Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
File:                     961C97EF8E7664408011D05E6A81CF905A1336B1.mft (raw, json)
Hash identifier:          shD5zYj0QaxtRr4xOe5U0R5i7DJoW0NxmaHzwjLVWSA=
Subject key identifier:   D5:08:EE:8A:D7:E3:2C:B4:6E:BD:26:38:4A:55:86:83:6C:86:1D:E1
Authority key identifier: 96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1
Certificate issuer:       /CN=961C97EF8E7664408011D05E6A81CF905A1336B1
Certificate serial:       4B0CB19A743C08B2072A9F01EC7ABD5E4BAC4B09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
Manifest number:          017E
Signing time:             Sat 09 Aug 2025 05:11:35 +0000
Manifest this update:     Sat 09 Aug 2025 05:06:35 +0000
Manifest next update:     Tue 12 Aug 2025 16:13:35 +0000
Files and hashes:         1: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: bPoKAtFpVmlvxxXnV223Oyctgi/gxMHoISI94OwfY5Q=)
                          2: 961C97EF8E7664408011D05E6A81CF905A1336B1.crl (hash: NpqbmTZyfbYNElEKjaA5ANwre+jfTNO20e/80qi7axk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl
                          rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 16:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0c:b1:9a:74:3c:08:b2:07:2a:9f:01:ec:7a:bd:5e:4b:ac:4b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961C97EF8E7664408011D05E6A81CF905A1336B1
        Validity
            Not Before: Aug  9 05:06:35 2025 GMT
            Not After : Aug 12 16:13:35 2025 GMT
        Subject: CN=D508EE8AD7E32CB46EBD26384A5586836C861DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:75:d2:8a:15:09:3b:97:19:5e:76:04:36:
                    29:ea:76:40:9c:64:9f:18:16:2f:1c:ec:40:d2:48:
                    2a:59:27:0a:71:69:c7:34:e9:26:f4:d0:30:4f:1e:
                    6d:1a:99:8f:dd:aa:44:1c:12:b1:f3:a0:e0:36:60:
                    2a:9a:56:a4:d3:58:f4:da:83:52:fb:0c:7f:0e:ad:
                    58:62:1a:30:57:5f:b3:23:93:f1:03:ad:f8:8f:ea:
                    3a:65:91:8a:26:43:37:7e:59:cd:23:1d:b4:0c:99:
                    24:fa:b3:2b:f7:d6:56:89:06:11:ee:9f:aa:c7:bf:
                    29:13:f8:2b:2a:be:21:40:72:e9:7c:2f:e6:52:2f:
                    98:7c:66:b2:b4:96:00:8f:a0:46:bc:05:b4:b6:b4:
                    dc:70:19:2d:6a:b8:58:f9:ae:11:3b:6a:d9:10:a6:
                    03:85:3d:79:b0:80:b4:84:8e:5c:d9:0e:8c:2d:9d:
                    34:7e:ad:8a:2b:e2:5e:15:52:59:b1:3a:e8:3c:45:
                    d1:4d:56:1c:74:60:8f:40:0d:9a:fc:d5:ba:a5:76:
                    a2:a6:02:02:f4:f7:00:19:4c:7c:f9:f6:24:d7:4e:
                    20:ea:45:fa:25:54:da:73:ef:48:dc:ad:15:75:bd:
                    a8:04:c6:67:e1:dd:69:6a:b6:73:de:c6:53:33:ba:
                    00:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:08:EE:8A:D7:E3:2C:B4:6E:BD:26:38:4A:55:86:83:6C:86:1D:E1
            X509v3 Authority Key Identifier:
                keyid:96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:89:c9:75:e8:88:11:9e:bb:6f:3f:77:9b:f4:51:25:e1:15:
         3e:4f:e1:31:38:6c:09:60:c5:41:ad:8b:9a:e6:f9:c8:e7:96:
         1b:40:ea:c4:ce:cc:49:52:ce:34:05:f3:93:b0:ba:e8:31:e3:
         8e:a1:0f:a4:cc:3c:c7:f2:ac:88:90:bc:00:bd:18:03:50:54:
         d3:8b:0b:f5:66:f7:7e:cd:ec:ff:55:ae:a1:80:6d:48:6a:3b:
         40:61:6a:62:13:d7:be:5c:60:2f:c1:ca:84:61:bc:dc:e2:72:
         b5:0d:89:78:80:cc:1e:aa:e3:15:b1:fb:60:d6:31:20:ad:07:
         71:29:98:9a:a8:e1:fa:96:be:b7:01:b4:f5:48:96:5d:54:40:
         52:b7:5d:25:ef:31:90:b8:a1:cd:e4:06:ad:9c:95:2a:34:5d:
         b3:64:2f:32:4f:e8:70:33:5d:64:30:ec:2a:2e:e7:ac:37:89:
         ba:82:0a:30:40:f2:6b:8b:9f:23:9c:bd:35:f8:e6:e2:07:c4:
         b9:3d:81:34:1c:5c:4c:7a:8f:18:98:f5:0a:3c:81:64:31:90:
         8f:69:b8:d8:ee:65:92:73:9d:95:b0:46:df:49:68:5e:46:e0:
         15:36:55:c7:74:6b:92:e7:85:90:f7:34:e5:92:a5:57:81:75:
         d6:89:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:51:46 2025 by rpki-client