Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft
File:                     FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json)
Hash identifier:          cxgWj0nO1HDyg0tD17mWwnyrTqGAExZewwdfEq/2xTA=
Subject key identifier:   3F:4D:37:82:51:B0:E8:BA:67:D2:89:34:3B:6B:72:D4:10:93:63:33
Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87
Certificate issuer:       /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787
Certificate serial:       088FCA2E091028E07728F14748CC8708072DB14D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft
Manifest number:          B3
Signing time:             Sun 15 Jun 2025 12:01:56 +0000
Manifest this update:     Sun 15 Jun 2025 11:56:56 +0000
Manifest next update:     Wed 18 Jun 2025 21:55:56 +0000
Files and hashes:         1: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: MqNPsGlc+I7oiLDj+R7o3wJgrX4jzVqCxNAcSz2ZADg=)
                          2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl
                          rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 11:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8f:ca:2e:09:10:28:e0:77:28:f1:47:48:cc:87:08:07:2d:b1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787
        Validity
            Not Before: Jun 15 11:56:56 2025 GMT
            Not After : Jun 18 21:55:56 2025 GMT
        Subject: CN=3F4D378251B0E8BA67D289343B6B72D410936333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:f4:25:a4:81:22:53:ac:79:55:a3:c1:a5:
                    6f:ae:75:c5:3b:56:d3:b2:a0:5f:b2:5c:35:74:ff:
                    f0:62:8b:8c:99:6f:c3:60:d2:e8:c2:4b:3e:75:c0:
                    21:9c:d3:be:ed:38:16:7b:dd:30:c1:2b:5d:69:ed:
                    1e:7e:27:99:00:55:16:3b:5e:b1:28:bb:fc:99:60:
                    31:f7:6c:12:d1:54:38:0c:84:d7:6f:42:15:9a:2d:
                    af:de:3c:74:d4:23:73:8b:f1:87:86:66:e2:76:db:
                    12:72:64:8b:9a:31:13:7e:32:82:6c:17:10:82:34:
                    e8:f2:ff:40:c7:0f:82:ba:d8:12:60:5b:4c:a3:1f:
                    0f:f2:5c:0f:0a:7b:dc:b9:2e:b0:ba:71:70:62:65:
                    47:e8:52:50:38:ca:c7:31:8a:da:bb:e0:5d:80:28:
                    50:59:ca:88:68:a4:c8:9d:f3:86:cb:f7:b8:2e:45:
                    38:7d:5b:84:14:94:a1:6c:e3:78:e3:49:9a:7b:2b:
                    c9:a1:6b:b5:52:8e:65:c4:d5:57:bd:a5:51:cb:fc:
                    a8:d0:74:c5:61:d9:1f:89:75:11:8a:ab:7a:f3:e1:
                    7e:a5:c5:1a:e5:4e:59:7c:3a:a9:47:ff:62:3b:1f:
                    6c:93:02:f3:fa:f8:bb:90:81:68:36:0d:06:78:ee:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4D:37:82:51:B0:E8:BA:67:D2:89:34:3B:6B:72:D4:10:93:63:33
            X509v3 Authority Key Identifier:
                keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:05:d4:05:d5:d6:75:ba:08:cd:cf:ee:18:b0:10:b3:12:6d:
         c8:bf:90:ec:e3:dc:e7:5e:28:00:c0:f1:cf:92:e9:28:1c:e5:
         76:e2:12:e8:5c:2c:2b:8d:53:f7:59:72:ef:39:2f:45:64:05:
         f1:aa:b0:d0:96:a9:5c:ad:5f:44:a9:f4:1c:3e:76:b3:b9:c4:
         d0:7d:11:88:c5:6f:56:04:e7:c8:4b:6d:41:d4:cc:85:58:32:
         a3:23:75:0f:75:c5:72:17:e3:7b:c6:fb:e1:e3:9c:0f:0c:fd:
         05:17:9f:9e:81:c4:2a:96:00:d2:82:bb:73:a5:6c:ac:03:be:
         c0:cd:62:89:cc:3c:0e:c2:a0:21:92:b1:f5:f4:04:f3:e7:7c:
         4b:69:15:3c:5f:12:95:7c:71:df:e8:3b:f7:98:a4:d9:67:e0:
         e1:21:07:20:c1:78:c1:e6:df:24:04:a4:1f:7d:cb:80:ee:0a:
         fd:aa:2a:3e:71:a5:32:c8:c0:d3:74:7d:27:46:24:c8:d1:9d:
         82:da:d5:49:6b:17:e0:4d:5c:b0:62:7c:55:d4:f9:ce:19:bd:
         31:37:9a:ea:25:9d:58:a1:3b:71:64:47:c0:2c:59:b0:34:d4:
         cd:d3:e3:b3:3e:1f:32:c8:a1:42:78:46:f5:01:0b:59:d1:8b:
         2d:e1:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:09:27 2025 by rpki-client