Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
File:                     115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json)
Hash identifier:          MtdW3hksjAtc0vuJVT+elApvwNnkqmNtGDe2w9ZuDVc=
Subject key identifier:   32:3A:28:6E:FC:ED:2C:18:E3:37:BD:B2:B8:D6:54:4C:1C:66:D5:CA
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       182AA66906F1C228B0744A90F421B383114C208F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
Manifest number:          01AA
Signing time:             Tue 05 Aug 2025 03:22:12 +0000
Manifest this update:     Tue 05 Aug 2025 03:17:12 +0000
Manifest next update:     Fri 08 Aug 2025 13:38:12 +0000
Files and hashes:         1: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=)
                          2: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: sa3OzH/it4HTqgpzy86wwU8EXii1W0ULMp0heXYXPTI=)
                          3: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: Jn9654uE1MAkhxHMr7LmE5+YeOZ6sz4Pa6nAFO5Kq+Q=)
                          4: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=)
                          5: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: MPl5ELQ+jnWnL8LJsxoYECXhQIy/2gQtSqxW1SRND58=)
                          6: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=)
                          7: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=)
                          8: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=)
                          9: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: +z4cRvyNT4QtWwPTkT8yZCGmj9VTYSFEsOdsS2JDhX8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 13:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2a:a6:69:06:f1:c2:28:b0:74:4a:90:f4:21:b3:83:11:4c:20:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Aug  5 03:17:12 2025 GMT
            Not After : Aug  8 13:38:12 2025 GMT
        Subject: CN=323A286EFCED2C18E337BDB2B8D6544C1C66D5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e9:c8:d5:63:c9:2e:cc:15:e4:c5:c0:8c:87:
                    9a:91:9a:54:88:23:98:d9:88:77:df:3c:3b:32:0e:
                    75:79:13:d7:14:76:10:9b:59:8a:8b:d3:71:22:65:
                    0e:1f:50:f4:bc:6d:c8:d0:69:27:40:7c:77:3b:32:
                    75:ee:11:d2:5c:1f:84:fe:64:8e:93:1e:24:1f:ee:
                    51:60:64:30:3e:1a:90:b8:e0:3a:4a:ca:30:c4:12:
                    f0:88:a3:d1:9a:df:87:e5:0f:70:dc:d6:a2:a4:20:
                    ed:5f:30:a5:04:5f:5e:ed:1c:0c:fe:16:04:93:48:
                    88:8e:1d:37:a2:17:f4:3e:fb:f9:97:ed:13:08:05:
                    b6:46:ea:f4:c7:64:3c:fd:b0:62:6b:28:d7:4e:a9:
                    98:01:c6:9c:6c:65:9f:a7:bb:77:77:77:91:22:55:
                    82:4c:c1:69:d6:78:09:75:1d:c0:2a:7b:28:8a:92:
                    6d:80:4e:26:30:a7:88:87:e7:39:47:31:22:1a:0a:
                    13:52:cb:aa:08:64:88:f8:f3:0d:28:eb:d0:e5:c8:
                    1e:81:87:11:d9:23:fb:8d:ce:6c:01:1c:f9:26:18:
                    44:8b:a1:b2:12:80:a8:db:41:28:df:11:0c:76:29:
                    44:1d:1c:25:d3:3a:cc:ca:42:4e:ba:cf:d2:7f:70:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3A:28:6E:FC:ED:2C:18:E3:37:BD:B2:B8:D6:54:4C:1C:66:D5:CA
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9f:e3:d1:fc:55:4e:8c:82:10:95:67:d9:70:37:7c:ef:8a:
         9a:a1:7f:5b:86:9a:e8:a9:b7:e9:95:8c:56:99:f3:be:ac:48:
         6c:7e:e1:ed:27:af:b6:66:a9:bf:d0:95:63:a6:2d:30:a8:c4:
         8d:9a:a3:cc:22:a6:b9:46:49:17:ad:cb:89:73:5b:30:76:01:
         ea:9a:47:82:1f:7e:4c:cb:2e:f1:f4:2f:33:95:0a:18:96:22:
         19:8d:8e:01:ee:52:ff:88:53:40:ef:3d:af:68:9e:dd:f3:a4:
         61:2f:cb:b2:98:50:d3:77:9c:38:eb:1a:d9:37:5e:64:07:03:
         74:35:16:7f:52:85:1b:01:4b:55:80:62:83:de:a6:96:45:f6:
         79:79:78:23:74:e5:a5:cd:2f:97:0a:fa:7c:75:07:fa:1c:74:
         f6:40:b9:eb:6a:fe:a1:1c:50:2b:35:f3:9a:17:1c:20:d4:4d:
         d9:5a:53:d4:df:f6:9c:6d:e8:40:9e:2f:8a:4d:35:b0:68:06:
         cc:8c:af:ef:23:31:a6:00:d3:07:73:51:5e:75:a8:91:88:fc:
         f4:b9:24:cb:0f:b0:87:97:68:e4:fd:25:57:4f:c0:eb:df:d4:
         73:7a:d0:a4:ac:d0:44:7e:ad:44:1d:19:72:b7:48:ff:2d:09:
         85:3d:d9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:36:01 2025 by rpki-client