Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
File:                     43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json)
Hash identifier:          1aRY6NgER4cvJ/1CS2JMvDBnZ8ZII3540Q2sBpJ6G5c=
Subject key identifier:   A8:02:1D:E0:2D:14:18:C5:F3:60:68:6F:8A:BA:60:F7:42:6D:7E:08
Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
Certificate issuer:       /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Certificate serial:       1A35EEBC6FC1415FC415EA9B1954CB757372FB6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
Manifest number:          011C
Signing time:             Thu 21 Aug 2025 20:20:47 +0000
Manifest this update:     Thu 21 Aug 2025 20:15:47 +0000
Manifest next update:     Mon 25 Aug 2025 01:01:47 +0000
Files and hashes:         1: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: TuaIrEHzxHS0/ao9nggkEo+4388sXTMFpysFAoY6Ils=)
                          2: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: 2Hln6BS4WrawaIrtST0hMFMxCF92/MTIG8HBGwFSZYU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl
                          rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 01:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:35:ee:bc:6f:c1:41:5f:c4:15:ea:9b:19:54:cb:75:73:72:fb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
        Validity
            Not Before: Aug 21 20:15:47 2025 GMT
            Not After : Aug 25 01:01:47 2025 GMT
        Subject: CN=A8021DE02D1418C5F360686F8ABA60F7426D7E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:77:8d:f4:f5:be:f4:74:7a:a6:4e:ba:df:
                    42:3a:3d:1e:3a:11:f7:e2:80:ae:58:ab:49:72:44:
                    15:c1:ff:93:f4:9a:47:6a:6a:1c:c2:30:d0:72:ef:
                    e7:13:e6:62:f3:e7:40:02:b7:e2:e2:ba:8d:1e:0f:
                    ed:b7:fc:b0:3a:43:cd:6c:a5:87:60:fa:5c:e2:05:
                    8f:d1:24:46:c5:b6:29:93:4a:db:a6:6b:a4:91:d1:
                    3a:23:f8:d4:fb:51:39:52:b3:55:9a:dd:a6:b9:3b:
                    ce:d5:9b:11:10:3f:c6:31:06:76:80:87:8d:a3:dd:
                    cd:36:a9:4d:7d:12:f1:4f:82:6d:55:af:b9:80:c9:
                    54:79:4b:e5:20:a3:fa:09:ab:39:7f:56:b9:ee:fc:
                    81:e4:84:15:3e:d1:a5:56:fe:51:e2:1a:b2:11:cf:
                    18:4b:3c:46:e0:31:6f:bd:78:13:a8:4c:04:c0:ad:
                    d7:d9:16:26:38:0e:75:5b:c1:81:a2:da:0c:69:2a:
                    f1:96:5d:c1:8e:44:80:5c:37:fc:b1:2c:f7:28:a2:
                    9a:57:e6:8a:c8:36:92:c9:63:c3:b8:88:f5:de:1e:
                    b2:c4:1d:31:ec:f4:8d:0a:a7:90:ed:42:83:e5:5f:
                    08:b6:62:ce:3a:75:21:ea:67:b0:51:60:e7:ab:12:
                    74:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:02:1D:E0:2D:14:18:C5:F3:60:68:6F:8A:BA:60:F7:42:6D:7E:08
            X509v3 Authority Key Identifier:
                keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0b:49:48:93:e3:34:29:8f:a4:a0:3e:c3:22:3d:cf:c2:a3:
         be:da:b0:ad:99:6c:9b:70:5f:31:85:4e:5b:a2:70:ca:d5:5c:
         d4:58:e0:f9:f0:e8:2f:9c:61:f6:9a:dc:96:ff:15:d4:01:62:
         f2:a5:91:74:50:f1:1a:d1:5c:14:10:53:8f:5c:39:68:81:39:
         b5:61:09:0e:45:b6:eb:36:8a:1a:2e:55:d1:5c:24:90:cf:09:
         4b:49:e2:02:7f:37:16:3e:79:67:16:ae:b7:8e:9c:70:58:36:
         8c:e5:e7:30:ae:d9:5e:ef:7f:7f:c9:af:3e:c0:a9:be:01:29:
         92:e0:22:5f:e9:59:b9:98:4c:4c:8b:5f:f6:5f:8d:a3:80:d1:
         1b:79:6a:a9:cd:54:c7:72:65:6d:49:00:f0:db:ef:d8:65:84:
         ad:a5:92:22:1e:7f:ff:f1:54:04:90:92:18:0f:d6:f9:8f:bd:
         5b:3b:55:b5:7b:8a:18:96:96:3f:b8:5f:8c:db:96:90:21:5c:
         5d:41:e4:3b:6d:2d:13:17:a1:06:38:96:6f:03:91:ec:60:e0:
         05:41:c2:29:9f:e2:ef:70:9e:23:3f:2d:52:73:bb:5e:36:df:
         ae:ad:dd:05:da:09:65:1e:14:2b:62:25:b9:8b:34:ad:fe:73:
         e4:61:b4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:15 2025 by rpki-client