Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
File:                     9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json)
Hash identifier:          qHRsP8es1Orinx5UlWgNAun2kTnfcrT2SkLAHz/K1JE=
Subject key identifier:   07:5B:12:1C:83:94:8D:00:98:7B:03:EE:A6:88:AD:7F:19:5C:09:90
Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E
Certificate issuer:       /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E
Certificate serial:       4287B9B095EC9F910104CAF016EC95A61F3ABAA6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
Manifest number:          0157
Signing time:             Tue 05 Aug 2025 20:30:37 +0000
Manifest this update:     Tue 05 Aug 2025 20:25:37 +0000
Manifest next update:     Fri 08 Aug 2025 22:54:37 +0000
Files and hashes:         1: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=)
                          2: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: vsAZYF4/MTc1q0EzL0cvKlFcTpIW+Qv8GWBdSNNofoA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl
                          rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 22:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:87:b9:b0:95:ec:9f:91:01:04:ca:f0:16:ec:95:a6:1f:3a:ba:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E
        Validity
            Not Before: Aug  5 20:25:37 2025 GMT
            Not After : Aug  8 22:54:37 2025 GMT
        Subject: CN=075B121C83948D00987B03EEA688AD7F195C0990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:cd:af:c3:9c:3e:2c:0e:bf:6b:1f:80:31:
                    6a:de:85:e2:f9:d6:d8:af:86:0c:17:ec:01:80:7d:
                    6f:8e:ea:8a:25:a0:7f:2e:5d:9b:b3:82:c0:ff:82:
                    31:65:a9:47:61:13:fa:34:6c:19:ea:00:4f:ee:d8:
                    ce:e0:2d:ce:42:6b:b3:b3:96:b3:63:73:05:0a:c2:
                    1c:9f:ec:c9:b3:78:d3:4d:71:4e:5c:97:ef:90:f6:
                    1f:13:c5:5b:a5:85:dd:16:09:23:1c:59:47:fe:f4:
                    59:80:74:97:e0:5a:7d:c7:bf:0c:dd:66:00:09:45:
                    6b:ea:da:a1:86:05:23:ea:6a:51:15:3d:2c:af:25:
                    6b:65:bd:ab:b5:f9:6c:20:ee:54:72:17:b0:2a:c5:
                    d8:1c:69:60:f8:f9:c4:02:96:95:10:5a:0b:0b:da:
                    a5:a5:75:0c:9a:51:99:5a:2c:8a:67:08:80:a4:7f:
                    dc:f9:bc:8a:d2:f5:79:5c:c1:13:e6:a1:8e:88:fd:
                    08:cd:45:c3:29:27:27:a9:0a:da:d2:c5:75:10:eb:
                    94:7e:35:64:06:92:2b:05:71:d6:6d:53:f0:93:88:
                    87:40:d4:8a:d9:3d:45:b3:a6:eb:d5:4e:a8:3e:d4:
                    54:1d:5e:38:8c:13:38:f9:1a:c5:21:8c:de:e2:df:
                    b7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5B:12:1C:83:94:8D:00:98:7B:03:EE:A6:88:AD:7F:19:5C:09:90
            X509v3 Authority Key Identifier:
                keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:2a:28:0a:98:6b:66:d2:98:ce:ad:51:a7:80:86:b0:f0:49:
         76:8b:7a:9e:a8:ba:12:60:88:49:bc:65:fb:4b:43:63:09:b0:
         19:c8:ae:fd:84:66:81:51:38:4d:25:bd:82:74:ad:20:18:3c:
         ad:7a:e3:f6:88:24:ba:d5:ce:1c:ea:6f:48:4d:b2:2c:77:ee:
         72:9c:14:c9:aa:a8:cb:4c:9c:cb:9f:b4:71:26:53:c4:58:65:
         c6:74:e2:d1:5c:a4:56:17:a5:1b:44:6b:e1:71:3f:90:59:23:
         c6:a8:81:63:cb:d5:f2:4d:80:53:00:76:cf:b8:73:03:83:1b:
         b4:53:31:c4:7a:7f:93:07:44:23:22:ef:6e:f8:1f:80:3f:d2:
         70:6a:83:61:7d:be:49:ea:6b:77:0f:ee:29:d6:41:df:fb:60:
         ce:ea:51:d4:05:e4:09:7d:0e:de:aa:9f:78:c4:40:7e:82:cc:
         7e:ec:1c:ed:24:2d:e9:cf:fc:bd:0e:bb:44:7f:08:2c:5d:ec:
         f9:3b:7c:10:cd:87:96:97:55:9c:fa:4a:9b:6f:e3:92:78:01:
         d1:01:33:f3:a7:d5:84:19:b3:b8:ef:c7:50:1b:80:50:cb:5c:
         c2:0a:3a:c5:73:06:23:e1:02:a2:3b:06:1f:1e:ab:4b:7c:81:
         b3:66:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:57:13 2025 by rpki-client