Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft
File:                     30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json)
Hash identifier:          9iVlkTUegF5qxKz/Lr7IN4FhzkIaYStsKeEzOGMy4Ao=
Subject key identifier:   39:8A:65:BD:75:D5:9A:1E:21:07:EA:82:B9:3D:33:EF:9F:5A:49:24
Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45
Certificate issuer:       /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45
Certificate serial:       5A76772BFD22CCE01D3E60326D271D25F2919575
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft
Manifest number:          01EA
Signing time:             Mon 20 Oct 2025 07:11:11 +0000
Manifest this update:     Mon 20 Oct 2025 07:06:11 +0000
Manifest next update:     Thu 23 Oct 2025 13:35:11 +0000
Files and hashes:         1: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: TWtwO5FVXBZsjZh1YhnTC5QGRfiJwreJI40nxoAGLlw=)
                          2: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=)
                          3: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: Udg26cCHQ+Qftm36Kch+i7dbSWtv7odm32FXa+73LYY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl
                          rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:76:77:2b:fd:22:cc:e0:1d:3e:60:32:6d:27:1d:25:f2:91:95:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45
        Validity
            Not Before: Oct 20 07:06:11 2025 GMT
            Not After : Oct 23 13:35:11 2025 GMT
        Subject: CN=398A65BD75D59A1E2107EA82B93D33EF9F5A4924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:bd:c7:81:5d:90:e2:ee:ed:5b:29:10:01:
                    a4:6a:c5:f8:f6:00:96:8b:55:e3:ba:7d:dd:a1:1b:
                    5c:60:2c:01:9e:c3:f4:b8:d1:5a:40:f5:90:65:ab:
                    74:9b:18:f0:33:e0:f8:3a:03:67:71:89:97:d0:8f:
                    6e:e3:e5:21:9d:ab:94:36:7e:00:3f:1f:7f:1f:a2:
                    d0:40:93:81:f6:2b:89:83:d4:4d:4c:bf:06:de:76:
                    ac:04:83:2b:8d:16:68:1f:97:2e:67:32:0c:8b:25:
                    4b:52:b9:ad:61:64:87:4d:fd:9b:91:1b:9d:48:eb:
                    6d:bc:22:37:39:5d:7f:dc:d1:d0:dc:84:ab:f1:64:
                    69:e1:7a:82:65:97:4f:85:96:a4:d4:61:c1:d0:f1:
                    a7:54:eb:62:3b:b4:2a:1a:12:66:91:de:e9:67:69:
                    be:bd:ed:e0:b8:c8:16:2c:07:1a:89:34:c1:91:db:
                    55:5f:31:4d:53:af:ae:06:70:bd:5c:1c:e8:e6:b0:
                    df:92:0f:0d:99:ab:86:4b:cc:af:72:3a:72:82:1f:
                    c4:0b:13:b2:8a:0e:28:06:1b:c2:38:a3:bc:63:53:
                    99:86:f3:16:9c:a7:10:1e:89:4b:85:d6:bb:51:1d:
                    40:e9:39:17:3c:c7:b0:8c:11:db:4f:f5:f5:4b:4a:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8A:65:BD:75:D5:9A:1E:21:07:EA:82:B9:3D:33:EF:9F:5A:49:24
            X509v3 Authority Key Identifier:
                keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:41:6e:b0:41:43:18:e5:52:86:ea:71:d4:ef:37:7c:48:a1:
         1a:67:22:76:2f:5b:a5:f2:0e:a2:fe:93:e7:c3:6e:1f:0c:e8:
         22:6f:cb:e6:70:12:3d:d9:eb:ee:57:a2:72:01:4a:c3:8a:98:
         d5:50:29:70:ca:3c:44:78:27:2d:ba:94:3b:a8:94:15:e6:70:
         33:b8:bb:94:29:56:28:71:22:e2:0a:f2:d3:da:26:be:ec:0e:
         a1:ce:c3:7b:cd:60:35:30:9f:9d:a0:0e:c4:9d:d4:cd:41:92:
         99:27:50:9e:2e:c2:f5:ea:20:64:7a:54:a6:cb:cb:02:9b:f7:
         79:e9:dd:ad:34:fe:f3:56:76:c2:33:2d:eb:7e:24:b5:d8:92:
         dc:e5:26:42:f9:df:c6:bf:a6:db:e2:a2:e6:61:6b:37:fd:e1:
         70:3f:ac:ba:8a:fa:dc:f7:ae:9d:72:9e:bd:4e:eb:cc:59:38:
         ba:f2:6c:fd:74:5f:17:16:26:62:94:3e:64:21:c6:27:1f:ff:
         77:06:c2:d4:04:4f:70:99:db:8e:28:a1:1c:3f:cf:34:f9:7c:
         b7:a2:10:81:56:73:8c:c1:55:b3:e3:1a:83:62:39:50:23:8c:
         4b:88:da:59:3a:77:45:6a:2c:69:7d:72:38:b3:ca:17:e0:e2:
         6f:82:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:53 2025 by rpki-client