Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft
File:                     DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft (raw, json)
Hash identifier:          BVsQSbhLJwAwbGYzRIhkted2P7ezx1J8xg5HzueCMGE=
Subject key identifier:   1D:34:A9:90:6B:BC:7F:92:AA:51:C6:35:15:CB:E1:71:59:C9:51:EB
Authority key identifier: DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23
Certificate issuer:       /CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623
Certificate serial:       05EC520FE5120636A16E0E3E4D991776EC2B8028
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft
Manifest number:          CF
Signing time:             Sat 18 Oct 2025 12:41:50 +0000
Manifest this update:     Sat 18 Oct 2025 12:36:50 +0000
Manifest next update:     Tue 21 Oct 2025 23:13:50 +0000
Files and hashes:         1: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: BIDljILBNKsrSwzyZxnTSaIaANst4K6p4IMi96hI1tI=)
                          2: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: yOguTTJn/ofmmFRzNxB5PQD5Wur97XppCIr80azCbnE=)
                          3: DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl (hash: 6BXQPAZ/OXIKfp0ePIv2CHM3hKXdQjQXo4JGOvZmZek=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl
                          rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 23:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ec:52:0f:e5:12:06:36:a1:6e:0e:3e:4d:99:17:76:ec:2b:80:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623
        Validity
            Not Before: Oct 18 12:36:50 2025 GMT
            Not After : Oct 21 23:13:50 2025 GMT
        Subject: CN=1D34A9906BBC7F92AA51C63515CBE17159C951EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:d1:65:a1:44:bd:0f:31:50:5f:70:de:ce:
                    1f:98:c2:1f:44:39:53:5e:78:7a:60:35:e9:35:a8:
                    4e:24:c9:82:50:75:84:56:b5:a7:f1:27:67:6a:da:
                    24:09:bb:5b:17:07:a0:02:98:7a:d6:97:0b:d9:10:
                    47:b1:d7:3f:68:af:82:31:cf:d5:aa:ce:56:6e:17:
                    88:c7:84:c5:2c:5d:cc:f9:61:6b:36:1e:33:62:a6:
                    30:1a:38:43:5d:72:81:49:d9:8e:c3:48:63:fc:e2:
                    05:b6:36:c5:90:67:79:c5:f9:c6:73:84:ca:28:b0:
                    b0:20:17:f0:77:cd:9e:db:59:ec:1f:87:50:f3:9b:
                    93:34:d2:37:39:22:95:aa:f6:5e:dd:03:9b:f3:46:
                    0c:b0:8f:e8:3a:6c:19:9f:d0:0f:20:2e:46:c9:80:
                    1f:ab:0d:15:3f:dc:a8:bf:ff:de:78:09:79:e0:5d:
                    b7:10:a1:fc:b1:17:f7:25:ad:49:03:09:81:0d:54:
                    22:94:2d:1f:8d:91:94:59:2e:b1:dc:36:6e:4f:0c:
                    2d:00:14:60:55:95:d2:be:8b:0e:09:16:b2:bd:86:
                    ae:aa:43:90:85:3d:51:11:db:7a:53:ac:f2:0f:96:
                    ae:c3:f3:c4:34:19:82:2e:79:c9:fd:0c:fc:f3:dd:
                    c6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:34:A9:90:6B:BC:7F:92:AA:51:C6:35:15:CB:E1:71:59:C9:51:EB
            X509v3 Authority Key Identifier:
                keyid:DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:24:a4:4c:4d:73:7c:2b:7e:2f:f2:ff:10:5c:e4:07:64:62:
         80:7a:f2:e7:29:89:cf:65:33:d8:02:9c:85:14:9c:02:4b:87:
         c4:05:ed:78:15:87:1f:d7:99:ae:78:05:ba:c9:6d:bc:29:35:
         bf:fd:96:ba:ab:2d:24:31:0e:b4:1c:05:5a:4c:a9:d3:02:df:
         c9:1f:62:b5:c7:b1:42:87:80:13:44:20:b2:b2:33:6f:a7:07:
         ba:86:23:73:77:10:e6:54:7b:23:06:0a:20:9c:2e:0f:4c:29:
         ab:36:f3:50:58:7b:7b:81:3c:08:0e:99:31:e3:62:07:9f:bc:
         58:86:a1:aa:a1:fd:e6:ce:5a:74:1c:72:7e:0a:96:fb:40:84:
         03:cc:25:9a:8a:37:79:8d:62:ff:6d:e5:68:e0:f6:8e:cf:45:
         d7:b3:82:62:9d:9f:63:3f:5b:f2:6e:37:25:66:5a:89:9b:2c:
         3a:30:00:80:da:7e:43:b0:20:4e:41:c2:b0:2a:b3:c9:e0:82:
         5d:23:ea:71:e5:94:88:ce:04:55:36:21:e7:6b:fb:8d:0a:2e:
         c0:2f:73:68:4f:44:5c:d0:52:38:c2:04:8c:46:d3:c5:41:04:
         cb:24:bc:6a:78:bc:a2:6e:04:25:5e:5c:10:bc:0b:d8:55:44:
         2c:4e:80:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:14:30 2025 by rpki-client