Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft
File:                     2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json)
Hash identifier:          IRKchhbh7qxM2FvHehUt3Lp50W8imnRmvMq8UOw71EU=
Subject key identifier:   7B:C6:01:39:71:B6:4B:A6:44:BD:2F:1C:53:D6:AE:AD:06:1D:6F:10
Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2
Certificate issuer:       /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2
Certificate serial:       76D7E78C904ADB2CBD0EA2AEE8AE2E5DABCE7F90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft
Manifest number:          C9
Signing time:             Tue 05 Aug 2025 00:41:35 +0000
Manifest this update:     Tue 05 Aug 2025 00:36:35 +0000
Manifest next update:     Fri 08 Aug 2025 07:42:35 +0000
Files and hashes:         1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: THBM8LqDnCB9g6mrX4v3sCaW9RltHiaa0G5I3swxXAw=)
                          2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg=)
                          3: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: kP1Njr15xvS2ktXlN8vHqeGYwq0MUHoBDsiKKotvvfY=)
                          4: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: 5HetFGZszR8N+jVJsMmxP9KoRUdy7YyfVMX9PkmHTvY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl
                          rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 07:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d7:e7:8c:90:4a:db:2c:bd:0e:a2:ae:e8:ae:2e:5d:ab:ce:7f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2
        Validity
            Not Before: Aug  5 00:36:35 2025 GMT
            Not After : Aug  8 07:42:35 2025 GMT
        Subject: CN=7BC6013971B64BA644BD2F1C53D6AEAD061D6F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:d2:aa:9e:19:31:22:b0:6e:9f:00:3f:98:
                    c6:67:9e:a6:49:ee:75:35:43:aa:9b:0f:be:a1:46:
                    f4:3c:80:12:d6:98:c2:73:b0:f5:10:19:d6:94:67:
                    61:95:85:94:6f:91:9f:72:e2:96:54:51:85:30:e9:
                    a7:24:f2:c6:1d:e4:49:2c:cb:f2:a2:c7:ac:96:fd:
                    0b:13:34:7e:32:28:4f:fe:b3:a1:1a:74:61:97:55:
                    2e:34:80:96:31:fa:50:ac:68:00:4a:98:db:56:9e:
                    dd:b3:17:1e:73:e0:0d:f6:ae:37:5e:50:47:bd:fb:
                    e5:b3:f9:a6:9e:e2:5a:f2:17:97:3f:b7:d8:43:28:
                    71:d8:e2:02:31:0a:5b:3f:57:31:76:b9:8c:04:a6:
                    b3:64:d4:2e:d8:36:df:29:b5:98:a8:7b:e2:82:95:
                    77:10:9e:d6:12:73:c9:b7:34:6e:01:68:a3:cb:7d:
                    d9:bf:c0:e5:03:04:c6:f2:cb:43:d2:77:8b:2b:a3:
                    94:a1:5c:8c:4a:7b:ab:93:c6:09:dc:8d:07:27:f2:
                    04:2f:78:da:5a:6d:91:3c:82:27:d2:16:32:48:92:
                    89:90:a3:2e:f6:bf:2a:f6:e5:97:b4:34:2d:fc:af:
                    96:fc:c2:05:92:e1:a6:39:f2:88:c1:83:5a:2e:bf:
                    20:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C6:01:39:71:B6:4B:A6:44:BD:2F:1C:53:D6:AE:AD:06:1D:6F:10
            X509v3 Authority Key Identifier:
                keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:39:52:b0:aa:e4:e7:76:cd:b1:de:73:3b:5b:4c:1e:41:89:
         78:fe:1f:aa:1e:02:2e:fe:1f:a8:1e:45:0e:12:9c:9b:ed:e2:
         cb:87:b0:c1:df:5a:e7:4c:f8:49:39:61:90:a0:58:2f:96:33:
         67:45:5c:89:c8:8e:03:7d:9c:f1:65:c3:25:63:43:ef:3b:75:
         d0:b1:c3:94:29:58:f6:a5:61:74:72:ac:f8:c0:95:82:51:e7:
         30:ac:5c:2b:5e:36:cd:90:ed:0a:0d:60:74:b9:11:08:5f:6f:
         49:51:d0:2f:91:a3:75:08:75:61:ea:94:77:6b:7b:1e:5f:4d:
         24:18:19:74:10:d7:c0:46:e5:cb:46:cc:ca:b4:2e:57:43:5c:
         04:7d:a2:26:1c:08:dc:87:bd:87:49:2f:ba:c8:01:b5:75:b1:
         9c:1c:d7:fb:08:29:86:cf:5b:a8:6d:a9:ac:5b:09:7f:cf:28:
         6c:3e:b5:96:b8:fa:db:0a:cf:e8:3e:ba:c9:54:e0:43:9d:fd:
         03:7c:44:c4:ad:de:d1:97:d0:6a:a8:78:fb:bd:c7:5d:35:08:
         f8:a0:c3:8a:7c:07:4b:34:20:a7:cf:18:02:41:4b:58:d8:d5:
         88:c2:88:13:8d:4f:fd:b2:ae:32:fc:8c:f4:25:d2:a4:3d:48:
         59:17:33:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:00:32 2025 by rpki-client