Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
File:                     1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json)
Hash identifier:          m2iZIMEHf3Ssdzo3leuynMqwCnCDEBWGa1OFuDHIGRI=
Subject key identifier:   3B:A3:3A:EB:16:46:89:2E:A9:06:BE:07:7A:C9:F5:C4:9C:A2:70:DB
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       1EDB9CD0C5D6249B7B1FFB07A1E14F9381738BEA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
Manifest number:          0273
Signing time:             Sun 19 Oct 2025 19:21:54 +0000
Manifest this update:     Sun 19 Oct 2025 19:16:54 +0000
Manifest next update:     Thu 23 Oct 2025 00:15:54 +0000
Files and hashes:         1: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: jfT+fFK9MuHkEFZ88hcVlJwwMYmz7o5P6pVJldda2zA=)
                          2: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: RIaxQt2BdMly6jZqFEt6v4+R9ZCRoPt0bRRhz87aHRQ=)
                          3: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: 0bz9arJVEpW8niw69al2HqlLatQbtnCd6cPuE1FtiQQ=)
                          4: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: zszkuvV/DGJtyi38SwI+iyz6P0zwyMAcKOGOc8uu7vs=)
                          5: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: KyjP36QU2B5WmwOGj/w2MpttC7+1bk2GysORLqVSxsM=)
                          6: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: pyK+jcOUykm+t8TqsiBiASQSX3weZBQz2lnXkKpEWw8=)
                          7: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: qNzsGiJwf7XGjGP4j+CDhg7oJnuuTy/kX7unl+wQ3hg=)
                          8: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: N2Cye2k2ArU32sR4BIWlxYfXaoMWkhmX2inof4bL/qc=)
                          9: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: s1oc4oY30dv4ZziJEtii0WqAjWHN4yIZ+Wcll5R6Lx0=)
                          10: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: A1MPp7TMSZc/eXGPf+b4crEmy6EtlUGdMMOLQ3d3xg8=)
                          11: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: I2GxvF+hElG1yAh007aM/yMEViDm+JYfJmwRWj1ftM0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 00:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:db:9c:d0:c5:d6:24:9b:7b:1f:fb:07:a1:e1:4f:93:81:73:8b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Oct 19 19:16:54 2025 GMT
            Not After : Oct 23 00:15:54 2025 GMT
        Subject: CN=3BA33AEB1646892EA906BE077AC9F5C49CA270DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:df:a9:c7:f7:f0:75:ce:fc:c9:f9:58:67:e9:
                    89:fd:f1:4a:4c:9e:97:01:f1:33:19:00:34:e6:c3:
                    a7:55:38:04:1a:64:63:52:10:8a:54:35:ea:4f:8c:
                    fa:45:27:8f:79:db:eb:92:dd:cb:53:5c:41:0e:40:
                    e7:b2:9f:f1:53:e2:30:37:00:75:25:74:e2:1a:c0:
                    2f:21:99:97:cb:32:0f:0c:b6:a7:ed:52:aa:7e:a2:
                    62:d8:98:54:82:61:b7:ad:62:99:e5:41:d1:8b:9d:
                    e5:2b:53:8a:5f:26:c4:48:66:da:88:d7:51:93:2f:
                    41:bf:36:48:17:18:65:70:84:5f:2f:7e:17:75:f5:
                    17:72:58:64:25:e1:dd:92:dc:7b:19:8f:ba:a6:3f:
                    8d:68:74:0e:07:7a:24:1f:8f:f9:8b:cc:8c:0d:1c:
                    ac:88:ea:88:e8:db:11:48:03:52:6a:f0:8b:bf:10:
                    67:af:fb:80:86:26:a2:0a:51:07:e7:41:de:86:1d:
                    72:b9:88:0a:21:d6:29:38:14:57:d7:7e:2a:20:5e:
                    2c:9e:69:60:48:be:a2:7f:22:a4:3a:ce:e2:0a:5d:
                    0e:21:93:1b:6a:c9:5f:07:1f:9d:22:48:bb:95:74:
                    ae:fc:e7:05:18:8d:6b:70:c8:b2:b9:19:7e:19:ef:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A3:3A:EB:16:46:89:2E:A9:06:BE:07:7A:C9:F5:C4:9C:A2:70:DB
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f1:24:32:06:5b:39:65:42:b9:80:81:0d:32:c8:55:41:dd:
         59:15:09:99:b2:fc:0b:48:61:31:e0:03:54:37:79:56:c5:24:
         4f:6f:b2:bd:de:00:0f:7e:bb:30:9c:fb:2d:62:ee:00:83:17:
         f1:c4:80:74:7b:c7:40:39:53:66:2b:5c:b4:eb:3b:5a:a0:ae:
         08:6c:1d:be:c6:07:b1:fc:af:7b:2e:d2:57:d7:77:53:c3:14:
         a4:54:e0:1f:fa:08:93:fe:18:a0:35:12:c3:07:1f:a6:04:a2:
         98:7c:75:08:62:15:fd:68:45:bc:b8:a3:5c:25:f9:24:75:ac:
         05:dd:58:45:76:d7:46:d3:5a:a3:08:70:21:5c:c9:e6:6b:46:
         36:f1:5c:fd:d7:35:3c:4b:e1:1d:aa:8a:57:a8:a3:c1:17:b3:
         5c:1f:c1:30:56:2f:4a:80:06:71:49:02:e2:f1:69:ef:0a:55:
         cf:54:7f:47:cf:fa:3c:5f:0a:ed:3f:83:0b:f2:a0:b3:0d:37:
         21:e4:00:66:ec:29:43:6a:4c:cd:9c:36:80:18:9d:6c:63:29:
         12:85:51:e1:9a:ad:0e:06:9e:ac:f9:ab:87:5c:9f:11:ad:5b:
         14:4c:6d:bd:67:4b:ac:cd:43:df:0b:ab:87:58:27:35:f1:24:
         26:15:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:08:36 2025 by rpki-client