Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
File:                     6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft (raw, json)
Hash identifier:          NYHskz23We1na8+SN1b2x1NsAQbyRpsbGYhjlrBnuBE=
Subject key identifier:   F0:DA:4A:20:72:86:A2:11:C6:2E:BE:41:E0:13:32:01:FD:BB:3A:DB
Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9
Certificate issuer:       /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
Certificate serial:       14CD27DA5D23E34541E1B4CD10FEDF6812D0A83E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
Manifest number:          04DF
Signing time:             Wed 18 Jun 2025 00:50:41 +0000
Manifest this update:     Wed 18 Jun 2025 00:45:41 +0000
Manifest next update:     Sat 21 Jun 2025 07:22:41 +0000
Files and hashes:         1: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: g0wg8Deehkfr6iJjF1icldun4thvTysDD1uiOyWBYM4=)
                          2: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: GwFAfVLpG/ugaQYqpWQY09MQmCe9PdpSsGdhvKfZQm0=)
                          3: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl (hash: wW53E5sTWV0PmCTn6ptgf/NmaUlG0IGT2APzSLAXcjU=)
                          4: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: UN/a2XRTw8081uL/ZY93JqlCc8U4ClmN/ji+ij6yORg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 07:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cd:27:da:5d:23:e3:45:41:e1:b4:cd:10:fe:df:68:12:d0:a8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
        Validity
            Not Before: Jun 18 00:45:41 2025 GMT
            Not After : Jun 21 07:22:41 2025 GMT
        Subject: CN=F0DA4A207286A211C62EBE41E0133201FDBB3ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:81:e6:e3:c4:ad:07:c4:53:6a:da:84:1d:
                    ed:d1:62:45:e8:39:29:fb:9c:bc:32:8f:55:99:27:
                    a1:c9:5a:87:34:83:79:b8:0b:d4:c6:ce:df:96:2a:
                    bb:fb:c4:7b:04:07:59:a6:71:c1:71:3d:db:3a:2c:
                    02:09:a1:b0:6d:86:4c:e2:28:0e:97:6e:1f:c5:90:
                    91:69:28:72:3c:dd:6d:b1:de:64:18:d6:70:5a:b5:
                    b4:18:1b:8c:56:6e:9b:42:fc:ae:0b:0b:26:4b:42:
                    a8:ae:20:34:c4:f1:c8:f3:f8:2b:4a:33:1f:73:2c:
                    9c:86:9e:24:8e:55:73:7d:f2:2d:60:1b:8b:9c:ff:
                    52:18:20:96:45:bb:5b:9f:7c:01:ba:d5:e9:28:83:
                    6c:72:f3:f7:6e:38:44:60:cc:3d:0a:1b:51:7d:67:
                    48:1e:c9:01:4e:37:bc:15:d3:83:98:95:e5:fd:d4:
                    5b:5c:4f:04:db:c1:97:0a:4d:b7:54:ce:16:26:90:
                    61:2e:f0:3c:fe:ad:03:a1:6a:a4:e1:2d:7f:e9:ba:
                    59:72:5e:fd:45:19:12:79:fe:65:aa:63:2c:ba:4f:
                    b0:ff:4d:90:56:02:d1:e2:09:ba:0c:46:1d:cc:15:
                    2c:ae:67:50:a0:9a:43:78:3b:48:31:b3:78:dd:33:
                    da:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DA:4A:20:72:86:A2:11:C6:2E:BE:41:E0:13:32:01:FD:BB:3A:DB
            X509v3 Authority Key Identifier:
                keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a7:ea:28:c1:73:b5:7d:c5:aa:21:52:7e:2e:23:e3:66:b1:
         9a:3b:82:69:3d:da:90:d1:f7:6d:1f:3b:db:93:49:63:c5:05:
         e3:60:dd:97:e1:40:c4:27:ec:dc:70:42:6d:58:39:5a:9a:e1:
         e6:7d:84:71:27:35:70:ac:47:96:1b:9d:07:73:4c:b3:f4:9f:
         45:fb:23:b3:b6:4b:e1:f7:92:0b:b8:a5:77:1a:91:60:ee:b2:
         75:92:ff:a1:f0:36:fc:ff:98:6e:7c:40:ca:bf:d8:2f:a1:e8:
         ca:ce:af:c4:46:27:e4:80:29:93:e4:55:6e:e8:86:cd:a4:3e:
         60:33:9d:35:da:19:eb:4f:0e:33:35:05:18:c5:e2:6b:b0:da:
         1d:50:f3:a5:2d:ef:79:cd:12:b9:32:35:69:09:13:8f:d5:12:
         18:bf:a6:87:16:0f:96:de:b1:f8:db:20:ba:84:da:18:74:af:
         e3:fc:ae:37:91:42:ea:70:9b:8d:2d:57:ba:47:6a:3a:f8:f3:
         d5:7e:11:68:4c:07:89:53:8b:91:ca:12:e9:c6:2e:73:0f:30:
         9c:98:e0:4f:0c:dd:0b:e7:f3:a2:92:3b:1a:3f:80:71:86:1e:
         4d:75:5e:df:68:fc:9e:26:a0:14:df:14:92:06:df:96:d0:88:
         e2:b2:33:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:53:03 2025 by rpki-client