Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft
File:                     D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json)
Hash identifier:          aStj0lu0Z9EKe0xgigdsuVn0d75yfJ5c4s3AgAm+Lpg=
Subject key identifier:   3D:2D:D9:88:D1:A0:7D:A2:BA:31:6F:3F:0C:4D:72:E3:BE:DC:81:CC
Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E
Certificate issuer:       /CN=D68CA7C6F514D7168C00790717FB869AF68B125E
Certificate serial:       3E057BA766D3B3AF90D75C9DBAF9A59BDDDDFB28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft
Manifest number:          025E
Signing time:             Sun 19 Oct 2025 07:10:52 +0000
Manifest this update:     Sun 19 Oct 2025 07:05:52 +0000
Manifest next update:     Wed 22 Oct 2025 07:15:52 +0000
Files and hashes:         1: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: G7BNKn0aQeDATXJ1JamzPIxZOqsRSSDm9xJMQAbHt5c=)
                          2: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: b5CMeUNLFBdcsiFXDI1xzrYwQw/tQkuaZHJ3axZvFpM=)
                          3: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: xpJYN2koDz6242yH404bncg8zalibRwq73KpJsJcVB8=)
                          4: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: gV2Q8xF8XiWikE1+w9yu7jENKeKHaDELW9P6oOlSzDE=)
                          5: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 09EcthFcc0U294qSUk1qjMUpfEmQzlaHp9ePt/3ow3Q=)
                          6: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: tArDMQ0CljWlxInpOnDNWhLbYH4HF1sjePzkXRXnEac=)
                          7: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: fW5qne1R9fTa45nGDciUROmSkAV8mbUeGR9m/oXMOAw=)
                          8: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: ebXS+Tyb8iuyOHa8yQE2FE8hZAgaawDNcd7a/TUN4jY=)
                          9: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: vuTTJNURLP5vgJImsWTQOQLshtByIl8yIWAQC+TExAY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl
                          rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 07:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:05:7b:a7:66:d3:b3:af:90:d7:5c:9d:ba:f9:a5:9b:dd:dd:fb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E
        Validity
            Not Before: Oct 19 07:05:52 2025 GMT
            Not After : Oct 22 07:15:52 2025 GMT
        Subject: CN=3D2DD988D1A07DA2BA316F3F0C4D72E3BEDC81CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dd:26:6e:b1:1f:f7:57:4f:01:b5:da:0f:e2:
                    d3:97:91:41:40:8c:3d:32:42:fc:18:80:dc:54:b7:
                    6a:90:1f:bf:2d:73:df:a4:03:03:1d:ac:5b:8e:1c:
                    51:9c:ce:b1:42:9c:0e:44:81:ee:23:1e:0a:2e:da:
                    91:95:7c:42:55:37:d1:f2:53:9e:ee:1d:7c:e6:22:
                    dd:8c:f8:85:70:2a:33:8b:8d:84:8b:5a:e5:bd:aa:
                    d2:9c:c8:53:13:ca:48:e9:04:2a:07:1f:2e:87:36:
                    60:1d:ee:40:34:33:99:c2:a7:5c:30:c9:67:ce:8d:
                    71:62:80:dd:8f:1b:f0:1a:44:e5:dc:f4:4d:0e:35:
                    4f:26:71:0e:5d:c2:88:73:d6:bc:c2:a9:04:08:37:
                    4a:c0:bc:d2:16:3a:48:8d:b0:d2:d5:f9:4b:10:7d:
                    0e:5d:47:66:9c:94:02:3f:93:46:3d:4f:1d:3c:42:
                    7b:6a:67:d3:19:eb:66:b0:14:47:fe:5f:29:78:54:
                    14:17:30:79:ce:3f:e4:b6:52:10:6c:61:91:26:52:
                    a5:a1:5c:42:aa:ed:3f:6e:fc:61:c0:fc:f7:70:65:
                    ed:ad:2c:c6:43:83:c7:2b:59:eb:cc:d5:13:6e:16:
                    f9:16:e8:ee:68:15:2c:31:56:5f:b5:82:47:66:9b:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2D:D9:88:D1:A0:7D:A2:BA:31:6F:3F:0C:4D:72:E3:BE:DC:81:CC
            X509v3 Authority Key Identifier:
                keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:a8:45:16:d9:81:d6:30:64:03:9b:1c:26:db:1e:3e:89:
         a7:19:1f:0d:a3:83:07:9c:28:a2:ff:4e:9f:c1:29:cc:e9:b4:
         40:1c:77:f5:a2:e2:0b:96:da:cd:47:bb:7d:ba:1d:ba:1f:5a:
         ce:e7:b0:c5:a0:11:4d:6b:4e:57:ad:ae:fd:88:5a:6a:85:46:
         73:dd:b0:85:08:ad:09:07:2a:6c:47:98:96:eb:14:f7:ce:aa:
         95:74:60:51:16:6c:73:12:95:3a:fa:f9:a6:7a:4d:0b:31:14:
         57:aa:4b:06:6b:9b:40:95:50:78:25:06:69:41:28:ac:c3:01:
         60:7f:e0:23:e3:6a:8e:b8:9e:60:fc:cb:b6:28:a7:cd:36:a3:
         16:c0:0d:99:4c:5f:c1:e1:c3:ed:c0:c0:47:7c:bf:51:ab:68:
         01:28:2d:21:68:bc:a1:48:3d:6b:d6:84:48:30:c6:08:78:6e:
         b9:63:68:b5:8a:40:b6:12:32:83:37:0a:f6:37:00:b1:9a:68:
         ef:f3:83:d6:3d:26:96:d4:7b:fd:e5:c4:1c:43:69:95:a7:0f:
         08:4e:99:a1:44:76:2f:69:3d:3e:b3:70:52:8d:31:3d:87:48:
         34:c2:c8:af:df:47:41:3f:78:9a:7d:ad:d4:da:aa:b4:f4:d7:
         46:c5:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:16 2025 by rpki-client