Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft
File:                     0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json)
Hash identifier:          Le9zvKhui3d36/aTmrO0ib/oiBwtIUEYtdk6ZYNXGqY=
Subject key identifier:   3B:8D:BF:76:A7:F5:14:CE:A6:7E:37:01:E5:40:8E:C0:69:92:C0:F8
Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45
Certificate issuer:       /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045
Certificate serial:       013E5A50E00844A4AA8DD6A6FD0C6BC8642D6856
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft
Manifest number:          017E
Signing time:             Mon 20 Oct 2025 04:11:47 +0000
Manifest this update:     Mon 20 Oct 2025 04:06:47 +0000
Manifest next update:     Thu 23 Oct 2025 14:14:47 +0000
Files and hashes:         1: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: a10heJcyvwgmjt0BonGD65evXtsVyZ4azujTnfd78x8=)
                          2: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: JjGwrreU07/24H7WUf6CfxqCT99P1b99nl4/zwhCTDo=)
                          3: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gFVtcUFWWZdWFm0J2smh588ex3+/T+ET5wQOfsP825A=)
                          4: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: Ruo+EyZLal8wuDVq0rDNTqbZhSofbWumTXD3E7q865Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl
                          rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3e:5a:50:e0:08:44:a4:aa:8d:d6:a6:fd:0c:6b:c8:64:2d:68:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045
        Validity
            Not Before: Oct 20 04:06:47 2025 GMT
            Not After : Oct 23 14:14:47 2025 GMT
        Subject: CN=3B8DBF76A7F514CEA67E3701E5408EC06992C0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:8b:12:18:78:37:b9:d5:16:c5:c6:d1:ec:
                    df:72:50:b0:f9:70:a5:da:34:7e:c8:1d:ae:57:ff:
                    03:74:b4:7d:95:4b:52:cf:36:d1:bd:93:4c:43:d9:
                    da:3c:b9:6d:fb:de:c6:b8:16:c5:1c:2b:8d:e1:2b:
                    10:57:12:d5:63:55:91:b4:46:0b:24:f0:a8:80:b0:
                    10:f1:ac:72:08:bc:08:25:ec:a3:dd:45:20:43:d9:
                    c3:23:a3:46:b6:68:10:92:5b:45:8f:d8:28:54:a0:
                    26:4a:b6:6b:67:7d:39:73:ab:94:2d:de:d0:ba:34:
                    95:1d:23:38:0e:31:e0:34:d2:19:7b:9e:07:8c:84:
                    10:43:fd:22:6d:c8:a4:00:f2:17:37:34:1c:f0:5b:
                    38:bf:57:ae:8b:69:1b:4c:c8:48:25:ce:8e:ef:2f:
                    73:52:38:2d:09:d9:71:6d:c4:ec:c0:25:93:be:5f:
                    6c:d9:57:41:a6:d4:e3:e7:38:66:eb:17:16:c3:7a:
                    e8:6d:a5:d0:d4:b6:db:58:49:b3:c1:38:63:93:ff:
                    45:8c:b3:12:4b:f9:57:75:c9:5e:fa:8a:95:d4:12:
                    be:6b:f5:b6:e6:10:42:e9:8c:46:be:53:d1:7e:26:
                    f3:50:5c:17:d1:41:93:17:a0:43:1a:40:bb:04:89:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8D:BF:76:A7:F5:14:CE:A6:7E:37:01:E5:40:8E:C0:69:92:C0:F8
            X509v3 Authority Key Identifier:
                keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7c:6b:2a:40:af:38:c0:17:2a:17:72:9d:28:02:89:14:fe:
         da:db:b6:a1:f2:de:cf:04:53:d6:97:cd:a5:e9:9c:0b:a7:f6:
         ea:c5:4e:2d:fd:47:08:76:d0:42:a0:5d:ad:cb:8f:60:ce:62:
         7e:f0:37:0f:3a:01:ca:59:2d:5a:7d:0d:6c:0f:63:75:0f:2a:
         80:84:65:ad:22:ca:6e:11:3d:f1:4c:9a:9f:d8:eb:0d:59:7f:
         78:d3:7b:bf:57:76:f3:6a:ea:14:be:e3:7c:f6:19:e3:a3:38:
         3a:26:be:e7:5b:3d:ae:d5:b0:c6:e5:45:df:05:72:81:65:7d:
         02:f6:11:a2:79:38:91:89:3b:11:c1:7e:5e:99:48:9e:9a:98:
         d3:4e:70:b6:05:2d:c2:0f:3f:3a:59:2f:d1:83:9e:47:4e:d3:
         d3:bf:db:b4:b3:8d:9c:2a:d9:2d:7e:a5:9d:b3:1d:f3:c0:fe:
         b9:86:cb:46:e4:e2:a0:af:52:8d:43:b6:95:c3:a8:82:08:98:
         68:cf:cb:8a:ab:13:e6:e0:a5:d3:67:bb:72:a7:1d:fd:2a:58:
         c5:f3:0f:69:27:2f:84:e0:d9:f2:04:1b:22:d7:c4:81:0f:14:
         a2:0c:51:70:78:84:c2:cc:63:dd:6d:21:e4:38:9e:e2:18:7d:
         6c:c4:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:08:31 2025 by rpki-client