Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
File:                     DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json)
Hash identifier:          vSWGINTE8j+d1xqXdUH3IdppTcd8A5uAWa4urRqxH9I=
Subject key identifier:   28:05:77:47:60:24:04:40:C8:6B:39:8D:72:A1:3C:24:85:2E:94:EF
Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3
Certificate issuer:       /CN=DFE92467290F9E190072585C1045251D6F8B05A3
Certificate serial:       5A8A573353C78B7E0C2561D3CF65B1098B41BD2C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
Manifest number:          0222
Signing time:             Tue 05 Aug 2025 11:02:24 +0000
Manifest this update:     Tue 05 Aug 2025 10:57:24 +0000
Manifest next update:     Fri 08 Aug 2025 14:17:24 +0000
Files and hashes:         1: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: OiYDO8vSblDm96nnC1296jyEVankh5EuXVFkPUDA8Tw=)
                          2: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: haaSHQN0sWh09iak7Jfz/FWXF5gl4JL5L2Lm/giP904=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 14:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8a:57:33:53:c7:8b:7e:0c:25:61:d3:cf:65:b1:09:8b:41:bd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3
        Validity
            Not Before: Aug  5 10:57:24 2025 GMT
            Not After : Aug  8 14:17:24 2025 GMT
        Subject: CN=2805774760240440C86B398D72A13C24852E94EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:9b:2d:a0:99:91:d5:e0:fd:3b:98:61:83:
                    8e:4e:f1:57:7d:12:6f:be:e1:84:c5:f4:98:5e:df:
                    66:01:f2:28:f8:99:41:03:4f:c4:e1:a2:50:a8:c7:
                    da:aa:70:5c:72:6c:b4:55:35:ee:f5:c2:68:47:fc:
                    d8:cf:33:13:e2:ac:41:29:7c:eb:77:ca:d6:71:85:
                    ba:b4:6d:50:e7:02:84:83:5c:8f:04:a6:34:bc:55:
                    c2:53:25:11:e1:a3:a8:b4:26:88:1d:30:6d:e9:12:
                    fc:c6:a9:98:7f:dd:67:c3:9d:3a:d0:af:45:c1:9d:
                    64:c4:7a:5d:5c:63:31:b3:d9:cf:56:dd:cb:58:93:
                    25:fa:a4:c5:24:8a:48:46:67:76:98:1f:2f:e1:c5:
                    28:f6:18:cc:62:9c:66:78:3f:14:f0:9f:87:e7:33:
                    66:dd:52:d0:02:d2:38:b2:7b:2a:04:34:be:ae:dc:
                    51:09:84:18:0b:dc:9c:b4:10:58:25:68:4f:5c:59:
                    b5:7c:c0:f7:d0:78:5f:23:00:d8:99:bf:f4:34:59:
                    c3:43:f2:6e:64:32:b7:79:2c:67:81:ed:fd:42:5d:
                    9f:57:0c:45:49:bc:81:0c:24:37:74:39:ce:a7:34:
                    be:09:b0:7a:ac:e9:cf:16:29:04:6a:43:37:8d:f7:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:05:77:47:60:24:04:40:C8:6B:39:8D:72:A1:3C:24:85:2E:94:EF
            X509v3 Authority Key Identifier:
                keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:1a:a2:2c:3f:b3:35:13:d4:cf:ba:0b:28:64:30:c5:a5:
         0f:85:9a:5b:5a:bd:08:b9:81:d4:7c:90:4e:fa:75:5b:1f:b9:
         f8:b2:35:68:ea:a4:04:b8:88:ac:d9:f3:1d:83:18:cd:84:08:
         36:df:47:7f:f3:6a:64:a4:e2:32:1f:8e:d5:19:f1:1c:e1:fa:
         e2:98:97:4d:10:c3:1d:b3:66:e3:88:74:b2:3b:06:a1:6e:28:
         92:dd:3d:39:e7:0e:6b:4c:1e:18:13:e1:f4:e6:83:d5:b1:4b:
         89:39:7b:3b:36:89:7f:16:2d:17:d7:0e:34:e3:e5:49:9b:88:
         ed:c1:24:b4:16:1e:70:d5:f6:5d:53:fd:28:0e:d4:6a:70:d4:
         12:a7:3f:b5:18:2a:ec:42:56:6f:0d:9b:a9:78:81:68:a5:2c:
         53:06:79:44:bd:69:ee:81:52:f3:eb:01:04:16:58:93:cc:38:
         8d:46:ee:be:4e:c8:05:5e:db:91:b2:95:da:e7:8b:35:67:8a:
         10:35:23:2d:fe:38:01:44:91:3b:39:ee:e8:fd:de:e6:4c:cf:
         73:ba:34:f4:b3:78:80:f1:14:74:bd:49:9d:8c:e2:af:69:6d:
         10:26:a7:96:6e:5e:a6:62:75:6e:17:b1:e4:36:cb:fb:83:fb:
         fa:50:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:30:08 2025 by rpki-client