Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft
File:                     9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json)
Hash identifier:          pq+X7zaM+QHa4CSKakvec6kGesFk/dFGWi6jE/cuK3E=
Subject key identifier:   10:7F:D2:96:08:C7:9B:C7:AB:7D:A8:EE:53:8C:11:7B:06:1D:99:9B
Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47
Certificate issuer:       /CN=9705995FB5C87DC40E50B1256B8809A101D17047
Certificate serial:       40EE52B656F56583F8C475F75A8EBB5E38724163
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft
Manifest number:          0188
Signing time:             Sat 09 Aug 2025 07:51:39 +0000
Manifest this update:     Sat 09 Aug 2025 07:46:39 +0000
Manifest next update:     Tue 12 Aug 2025 16:56:39 +0000
Files and hashes:         1: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=)
                          2: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: eZ6WinWAx0amRkvnhnAIMs3eksuFd97Dbftqc+Hg+84=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl
                          rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 16:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ee:52:b6:56:f5:65:83:f8:c4:75:f7:5a:8e:bb:5e:38:72:41:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047
        Validity
            Not Before: Aug  9 07:46:39 2025 GMT
            Not After : Aug 12 16:56:39 2025 GMT
        Subject: CN=107FD29608C79BC7AB7DA8EE538C117B061D999B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1b:d8:e0:ac:d7:06:20:88:3c:f4:79:a9:51:
                    71:54:70:5c:34:61:e8:97:2f:a3:d8:90:17:a3:aa:
                    a4:6e:4d:0c:89:dd:01:47:d6:bc:81:59:85:d1:01:
                    6d:28:9d:a7:77:7c:7f:c1:c3:6d:2a:a8:6f:81:cc:
                    8f:c8:39:39:06:db:4d:d6:c6:75:cd:ff:43:b4:ae:
                    15:65:4d:c3:44:4f:db:a3:88:48:c7:e3:e1:8b:d4:
                    2c:50:c0:8e:76:aa:af:43:37:30:7d:d6:96:7a:ee:
                    3e:9d:9e:20:ec:2f:9b:49:e5:37:30:4d:e6:46:a6:
                    4d:2a:40:19:93:a7:94:ae:4a:ce:3c:d6:b9:c7:ef:
                    ab:45:cf:5f:b7:2b:da:2b:3c:31:12:4c:e0:4d:c3:
                    80:ea:bd:04:ca:33:51:f7:78:bb:8e:53:9a:a9:f0:
                    9f:1a:70:49:16:4d:4a:ce:22:ea:fa:14:e8:8d:4c:
                    ac:93:d9:54:81:2d:e9:10:81:d6:a4:f1:9e:5c:a5:
                    91:34:45:3e:55:92:57:7e:e5:2c:49:d1:0e:fc:d5:
                    0f:fe:6e:b7:7d:16:78:b7:4e:9b:da:ae:0c:20:bd:
                    c9:34:56:f6:e2:ce:d5:e3:02:76:d0:a1:a6:8e:69:
                    9c:ac:9c:c7:2f:cd:ab:4f:60:8b:4f:52:69:cf:77:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7F:D2:96:08:C7:9B:C7:AB:7D:A8:EE:53:8C:11:7B:06:1D:99:9B
            X509v3 Authority Key Identifier:
                keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:b0:62:fb:55:d8:db:78:6a:a0:76:6c:d1:31:4d:61:38:
         0d:ff:f7:34:e4:69:90:61:6d:87:1a:61:97:bd:f3:df:89:d3:
         42:63:84:f3:b1:16:e5:03:31:6b:f7:0d:22:62:2e:a5:ae:4d:
         64:13:21:0b:ae:49:fa:f4:f1:7f:9c:79:c4:86:5c:ce:ac:6c:
         f3:6c:63:ae:df:19:ce:08:6c:b8:27:f8:c4:17:2d:b4:dd:7b:
         dc:20:71:ba:bf:62:8b:36:40:85:63:83:1a:08:35:a3:6a:05:
         97:66:9e:f1:20:fd:33:b2:1f:6c:fd:92:b4:87:41:3e:d0:e4:
         83:85:ef:dc:ea:a7:ec:2c:32:fd:b4:a8:4f:b9:92:0c:54:81:
         6e:c0:a3:64:aa:27:65:ca:a8:dc:53:3e:db:27:1b:f2:51:06:
         73:49:bf:be:63:d9:db:02:0d:c1:b7:11:3d:4c:75:ec:fb:08:
         04:6d:94:e8:4d:c9:85:43:05:3a:ea:ed:86:f7:c2:ac:1a:ff:
         06:5d:b8:94:00:e1:df:85:c7:a3:68:4d:18:76:8c:f4:ed:e1:
         b2:c0:27:fa:d3:bb:6f:86:b1:71:91:0f:a4:a7:ca:c9:c1:42:
         2c:40:69:1f:ca:cc:db:c7:3e:68:12:de:54:86:9f:ea:97:50:
         1b:2d:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:45:14 2025 by rpki-client