Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
File:                     A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json)
Hash identifier:          DECxBYbKbr0hG3qHiiUSQUNOPt4UUzHdxNo+WsV3uVU=
Subject key identifier:   40:C6:1D:5B:E8:DA:75:32:C1:29:34:1B:22:10:EB:4F:F9:E0:AE:00
Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3
Certificate issuer:       /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
Certificate serial:       0582CC451BD63A5A28796A46EC9931AE3B22AE56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
Manifest number:          011A
Signing time:             Sat 18 Oct 2025 16:21:34 +0000
Manifest this update:     Sat 18 Oct 2025 16:16:34 +0000
Manifest next update:     Wed 22 Oct 2025 00:52:34 +0000
Files and hashes:         1: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=)
                          2: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=)
                          3: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: EHIALO0GAoRMW2HUC6BHZS+NWWn6nDcrwaVAoYOAU/g=)
                          4: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl
                          rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 00:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:82:cc:45:1b:d6:3a:5a:28:79:6a:46:ec:99:31:ae:3b:22:ae:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
        Validity
            Not Before: Oct 18 16:16:34 2025 GMT
            Not After : Oct 22 00:52:34 2025 GMT
        Subject: CN=40C61D5BE8DA7532C129341B2210EB4FF9E0AE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:20:ea:42:66:78:af:18:ef:30:07:43:ab:17:
                    17:e0:cc:7b:80:ba:01:54:fc:9e:56:ae:97:62:da:
                    8e:b7:c3:7d:43:7c:c9:c3:3a:fd:87:b3:dd:85:01:
                    c4:16:fa:d3:3a:85:4e:43:ea:f1:2b:0f:bd:e6:70:
                    ff:cd:fd:60:d7:46:14:d0:93:07:6c:08:e5:53:15:
                    98:18:61:6d:99:2e:4e:52:c2:72:69:4d:6b:7d:d8:
                    fb:55:9e:54:ec:ee:3f:88:62:66:9e:97:c0:ee:8c:
                    4a:6a:c4:6a:bb:b6:96:d2:10:b6:d8:24:21:82:f2:
                    60:a0:7c:f7:50:ed:0c:50:b1:96:c1:82:2b:6a:fc:
                    ed:ed:f5:5c:a4:85:ef:e7:84:ff:d5:a9:b7:f9:6a:
                    8e:98:42:23:52:a2:6e:6a:90:32:6f:11:6d:4d:43:
                    c6:48:8a:f4:00:60:9f:f8:0a:d3:a7:81:75:c4:e2:
                    8c:c1:79:85:7e:3c:14:31:fe:7b:8c:0c:82:d8:42:
                    7e:a7:24:2e:a2:27:04:89:7f:31:3e:34:df:eb:fc:
                    2a:e0:a8:12:15:7a:64:3b:de:b0:e5:ac:67:d1:6c:
                    2c:69:62:76:2f:d8:60:9b:0e:d3:d9:59:7d:66:4d:
                    04:df:80:c6:ee:62:9a:60:7d:13:0d:b9:34:57:32:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C6:1D:5B:E8:DA:75:32:C1:29:34:1B:22:10:EB:4F:F9:E0:AE:00
            X509v3 Authority Key Identifier:
                keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d3:de:13:7c:25:a0:40:b9:bb:fb:72:46:d6:e0:a2:47:80:
         e5:61:6b:ba:3b:33:f6:ba:f8:fd:5f:26:9d:3e:19:62:89:74:
         75:64:d6:81:97:0f:b2:e5:b5:5d:2c:eb:b6:74:21:5f:56:1c:
         8e:5d:5a:c0:9e:ce:e5:5a:2d:7a:e0:d7:d5:d1:1c:02:39:9a:
         b8:cc:0b:7d:b6:49:a5:17:0a:c2:df:5e:76:9a:c8:b2:8a:c1:
         be:15:2c:42:f3:a6:ab:5f:4e:c7:ec:8e:f2:c5:2e:34:92:1d:
         f4:80:56:43:e6:b7:6a:cd:e7:e9:14:e5:e1:ca:29:f7:85:09:
         39:53:59:73:1d:cd:cb:71:cb:2f:3f:ba:78:84:69:07:9d:ec:
         55:a5:a6:d3:19:f0:e9:18:1d:62:4e:4e:9c:fd:fb:19:29:31:
         8b:87:87:de:ec:14:f5:b2:50:59:05:55:33:54:35:80:78:fb:
         61:e2:67:0c:c7:a6:a5:38:a5:ef:96:f1:00:ba:c8:34:cd:a5:
         e1:5f:c6:19:d0:25:7e:56:60:d0:6c:63:4f:99:9e:10:84:05:
         6d:88:90:c1:40:f0:b4:3d:c3:38:0c:d3:86:98:99:2b:ba:fe:
         31:10:6c:ac:18:18:0c:26:cd:9b:a5:42:e0:2d:63:18:4d:89:
         c6:b1:d5:15
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBYLMRRvWOlooeWpG7JkxrjsirlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC
MERDOTdEMzAeFw0yNTEwMTgxNjE2MzRaFw0yNTEwMjIwMDUyMzRaMDMxMTAvBgNV
BAMTKDQwQzYxRDVCRThEQTc1MzJDMTI5MzQxQjIyMTBFQjRGRjlFMEFFMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUIOpCZnivGO8wB0OrFxfgzHuA
ugFU/J5Wrpdi2o63w31DfMnDOv2Hs92FAcQW+tM6hU5D6vErD73mcP/N/WDXRhTQ
kwdsCOVTFZgYYW2ZLk5SwnJpTWt92PtVnlTs7j+IYmael8DujEpqxGq7tpbSELbY
JCGC8mCgfPdQ7QxQsZbBgitq/O3t9Vykhe/nhP/Vqbf5ao6YQiNSom5qkDJvEW1N
Q8ZIivQAYJ/4CtOngXXE4ozBeYV+PBQx/nuMDILYQn6nJC6iJwSJfzE+NN/r/Crg
qBIVemQ73rDlrGfRbCxpYnYv2GCbDtPZWX1mTQTfgMbuYppgfRMNuTRXMuz3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQMYdW+jadTLBKTQbIhDrT/ngrgAwHwYDVR0j
BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw
NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD
OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm
NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE
ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAjT3hN8JaBAubv7ckbW4KJHgOVha7o7M/a6
+P1fJp0+GWKJdHVk1oGXD7LltV0s67Z0IV9WHI5dWsCezuVaLXrg19XRHAI5mrjM
C322SaUXCsLfXnaayLKKwb4VLELzpqtfTsfsjvLFLjSSHfSAVkPmt2rN5+kU5eHK
KfeFCTlTWXMdzctxyy8/uniEaQed7FWlptMZ8OkYHWJOTpz9+xkpMYuHh97sFPWy
UFkFVTNUNYB4+2HiZwzHpqU4pe+W8QC6yDTNpeFfxhnQJX5WYNBsY0+ZnhCEBW2I
kMFA8LQ9wzgM04aYmSu6/jEQbKwYGAwmzZulQuAtYxhNicax1RU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:58:49 2025 by rpki-client