Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
File:                     667078BDA093F84040F3016D179CABA67F68A647.mft (raw, json)
Hash identifier:          OZjpNJARr2MS5/kd0W1tiOqMrXmYZ/bWnz0emWiNa3Q=
Subject key identifier:   D4:24:A0:9E:E1:2D:EB:20:0F:05:61:F4:F4:91:D6:F6:0F:D0:EF:01
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       3F620CCEA3CE128E88885CCB15A4856F2E06BB29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
Manifest number:          02C4
Signing time:             Mon 20 Oct 2025 10:11:24 +0000
Manifest this update:     Mon 20 Oct 2025 10:06:24 +0000
Manifest next update:     Thu 23 Oct 2025 14:31:24 +0000
Files and hashes:         1: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: p1IlE+POO9hCFBImJs4SWaLDjBIhdLsxh8yaBGtXhAg=)
                          2: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: 4EhIBVtTUnA2NsufqUE56qVJQ8W9fy5ksrwQzL7c16E=)
                          3: 667078BDA093F84040F3016D179CABA67F68A647.crl (hash: ONdrBWep4qEQ4i80P9i1uPGOnp/5Sq5Z0ZGIGZTq0Q4=)
                          4: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: IHCCAgl8I2RtthVlx/101ymvDPNvq6bpd64iBZCpSWQ=)
                          5: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: Ix+R/yfCu9YeIQiklNVMKU4ccTsIM4M8qCqs+sb4ZL0=)
                          6: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: Rpp4YpehQ1M+h6emtzM5wkYph2BpAIpQDGT9zp1ts2M=)
                          7: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: yr0MNMuQ/IlUxBG9BJkWSvncA4WzNuZMrgeTlRsfQrw=)
                          8: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: 2pAFw4pCfgppnXNzn4U9fVaUZRHA5FxGk6QsaeCqBJY=)
                          9: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: W5Ot0BBUNk5NFwRYk7ap1jPaT+1meSB0kfyCkhd5n7I=)
                          10: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: CFm8UxOFUNv/+ECnjHOC47sfC3C4NJroGuyfEm+9/Ds=)
                          11: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: OsKe0Kd5H+cGfVTzKHXPxDzQtoqEpS1qzPCWtVfHK8o=)
                          12: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: HbKwsuQgYC8kyv50M23w4h1WaGyYUtMgukyV/PzUlcs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:62:0c:ce:a3:ce:12:8e:88:88:5c:cb:15:a4:85:6f:2e:06:bb:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Oct 20 10:06:24 2025 GMT
            Not After : Oct 23 14:31:24 2025 GMT
        Subject: CN=D424A09EE12DEB200F0561F4F491D6F60FD0EF01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:7e:7e:be:4d:cd:1d:e4:ee:fe:c1:7f:f1:
                    a7:e4:bd:bd:f6:bb:b0:72:58:98:32:57:89:cb:7c:
                    3d:84:86:ff:84:62:b7:b5:8d:6f:07:cf:f7:2d:b7:
                    73:b5:8b:c0:4e:e5:4a:b2:07:74:4a:68:e5:60:c0:
                    4c:da:28:21:66:44:6d:10:e3:e6:02:f6:81:ec:86:
                    6a:3f:f6:80:02:9d:11:4a:d0:f1:e9:1e:31:98:05:
                    72:ab:9b:7b:74:aa:5a:27:b1:3f:9c:da:4e:f2:27:
                    4a:74:87:9e:4c:75:cd:5f:a2:7c:78:81:7d:44:28:
                    5c:30:30:35:5c:b1:59:31:d2:0e:b5:a7:ef:f6:5d:
                    f4:ad:ee:38:ab:c6:c0:f6:12:60:86:c4:9d:07:04:
                    5f:df:e9:ae:30:56:50:cb:39:13:9d:de:9e:65:88:
                    c0:e3:72:ba:7f:14:10:44:eb:b6:e5:49:2f:56:01:
                    e3:60:7b:56:26:c5:29:b7:4a:4d:45:8b:ed:b2:e3:
                    4f:04:e0:bb:3b:2c:c7:a8:f7:58:b5:67:58:73:ae:
                    2b:37:42:cf:fb:66:5a:bd:e8:90:6e:85:52:49:c1:
                    5d:16:07:64:d2:8e:43:1e:e2:35:cf:ed:3b:82:9a:
                    00:05:2a:46:09:ea:d3:90:e5:fd:35:ba:ed:41:46:
                    05:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:A0:9E:E1:2D:EB:20:0F:05:61:F4:F4:91:D6:F6:0F:D0:EF:01
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9d:11:4c:06:09:c7:4e:12:6f:aa:48:0b:00:65:51:a2:86:
         4c:3d:3b:66:93:45:b9:25:5f:fa:6f:3b:67:bd:67:6b:64:e7:
         0d:1d:fd:01:43:eb:61:46:a6:4f:ef:1f:6f:c6:4a:a4:c3:20:
         a9:4e:0f:ed:8d:e6:2c:31:28:1d:b5:7a:90:f9:ae:60:cd:1e:
         d5:33:d5:33:46:d1:2c:0c:33:42:58:8b:db:63:e1:60:5e:32:
         e8:20:88:fe:c8:f6:2c:1b:ec:81:6b:55:80:82:3a:fc:6a:36:
         bb:01:53:30:be:d9:2c:eb:47:bc:84:45:19:f7:8f:03:23:96:
         23:99:f9:6b:34:6a:95:d7:3e:f4:ef:95:5d:63:c4:14:ea:4f:
         d1:a8:4e:40:49:7b:a4:d8:de:74:01:d1:f5:28:58:b0:e9:94:
         d3:dd:d5:f3:7d:5a:14:f5:76:63:5e:11:18:8c:d9:a7:0c:33:
         c5:3d:06:c6:f6:4e:75:ea:01:8a:b0:48:81:01:93:fb:a6:a1:
         68:af:ae:12:4e:6d:eb:af:f1:dc:ab:39:ae:70:11:9d:61:73:
         5d:92:61:fa:c1:a9:27:82:06:d5:df:f2:02:c0:a6:95:1b:07:
         75:e4:be:96:e8:8a:50:23:9c:ed:3d:ef:22:f1:ed:6c:ba:13:
         04:d6:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:00:06 2025 by rpki-client