Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft
File:                     9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json)
Hash identifier:          T0TdL2m7fcsT3th63aDif2n6xEMhKAmspRLuiMi4P+g=
Subject key identifier:   FC:D2:EE:BB:25:9B:68:5D:12:C6:51:99:11:4D:36:FC:C4:E9:03:CC
Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11
Certificate issuer:       /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311
Certificate serial:       5D0D8DADE6BC8C425013C963D091E0F8EA320740
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft
Manifest number:          01D7
Signing time:             Mon 20 Oct 2025 03:01:15 +0000
Manifest this update:     Mon 20 Oct 2025 02:56:15 +0000
Manifest next update:     Thu 23 Oct 2025 03:56:15 +0000
Files and hashes:         1: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: Iad/pFnY5v/nY50Xd0qR07twAz4pd0+B5syrBkizf7M=)
                          2: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: Pr9u+zdsauKmcQpMYAyasO5YkB6WXSmI17iREXE2O+Q=)
                          3: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: Z0N6isYAhB+e8rxLvCh1RIXjBWd+TKJHWZOCO+4YKaI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl
                          rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 03:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0d:8d:ad:e6:bc:8c:42:50:13:c9:63:d0:91:e0:f8:ea:32:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311
        Validity
            Not Before: Oct 20 02:56:15 2025 GMT
            Not After : Oct 23 03:56:15 2025 GMT
        Subject: CN=FCD2EEBB259B685D12C65199114D36FCC4E903CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4e:23:88:76:b8:83:cd:55:96:4b:d5:71:12:
                    c8:33:4e:7f:51:bf:5e:45:9f:a0:51:9b:de:a4:cf:
                    8f:19:e0:6d:fa:d9:02:ac:ee:55:98:9f:51:83:b4:
                    5c:25:21:b5:0c:17:4c:d3:a6:fb:0d:4e:af:9f:86:
                    f2:37:77:a7:2f:bf:c1:0f:bd:1b:2c:cf:3c:93:67:
                    0f:95:52:c9:6e:64:50:4f:2c:65:dd:9a:03:78:74:
                    30:fe:57:cf:3d:bd:52:c6:3f:4c:15:72:54:55:90:
                    5d:8b:72:a2:ed:b8:fc:81:e8:1e:35:22:da:1e:44:
                    06:f5:7f:76:16:88:59:75:4b:d2:04:88:2b:cc:93:
                    43:9e:a0:85:5f:90:4c:13:a7:3f:cd:73:38:50:55:
                    e7:14:ef:2e:0a:20:8f:4e:53:09:4e:c4:d8:b7:93:
                    bf:de:a4:67:c8:35:9e:22:7f:8e:d0:21:58:e3:ca:
                    f8:ed:7c:d6:75:b6:61:b6:bc:bf:fe:1b:87:14:b2:
                    ab:df:4a:06:90:fb:3f:02:23:a3:9e:43:4b:d9:d0:
                    74:35:ea:ff:0e:70:26:98:91:46:da:a4:2e:b0:97:
                    fe:6f:51:68:b9:52:55:a3:56:15:1f:5c:bd:db:25:
                    62:4d:b3:93:0d:16:5b:30:c6:65:92:7d:f7:a1:af:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:EE:BB:25:9B:68:5D:12:C6:51:99:11:4D:36:FC:C4:E9:03:CC
            X509v3 Authority Key Identifier:
                keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b2:a3:a3:7f:4f:38:38:a3:a2:53:3b:de:b5:cb:bb:54:d5:
         2a:b9:a0:92:98:14:a0:b5:dc:63:66:38:fd:76:ea:44:09:26:
         14:43:aa:be:79:dd:7b:6b:30:22:fa:d9:48:d3:e9:80:64:0c:
         22:d2:ea:6f:5a:03:18:02:bf:ef:01:28:06:bb:7a:60:15:80:
         7c:a4:b0:ea:26:e0:27:df:21:00:f5:f6:07:80:94:91:5e:c1:
         7d:5e:3b:85:e8:a7:2c:04:96:f1:96:5f:83:80:71:3c:a5:72:
         be:8f:26:0e:a2:2a:36:72:82:15:51:1d:92:10:92:d9:09:4a:
         f2:ca:64:52:43:a2:be:f9:0d:7f:81:13:1e:61:73:b5:f3:88:
         f4:dd:70:44:c4:54:3d:a7:3e:7b:da:a6:24:0e:c2:78:be:57:
         22:12:4c:e6:3a:d6:17:b0:a8:50:ef:19:ab:66:5a:0d:d7:ed:
         6c:c4:1d:64:a1:c0:30:c5:0b:e8:29:32:c4:f6:41:c8:b1:75:
         07:5f:1e:b0:c4:f0:3c:c3:db:ea:83:26:fa:10:d7:13:f2:4f:
         6f:44:98:70:27:98:3b:4d:0b:1d:ba:c0:c0:50:ae:d2:88:4c:
         2a:e7:b6:ec:d7:f5:fd:0d:26:a1:45:40:3e:ad:df:85:29:a3:
         03:75:3b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:18:32 2025 by rpki-client