Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft
File:                     F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json)
Hash identifier:          R5T9E2bMQW38h+/Hqhdc+1ndh4NOOGVgJvSgRD8lF7U=
Subject key identifier:   49:B4:27:24:45:6A:FC:56:52:B9:7B:29:9A:7C:5B:F6:41:07:EF:EA
Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32
Certificate issuer:       /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832
Certificate serial:       57C73B36AC71B63D99EC554FA8FD700A8F4645B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft
Manifest number:          0114
Signing time:             Mon 20 Oct 2025 16:31:33 +0000
Manifest this update:     Mon 20 Oct 2025 16:26:33 +0000
Manifest next update:     Thu 23 Oct 2025 16:46:33 +0000
Files and hashes:         1: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: UZEJkb14VYd5zTuhtfKTenX+tuyfDVy8P92hqVk8bgg=)
                          2: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: J/HjNqkhXnFKpfYqMHZGuWCjUTYmN3PhhdGKBTB3fF8=)
                          3: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: tcD9B8za3o83puE+5evMMp5cofm2QVyf+SD2jvffeIM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl
                          rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c7:3b:36:ac:71:b6:3d:99:ec:55:4f:a8:fd:70:0a:8f:46:45:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832
        Validity
            Not Before: Oct 20 16:26:33 2025 GMT
            Not After : Oct 23 16:46:33 2025 GMT
        Subject: CN=49B42724456AFC5652B97B299A7C5BF64107EFEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:87:ed:bb:c8:dd:97:97:f7:b0:13:21:c9:
                    5e:fd:39:a7:a4:1a:72:c3:59:c3:aa:bf:e8:bc:ce:
                    b6:0d:7c:2e:e6:e2:f3:ef:42:be:3d:88:5c:a5:6b:
                    50:76:b6:47:25:20:36:81:e2:85:ef:41:f1:0b:02:
                    d7:a7:e2:89:4d:5f:b0:3a:ae:1f:cc:6d:d4:b2:6b:
                    d5:31:57:e6:62:db:7f:c2:2b:aa:0e:69:4c:27:f1:
                    e7:f5:ae:26:a2:c9:3f:25:fc:3c:a7:59:93:d2:df:
                    9e:49:7b:50:7c:8a:c7:ed:ff:20:be:30:70:d7:e4:
                    b4:4c:96:c4:db:45:0e:bf:b2:80:89:8e:d7:34:ca:
                    fc:07:c0:dc:2f:ec:9d:22:79:14:82:7a:78:56:fc:
                    71:36:61:18:d8:16:82:16:74:14:94:42:8c:9b:df:
                    18:74:0a:9d:ce:87:1b:37:16:a8:91:64:eb:5d:4b:
                    b2:6f:79:74:36:01:ad:ef:62:17:0b:77:14:ce:77:
                    62:b8:91:49:45:32:ec:5f:a7:d8:c5:3b:b6:8e:d8:
                    c7:8d:f1:de:e9:bd:17:d0:68:69:37:d2:34:ea:8a:
                    e2:3a:86:ce:d0:8b:d7:db:a9:d5:8e:a2:da:02:eb:
                    d3:f7:e2:c8:b9:21:aa:25:4e:4e:dd:5e:c9:54:e7:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B4:27:24:45:6A:FC:56:52:B9:7B:29:9A:7C:5B:F6:41:07:EF:EA
            X509v3 Authority Key Identifier:
                keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:82:53:a7:09:6b:4a:a5:0b:b4:30:5b:79:78:77:34:de:
         31:f3:23:31:99:78:da:6a:d3:88:96:16:40:fd:32:3d:70:24:
         07:44:1c:c9:13:e5:4a:c5:79:b0:c5:76:ca:38:f5:54:7a:f0:
         a3:4e:c6:73:d9:13:d0:c7:d3:15:94:d6:53:c6:3f:61:32:fe:
         cd:87:f8:fa:c0:2b:fa:15:b8:c4:f8:3d:ae:7e:a2:52:a5:51:
         8d:0c:82:3a:80:66:fb:bc:33:c4:ba:b9:6e:5e:13:f4:77:db:
         e6:d9:c6:f1:4a:33:40:71:a1:a7:6e:e2:23:54:1f:31:82:b5:
         68:f8:f3:b0:8b:08:62:ac:e8:15:87:03:b2:c3:76:67:96:6b:
         7b:72:76:64:4e:08:0a:2a:3e:4d:7c:37:94:76:d4:84:a2:0d:
         c6:9b:2d:74:b0:50:59:81:40:ef:38:90:ae:0b:ce:54:d3:28:
         21:10:a4:4f:54:7d:7f:d2:0d:92:d8:69:b1:6c:66:67:50:ae:
         8b:99:94:c7:5b:21:27:7b:aa:35:95:4f:27:5d:bf:21:44:44:
         f4:3b:c0:9d:8c:4b:e4:0a:b0:7c:b3:6d:25:b6:fe:5e:6e:63:
         37:85:95:89:7e:81:05:8c:b8:67:5e:9f:f5:ee:84:80:25:77:
         f8:57:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:32:01 2025 by rpki-client