Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
File:                     AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json)
Hash identifier:          hCicb0eimMp0/ou913KYdcsziYf0hpdIPP9mPJBBkXw=
Subject key identifier:   72:6B:8B:7F:E9:0F:C2:CD:E4:4F:78:A4:E0:F4:03:CF:A0:28:2E:E2
Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7
Certificate issuer:       /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7
Certificate serial:       1A164B4248CD92AB326D461FAF600FF2C0ACA7AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
Manifest number:          017A
Signing time:             Wed 06 Aug 2025 06:12:01 +0000
Manifest this update:     Wed 06 Aug 2025 06:07:01 +0000
Manifest next update:     Sat 09 Aug 2025 17:12:01 +0000
Files and hashes:         1: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=)
                          2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=)
                          3: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: l2HaMBKAi6Lfpd1UM1fbaIplABPpU5CuTPVPge7KgtY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl
                          rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 17:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:16:4b:42:48:cd:92:ab:32:6d:46:1f:af:60:0f:f2:c0:ac:a7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7
        Validity
            Not Before: Aug  6 06:07:01 2025 GMT
            Not After : Aug  9 17:12:01 2025 GMT
        Subject: CN=726B8B7FE90FC2CDE44F78A4E0F403CFA0282EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:3a:c9:6b:9f:85:f4:29:98:6e:11:e5:a8:
                    13:30:a1:0b:44:fb:98:b6:9b:e3:f8:ee:9d:fb:b6:
                    5b:5a:89:ad:df:44:8e:b4:f8:4e:76:e8:7c:70:48:
                    78:66:c1:2a:6f:a4:d7:ab:3a:e0:46:d0:d8:6d:81:
                    5e:3a:75:26:12:4a:32:bf:c3:f3:ee:6a:4c:84:58:
                    26:2a:7c:7f:45:7f:c7:3c:fe:52:27:f8:01:73:7f:
                    d6:2f:a3:95:aa:a8:74:0a:3c:68:9f:82:4b:25:be:
                    f5:c2:b0:52:dd:6d:36:bb:d0:37:bb:30:cf:05:f4:
                    31:bc:c7:25:5f:80:7e:a7:54:01:d6:af:b0:90:3f:
                    cf:21:1e:f9:e7:9e:a2:27:7e:de:8f:6d:28:75:18:
                    97:b0:af:9d:4f:c5:a6:db:01:8d:a0:61:9e:96:d4:
                    50:c8:d7:1f:b6:d9:bf:55:2e:6b:4d:02:d2:70:fa:
                    9a:c2:e5:db:53:dc:50:c2:fe:89:fe:18:ba:ea:f5:
                    14:40:ed:bc:09:8c:f1:1a:20:49:a5:a2:96:3b:08:
                    7d:34:26:39:15:35:32:1f:c1:91:c0:1a:a1:a9:b4:
                    5a:b0:d1:17:86:bc:c4:89:2c:cd:15:28:df:5a:ad:
                    d8:12:4c:fc:71:28:db:8e:31:dc:47:25:98:dc:0a:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6B:8B:7F:E9:0F:C2:CD:E4:4F:78:A4:E0:F4:03:CF:A0:28:2E:E2
            X509v3 Authority Key Identifier:
                keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5d:8b:23:d0:3e:78:2b:2f:eb:85:a2:42:ed:af:f2:2c:1e:
         eb:9d:8d:fe:e8:56:cb:89:5f:2e:99:2c:c2:b5:12:ab:96:7e:
         d3:71:c1:37:40:a5:4b:e9:c2:da:cf:91:15:99:58:db:3f:99:
         2d:9e:e8:5d:a2:d4:9b:70:ab:0b:e8:ef:11:34:fb:79:ad:2e:
         ea:74:1f:9d:5e:e8:2f:cc:8b:aa:b7:92:38:3f:d4:e4:72:d0:
         35:98:36:e7:89:a9:02:bb:30:6d:63:17:05:9b:7b:31:d0:82:
         24:61:8b:cb:0f:60:15:1b:f0:d2:6f:89:94:ca:1d:05:01:cd:
         07:05:73:91:b8:3c:3b:ab:e0:cb:f9:f6:3f:b2:cb:a6:21:b6:
         2c:ba:8f:34:b7:9e:19:22:66:a7:3f:dc:1d:52:ee:9c:0e:a0:
         1d:97:c8:69:62:9b:79:20:d3:2d:f1:c7:7c:37:d6:a8:2b:b4:
         20:3d:3d:48:c2:c3:75:c8:95:6b:cc:fd:cf:00:16:2b:03:d5:
         f2:88:85:40:5e:be:f3:a8:ee:6b:0c:74:49:5b:9f:86:20:1a:
         01:16:86:07:31:b7:e9:e2:9d:fa:50:4e:f1:32:9c:a2:1a:07:
         23:43:4d:b2:3f:27:64:9e:ac:33:05:bc:09:d0:3b:ed:d8:47:
         8c:4e:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:12:16 2025 by rpki-client