Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft
File:                     9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json)
Hash identifier:          o/QJbvr6LY65rEdp17pmTT/HPY0ZHGIkqVsgFQASoi4=
Subject key identifier:   C6:6A:DE:A4:C2:96:51:DD:D0:EE:F0:87:55:2E:AD:09:18:88:98:F1
Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2
Certificate issuer:       /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2
Certificate serial:       69D948E925BC985F782BF81B5B5294D708877B33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft
Manifest number:          04FA
Signing time:             Fri 08 Aug 2025 00:21:58 +0000
Manifest this update:     Fri 08 Aug 2025 00:16:58 +0000
Manifest next update:     Mon 11 Aug 2025 10:47:58 +0000
Files and hashes:         1: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=)
                          2: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: 56nOIQESta8A7HlxLXMJndRvFXKqIbfVrSYVfAEJPwI=)
                          3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl
                          rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 10:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d9:48:e9:25:bc:98:5f:78:2b:f8:1b:5b:52:94:d7:08:87:7b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2
        Validity
            Not Before: Aug  8 00:16:58 2025 GMT
            Not After : Aug 11 10:47:58 2025 GMT
        Subject: CN=C66ADEA4C29651DDD0EEF087552EAD09188898F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:9c:6f:1a:0d:62:bb:57:f2:ee:51:fd:b6:
                    0b:f8:ca:a7:e7:4a:86:36:b7:4a:57:00:15:df:9d:
                    91:2a:46:7b:1a:10:1e:cd:7f:fd:e6:38:96:bd:0a:
                    fc:84:63:d6:cd:81:38:8a:7c:ce:93:dc:f0:29:11:
                    aa:16:c6:38:74:50:d7:19:1b:77:d3:c5:17:8e:cf:
                    36:93:3d:f3:2b:5a:6f:ec:f1:17:c7:5f:b7:6c:87:
                    e1:9e:f6:54:cd:43:c7:a5:02:d2:e3:e3:5a:56:10:
                    d0:41:cd:d3:b5:d1:ce:42:eb:8b:bf:e0:5a:74:82:
                    67:a5:7f:ce:e3:b2:79:52:31:2d:0d:ec:6b:34:dd:
                    75:be:a6:87:6d:97:9f:23:cc:82:ef:1f:6d:47:df:
                    44:12:2e:fc:d4:80:dd:7b:be:de:72:a6:29:51:81:
                    96:99:d5:b8:b4:53:69:b8:18:87:e0:be:7f:55:14:
                    13:56:de:cf:29:84:9c:12:0f:35:e3:cd:b4:28:e2:
                    c3:e0:ea:b0:0c:68:52:29:97:1a:e1:a4:d1:7c:6f:
                    b4:27:7e:cd:e4:4e:3e:3a:c2:91:fc:21:9f:ac:95:
                    93:48:5e:6a:ca:4e:ec:f4:68:f1:d1:53:e7:eb:1f:
                    7d:af:d6:e2:1e:27:98:eb:5d:62:98:ed:ab:b5:a5:
                    6d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6A:DE:A4:C2:96:51:DD:D0:EE:F0:87:55:2E:AD:09:18:88:98:F1
            X509v3 Authority Key Identifier:
                keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3d:dc:c4:49:94:1c:f5:5a:5b:04:1b:9a:fd:6a:a4:9e:c7:
         04:c7:28:43:c7:9f:dc:81:31:cf:04:c7:f8:e3:9e:31:48:12:
         96:3c:31:c2:f7:59:fc:60:b7:70:e9:57:76:a7:8a:6d:0c:4b:
         8c:83:f5:be:6c:d2:51:0b:4f:62:b1:5d:98:8e:7a:45:ea:a9:
         87:53:4f:08:b6:12:d2:d1:17:27:53:04:bf:4d:c6:6c:03:9c:
         ae:76:79:c1:8a:12:a4:1e:96:7d:c7:40:62:7f:ab:61:c1:1b:
         82:56:d7:1a:db:28:23:a3:50:67:be:0b:86:1e:c3:d7:88:e9:
         12:38:63:c9:2f:cb:15:cd:d3:32:bf:4e:d1:40:23:09:e2:08:
         0c:4a:0b:e6:b3:31:14:de:56:2c:75:39:66:b8:40:d3:6c:41:
         ee:61:0d:21:39:74:af:e0:38:f2:c7:f7:b0:f1:25:93:ff:f6:
         23:8a:9c:38:15:af:ee:de:2a:61:48:83:13:d5:35:f2:78:af:
         4d:89:78:be:5b:48:98:c5:ac:90:b3:ad:b3:06:08:30:6c:a1:
         2c:5f:9e:65:f3:83:1c:c0:5f:c0:6f:a2:4f:fa:fc:4b:34:1f:
         65:7f:60:77:00:2c:a1:8e:49:e9:40:57:61:1f:f7:77:3a:da:
         52:35:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:53:03 2025 by rpki-client