Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
File:                     FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft (raw, json)
Hash identifier:          PpAClTINkwCcaC5sdkKsqAVfotzPgnyFPBPdJWtT4fw=
Subject key identifier:   A5:BF:04:B3:26:FF:06:91:E2:70:AD:BC:04:54:9A:77:BB:81:05:6E
Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
Certificate issuer:       /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Certificate serial:       016844BD2FF38031A54EBCE0BD7B1182935832A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
Manifest number:          0509
Signing time:             Fri 22 Aug 2025 01:01:41 +0000
Manifest this update:     Fri 22 Aug 2025 00:56:41 +0000
Manifest next update:     Mon 25 Aug 2025 02:08:41 +0000
Files and hashes:         1: 3137352e3135382e34382e302f32302d3234203d3e20313335343738.roa (hash: 94hNYux8eWZz1uyVT99V5HDegQ13UDwZ7M1KtXnNuOw=)
                          2: 323430323a393830303a343030353a3a2f34382d3438203d3e20313336313038.roa (hash: ONp4B01vgh7iWIU+RoQbzYAR3JD5eNkfucFDErVtZKQ=)
                          3: 323430323a393830303a343030323a3a2f34382d3438203d3e20313331313139.roa (hash: romvh4P9a79Pr4J569XqtgjdGIrqpQXhEG/K5DHlLes=)
                          4: 3132312e3130302e302e302f32312d3234203d3e203338313538.roa (hash: R/eJpCGlRI/zV/XFrfuap+1qh+BYzQ+18W4bHCKPljo=)
                          5: 3137352e3135382e33322e302f31392d3139203d3e2034373837.roa (hash: MQJI+s1kh56D+8PlegoVLWOh3j30QL4aJfmh+K7dBRI=)
                          6: 323430323a393830303a343030363a3a2f34382d3438203d3e20313338313338.roa (hash: qLMS5n6MICGX7jMIWrfU1gynyNSBdRm2V/YFupb8Gq4=)
                          7: 323430323a393830303a3a2f33322d3438203d3e203338313538.roa (hash: YuhlhGpBa/rvdjFiICmkr20uOyD33Y2ob8cJ0jjldVM=)
                          8: 3137352e3135382e33322e302f32322d3234203d3e2034373837.roa (hash: uZQkOk+CpUIXDZqH2BmXwSFTNgck/jA2xelBBArMP0k=)
                          9: FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl (hash: tZz0OyqafVg7KizSfJNzUI2zjSOVrzch0mmkXpOhqf0=)
                          10: 323430323a393830303a343030303a3a2f34382d3438203d3e20313331313137.roa (hash: EhLhnkz+tJZEa0MJMT1YkNCBA4ZvjDWQMMMtcKGynfI=)
                          11: 3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa (hash: 7pDLsHgOcZwn1eSxA+Npm2ov2bKnIJgWI3SSJl41Zls=)
                          12: 323430323a393830303a343030333a3a2f34382d3438203d3e203338353038.roa (hash: kVCBdk2VmpyopZqVmrScI5B0Mvq/xa323JLB5pEhsQA=)
                          13: 323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa (hash: 7Zt9Qo2CwU5k43ZU/bzxQ7yO/llsHySgXleKYAIqOl0=)
                          14: 323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa (hash: MBiGxv0ZO20HmuL2lUlmVAx4s0nmUR8oNwBPTRWxbyM=)
                          15: 323430323a393830303a343030313a3a2f34382d3438203d3e20313331313138.roa (hash: d5986EOySqOf25Kh0+1S+OCcFuFk0+QM0Sd3IiA6baE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
                          rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 02:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:68:44:bd:2f:f3:80:31:a5:4e:bc:e0:bd:7b:11:82:93:58:32:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
        Validity
            Not Before: Aug 22 00:56:41 2025 GMT
            Not After : Aug 25 02:08:41 2025 GMT
        Subject: CN=A5BF04B326FF0691E270ADBC04549A77BB81056E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:17:20:63:01:59:28:56:67:11:91:5a:97:
                    82:fa:4a:ab:17:f2:c5:e2:8a:54:70:cc:8b:8f:a4:
                    82:c8:4e:80:ed:cf:3f:ab:f7:79:c8:fd:24:cc:f4:
                    84:b6:bd:6b:40:01:54:89:73:40:df:ee:e7:66:e3:
                    80:12:a0:4d:24:69:22:01:a5:ec:c6:00:c8:39:11:
                    61:1d:1f:a5:9e:73:35:04:f8:7d:59:e8:e4:c6:6a:
                    ee:9e:4e:8e:8d:8c:a8:8d:c5:75:2f:91:7e:3b:6c:
                    0b:5c:bb:28:59:d5:5b:85:c7:44:d6:b5:cd:27:23:
                    93:1d:47:86:25:00:d9:6c:cc:3e:18:93:55:07:65:
                    3c:89:6c:2b:e9:18:7d:cb:0d:d9:e9:1d:91:9a:3d:
                    bd:32:78:9f:01:b6:30:55:a0:73:6f:dc:dd:a8:37:
                    e5:08:01:a4:af:bf:d7:f9:1c:74:81:63:9a:9c:00:
                    08:c3:53:e0:0c:44:79:57:91:3c:a1:b7:43:19:02:
                    d3:4a:7f:57:26:f6:6d:20:13:f0:38:69:fd:2c:9e:
                    e5:8c:01:aa:a3:da:20:ec:8b:43:7e:78:1e:a7:f7:
                    a6:6f:cd:56:c3:39:20:d0:b5:70:d4:59:4d:fd:cd:
                    4e:69:fb:53:80:36:ca:00:f5:9b:c3:1f:3a:85:52:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:04:B3:26:FF:06:91:E2:70:AD:BC:04:54:9A:77:BB:81:05:6E
            X509v3 Authority Key Identifier:
                keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9f:93:bf:a2:8c:59:f8:99:0e:7a:12:e5:a1:64:36:34:b4:
         e9:75:1c:a0:5c:8f:d1:5b:48:4b:1d:0d:fe:d0:7c:d7:e2:8a:
         ba:f3:85:15:f4:25:b3:69:af:3a:dc:33:e7:a5:78:62:8d:8f:
         d8:fc:6e:78:8d:67:8e:2c:69:66:66:92:bf:c1:bb:f8:b7:90:
         43:93:d9:f9:40:cf:8d:8a:ad:56:46:2e:66:58:29:3b:df:6c:
         be:bc:f8:76:d8:63:bb:e6:97:9e:6b:41:5e:53:fa:1b:b7:6e:
         c5:a8:89:4e:0c:14:fb:16:e7:fd:b7:20:d5:cc:7f:11:be:0d:
         59:fc:0e:af:72:11:56:b6:cc:d7:0e:bb:ed:34:a0:84:0f:58:
         90:93:93:65:c9:f5:d4:3f:7f:2f:60:68:6f:a7:91:5f:25:5d:
         12:1b:6b:66:8a:56:58:71:e1:59:ce:c9:e0:9c:84:13:29:9a:
         e5:14:6b:9c:56:fd:42:d8:3d:7d:9a:9d:8b:bf:a9:35:7c:81:
         d5:0f:37:5f:8c:53:f0:0f:4e:5d:dd:35:43:20:a4:22:5d:5c:
         c0:ac:20:b5:7d:8b:05:be:33:fb:d7:cc:7e:19:58:fb:c3:fb:
         32:30:e1:f6:eb:5a:aa:52:23:c9:f7:f6:92:3f:0d:36:7a:ab:
         04:e4:76:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:57:38 2025 by rpki-client