Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft
File:                     407919FF69A512DDAE7CCD48BE288F17073A5512.mft (raw, json)
Hash identifier:          ae7/0ScNGqpZHFpcynpH8W6UJnXjGAZ+aGmBoELCv+Y=
Subject key identifier:   8E:20:1F:C3:B3:24:17:3B:30:D0:1B:19:BF:B4:F2:45:97:E5:58:84
Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12
Certificate issuer:       /CN=407919FF69A512DDAE7CCD48BE288F17073A5512
Certificate serial:       76A59EE39D100768AC81EF1C1FDA3AFD2C0260BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft
Manifest number:          8A
Signing time:             Sat 14 Jun 2025 07:41:45 +0000
Manifest this update:     Sat 14 Jun 2025 07:36:45 +0000
Manifest next update:     Tue 17 Jun 2025 18:48:45 +0000
Files and hashes:         1: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: bnY3Rdf5tjyvjTmTZpR60TzQq/Y/scdeVckhMsSJm4w=)
                          2: 407919FF69A512DDAE7CCD48BE288F17073A5512.crl (hash: c/aWwNHUvN+IItPzxnATZncmpL4Bh7Hal17ljXyTSZg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl
                          rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 18:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a5:9e:e3:9d:10:07:68:ac:81:ef:1c:1f:da:3a:fd:2c:02:60:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512
        Validity
            Not Before: Jun 14 07:36:45 2025 GMT
            Not After : Jun 17 18:48:45 2025 GMT
        Subject: CN=8E201FC3B324173B30D01B19BFB4F24597E55884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:59:9b:b5:70:eb:1e:92:f1:04:49:0a:75:88:
                    75:b3:21:52:7b:ff:0f:e3:9c:ef:84:56:19:bf:11:
                    f1:f2:4f:0f:12:8d:8b:c8:15:df:b1:ee:28:51:da:
                    dc:93:3a:61:64:e2:85:77:75:bc:fd:8d:51:1e:42:
                    26:a3:88:4c:1a:5f:d1:3c:19:40:05:4a:5e:30:88:
                    00:ed:4e:e0:46:07:6f:bb:03:d4:b6:8f:7d:08:86:
                    c5:b6:ff:a2:11:ff:28:f6:8d:5a:ad:51:88:14:e5:
                    35:57:65:3f:b5:be:76:dd:7a:76:9f:d0:8d:e3:04:
                    9c:6a:63:21:04:92:b7:a1:c6:12:44:1a:48:1e:0d:
                    e3:36:00:0a:b1:b7:50:c5:5f:38:f0:65:06:23:38:
                    e1:70:47:29:4e:83:c0:65:98:ef:c8:8e:b3:bc:00:
                    9b:07:d4:80:29:e8:44:ef:c1:07:b9:06:14:cb:63:
                    32:d3:9d:61:de:b2:ef:00:2b:ad:0b:cf:15:ee:a9:
                    28:7f:ce:dc:b6:b5:d5:1d:bf:7a:1e:92:2e:7e:d5:
                    02:db:e8:82:7d:f4:8a:63:c3:d1:ca:e1:96:9b:d8:
                    1c:1e:8e:1f:2b:fd:bb:f4:ee:2e:92:1e:b6:a2:84:
                    29:b3:ca:b8:82:7d:05:2d:55:c0:e6:49:e7:e4:63:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:20:1F:C3:B3:24:17:3B:30:D0:1B:19:BF:B4:F2:45:97:E5:58:84
            X509v3 Authority Key Identifier:
                keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3c:55:c9:76:3b:1c:a8:69:a9:22:e6:bf:d0:16:bb:d8:bc:
         12:ca:33:de:61:8d:e6:f9:fe:fd:f1:a1:9c:16:09:61:52:e8:
         55:b4:59:68:d3:08:91:2b:12:b5:80:99:52:ed:ac:9f:54:b0:
         b0:22:8d:af:06:09:41:4d:e4:78:1a:ba:2e:b9:05:8c:3a:0c:
         9a:a1:d4:3e:12:bd:da:18:03:30:bc:e8:13:63:61:d3:65:b3:
         4a:df:42:41:c3:fb:68:1a:e0:81:6a:ec:98:e4:25:26:06:cb:
         c7:d1:97:8e:e9:1f:99:b4:a8:ae:02:38:5e:33:85:6f:e1:b4:
         02:db:e4:4e:7e:06:5d:c4:39:a4:51:5b:1b:72:56:57:f6:72:
         a5:4e:f1:7d:92:80:6f:29:d1:45:31:09:a9:e4:e3:4d:c1:70:
         ea:32:b8:6c:0d:0b:10:4a:f9:c2:ef:67:b4:5f:50:69:6c:a2:
         2d:29:21:c7:89:6c:dd:7f:9c:e8:53:ff:1a:f1:3c:55:1c:33:
         3e:d0:8f:26:9f:0c:9a:0d:24:0f:da:69:ad:f8:3c:9f:8b:65:
         7a:8d:5e:3a:a2:7d:f1:9c:ab:b3:eb:93:4b:05:a9:1e:74:57:
         a4:7b:85:f3:84:f8:a6:30:48:f3:28:86:0e:d7:2d:5c:9c:60:
         5f:46:34:61
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdqWe450QB2isge8cH9o6/SwCYLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw
NzNBNTUxMjAeFw0yNTA2MTQwNzM2NDVaFw0yNTA2MTcxODQ4NDVaMDMxMTAvBgNV
BAMTKDhFMjAxRkMzQjMyNDE3M0IzMEQwMUIxOUJGQjRGMjQ1OTdFNTU4ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8WZu1cOsekvEESQp1iHWzIVJ7
/w/jnO+EVhm/EfHyTw8SjYvIFd+x7ihR2tyTOmFk4oV3dbz9jVEeQiajiEwaX9E8
GUAFSl4wiADtTuBGB2+7A9S2j30IhsW2/6IR/yj2jVqtUYgU5TVXZT+1vnbdenaf
0I3jBJxqYyEEkrehxhJEGkgeDeM2AAqxt1DFXzjwZQYjOOFwRylOg8BlmO/IjrO8
AJsH1IAp6ETvwQe5BhTLYzLTnWHesu8AK60LzxXuqSh/zty2tdUdv3oeki5+1QLb
6IJ99Ipjw9HK4Zab2Bwejh8r/bv07i6SHraihCmzyriCfQUtVcDmSefkY9u/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjiAfw7MkFzsw0BsZv7TyRZflWIQwHwYDVR0j
BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5
QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB
NTUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw
MjYtYTIzOGZmNDQ4MDcwLzAvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhG
MTcwNzNBNTUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI08Vcl2Oxyoaaki5r/QFrvYvBLKM95hjeb5
/v3xoZwWCWFS6FW0WWjTCJErErWAmVLtrJ9UsLAija8GCUFN5Hgaui65BYw6DJqh
1D4SvdoYAzC86BNjYdNls0rfQkHD+2ga4IFq7JjkJSYGy8fRl47pH5m0qK4COF4z
hW/htALb5E5+Bl3EOaRRWxtyVlf2cqVO8X2SgG8p0UUxCank403BcOoyuGwNCxBK
+cLvZ7RfUGlsoi0pIceJbN1/nOhT/xrxPFUcMz7QjyafDJoNJA/aaa34PJ+LZXqN
XjqiffGcq7Prk0sFqR50V6R7hfOE+KYwSPMohg7XLVycYF9GNGE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:54:52 2025 by rpki-client