Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft
File:                     091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json)
Hash identifier:          ka+4RWYCNUJwqb+bbVe0e2uboUuEady2lKsCXZ/CuXE=
Subject key identifier:   40:7F:B6:E4:EC:0D:88:3D:47:92:A7:B6:7E:3B:13:F9:38:23:A6:F1
Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD
Certificate issuer:       /CN=091F7323435A889C466D811B73B98389C1E084DD
Certificate serial:       24424C4C30A854161571F58993385E285DFFCB01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft
Manifest number:          023A
Signing time:             Tue 17 Jun 2025 03:31:46 +0000
Manifest this update:     Tue 17 Jun 2025 03:26:45 +0000
Manifest next update:     Fri 20 Jun 2025 14:16:45 +0000
Files and hashes:         1: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: uiUSxANoNODzFIewLGALThH13uAn6LXmm2UK715WT+g=)
                          2: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: HD1z0LUIWBSccHA2PSqNrVieR/iH+VnyhB20GIE5Um4=)
                          3: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: Y1e1P9Lfp6j2uN41yXsuTRVgN8tFe5HoW++JbHObZeY=)
                          4: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: XeFzp7e3uJ/XW0SCT6+L3eC2Ka1QVpzvs90ESVm5heI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl
                          rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:42:4c:4c:30:a8:54:16:15:71:f5:89:93:38:5e:28:5d:ff:cb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD
        Validity
            Not Before: Jun 17 03:26:45 2025 GMT
            Not After : Jun 20 14:16:45 2025 GMT
        Subject: CN=407FB6E4EC0D883D4792A7B67E3B13F93823A6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:de:63:3c:11:d2:19:af:82:76:fe:ac:fa:43:
                    8b:31:68:21:27:46:38:db:49:05:bf:23:41:a3:e1:
                    8a:b9:2c:5f:9c:37:d1:5f:56:c6:03:b5:14:15:6a:
                    33:6d:d7:48:0b:a2:c4:d9:c6:b0:71:9d:80:8c:e1:
                    3f:91:a8:cc:a5:7f:2e:4f:da:c8:61:f0:fa:9d:77:
                    b3:fa:f7:b0:26:be:ed:db:49:0f:1f:ca:5d:d8:9d:
                    04:4b:df:39:90:a9:48:67:02:f4:61:49:e3:15:4e:
                    8e:c0:e3:81:92:c9:18:13:ca:61:c7:a2:0d:fd:7d:
                    46:55:02:c3:ed:92:74:3a:2f:a3:5e:e1:df:e4:c2:
                    1c:15:bf:d1:a8:9b:0c:9c:10:da:6f:d5:c9:22:02:
                    6c:c3:51:42:fd:c2:bb:e3:55:34:13:7e:4b:e7:03:
                    31:23:5d:e2:ff:98:eb:22:69:2a:b2:ae:02:95:02:
                    57:de:62:a2:a8:df:2d:30:18:1f:0b:35:e4:da:9f:
                    be:37:d2:eb:32:80:73:ad:b2:4a:66:22:ee:65:1d:
                    32:f6:56:96:9e:36:a4:d9:99:98:b5:59:d2:c2:6f:
                    22:ab:da:4c:19:2d:57:99:bf:99:40:70:75:cb:b9:
                    41:28:7e:6e:59:ae:59:27:80:ed:c6:ca:2e:66:ca:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7F:B6:E4:EC:0D:88:3D:47:92:A7:B6:7E:3B:13:F9:38:23:A6:F1
            X509v3 Authority Key Identifier:
                keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:2a:ab:93:be:fe:90:6f:03:be:21:82:c0:47:af:45:b2:6c:
         bc:a6:04:fb:44:72:6e:fe:9d:c7:2e:15:4c:3f:66:4b:15:f8:
         29:e5:5b:45:1b:6b:c9:92:34:b0:ec:7f:ba:36:20:8d:d0:b3:
         a0:92:98:63:19:bd:19:50:f4:45:39:2f:7c:b3:77:ec:20:1d:
         f5:a0:fb:af:6f:21:61:95:43:89:73:55:76:60:59:f8:fe:83:
         c7:b7:25:05:6b:3b:8d:0e:91:da:14:69:80:da:90:7a:5b:13:
         33:64:a2:bb:fb:57:23:32:7d:c6:d9:1a:93:bf:e1:67:a9:47:
         5e:2a:16:7f:a1:4d:80:de:60:94:fa:dd:d7:9b:96:14:5b:7f:
         e8:30:c6:df:8a:f5:bd:33:f2:6f:d6:f9:95:75:64:57:33:d2:
         b2:e7:20:7a:4e:76:7e:bb:5e:fe:7a:ae:34:de:24:2d:70:8f:
         fd:72:07:db:c7:da:ce:0c:05:ab:ef:76:ca:c7:65:04:1b:ea:
         48:fd:62:b9:9b:23:8f:ad:20:42:f5:81:d4:8b:31:3f:eb:66:
         e5:77:0a:99:0b:5c:9a:1f:52:45:b8:5b:28:51:d7:2d:3a:8d:
         2d:c8:f0:80:4d:ed:3f:27:70:39:65:f4:e6:fd:53:39:42:0f:
         e7:15:73:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:21:14 2025 by rpki-client