Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
File:                     F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json)
Hash identifier:          Ftyz/fIlWV7jH7nXR/DZubvuCfdh+cLjTBqlz1a9YBA=
Subject key identifier:   18:DB:0C:1C:D3:62:43:D9:A6:5C:52:19:6E:4B:AE:57:18:0E:CB:3E
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       0981FBCEC27BB8FFE7CFE5EEC1C8C861047F0EBA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
Manifest number:          0519
Signing time:             Sun 10 Aug 2025 10:21:13 +0000
Manifest this update:     Sun 10 Aug 2025 10:16:13 +0000
Manifest next update:     Wed 13 Aug 2025 18:32:13 +0000
Files and hashes:         1: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=)
                          2: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 760KemyA/8CG6teBonQBDvPWQiZb2MFgnxH7YjBubLE=)
                          3: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: CAyWkxyi9LMtsrHYjfAG2boS5jHeuAANIsKyYBMp0r8=)
                          4: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: q1fJNMSMrTdPYX6ezkyT1Xn0IDgEntngG/ryVwe3mo8=)
                          5: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: ZOn1duEgq0Mggi6JeNyv0wxbJd/1uQH8PSmUAhWuNpM=)
                          6: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: 2VAQFfeqQhEyAnMrmaTI9sSR0U2G484A8xe93rrxtaE=)
                          7: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: 2+XExk7g6rOmSh+FfSo7Jy+br1p5Nm6d+pAaVpNWi0Y=)
                          8: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=)
                          9: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I=)
                          10: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=)
                          11: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=)
                          12: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=)
                          13: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 18:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:81:fb:ce:c2:7b:b8:ff:e7:cf:e5:ee:c1:c8:c8:61:04:7f:0e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Aug 10 10:16:13 2025 GMT
            Not After : Aug 13 18:32:13 2025 GMT
        Subject: CN=18DB0C1CD36243D9A65C52196E4BAE57180ECB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:12:10:69:32:52:4a:73:77:2e:f7:e0:fa:
                    d5:28:49:e6:23:2b:61:95:ba:df:13:f1:27:a7:de:
                    c6:07:a0:6f:38:65:d9:74:3e:e4:69:c7:a6:fe:2b:
                    92:80:f0:63:5f:da:8a:e1:4f:3d:69:8c:77:52:94:
                    be:a5:5f:cc:b5:de:52:9d:cc:67:cb:6c:96:b9:29:
                    ee:c2:3a:77:83:11:68:f7:1f:b8:58:8d:ff:a3:97:
                    3c:fd:53:be:4b:07:36:ef:de:6d:8b:db:36:7a:26:
                    81:e6:82:6e:71:7f:31:5a:56:3a:33:3b:35:4f:d0:
                    d2:58:6d:6a:04:ba:8d:58:0a:2b:a9:1b:3d:1e:82:
                    05:ad:f0:ad:29:72:3a:85:2c:db:86:9e:72:d2:6c:
                    58:4f:82:0e:9a:21:bb:8a:e0:ec:62:0a:87:3f:2a:
                    6c:20:5b:b9:ea:c7:91:d1:cb:93:fb:1f:d1:06:25:
                    27:05:22:69:ea:14:af:04:3c:97:63:87:f1:ac:29:
                    c2:e2:bd:4c:01:c3:bf:db:f6:e0:56:d0:53:67:61:
                    fe:11:24:db:35:c5:b8:72:84:ec:bf:51:c3:be:23:
                    b0:b6:70:b5:2f:96:92:c5:3c:67:88:49:2a:c8:94:
                    70:9c:f9:64:d7:d4:50:f6:3a:5d:8a:ac:44:e7:8e:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DB:0C:1C:D3:62:43:D9:A6:5C:52:19:6E:4B:AE:57:18:0E:CB:3E
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:51:ed:a5:90:56:56:e4:93:4f:46:0c:22:d5:0a:e3:05:41:
         50:c4:5c:01:c6:db:37:4b:d2:82:d3:07:9e:65:40:5b:65:5d:
         73:20:b0:d0:e2:a4:61:04:74:45:0b:f1:8a:10:96:ab:fd:47:
         f1:d9:f2:12:0a:51:00:86:2f:43:7d:f0:0e:dd:d3:15:7f:66:
         e2:9f:c4:d4:06:b2:83:31:97:a6:b9:e7:bf:5c:59:5e:ff:58:
         11:51:e1:59:cd:ee:9c:d5:37:d1:d8:31:e1:e1:24:b7:55:b3:
         e8:4b:78:05:0a:08:91:f1:99:cf:45:ea:2b:c4:1f:3d:85:58:
         77:6c:1e:63:7e:e3:89:d5:0d:e2:05:5d:75:cb:98:84:25:0f:
         19:2c:b4:f7:11:e8:5f:e4:b2:02:7c:aa:ae:ae:59:20:00:9e:
         3f:b6:87:2f:69:07:c2:bf:cd:65:5c:0e:86:ac:ba:34:11:fa:
         5d:e8:f4:99:c8:9b:f1:9f:1e:b2:9e:91:0a:4a:d4:71:70:e9:
         6e:56:b7:45:dd:b1:55:47:ce:70:23:6e:17:ec:cc:bd:55:0b:
         a5:3e:64:f7:1f:53:b6:54:d7:bc:6f:8f:b7:64:5f:b4:32:cc:
         da:b6:a5:67:19:29:d5:cc:3d:61:93:7f:b3:14:1f:38:0d:59:
         27:34:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:53:46 2025 by rpki-client