Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
File:                     DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json)
Hash identifier:          jLHHrGig62ropaXRkhMFJ0tDX8elW/yYhUPtw9dS2N4=
Subject key identifier:   72:7F:82:42:6F:0F:29:D5:95:D7:47:7C:F5:A9:DD:EB:E9:6A:A0:B2
Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3
Certificate issuer:       /CN=DFE92467290F9E190072585C1045251D6F8B05A3
Certificate serial:       562A743860E6BA6B39923480CF455DDED5E464A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
Manifest number:          020B
Signing time:             Sun 15 Jun 2025 04:42:20 +0000
Manifest this update:     Sun 15 Jun 2025 04:37:20 +0000
Manifest next update:     Wed 18 Jun 2025 14:11:20 +0000
Files and hashes:         1: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: haaSHQN0sWh09iak7Jfz/FWXF5gl4JL5L2Lm/giP904=)
                          2: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: 78EWwZIZdwiTMe7m9PEDnu8nZAOI0ea4z4u59QkjSM0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 14:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2a:74:38:60:e6:ba:6b:39:92:34:80:cf:45:5d:de:d5:e4:64:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3
        Validity
            Not Before: Jun 15 04:37:20 2025 GMT
            Not After : Jun 18 14:11:20 2025 GMT
        Subject: CN=727F82426F0F29D595D7477CF5A9DDEBE96AA0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:a5:f0:56:8b:2e:98:6b:22:c8:af:6d:d4:
                    f0:48:f8:07:5d:91:7a:a9:9c:be:0c:5c:a2:00:a0:
                    f5:37:73:c3:80:77:5a:5c:41:22:27:85:06:b6:11:
                    d6:ae:b5:3a:af:d0:a2:a2:2d:e4:01:d4:28:ae:52:
                    d5:dd:2d:14:eb:02:5b:63:ee:3d:78:2b:6b:1d:ad:
                    83:4a:27:9e:53:33:42:c1:89:d2:5e:f6:6b:a7:8f:
                    81:b1:dc:e3:19:76:bb:43:75:d0:da:3b:25:91:53:
                    48:b6:56:b5:78:c4:c5:67:4c:e1:c8:69:fc:54:f4:
                    71:04:b0:9d:8c:72:88:b7:58:b9:6e:21:f2:ac:ee:
                    5d:85:ec:e5:95:b8:df:a1:89:1c:b1:f7:d5:f0:68:
                    e5:58:a7:7f:db:9b:03:68:db:45:a2:24:68:d8:76:
                    57:c6:14:b9:f8:56:c2:0e:4c:0d:5b:0d:d7:e7:da:
                    bc:61:1c:97:17:51:47:b9:dc:f1:4f:75:72:df:83:
                    8f:38:cb:66:bb:5e:d5:a5:14:0d:9f:36:65:f0:44:
                    24:54:d3:5a:4b:f9:b7:0f:b6:ce:cb:bc:fe:19:43:
                    3b:1a:68:df:6e:00:64:f1:ea:b7:4b:40:3e:ce:d9:
                    1f:b8:84:5e:db:2a:c9:c6:69:2c:78:51:ef:94:7e:
                    66:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7F:82:42:6F:0F:29:D5:95:D7:47:7C:F5:A9:DD:EB:E9:6A:A0:B2
            X509v3 Authority Key Identifier:
                keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:78:e9:0a:87:94:b1:22:35:e6:3e:19:d2:06:ff:c2:b4:48:
         85:46:8c:3e:e9:6b:bc:1f:57:0f:e4:e2:89:9e:e4:25:9a:5b:
         ea:db:08:3b:06:a5:09:59:ce:c0:ab:95:0d:47:a9:5f:5a:8b:
         b6:ab:43:e6:e6:01:91:02:5f:25:68:d3:8a:4b:57:c9:09:54:
         a9:f4:6a:c0:49:52:52:f7:a1:06:73:c7:24:38:76:7c:d7:eb:
         f8:c9:b7:8e:b2:c9:30:fd:20:cd:43:84:14:52:1b:dc:dd:e7:
         d0:34:56:ae:38:02:5e:5c:27:d1:a7:d7:cf:57:c8:7d:f5:db:
         4f:f0:c6:8c:90:ed:c7:59:08:e0:ca:9b:50:17:49:0e:1a:fc:
         15:01:3c:82:3a:0c:f1:6f:8b:6b:74:8f:5f:70:bf:98:e9:ca:
         75:42:2e:ff:8c:4b:d4:8c:26:a9:2d:9b:33:8d:15:33:b0:57:
         1a:46:5e:38:5c:84:24:50:6b:51:19:b2:e7:d1:3e:9b:80:72:
         75:73:a1:a0:b6:d2:e3:d5:c4:85:c1:89:ab:01:de:3a:db:db:
         73:2f:79:fb:38:50:c8:13:34:73:58:cd:c2:ee:fd:76:bd:57:
         4d:5e:9c:8b:83:56:29:ab:a0:1d:5a:39:26:df:1a:50:9b:e6:
         ff:47:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:21:43 2025 by rpki-client