Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft
File:                     986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft (raw, json)
Hash identifier:          c+g+/L4jSCF6ML4cvPckHoP/ACIoaZBIPUiWFPYZ3lY=
Subject key identifier:   4E:A0:25:57:D9:BF:14:CE:F1:BB:83:6C:B9:7C:0B:A5:6B:F4:F5:7F
Authority key identifier: 98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F
Certificate issuer:       /CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F
Certificate serial:       197268E1147B3833AFCDB1EE308D22F49DD71882
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft
Manifest number:          0517
Signing time:             Sun 19 Oct 2025 08:31:35 +0000
Manifest this update:     Sun 19 Oct 2025 08:26:35 +0000
Manifest next update:     Wed 22 Oct 2025 09:06:35 +0000
Files and hashes:         1: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: 5ZMFCFB2Z2k1wsOQD3WlLnfBqmNmCDqFjaN+cKeJCYg=)
                          2: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl (hash: deUhSBOnj8MhqbowynJJOdtY6jpP65O7L8+3fBVIJCo=)
                          3: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: PNy2Ky9qBufKbv/f4p4dFdjvMCRYXe8YTpQCXZbAHQM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl
                          rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 09:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:72:68:e1:14:7b:38:33:af:cd:b1:ee:30:8d:22:f4:9d:d7:18:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F
        Validity
            Not Before: Oct 19 08:26:35 2025 GMT
            Not After : Oct 22 09:06:35 2025 GMT
        Subject: CN=4EA02557D9BF14CEF1BB836CB97C0BA56BF4F57F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:ae:f2:fd:d6:53:e3:99:80:93:82:56:9b:
                    f4:d3:e0:8e:e6:b8:ac:bc:eb:de:29:86:db:47:c1:
                    c1:27:54:7b:25:33:85:a0:12:89:eb:e9:bf:1d:7a:
                    8b:dc:02:44:86:d1:85:72:0c:54:ed:93:c7:5d:dd:
                    38:77:36:68:1f:d9:80:da:33:cf:e8:61:b6:07:55:
                    9b:10:07:00:3b:be:fd:50:a9:43:e6:ed:49:3b:2b:
                    69:4d:bd:b7:3a:81:f0:5a:49:54:09:84:c6:87:83:
                    d3:38:67:1d:82:56:c5:29:8e:31:ed:4b:a2:79:6f:
                    b8:33:c6:5e:09:65:16:e5:18:94:8f:20:9a:63:f4:
                    c3:92:29:5c:4b:68:f6:1c:1b:ca:d0:dd:64:bd:b3:
                    48:71:95:1d:0d:8e:82:57:64:71:89:78:05:72:2a:
                    7f:22:7d:a2:21:95:13:66:a1:8e:9c:97:40:42:89:
                    4c:9d:dc:3e:e6:88:07:d9:de:a1:b8:f0:cb:9d:51:
                    ef:24:00:ae:83:b8:ef:d7:5e:fa:78:d0:c1:a6:7b:
                    98:38:95:60:ee:ab:0a:1f:93:4c:a5:f2:eb:c9:49:
                    27:bd:c4:af:04:11:b5:23:fc:6d:7c:71:db:15:38:
                    cc:a9:99:2c:2b:aa:0b:ad:18:93:19:bc:d3:8c:f4:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A0:25:57:D9:BF:14:CE:F1:BB:83:6C:B9:7C:0B:A5:6B:F4:F5:7F
            X509v3 Authority Key Identifier:
                keyid:98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:7d:b6:f1:2a:3e:47:7e:31:ed:99:49:f5:c2:d7:aa:97:57:
         3d:6c:01:23:ac:0b:2c:3c:3f:bd:80:e8:9b:fa:7f:54:04:1b:
         8b:1a:37:61:ca:bc:cb:04:d1:25:6b:0e:88:64:fb:d6:8b:80:
         40:28:4f:1c:34:74:91:6b:38:b4:dd:a1:4b:25:10:d4:26:ba:
         4c:ea:52:a7:c3:14:01:a6:7d:51:4e:65:91:1a:b1:d0:99:67:
         db:36:80:31:78:f2:9d:67:00:7b:dc:63:83:98:1c:02:79:be:
         93:56:6e:19:02:8b:34:ad:87:2b:22:29:ca:4b:ab:25:b3:11:
         68:59:ff:95:7c:fd:e5:d9:d4:b5:a2:d3:e3:4a:65:1b:8f:66:
         e6:1c:8a:7f:f1:08:9c:80:89:88:a1:d6:3f:64:12:0e:d5:04:
         3b:79:c7:bb:33:05:99:48:7c:04:33:5b:2f:a0:65:3d:2c:e2:
         6a:0b:6e:b7:d9:19:d3:46:c2:ed:93:e2:31:7e:2f:d1:5d:cb:
         8a:c4:a2:43:47:bb:67:6d:f9:4f:23:10:8c:96:88:33:6f:d2:
         ac:87:ae:83:4a:14:9b:5d:9c:d7:76:84:a0:22:ca:66:ae:fa:
         97:ea:7d:b1:f4:5f:70:b8:0d:4b:e9:8c:64:81:c9:1d:97:8d:
         0a:1a:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:37:08 2025 by rpki-client