Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
File:                     E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json)
Hash identifier:          SCC4OEkX5EmvH52dHd9vK+DfmLuVYA+wBGMHObvLcpA=
Subject key identifier:   BB:05:40:7F:5C:05:BF:DB:88:71:1A:64:A1:F3:25:41:E9:BA:34:1E
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Certificate issuer:       /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial:       31A1E5F32A38670476F6ED2CAC25B666AED56B3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
Manifest number:          02DB
Signing time:             Sat 18 Oct 2025 08:22:20 +0000
Manifest this update:     Sat 18 Oct 2025 08:17:20 +0000
Manifest next update:     Tue 21 Oct 2025 17:25:20 +0000
Files and hashes:         1: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: JG72NXt605ww3XbVNf9DT18KzObGZzgsJOiqL+ceVSI=)
                          2: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: IiVNuAWOK4ZbiqNQuC6cbrwJue/9xgbdAQHRzyGh72w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
                          rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 17:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a1:e5:f3:2a:38:67:04:76:f6:ed:2c:ac:25:b6:66:ae:d5:6b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
        Validity
            Not Before: Oct 18 08:17:20 2025 GMT
            Not After : Oct 21 17:25:20 2025 GMT
        Subject: CN=BB05407F5C05BFDB88711A64A1F32541E9BA341E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:27:9c:e2:6a:8f:40:53:72:1c:ea:cc:3c:
                    96:e8:9c:ed:2d:e9:e5:c6:ea:75:ef:d2:3d:de:96:
                    09:e0:fd:a6:ba:0c:1c:56:bf:15:50:92:b2:6f:ea:
                    0d:71:b1:85:4e:06:e0:84:39:1b:6c:8a:70:f3:c0:
                    ce:50:2e:2a:d7:0e:32:0c:82:78:ff:12:8b:28:d1:
                    89:91:4c:e5:81:cb:14:50:f6:f3:fb:7d:18:d6:3c:
                    48:d2:36:aa:81:d7:17:93:a6:c7:0c:7e:0e:49:c4:
                    cf:81:2a:66:a8:5d:19:25:21:31:3d:6b:03:1c:be:
                    5d:a9:af:d0:eb:aa:65:1b:15:4a:74:50:06:51:98:
                    fd:8e:82:03:78:ef:4b:05:7d:15:63:dc:8a:8a:10:
                    4e:df:cf:ad:f1:f3:4a:bb:9a:bf:93:d7:6c:be:60:
                    6d:a6:14:21:11:23:75:6b:5d:bf:b9:bb:f5:c4:71:
                    f6:49:e9:87:13:35:9f:6d:6e:ce:66:27:26:ca:4e:
                    b4:44:c5:82:06:28:0c:78:5e:cc:61:0e:75:1c:68:
                    28:bb:42:da:5a:86:1a:54:9b:c4:3e:05:89:cb:63:
                    d0:22:b7:dd:6d:bb:3f:31:ba:d8:45:c2:7f:86:1a:
                    94:2b:ef:07:28:b8:0a:24:e1:1d:64:d0:46:c4:49:
                    ec:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:05:40:7F:5C:05:BF:DB:88:71:1A:64:A1:F3:25:41:E9:BA:34:1E
            X509v3 Authority Key Identifier:
                keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:31:ae:4f:82:fb:82:7c:b7:fe:b8:ce:a0:9e:15:f4:4d:
         d7:38:28:85:e9:92:eb:24:6b:5c:9d:46:ce:0e:9f:78:78:fe:
         fc:f2:91:a2:6e:48:e7:3e:ff:ba:68:7d:32:86:dd:0d:d2:37:
         f9:f2:4e:2c:18:59:a4:89:e8:4a:4a:5c:fb:a0:3d:6c:d9:7a:
         cf:30:04:e2:b9:95:66:54:9d:b4:a2:85:df:a3:f5:17:b3:df:
         81:99:d3:83:69:4f:9c:24:96:eb:f1:68:4e:e0:69:36:ec:46:
         01:4a:4d:84:33:da:a2:96:f0:dc:8a:0c:b6:90:f4:70:f2:91:
         9a:62:21:ea:50:41:ae:16:e1:b3:51:31:3c:09:eb:7d:8f:8c:
         dc:29:60:b1:bd:c3:51:e4:f5:42:7a:da:4d:92:4b:fc:13:9a:
         94:f3:72:8c:f4:d8:06:3e:37:15:24:0c:aa:39:21:59:1e:6b:
         3b:74:a0:d9:9f:52:4a:3b:00:46:12:94:fc:4b:87:46:df:4c:
         b4:dd:17:66:d2:53:1e:92:b9:9e:59:97:00:35:fb:07:b3:00:
         18:29:05:22:f6:d8:86:d9:03:fa:eb:2e:7d:8f:c9:df:6b:94:
         20:ef:df:00:34:50:89:9b:93:85:bc:95:68:2a:85:ee:b0:55:
         a1:d9:2c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:15 2025 by rpki-client