Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
File:                     1635F5E419798341BDC615D4E1C6AE340C34BEED.mft (raw, json)
Hash identifier:          xp2xrt7B157O0wZJsekd3QrjEH5+X+mQ4rhulbWy2jo=
Subject key identifier:   4E:66:0B:C4:BF:3B:5E:F8:92:EF:73:A9:3B:94:AA:BB:E7:16:AD:84
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       6A2732D6B8D3C4E1020427BFDA5AEC6AC9D12B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
Manifest number:          04FC
Signing time:             Tue 05 Aug 2025 00:51:27 +0000
Manifest this update:     Tue 05 Aug 2025 00:46:27 +0000
Manifest next update:     Fri 08 Aug 2025 09:36:27 +0000
Files and hashes:         1: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: 53tgdiqtdjNpYH/nxHiWdMfkZz/bYs/54zzLtN7gns8=)
                          2: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: IM2twiGIKQqETGmIWQI3vAIIytZPeeD5wgctglA7Hpc=)
                          3: 1635F5E419798341BDC615D4E1C6AE340C34BEED.crl (hash: Yx7D3H5LR47ZoyzaT3CU4iluP2/J4+1IyN87x6YKkYk=)
                          4: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: Yz30CPTYH/dOzjwnz1TP6tkfawJNbjkHzYhNkLuWAMM=)
                          5: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 1kbjcVz7NV7SFqtMY1gTY7M0GuY6igkJGp6NsdTqDPc=)
                          6: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: bEXjgt5oe/QCk1NlQcPsjuArMBUfj88EZpYXft80tYY=)
                          7: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: C106cMZ7nVpbdEo6RtpPPocV8QkCM3iy9iSeYnPa1lI=)
                          8: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: jd6LmOWTW9h+pZpEVT+8YFnE7+vOf7HUJDd4WCtQWm0=)
                          9: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: Fow2FQnfsWM+t0AdvtL67zUS1huXa7y9vM3+TEZxD7M=)
                          10: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: +LKBbBTxZfejrH0n6yxZTpzAQ0ctc1KNHYYJokKKnzg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 09:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:27:32:d6:b8:d3:c4:e1:02:04:27:bf:da:5a:ec:6a:c9:d1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Aug  5 00:46:27 2025 GMT
            Not After : Aug  8 09:36:27 2025 GMT
        Subject: CN=4E660BC4BF3B5EF892EF73A93B94AABBE716AD84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:e9:87:0e:d5:eb:08:30:3a:ae:63:57:d5:
                    cc:c9:22:55:fa:f7:2d:fd:81:6c:36:fa:27:7d:60:
                    ca:b6:73:a4:64:46:f3:9a:74:1f:89:6e:63:37:ae:
                    04:19:b4:72:e7:4c:41:d9:74:6f:03:9c:e9:6a:38:
                    c8:d7:a1:c7:f1:54:20:fd:37:18:4f:4b:eb:1b:76:
                    4c:35:2d:20:8f:0f:e7:df:6c:e1:5a:69:c2:2e:4c:
                    fc:2f:0f:17:ed:5a:5f:ec:56:f7:83:18:59:a9:95:
                    97:f6:cf:49:5a:29:e1:c3:90:e8:ad:df:ca:c4:8e:
                    c5:62:8a:9b:79:c1:52:ec:c1:0f:77:a2:66:34:65:
                    2c:f6:34:56:8d:3b:ba:df:25:bb:b3:56:59:9c:50:
                    23:28:53:06:21:4f:3d:71:d2:5d:03:ea:09:c3:26:
                    ae:b8:64:ad:80:d0:2a:0e:1a:08:bc:20:37:9a:e2:
                    38:4e:9b:13:0b:3c:5c:e9:22:9e:e2:f1:5f:ca:f7:
                    df:1f:1a:a5:e3:47:2a:88:6c:e8:a0:b3:07:bd:4a:
                    49:cc:2a:61:08:3a:42:c9:ed:c0:70:01:39:91:13:
                    7b:07:e0:f5:18:fa:e8:1f:38:af:df:c5:0e:f9:bf:
                    ea:a3:39:0a:1e:c7:96:74:a8:6b:bf:fe:e2:db:eb:
                    7a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:66:0B:C4:BF:3B:5E:F8:92:EF:73:A9:3B:94:AA:BB:E7:16:AD:84
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d1:7a:e4:98:d6:cc:b7:e3:53:15:e9:5b:9a:63:a2:31:a7:
         86:e1:47:8f:4a:b4:08:af:7b:39:87:ef:5d:7a:f4:67:8c:a7:
         d8:45:a6:20:f8:9a:19:a4:a1:99:73:b5:c1:49:f8:7a:d6:bb:
         9d:f7:c4:d7:ad:52:f2:4a:b0:5d:07:c0:61:63:d0:74:3a:81:
         07:b4:a9:8d:5e:d6:4a:f8:5c:3d:a4:d7:9f:12:ef:df:bd:a2:
         90:da:4b:09:b7:1c:72:cb:02:24:15:df:0e:9b:9a:7d:65:f5:
         66:77:7d:4e:83:56:74:46:dd:5f:a2:6e:bf:da:41:81:73:41:
         8c:5f:6e:23:83:3e:60:26:99:e4:85:0b:d1:14:d9:97:f1:90:
         1d:03:18:ac:db:8f:74:5e:8c:a3:d7:f4:d1:a6:1c:16:2a:b6:
         0f:94:e9:62:a3:c3:21:b3:6b:af:13:23:c1:0b:e2:ac:af:a3:
         a8:69:8a:98:c6:ef:2e:5e:1c:2c:88:a7:3d:ab:8f:71:74:e8:
         06:1b:90:3f:40:e7:ba:cd:3b:ed:a7:b5:76:2e:33:a6:96:05:
         ae:57:bb:26:12:0c:9c:02:01:d5:29:84:45:32:7f:47:d0:34:
         2a:8b:35:b8:ad:1d:81:3d:fd:04:80:9b:b0:71:95:57:7b:b5:
         95:eb:41:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:11:39 2025 by rpki-client