Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft
File:                     B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json)
Hash identifier:          57KS27RkFHwUJ4M+1OdmzsGWjI+dikIs+HUh0JFALZs=
Subject key identifier:   0A:75:D3:A0:8A:9B:7F:50:0E:AE:C5:B0:1D:F3:2C:0C:0C:CA:FB:09
Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E
Certificate issuer:       /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E
Certificate serial:       3C2DCD7B35CD6F077210D5B8588A64B975C6548D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft
Manifest number:          0519
Signing time:             Sat 18 Oct 2025 11:32:08 +0000
Manifest this update:     Sat 18 Oct 2025 11:27:08 +0000
Manifest next update:     Tue 21 Oct 2025 15:48:08 +0000
Files and hashes:         1: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: QXC0eXHt3mefBMOLU2RSHWcMGI2fAo0WO9gDVnYdrAs=)
                          2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: /bsoYwdDybVaxRYLdodfmTp8ZF3K0bEZOdDFvTt3y8c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl
                          rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2d:cd:7b:35:cd:6f:07:72:10:d5:b8:58:8a:64:b9:75:c6:54:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E
        Validity
            Not Before: Oct 18 11:27:08 2025 GMT
            Not After : Oct 21 15:48:08 2025 GMT
        Subject: CN=0A75D3A08A9B7F500EAEC5B01DF32C0C0CCAFB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:df:fe:2c:02:6e:09:74:14:a2:1d:3d:57:
                    da:b4:6e:79:58:c0:7f:d0:17:5b:10:41:8d:02:0d:
                    2e:ba:8a:8e:d3:d3:a4:d5:93:cb:c9:45:bd:7d:48:
                    4d:2f:aa:e4:15:b5:8e:ca:0e:ca:88:1b:f2:6d:a8:
                    80:5e:63:64:bb:51:7d:2b:d5:37:3f:c0:dd:75:c1:
                    59:02:45:f8:11:75:9a:a8:0a:88:5d:b9:75:9d:45:
                    24:9e:a3:07:58:27:6b:22:0a:ac:16:d1:ab:52:16:
                    2a:a2:43:84:e4:ee:b8:ed:3a:cc:27:20:2f:f5:38:
                    f8:7c:83:c7:84:6e:02:89:df:34:a1:61:3f:f8:f3:
                    3d:cd:98:9e:d8:fa:7e:d9:72:f6:9a:ab:a1:d9:3c:
                    63:34:b4:db:08:9e:a7:4b:d8:77:2e:7f:e8:15:64:
                    18:aa:1b:9a:17:9c:4d:d3:4a:49:15:eb:e1:1a:25:
                    82:be:31:06:d3:9d:e3:f9:88:5c:1c:ae:82:87:f3:
                    1d:51:5b:65:42:b5:d4:dc:fd:2d:12:52:70:79:06:
                    d2:a4:3a:12:0a:94:36:e5:1b:77:25:83:6e:cd:3d:
                    34:5f:6c:57:64:50:1c:18:20:f4:8d:77:82:19:19:
                    ef:b6:b6:5c:94:9c:74:24:60:9f:86:c1:e7:c6:79:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:75:D3:A0:8A:9B:7F:50:0E:AE:C5:B0:1D:F3:2C:0C:0C:CA:FB:09
            X509v3 Authority Key Identifier:
                keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:15:bf:da:07:17:8a:49:2e:08:c9:01:e4:e9:7f:cf:6b:fc:
         a9:ca:dd:6e:53:50:92:03:a8:60:68:fb:e7:b4:01:9a:29:92:
         d6:53:54:91:2d:f5:ab:f6:67:fc:a1:de:01:dd:23:93:f4:c1:
         d8:64:bb:80:8a:dc:0b:bc:83:8f:2e:4a:7b:67:52:45:ee:7d:
         d3:1c:77:0d:5b:01:48:29:ab:e9:98:04:13:74:f2:12:01:da:
         9e:8a:dc:c0:3b:20:3e:af:e5:aa:29:06:20:70:86:78:68:d8:
         c4:11:cd:5f:ae:5a:2d:dd:b3:7d:3d:78:36:9d:11:d5:ee:5a:
         f2:44:68:6b:2e:ad:21:fa:36:d3:ae:c5:17:82:9e:65:45:30:
         82:97:04:f4:78:3f:f4:32:f9:31:0d:83:9c:eb:9a:2d:ab:09:
         3f:65:c5:f8:d6:29:7d:ea:ae:21:1c:bb:84:ee:88:71:6a:7a:
         72:b0:b2:ef:ef:bc:74:50:a6:22:ef:7c:b2:a4:66:3e:b6:70:
         79:41:93:ac:5a:99:47:ff:9d:43:7d:8e:bb:46:a7:34:05:56:
         00:ae:c9:aa:ab:a9:1d:ae:56:b0:56:a0:c9:95:3c:5d:53:f3:
         e1:3f:36:87:e2:52:a7:36:ba:e9:be:8e:c3:be:8c:21:22:07:
         07:fe:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:03 2025 by rpki-client