Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
File:                     A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json)
Hash identifier:          leTxWlH0bw+W2BhbsNR4UsWut3b4bqiTUifkIWx7V2Q=
Subject key identifier:   7C:DB:B1:87:88:D5:B7:46:9C:3E:21:7B:45:B2:1A:2C:23:5D:52:63
Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46
Certificate issuer:       /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
Certificate serial:       3513563FD70DECD7D0333A522D043B200E31F4AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
Manifest number:          FE
Signing time:             Wed 18 Jun 2025 04:31:21 +0000
Manifest this update:     Wed 18 Jun 2025 04:26:21 +0000
Manifest next update:     Sat 21 Jun 2025 11:20:21 +0000
Files and hashes:         1: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: twZbSOBYTBtEjeDTqkCweHqBoBppolNmpvRIdUA+hVg=)
                          2: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: Sh2ahHo2vx0VefU0fIGxJdD6J9/Blbf3sv24iCZWiw4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl
                          rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 11:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:13:56:3f:d7:0d:ec:d7:d0:33:3a:52:2d:04:3b:20:0e:31:f4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
        Validity
            Not Before: Jun 18 04:26:21 2025 GMT
            Not After : Jun 21 11:20:21 2025 GMT
        Subject: CN=7CDBB18788D5B7469C3E217B45B21A2C235D5263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:88:34:f7:4a:f6:f0:ad:a2:df:db:18:48:
                    a7:f1:0d:eb:e3:4b:c0:c7:0d:25:94:be:54:be:ca:
                    91:af:2a:e8:20:af:ae:68:e6:80:1d:b9:5a:4b:5e:
                    04:5a:10:30:e7:fc:ac:09:99:4d:27:f8:17:0a:08:
                    d8:15:72:36:8f:37:7f:67:4d:48:a5:65:aa:58:62:
                    c5:b7:36:77:e6:20:15:bf:7e:0b:1a:ad:69:e1:ec:
                    fd:01:f2:26:d4:00:4e:8f:31:07:ff:68:2a:d6:b3:
                    31:d1:52:7e:13:0e:c3:2b:40:e0:28:7f:63:3a:2e:
                    a2:7b:30:11:5d:e3:60:b8:ee:92:e2:14:6e:97:3a:
                    ce:40:9f:78:b3:bc:84:8d:2c:c7:b7:3e:49:3a:b3:
                    17:73:fc:cf:8a:af:9d:73:1b:f2:e6:d6:73:d6:d2:
                    55:fd:9b:80:dc:07:17:d9:d3:71:bb:47:31:58:92:
                    ed:a1:aa:64:78:96:4c:53:56:df:e3:6b:41:6b:89:
                    3b:39:35:a3:1d:43:0e:12:68:4e:4e:20:6e:b2:48:
                    b6:16:ac:44:a9:ba:b3:f6:24:2e:dd:45:50:31:68:
                    43:35:21:df:6a:93:c1:03:e0:0f:20:42:92:a4:1c:
                    4b:7f:ce:f2:49:65:27:64:99:a6:b4:b7:df:eb:79:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DB:B1:87:88:D5:B7:46:9C:3E:21:7B:45:B2:1A:2C:23:5D:52:63
            X509v3 Authority Key Identifier:
                keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:56:a1:85:d2:37:5e:c2:ab:f4:af:63:8b:b3:e6:e0:ad:f3:
         13:c9:4d:b9:8c:ec:07:7d:d8:ba:09:68:86:33:6c:10:23:8c:
         23:9f:2d:29:22:f5:80:0d:aa:61:5f:e0:ce:87:56:ba:c8:76:
         e0:04:38:60:30:37:d5:99:ad:83:7c:a0:6a:0c:05:41:9a:c0:
         4f:f0:cf:5d:62:01:8b:83:12:00:8d:ae:7e:8a:fe:9e:f6:50:
         56:46:0c:74:9f:fb:05:5e:64:be:5f:f5:45:37:57:d0:10:3e:
         c8:55:0f:10:95:e9:19:f6:62:f6:17:f3:04:ba:0f:e4:8b:a6:
         60:1d:ce:a1:2d:f1:62:dc:10:3f:f1:98:03:a5:ac:5d:62:27:
         5e:71:86:37:ed:01:91:bc:94:dc:d1:f0:76:6a:2e:76:a3:c6:
         39:f4:5f:5a:7a:08:98:7f:42:f0:4d:46:94:4a:0b:55:3e:fe:
         a1:9d:9c:0a:17:b6:85:23:2c:8a:1c:cf:b2:8b:b9:34:67:0b:
         84:f8:9c:85:52:1b:a3:d7:1c:10:cb:08:60:f4:0c:54:cc:58:
         c2:4d:a1:c0:17:52:11:f6:40:1b:12:9d:69:fa:1f:02:22:84:
         89:3a:1e:e7:bc:1f:3e:ef:ad:ef:70:ea:66:c8:3e:30:2a:ca:
         93:67:5c:1f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNRNWP9cN7NfQMzpSLQQ7IA4x9KswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC
QjVCMTI0NjAeFw0yNTA2MTgwNDI2MjFaFw0yNTA2MjExMTIwMjFaMDMxMTAvBgNV
BAMTKDdDREJCMTg3ODhENUI3NDY5QzNFMjE3QjQ1QjIxQTJDMjM1RDUyNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXB4g090r28K2i39sYSKfxDevj
S8DHDSWUvlS+ypGvKuggr65o5oAduVpLXgRaEDDn/KwJmU0n+BcKCNgVcjaPN39n
TUilZapYYsW3NnfmIBW/fgsarWnh7P0B8ibUAE6PMQf/aCrWszHRUn4TDsMrQOAo
f2M6LqJ7MBFd42C47pLiFG6XOs5An3izvISNLMe3Pkk6sxdz/M+Kr51zG/Lm1nPW
0lX9m4DcBxfZ03G7RzFYku2hqmR4lkxTVt/ja0FriTs5NaMdQw4SaE5OIG6ySLYW
rESpurP2JC7dRVAxaEM1Id9qk8ED4A8gQpKkHEt/zvJJZSdkmaa0t9/recrxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfNuxh4jVt0acPiF7RbIaLCNdUmMwHwYDVR0j
BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1
MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC
MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm
MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3
NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADhWoYXSN17Cq/SvY4uz5uCt8xPJTbmM7Ad9
2LoJaIYzbBAjjCOfLSki9YANqmFf4M6HVrrIduAEOGAwN9WZrYN8oGoMBUGawE/w
z11iAYuDEgCNrn6K/p72UFZGDHSf+wVeZL5f9UU3V9AQPshVDxCV6Rn2YvYX8wS6
D+SLpmAdzqEt8WLcED/xmAOlrF1iJ15xhjftAZG8lNzR8HZqLnajxjn0X1p6CJh/
QvBNRpRKC1U+/qGdnAoXtoUjLIocz7KLuTRnC4T4nIVSG6PXHBDLCGD0DFTMWMJN
ocAXUhH2QBsSnWn6HwIihIk6Hue8Hz7vre9w6mbIPjAqypNnXB8=
-----END CERTIFICATE-----
Generated at Wed Jun 18 23:10:24 2025 by rpki-client