Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
File:                     2FEC60739EF087F0D4F947C7230A725109EC6178.mft (raw, json)
Hash identifier:          zST8AgfG24VtDhopwUhAITmflafDjoqaRgWFQrZ4sJU=
Subject key identifier:   98:D3:03:62:35:B0:7D:AA:58:CC:79:40:0E:49:4C:77:95:1C:AF:09
Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78
Certificate issuer:       /CN=2FEC60739EF087F0D4F947C7230A725109EC6178
Certificate serial:       4C0D541D2E58E8E30CA48A8A55E1ABF228649227
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
Manifest number:          01A7
Signing time:             Wed 06 Aug 2025 02:01:01 +0000
Manifest this update:     Wed 06 Aug 2025 01:56:01 +0000
Manifest next update:     Sat 09 Aug 2025 02:08:01 +0000
Files and hashes:         1: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: H/sQHGm23pHeiM29QxCCnpOLF9jsO1FQ1jBVySyo3Cs=)
                          2: 2FEC60739EF087F0D4F947C7230A725109EC6178.crl (hash: mW0HppWTvAReW6I0+TwQpf2FnJFyZ2wFL3pM0+y2I9k=)
                          3: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: zWeyoVA0qOIjaDafAvIQb12jZYR0oaDd22mIF8oHmpo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl
                          rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 02:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0d:54:1d:2e:58:e8:e3:0c:a4:8a:8a:55:e1:ab:f2:28:64:92:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178
        Validity
            Not Before: Aug  6 01:56:01 2025 GMT
            Not After : Aug  9 02:08:01 2025 GMT
        Subject: CN=98D3036235B07DAA58CC79400E494C77951CAF09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:cd:3c:70:2b:e6:9b:89:a5:cf:f9:46:39:
                    00:fa:2e:cb:a0:fd:15:7b:ee:44:4d:b7:03:b2:cc:
                    ce:20:b3:5b:33:9d:85:e9:66:a7:80:d9:7f:43:18:
                    64:4b:76:cf:52:5e:91:ef:e0:e7:7d:90:8e:9d:e4:
                    e2:62:82:db:69:3b:11:0b:81:6e:1f:1e:39:35:90:
                    72:fb:c2:9a:06:a6:53:71:a7:17:a9:9f:3f:6f:3b:
                    42:21:74:ab:da:ef:16:f8:2c:0b:12:ab:26:28:bb:
                    7e:1c:df:7e:92:1d:f5:3d:dc:6a:1a:95:72:69:3a:
                    a5:47:5c:9d:5d:6a:e4:78:18:e2:b1:66:7d:76:cd:
                    8c:b4:83:2a:42:72:b1:ab:0a:92:fe:6e:21:19:c6:
                    d1:3b:a1:62:b4:09:12:20:fb:53:ba:80:02:69:6a:
                    61:e0:7e:2e:80:30:32:c1:bb:2b:09:b5:d2:29:d6:
                    5f:23:f8:c7:d4:f7:a1:b5:78:89:10:ec:aa:e3:a9:
                    13:18:8b:26:ee:1f:53:c5:65:15:a2:32:f0:fa:41:
                    e0:62:d6:a9:17:8f:9c:52:7a:be:4a:4d:d3:ef:b3:
                    2a:b6:12:f8:4d:1b:d9:3c:a8:0a:fa:d3:84:8b:de:
                    ce:d0:3f:9e:ac:47:00:01:55:7e:70:59:53:d9:20:
                    d6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D3:03:62:35:B0:7D:AA:58:CC:79:40:0E:49:4C:77:95:1C:AF:09
            X509v3 Authority Key Identifier:
                keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:54:36:86:ac:23:0c:9b:8a:19:90:f1:89:1d:b7:20:66:a9:
         fb:77:9c:7d:ac:03:37:c6:b6:ca:a8:4b:a1:fb:e0:42:a7:7a:
         ef:4a:85:cc:08:fe:cf:10:64:88:77:5b:17:40:78:b5:af:78:
         55:67:8f:91:a2:3e:ba:50:6b:22:06:3c:69:62:b4:5b:07:ea:
         ac:d6:66:ee:27:b1:ba:48:0a:a5:02:dc:cf:17:22:0f:e6:74:
         62:62:a4:aa:8d:aa:10:21:12:4d:e3:1b:29:99:9e:60:46:b5:
         9f:7b:e7:c5:da:e7:4c:8f:b8:ab:0a:ef:df:19:a8:70:27:62:
         ea:a8:06:41:5d:19:d6:06:fa:7a:8a:a1:72:f8:72:de:c8:d5:
         02:dd:ee:55:6d:77:e3:0a:03:93:a7:fe:9f:e3:bd:94:00:63:
         f1:40:bc:3b:d5:02:53:f7:69:28:0a:d5:ad:9e:62:1e:b0:36:
         55:0d:6c:05:b2:d4:cf:89:28:98:b4:e7:fd:85:59:ae:96:b3:
         a5:4a:e5:39:9e:1f:81:e4:97:22:12:ae:e0:77:b9:08:e7:c2:
         44:e6:b2:e9:78:fc:a9:9b:5d:bf:f0:84:0c:50:2e:ec:4c:57:
         2b:3a:64:be:d5:01:b7:8e:7a:ba:33:28:8a:7b:e9:5b:4a:79:
         c6:54:4d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 08:00:16 2025 by rpki-client