Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft
File:                     25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json)
Hash identifier:          GLVnwmEqwqIlAsSJ4wRQMPLYG1556bdXjg4zTLrMscI=
Subject key identifier:   07:14:4E:2E:A3:6B:A0:42:8E:D4:45:7C:F0:D9:81:03:73:0A:CF:46
Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3
Certificate issuer:       /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3
Certificate serial:       6269A0AD8B97DB7079C336D598CF455DBB1230D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft
Manifest number:          0187
Signing time:             Sat 18 Oct 2025 22:10:51 +0000
Manifest this update:     Sat 18 Oct 2025 22:05:51 +0000
Manifest next update:     Wed 22 Oct 2025 09:17:51 +0000
Files and hashes:         1: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: hwAz0+F1Pflvq+/i/Ox60vy6n9w5Py2JiFtWThdf0Oo=)
                          2: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: DAHFV0c/aFM082VX0oHdmhTVlcTRSOxGfmPDNewRFNU=)
                          3: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl
                          rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 09:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:69:a0:ad:8b:97:db:70:79:c3:36:d5:98:cf:45:5d:bb:12:30:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3
        Validity
            Not Before: Oct 18 22:05:51 2025 GMT
            Not After : Oct 22 09:17:51 2025 GMT
        Subject: CN=07144E2EA36BA0428ED4457CF0D98103730ACF46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:6b:5e:ca:69:aa:10:32:ae:fa:17:b2:ee:
                    f7:7c:83:ab:78:13:08:81:66:fe:48:12:75:c2:d5:
                    94:25:9c:70:13:fb:0b:f6:42:31:54:f6:4b:2f:25:
                    51:29:72:17:a6:f9:07:fa:3f:12:fe:85:2d:97:2a:
                    6e:fe:81:15:fe:4a:34:78:cf:57:12:9c:0f:45:3d:
                    14:67:e4:47:2a:d0:84:bc:fd:38:31:88:f5:5b:18:
                    1f:80:19:01:19:1a:a6:d2:ba:14:7a:13:46:47:56:
                    5a:d9:80:18:8f:66:1b:39:2c:87:07:6c:01:0c:c4:
                    80:9f:80:1a:17:dc:86:ca:07:d1:a8:dc:02:24:7a:
                    f4:52:40:23:b5:89:e0:ec:49:bf:fe:1c:60:df:b3:
                    c6:32:2f:f4:7e:3a:9e:f1:c9:63:2d:31:73:9a:20:
                    c9:41:b7:f9:d1:ae:19:fa:fa:d4:c5:45:b0:be:c5:
                    f2:60:6a:4a:72:e5:5e:d0:72:8f:55:a5:39:36:d8:
                    e4:75:03:62:b5:fb:41:0c:e3:84:32:92:0c:c6:0c:
                    89:52:b1:48:85:48:af:5b:56:69:6a:80:1c:89:e4:
                    10:72:af:b8:95:26:f3:ff:d3:74:a1:01:9e:c2:8c:
                    e7:fe:e1:3d:b9:70:9b:6e:b5:b1:9e:f6:e9:66:9d:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:14:4E:2E:A3:6B:A0:42:8E:D4:45:7C:F0:D9:81:03:73:0A:CF:46
            X509v3 Authority Key Identifier:
                keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e7:2d:4a:04:14:4c:a2:c1:8a:7c:97:49:c0:e0:36:bf:82:
         d2:f6:ea:bd:6a:32:c1:2c:a7:23:bf:41:02:29:eb:2f:b4:cf:
         a9:73:72:79:97:0c:98:94:39:8a:c4:02:6d:c9:ff:8a:c1:55:
         35:69:e3:9f:52:27:6c:2a:b7:ef:d3:c9:c3:aa:80:b8:19:73:
         68:81:12:35:63:a8:39:52:6d:a0:1f:b3:89:7e:06:fc:46:cf:
         c5:8a:f2:d1:66:ab:8d:88:6b:8b:f0:16:30:3a:39:fa:c4:b8:
         f3:53:ce:d0:10:92:34:82:05:3e:1c:11:e6:78:f4:49:36:c7:
         43:21:70:1a:2f:8e:cc:3d:8c:d2:2d:dc:44:46:17:54:11:b7:
         1a:15:26:06:1e:d9:6f:a0:36:24:8c:db:94:8d:f5:0c:28:fe:
         60:58:47:97:f9:19:69:0d:67:28:8e:d1:77:d3:96:97:02:cf:
         7d:60:d7:29:b8:55:00:af:4c:06:43:ae:3c:bd:de:69:b3:04:
         9a:06:e6:c0:fb:8b:d9:b3:2d:6b:2b:b5:50:5c:3b:e5:80:53:
         b1:a8:33:2e:98:1d:75:f5:8d:a2:f4:b5:0d:c4:e7:4d:d7:b8:
         25:a2:25:0e:14:60:3d:05:25:49:c3:45:29:1b:cd:fd:a1:ce:
         c1:24:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:50 2025 by rpki-client