Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft
File:                     3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json)
Hash identifier:          vm0jnwMKUB5KjIOjI7ubm51E1V5oIzyMAkyzlhMcHQ0=
Subject key identifier:   70:12:83:B6:BA:BC:D2:D1:6B:D8:27:7F:BD:EF:1C:40:07:2C:F9:94
Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70
Certificate issuer:       /CN=3CA825E93FE8830376EF386786BF847CB239BE70
Certificate serial:       14A8B6B41BEF6830BD158CF92F7A69D06974EA9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft
Manifest number:          0518
Signing time:             Mon 20 Oct 2025 03:41:45 +0000
Manifest this update:     Mon 20 Oct 2025 03:36:45 +0000
Manifest next update:     Thu 23 Oct 2025 11:30:45 +0000
Files and hashes:         1: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: RQgTg0AnuRnFqhdb/oRDdlJFtGcHze8Ger2+sXRaFjo=)
                          2: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=)
                          3: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl
                          rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a8:b6:b4:1b:ef:68:30:bd:15:8c:f9:2f:7a:69:d0:69:74:ea:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70
        Validity
            Not Before: Oct 20 03:36:45 2025 GMT
            Not After : Oct 23 11:30:45 2025 GMT
        Subject: CN=701283B6BABCD2D16BD8277FBDEF1C40072CF994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:9b:b9:9b:63:02:b5:c2:a6:9d:0c:19:e6:
                    c6:91:9d:b0:fd:08:6a:34:60:79:36:d3:cf:18:24:
                    42:74:45:10:d3:b4:b9:47:1c:cf:5a:0e:51:f0:86:
                    34:f8:60:13:fe:39:86:97:e4:e3:d3:8a:72:9b:3e:
                    e8:33:90:45:a1:de:9b:c5:62:da:88:e9:50:b3:9a:
                    3a:61:34:ae:f0:33:f8:6c:0a:d7:e5:89:1f:8b:d8:
                    74:00:03:83:76:82:44:bc:94:a9:65:53:06:32:1b:
                    2f:a2:a9:2a:6b:bf:71:b5:c0:81:7f:75:9e:e6:72:
                    f7:5b:2e:43:b9:5b:2d:f7:ea:43:5e:04:69:43:d6:
                    7d:c7:5b:ae:c7:7b:e9:87:12:fd:b9:84:e6:0f:19:
                    ff:f1:31:ae:04:fb:f3:d9:fe:96:9c:25:a4:c1:64:
                    0d:16:34:98:55:06:fd:d9:f0:d6:57:67:97:06:7e:
                    56:77:9e:b5:2c:20:a0:26:7f:44:46:8f:2a:63:0d:
                    fa:ed:5b:ea:e2:b0:17:c5:8e:42:81:5c:4a:1d:16:
                    f8:3d:23:75:bb:54:99:11:c6:3c:26:90:ba:fd:7d:
                    e5:4f:51:49:23:ab:8e:b2:e5:12:75:3c:b6:e5:75:
                    21:82:10:85:d7:e0:da:bf:58:05:5d:1c:23:14:8f:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:12:83:B6:BA:BC:D2:D1:6B:D8:27:7F:BD:EF:1C:40:07:2C:F9:94
            X509v3 Authority Key Identifier:
                keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:20:db:e8:ee:72:3a:22:00:09:33:da:bf:5d:8c:53:17:f0:
         1d:3f:9a:a9:fb:8b:b4:37:7e:d8:b8:f3:0d:d2:51:82:c9:8e:
         b4:ef:18:e2:5c:e9:34:b7:7e:43:b0:35:ea:0d:ce:1c:f6:66:
         97:7d:bb:12:02:5a:90:9a:9b:3a:15:5a:8b:90:37:7d:6c:7e:
         d1:47:c3:57:fb:93:b2:f0:3b:bd:df:b1:de:cb:16:45:61:50:
         c8:4f:d4:f8:14:ec:0d:87:c3:d6:fd:18:c9:52:d3:be:f9:5d:
         ca:a0:16:15:97:6d:1a:5f:98:5a:df:94:bc:18:ab:68:52:a9:
         26:ab:0d:ed:44:6a:a8:32:94:88:2d:ca:0d:9b:59:b6:51:a0:
         00:b9:63:3d:d8:40:a7:99:c8:47:32:1c:8f:17:97:55:38:6d:
         03:02:be:d4:d5:86:e5:a4:96:6b:5e:ff:53:8e:2e:0c:18:b7:
         32:5b:1c:80:17:bc:ff:75:fc:b8:fe:e2:2e:39:d5:b3:5c:81:
         5e:58:92:7b:76:bc:24:50:7a:40:3d:4d:4c:98:a2:80:18:34:
         85:0a:18:46:81:09:fe:21:70:d8:2b:2a:b9:a6:60:4e:68:9a:
         d6:79:e7:ef:26:10:4e:48:a7:f7:31:b1:81:40:86:84:33:a4:
         e5:83:1b:73
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFKi2tBvvaDC9FYz5L3pp0Gl06pswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC
MjM5QkU3MDAeFw0yNTEwMjAwMzM2NDVaFw0yNTEwMjMxMTMwNDVaMDMxMTAvBgNV
BAMTKDcwMTI4M0I2QkFCQ0QyRDE2QkQ4Mjc3RkJERUYxQzQwMDcyQ0Y5OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VJu5m2MCtcKmnQwZ5saRnbD9
CGo0YHk2088YJEJ0RRDTtLlHHM9aDlHwhjT4YBP+OYaX5OPTinKbPugzkEWh3pvF
YtqI6VCzmjphNK7wM/hsCtfliR+L2HQAA4N2gkS8lKllUwYyGy+iqSprv3G1wIF/
dZ7mcvdbLkO5Wy336kNeBGlD1n3HW67He+mHEv25hOYPGf/xMa4E+/PZ/pacJaTB
ZA0WNJhVBv3Z8NZXZ5cGflZ3nrUsIKAmf0RGjypjDfrtW+risBfFjkKBXEodFvg9
I3W7VJkRxjwmkLr9feVPUUkjq46y5RJ1PLbldSGCEIXX4Nq/WAVdHCMUj2nnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcBKDtrq80tFr2Cd/ve8cQAcs+ZQwHwYDVR0j
BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG
RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5
QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0
YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0
N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEkg2+jucjoiAAkz2r9djFMX8B0/mqn7i7Q3
fti48w3SUYLJjrTvGOJc6TS3fkOwNeoNzhz2Zpd9uxICWpCamzoVWouQN31sftFH
w1f7k7LwO73fsd7LFkVhUMhP1PgU7A2Hw9b9GMlS0775XcqgFhWXbRpfmFrflLwY
q2hSqSarDe1EaqgylIgtyg2bWbZRoAC5Yz3YQKeZyEcyHI8Xl1U4bQMCvtTVhuWk
lmte/1OOLgwYtzJbHIAXvP91/Lj+4i451bNcgV5Yknt2vCRQekA9TUyYooAYNIUK
GEaBCf4hcNgrKrmmYE5omtZ55+8mEE5Ip/cxsYFAhoQzpOWDG3M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:29 2025 by rpki-client