Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft
File:                     C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json)
Hash identifier:          2nhTSs0lFhii0HTk0JETwbcUeR4lZGAezczXrjMoSAQ=
Subject key identifier:   68:3F:F1:9A:F8:5A:05:0A:10:13:A5:D2:42:38:CF:2A:A7:A8:41:D9
Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53
Certificate issuer:       /CN=C7840142ADE3E1876CB50EA3A410454EB3889153
Certificate serial:       4CB64FECC2D16DDF5E5F0857538B0E6EAE82DD02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft
Manifest number:          D4
Signing time:             Mon 20 Oct 2025 15:10:02 +0000
Manifest this update:     Mon 20 Oct 2025 15:05:02 +0000
Manifest next update:     Thu 23 Oct 2025 21:55:02 +0000
Files and hashes:         1: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: IoIyP//hrQlYB+aIBKE8acsqetTnMXLdLd08/ax7yKA=)
                          2: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: ngR8P5XLva8DpXSS7OHLVrmZ2boUEpVL2+Vp1JZeNQA=)
                          3: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: H6s77RONQxfYVUNz4YRn/C2zSuIhVFg1GTTCJsiiK0o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl
                          rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 21:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b6:4f:ec:c2:d1:6d:df:5e:5f:08:57:53:8b:0e:6e:ae:82:dd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153
        Validity
            Not Before: Oct 20 15:05:02 2025 GMT
            Not After : Oct 23 21:55:02 2025 GMT
        Subject: CN=683FF19AF85A050A1013A5D24238CF2AA7A841D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:cf:7d:6c:30:ff:99:8d:29:5a:23:0d:0b:
                    6d:53:97:6f:f7:70:d9:ce:ac:f0:bd:08:8f:2d:d7:
                    e4:7f:a8:3d:50:2c:a5:8d:05:21:41:6a:3a:be:ec:
                    56:50:c9:06:6f:22:b0:71:9f:64:b8:83:e1:94:2a:
                    57:91:9e:7e:93:c6:2d:0e:ee:a6:0c:bd:1c:85:09:
                    6a:6b:5e:8a:75:a0:57:b7:b4:ee:0a:18:35:c6:0a:
                    dd:72:ff:9b:de:54:e2:ec:09:6b:4b:b6:30:63:00:
                    c8:ab:44:bc:49:b2:60:82:b1:8b:66:ee:6e:3b:12:
                    30:e0:60:56:f5:e8:5e:a7:d5:02:34:50:fa:ab:dd:
                    3c:a5:fe:53:dd:e0:44:3b:1e:25:1f:e9:17:a1:9d:
                    87:c7:ec:b8:36:07:9e:90:ca:58:ab:3c:5d:a4:b0:
                    48:f5:8c:1d:7f:9e:4a:dd:5e:1c:07:7e:4d:72:fa:
                    75:1e:a2:95:a9:8d:84:aa:52:44:a7:6a:3c:d4:31:
                    a9:10:01:c6:7f:d1:a1:f9:8a:e9:6e:a3:ff:c5:d0:
                    6c:3d:7c:3f:5a:32:dd:08:fc:4e:17:8e:57:e6:9b:
                    46:65:0c:05:c4:3d:56:2c:f9:72:1b:a3:6b:81:2e:
                    7c:da:34:d3:14:56:dc:a1:4c:5c:99:0e:12:95:68:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:F1:9A:F8:5A:05:0A:10:13:A5:D2:42:38:CF:2A:A7:A8:41:D9
            X509v3 Authority Key Identifier:
                keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fa:ba:80:5a:45:2a:14:55:a8:96:ef:34:d5:23:4f:21:34:
         67:a3:be:dc:7f:07:c4:ef:d1:e1:0c:11:09:d4:6e:ab:09:4d:
         ba:a9:18:fa:74:b1:8b:10:7e:44:0b:37:cb:3d:d2:42:a6:5a:
         9f:5e:44:c4:4b:72:d6:41:78:04:bb:a5:25:70:2d:d2:43:82:
         cf:68:1b:51:40:0c:b5:25:20:19:d9:5f:c7:23:00:5b:92:5a:
         24:aa:15:92:60:2d:f6:09:53:c4:05:33:6b:16:d8:40:90:72:
         a0:dc:6b:ae:b3:c5:eb:df:bd:8e:ab:45:c1:45:83:90:22:a7:
         03:0f:74:6b:2f:73:8c:3b:ef:25:cc:6d:bc:1a:dc:7a:02:fc:
         2d:04:f3:d2:95:ce:05:bd:83:2f:12:1f:63:d6:b4:ca:6f:08:
         9f:31:ab:b8:ac:32:be:44:7f:4c:81:3a:0c:a3:2e:24:b9:45:
         ff:c4:af:b4:86:7c:b6:19:4c:b8:9e:92:a9:ca:ed:f4:0e:8e:
         f9:37:0c:75:17:37:ae:a1:1c:b4:97:f1:ba:03:1f:31:28:3a:
         21:ac:76:03:fd:dc:33:b2:3e:e9:ce:89:8f:77:66:b9:d0:3c:
         10:09:a4:1b:08:3e:aa:b9:cd:c9:84:b5:15:f0:87:bf:ec:4d:
         b3:df:7c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:18:17 2025 by rpki-client