Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
File:                     2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json)
Hash identifier:          2eoUd4Yz40p4bTkpy2GTYUuamDBVZeUNRWEC+4xhCsg=
Subject key identifier:   9E:98:DA:C6:29:E7:90:4B:4D:8B:AA:17:28:62:2A:02:F4:09:56:71
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       18E8AFBA321218AE10A5D0FB8E52D6A1F1028E37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
Manifest number:          0516
Signing time:             Mon 20 Oct 2025 06:31:50 +0000
Manifest this update:     Mon 20 Oct 2025 06:26:50 +0000
Manifest next update:     Thu 23 Oct 2025 11:16:50 +0000
Files and hashes:         1: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=)
                          2: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=)
                          3: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=)
                          4: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=)
                          5: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=)
                          6: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=)
                          7: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=)
                          8: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=)
                          9: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: Mkz4Bd7O8SBwzesA023EDBYuvm4r/my3OIOaFoe1rjU=)
                          10: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=)
                          11: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=)
                          12: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=)
                          13: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=)
                          14: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=)
                          15: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=)
                          16: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=)
                          17: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=)
                          18: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: oVmfGlTp0DWOtWPGyWCK/51mm8QlFMAOkDDm7W0JfnE=)
                          19: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=)
                          20: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=)
                          21: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=)
                          22: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=)
                          23: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=)
                          24: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=)
                          25: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=)
                          26: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=)
                          27: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=)
                          28: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=)
                          29: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e8:af:ba:32:12:18:ae:10:a5:d0:fb:8e:52:d6:a1:f1:02:8e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Oct 20 06:26:50 2025 GMT
            Not After : Oct 23 11:16:50 2025 GMT
        Subject: CN=9E98DAC629E7904B4D8BAA1728622A02F4095671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:ec:5e:f8:1f:4f:f8:26:5d:4a:2c:6a:02:
                    93:9c:05:4f:d0:cd:4b:b3:90:8e:dc:5f:ab:b5:9b:
                    c0:8f:2f:04:18:7d:e8:1d:c4:d8:76:ab:d9:de:af:
                    e2:68:33:b3:9c:66:12:40:c7:d1:9d:6f:97:e1:84:
                    74:fb:c1:77:f8:00:9d:f7:06:e3:d5:df:79:58:30:
                    28:b8:4e:db:16:cb:64:86:37:40:2b:4e:69:39:21:
                    fb:c9:e1:d4:da:f4:27:3c:0e:15:0c:02:9b:22:33:
                    2a:10:fd:57:82:d9:cc:dd:f1:fa:3a:51:a2:5d:0a:
                    d8:83:92:75:a3:15:36:7f:3e:20:31:d4:2d:93:2b:
                    72:a2:09:7b:2d:a8:6e:9d:91:4f:1e:10:3d:4b:d9:
                    6d:ba:0b:2f:95:8d:2b:c8:59:93:0b:9d:52:4d:89:
                    87:d7:39:e0:7a:5b:7b:f3:fe:7e:73:ba:89:e9:a7:
                    c1:aa:3a:74:6c:10:e7:c2:95:d8:28:9e:5f:67:05:
                    5a:72:fd:45:9e:3d:57:33:24:2c:dd:93:05:dc:50:
                    15:8f:69:d3:5b:0f:e4:8e:8b:19:e2:24:c3:d1:c1:
                    91:76:f1:c3:fb:74:70:40:0e:ce:12:91:d5:63:18:
                    0b:84:f8:d6:ab:e8:87:08:91:9a:db:ae:14:84:41:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:98:DA:C6:29:E7:90:4B:4D:8B:AA:17:28:62:2A:02:F4:09:56:71
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:da:60:7d:49:74:e8:0b:18:b6:ba:d4:15:51:31:c2:9f:45:
         99:2f:27:82:d2:18:73:fa:d3:22:4e:e8:ea:b2:6b:b8:31:5b:
         97:07:e6:ea:3b:14:42:7e:00:2f:a0:74:ba:4a:93:c6:f8:d8:
         6a:ae:13:70:51:69:df:04:90:dd:4b:ab:a0:6e:5b:6f:6e:50:
         fa:c0:f8:78:e3:ee:23:62:33:ee:62:ac:05:08:89:35:38:41:
         ed:d4:d7:d7:f2:f7:7f:0a:74:3f:40:f5:8c:b7:94:a3:b2:a6:
         39:17:7c:19:0b:b0:c6:a0:94:aa:3b:26:8f:7f:e2:74:d8:c7:
         c8:36:94:e3:62:60:da:6b:8f:93:e6:82:93:f6:5f:11:4a:fc:
         bf:a0:9c:3e:ff:29:9a:af:de:b5:e1:5e:d6:93:32:5d:12:2f:
         54:8a:5b:6c:73:29:5f:40:92:3d:7f:ff:ff:35:6f:4c:53:5d:
         6d:fc:e9:fc:73:50:75:1f:db:cc:52:ff:91:44:15:bd:49:c6:
         29:44:5f:22:5c:fd:41:42:ec:29:94:8b:4c:53:6e:57:61:2b:
         51:4f:f9:a9:3d:1b:de:c3:3b:48:66:b6:e2:49:0e:ef:66:99:
         d8:39:d5:d4:d2:84:25:19:8c:7b:d0:f8:65:64:51:06:fb:9d:
         d3:e8:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:07:35 2025 by rpki-client