:54:a5:7e:e4:b2:23:2b:a5:c7:bd:0c:5e:de:6b:
         df:c5:65:c6:61:fb:63:5e:5c:90:72:bf:27:d0:f2:f9:09:2e:
         3c:da:18:4f:3e:91:b5:73:fe:69:de:9f:eb:23:4a:d4:90:4c:
         c6:68:c0:10:82:64:6f:5b:66:69:d9:53:0a:da:dc:2a:5a:03:
         2e:5d:9d:17:f4:b2:e6:60:a2:fa:a4:fa:7e:a4:a3:88:21:fd:
         91:e5:d2:30:f0:47:f5:a0:df:50:5f:15:55:d4:82:98:0a:cd:
         d9:d2:db:69:4d:98:5f:79:87:80:6a:12:74:94:e9:12:f1:9d:
         79:15:83:2c:5d:d0:04:c9:29:7b:ee:28:ca:42:05:1b:03:6a:
         f7:c0:21:93:a1:84:ba:3e:6c:28:63:25:e5:8c:48:a6:a0:71:
         63:7d:34:84:32:03:18:da:d9:52:63:db:ac:71:06:cd:19:42:
         f2:11:ae:32:f5:c6:e3:21:16:55:77:16:a9:bc:dd:d8:86:89:
         1f:c0:34:5e:88:c6:13:f9:63:00:8b:05:60:e8:8f:0b:d6:43:
         bf:62:1e:4d:ec:3f:49:89:5c:29:02:16:0f:3a:74:b4:b9:d2:
         a3:e6:df:fc:dc:3b:13:2a:d1:05:65:b4:e0:4f:75:3d:a5:2b:
         cd:95:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:03:33 2025 by rpki-client