Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft
File:                     F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json)
Hash identifier:          bi3yWkyjDxeehdawA5GAI+/lOSXw4CCHgGaodGvqqBM=
Subject key identifier:   0F:3F:38:2E:94:FA:61:7C:DD:5F:09:B0:41:13:9D:CA:37:DE:85:C0
Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA
Certificate issuer:       /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA
Certificate serial:       0444D447598062C9A2AC1F746D8B9942A0E2448F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft
Manifest number:          01FE
Signing time:             Tue 05 Aug 2025 13:00:37 +0000
Manifest this update:     Tue 05 Aug 2025 12:55:37 +0000
Manifest next update:     Fri 08 Aug 2025 17:42:37 +0000
Files and hashes:         1: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: nXEHhJ8w6SXV+eCEbP2YrkovqQsEQKgULxh/UNhY8O8=)
                          2: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: WTqqW4cwushoWLyLWupS3yHzTC5AqZ4B8ENJ6k7wzI4=)
                          3: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: es8l9SRf7iJyZqZ8tGDfIj/wDclDwjhG1JPabWG0lG4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl
                          rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 17:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:44:d4:47:59:80:62:c9:a2:ac:1f:74:6d:8b:99:42:a0:e2:44:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA
        Validity
            Not Before: Aug  5 12:55:37 2025 GMT
            Not After : Aug  8 17:42:37 2025 GMT
        Subject: CN=0F3F382E94FA617CDD5F09B041139DCA37DE85C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:da:cf:45:bd:14:e9:8b:6c:a2:cb:50:9f:
                    0d:36:fd:a9:f3:cb:df:46:66:9d:08:15:89:2a:81:
                    d5:e4:1f:3e:24:81:0d:ca:a1:4b:f3:eb:9d:ab:85:
                    c2:b6:f3:86:1c:d6:e1:09:f3:26:d2:c9:78:10:51:
                    6b:ed:ae:07:3c:f4:53:b8:1a:df:b5:a4:3e:15:6b:
                    43:a5:db:58:7a:7d:99:ff:9f:a6:46:4f:a3:d9:3c:
                    ee:31:b3:ae:5e:1f:c9:00:9f:6d:50:b3:79:f6:a3:
                    a6:ad:6e:62:8d:d7:fb:34:9a:39:16:aa:11:8d:02:
                    bf:6a:de:54:09:5e:88:9e:a9:3b:5c:ac:16:8e:9d:
                    df:dd:f5:48:f7:93:8d:75:0b:61:fb:df:6a:3b:ce:
                    7c:8b:a0:94:8e:84:06:0c:27:db:fe:70:d4:2f:3c:
                    29:b8:f6:d1:10:f3:be:68:a9:99:a3:18:ae:0c:a2:
                    44:24:6d:4e:dc:4b:f6:96:87:5a:c7:86:2b:68:e1:
                    34:62:b7:70:b2:8f:ca:02:17:cf:53:b4:c5:0a:05:
                    87:94:2f:ed:87:57:c1:23:1b:da:b8:1b:79:80:21:
                    9d:24:1b:44:a9:ba:56:a0:18:02:d2:98:1d:19:37:
                    ac:20:4f:03:43:26:05:d9:d0:ab:70:05:56:18:25:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3F:38:2E:94:FA:61:7C:DD:5F:09:B0:41:13:9D:CA:37:DE:85:C0
            X509v3 Authority Key Identifier:
                keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fc:c9:5d:de:9a:5d:af:3d:3f:16:fa:eb:21:5b:13:33:a6:
         ab:d4:cd:5d:03:1b:71:84:da:fb:cb:54:ca:3c:79:df:fb:12:
         1b:cb:e9:39:6a:1d:8a:90:82:43:99:fc:68:5f:5d:d1:84:8e:
         a4:22:90:b1:b2:f1:ec:28:f5:0d:d5:6f:b6:b6:fe:05:34:00:
         f1:2e:2f:b0:5d:5b:56:aa:af:fa:3c:d4:67:78:b8:0f:68:06:
         f8:f4:a0:16:9f:5a:ad:cb:d2:c0:06:e7:00:64:c3:1d:26:df:
         83:b8:95:d8:dc:6d:28:9d:47:8a:e0:17:11:d6:a8:85:02:1b:
         29:76:dd:b3:bb:9d:76:5b:a6:60:79:94:16:45:66:cf:a0:cc:
         af:a1:ea:85:b7:62:0a:24:94:5c:ed:d4:a4:9c:ca:e1:16:52:
         00:8a:a1:99:44:bc:b9:f2:44:8a:c1:53:c2:65:31:71:5d:9a:
         4d:22:b0:80:79:29:44:51:8b:fa:5b:27:ff:13:08:b4:00:aa:
         7b:71:ef:cc:1e:35:a3:0c:bd:e8:6e:7b:0b:fa:89:df:c6:15:
         b6:61:4c:b8:99:0a:8f:b8:4d:44:3a:19:3a:89:3d:6c:61:fa:
         d8:0e:aa:45:93:b9:ba:0e:2b:dc:9d:3d:d2:6b:51:6b:d9:90:
         58:e5:8d:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBETUR1mAYsmirB90bYuZQqDiRI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF
MURCM0RDQTAeFw0yNTA4MDUxMjU1MzdaFw0yNTA4MDgxNzQyMzdaMDMxMTAvBgNV
BAMTKDBGM0YzODJFOTRGQTYxN0NERDVGMDlCMDQxMTM5RENBMzdERTg1QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3NrPRb0U6YtsostQnw02/anz
y99GZp0IFYkqgdXkHz4kgQ3KoUvz652rhcK284Yc1uEJ8ybSyXgQUWvtrgc89FO4
Gt+1pD4Va0Ol21h6fZn/n6ZGT6PZPO4xs65eH8kAn21Qs3n2o6atbmKN1/s0mjkW
qhGNAr9q3lQJXoieqTtcrBaOnd/d9Uj3k411C2H732o7znyLoJSOhAYMJ9v+cNQv
PCm49tEQ875oqZmjGK4MokQkbU7cS/aWh1rHhito4TRit3Cyj8oCF89TtMUKBYeU
L+2HV8EjG9q4G3mAIZ0kG0SpulagGALSmB0ZN6wgTwNDJgXZ0KtwBVYYJcADAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDz84LpT6YXzdXwmwQROdyjfehcAwHwYDVR0j
BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE
QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC
M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj
M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5
NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIj8yV3eml2vPT8W+ushWxMzpqvUzV0DG3GE
2vvLVMo8ed/7EhvL6TlqHYqQgkOZ/GhfXdGEjqQikLGy8ewo9Q3Vb7a2/gU0APEu
L7BdW1aqr/o81Gd4uA9oBvj0oBafWq3L0sAG5wBkwx0m34O4ldjcbSidR4rgFxHW
qIUCGyl23bO7nXZbpmB5lBZFZs+gzK+h6oW3YgoklFzt1KScyuEWUgCKoZlEvLny
RIrBU8JlMXFdmk0isIB5KURRi/pbJ/8TCLQAqntx78weNaMMvehuewv6id/GFbZh
TLiZCo+4TUQ6GTqJPWxh+tgOqkWTuboOK9ydPdJrUWvZkFjljWg=
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:28 2025 by rpki-client