Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
File:                     295131167768CC78482F796BB58CF5A01A014393.mft (raw, json)
Hash identifier:          hgRH2V184JlzKJ3ZWHjzpNNz+1R1qVdLWAK7ZTp2s3g=
Subject key identifier:   F0:5F:07:63:0A:98:32:BC:81:3E:47:81:70:9F:24:22:6A:E0:B5:BB
Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93
Certificate issuer:       /CN=295131167768CC78482F796BB58CF5A01A014393
Certificate serial:       7AABDEE9B19CFB91933F1799F1D57E13B321E709
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
Manifest number:          CD
Signing time:             Sat 18 Oct 2025 06:21:27 +0000
Manifest this update:     Sat 18 Oct 2025 06:16:27 +0000
Manifest next update:     Tue 21 Oct 2025 17:08:27 +0000
Files and hashes:         1: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=)
                          2: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=)
                          3: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: ISbcZUKS4vI1A/Gfk5xJ0BiD/h76y5NT5SGeFZmC6qw=)
                          4: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=)
                          5: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=)
                          6: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=)
                          7: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl
                          rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 17:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ab:de:e9:b1:9c:fb:91:93:3f:17:99:f1:d5:7e:13:b3:21:e7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295131167768CC78482F796BB58CF5A01A014393
        Validity
            Not Before: Oct 18 06:16:27 2025 GMT
            Not After : Oct 21 17:08:27 2025 GMT
        Subject: CN=F05F07630A9832BC813E4781709F24226AE0B5BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:11:3d:ae:13:83:a5:ab:e9:ff:e4:d5:16:
                    27:ca:fe:0c:05:34:5c:c2:72:4d:1e:ea:30:c3:ac:
                    7e:00:49:6b:dc:34:94:5e:90:70:66:f6:6d:8a:22:
                    b4:84:d6:24:80:8d:a9:40:1c:d0:a9:b5:5c:72:f9:
                    7d:17:ea:bd:4d:e9:a4:4a:f2:5e:4c:b2:7d:ba:c6:
                    7a:a6:43:66:41:36:3b:a6:83:fe:00:2e:77:44:f7:
                    50:c6:7d:82:99:45:3f:2d:4e:f4:1a:8c:fc:d5:d1:
                    55:fa:2d:7b:13:9c:05:23:4c:3f:36:95:19:2a:ae:
                    1a:15:d8:ea:85:e5:14:62:76:68:14:f5:8d:f7:24:
                    8c:fa:62:1b:d4:fa:25:3f:1e:c2:00:98:8d:64:54:
                    56:20:14:16:e7:ce:5c:50:24:6a:f3:74:1e:35:02:
                    d9:c5:cf:4d:58:a3:3a:38:d3:fc:e2:3f:1e:e5:db:
                    62:e7:10:74:c2:91:67:d2:d3:12:26:3d:5f:72:9f:
                    8b:0c:23:26:36:d7:9c:d1:a7:69:1f:80:d5:01:29:
                    fb:ca:15:34:4c:bf:55:c5:c4:50:82:16:99:5a:e8:
                    81:7a:81:fe:df:37:9e:28:a0:fb:7a:b4:fc:64:49:
                    13:e6:a9:5e:0b:04:9a:f1:f2:33:9b:e9:8d:52:47:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5F:07:63:0A:98:32:BC:81:3E:47:81:70:9F:24:22:6A:E0:B5:BB
            X509v3 Authority Key Identifier:
                keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:21:83:7a:97:54:44:f3:86:99:e0:27:7d:04:2f:d4:6e:ba:
         0f:d3:ad:66:fe:24:8d:2d:9f:c3:43:03:6b:11:21:5d:07:f9:
         15:44:e1:f2:30:40:85:94:d8:2e:5c:2b:ed:fa:8c:0e:78:9a:
         63:c6:57:fa:ab:2d:d7:83:29:28:7b:68:6d:9c:db:ca:ad:cf:
         9e:50:47:b5:e5:b8:71:bf:46:79:c2:53:84:c8:5a:03:ab:aa:
         49:38:92:e1:86:14:ad:8a:a9:50:64:51:e8:f9:c1:5b:b5:e7:
         71:54:05:9b:f4:4d:08:45:cc:88:5a:b6:7d:fa:49:8b:0b:86:
         b0:9a:84:72:89:c7:aa:41:ae:7f:ab:44:b0:60:9c:35:7f:f5:
         3d:e1:26:54:c0:f2:c7:69:aa:f0:55:69:a6:d5:df:ed:f5:72:
         88:83:48:b8:58:41:72:6a:f2:0e:1d:39:2b:0c:df:9b:90:c4:
         62:28:6e:a1:91:a2:c6:0b:38:1d:94:0b:38:93:0f:4b:c5:0a:
         c0:6d:38:ef:2b:35:dc:be:09:1b:6b:42:2a:85:75:2c:9b:92:
         c4:b5:24:1d:8c:7d:9a:ca:f7:f4:01:fd:15:d7:a4:a5:04:47:
         86:c1:c5:42:56:8a:99:b7:4a:fc:b8:5e:02:3a:e8:c5:da:17:
         e4:44:79:dd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeqve6bGc+5GTPxeZ8dV+E7Mh5wkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx
QTAxNDM5MzAeFw0yNTEwMTgwNjE2MjdaFw0yNTEwMjExNzA4MjdaMDMxMTAvBgNV
BAMTKEYwNUYwNzYzMEE5ODMyQkM4MTNFNDc4MTcwOUYyNDIyNkFFMEI1QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lRE9rhODpavp/+TVFifK/gwF
NFzCck0e6jDDrH4ASWvcNJRekHBm9m2KIrSE1iSAjalAHNCptVxy+X0X6r1N6aRK
8l5Msn26xnqmQ2ZBNjumg/4ALndE91DGfYKZRT8tTvQajPzV0VX6LXsTnAUjTD82
lRkqrhoV2OqF5RRidmgU9Y33JIz6YhvU+iU/HsIAmI1kVFYgFBbnzlxQJGrzdB41
AtnFz01Yozo40/ziPx7l22LnEHTCkWfS0xImPV9yn4sMIyY215zRp2kfgNUBKfvK
FTRMv1XFxFCCFpla6IF6gf7fN54ooPt6tPxkSRPmqV4LBJrx8jOb6Y1SR7kNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8F8HYwqYMryBPkeBcJ8kImrgtbswHwYDVR0j
BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3
NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx
NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz
MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1
QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAIhg3qXVETzhpngJ30EL9Ruug/TrWb+JI0t
n8NDA2sRIV0H+RVE4fIwQIWU2C5cK+36jA54mmPGV/qrLdeDKSh7aG2c28qtz55Q
R7XluHG/RnnCU4TIWgOrqkk4kuGGFK2KqVBkUej5wVu153FUBZv0TQhFzIhatn36
SYsLhrCahHKJx6pBrn+rRLBgnDV/9T3hJlTA8sdpqvBVaabV3+31coiDSLhYQXJq
8g4dOSsM35uQxGIobqGRosYLOB2UCziTD0vFCsBtOO8rNdy+CRtrQiqFdSybksS1
JB2MfZrK9/QB/RXXpKUER4bBxUJWipm3Svy4XgI66MXaF+REed0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:38 2025 by rpki-client