Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
File:                     A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json)
Hash identifier:          107+YcjsGEVwA4x3uCS+RZhDlY7laUWwWXXZJ0esZxw=
Subject key identifier:   38:1A:20:BC:7B:F4:63:6D:CD:5E:41:2D:91:04:C9:BE:C7:53:FA:B7
Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87
Certificate issuer:       /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
Certificate serial:       62EBA5ADDF9015CD612C54A6DF9266FF45688E42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
Manifest number:          0131
Signing time:             Sat 18 Oct 2025 13:30:46 +0000
Manifest this update:     Sat 18 Oct 2025 13:25:46 +0000
Manifest next update:     Tue 21 Oct 2025 14:12:46 +0000
Files and hashes:         1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: HX5hc0JVA/bL3q1k/7p9S2Z5pWHfKNcOFGhiGTLHR6E=)
                          2: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: 91nl8JkO9JpuO14H49dBKCFbWMFfLQ8qlIIKXnUpkjw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl
                          rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 14:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:eb:a5:ad:df:90:15:cd:61:2c:54:a6:df:92:66:ff:45:68:8e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687
        Validity
            Not Before: Oct 18 13:25:46 2025 GMT
            Not After : Oct 21 14:12:46 2025 GMT
        Subject: CN=381A20BC7BF4636DCD5E412D9104C9BEC753FAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a2:3c:ca:68:ea:24:16:02:e2:ac:c0:bc:e3:
                    42:36:96:ab:4c:18:4f:7d:57:0c:3d:58:6a:f4:e5:
                    1a:19:9a:f9:3f:15:11:25:db:9e:83:ff:99:20:71:
                    b2:bc:2b:08:48:16:5e:39:f6:78:f3:5e:4e:ee:47:
                    7f:74:c1:ae:d5:24:7f:13:81:e1:a8:23:1e:8f:81:
                    4c:ed:7b:7e:88:76:b8:cc:7e:df:10:81:ca:b5:0f:
                    f6:2a:4d:25:01:8f:9f:f6:fc:34:d9:95:d2:76:40:
                    70:e5:21:d5:37:0a:ba:02:ac:16:b0:7f:b7:82:1b:
                    32:09:f7:ed:eb:6d:f8:5c:c9:cb:93:31:6f:48:7e:
                    10:45:88:02:7e:9e:cd:7c:2e:c5:65:59:be:73:2c:
                    f3:86:c7:b7:71:12:01:fa:58:d5:83:fe:5b:22:22:
                    d0:88:33:9f:eb:1b:93:14:d1:92:28:73:a9:a9:7e:
                    2e:eb:7a:de:b8:0e:38:2b:d8:7f:f8:29:85:02:b6:
                    89:08:cb:b7:ba:b8:1e:0d:da:94:79:8c:f3:45:85:
                    2f:58:7b:ab:3b:ed:fd:84:16:2e:be:7f:af:d7:cd:
                    55:db:b6:45:d5:f9:1f:65:3d:76:b9:98:08:af:70:
                    77:a0:d7:95:87:15:ba:ce:a8:b5:68:5e:ad:67:d1:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1A:20:BC:7B:F4:63:6D:CD:5E:41:2D:91:04:C9:BE:C7:53:FA:B7
            X509v3 Authority Key Identifier:
                keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6c:fe:a9:f1:89:01:50:b0:bb:f8:cf:19:5b:65:35:bc:9e:
         32:31:dc:73:01:a0:09:5b:7b:12:17:69:64:cf:5e:0d:d8:1f:
         81:6b:a7:a6:ce:6b:fc:03:2d:c0:15:8a:f7:de:f9:f4:08:5a:
         07:65:66:c9:87:aa:f8:27:69:66:bf:f2:50:1e:a8:54:03:58:
         d4:61:c4:46:3a:f5:8e:39:c2:be:69:79:27:e9:98:f0:95:da:
         09:9c:50:ab:e8:27:2b:00:59:b6:2c:60:04:61:0d:a9:7e:14:
         47:bf:74:49:5f:8d:26:84:50:ba:90:de:44:f0:97:77:e2:fd:
         42:f0:98:9c:be:32:64:2a:7f:e9:36:0a:f5:97:05:bc:f4:f6:
         e7:4f:c9:aa:fb:94:35:13:82:8f:b7:b4:27:a3:59:20:05:c7:
         2f:e9:31:ef:94:8f:1b:0a:0a:df:dc:16:23:c9:b9:01:aa:8e:
         b3:a1:85:f4:51:f0:c3:60:c0:6e:58:85:ed:98:6f:94:dd:80:
         80:f0:cc:69:24:42:e0:de:e0:a9:44:75:ba:71:93:71:84:12:
         69:82:d9:50:96:92:6c:76:71:f0:5e:bf:4f:d8:1e:c6:7a:eb:
         8d:7e:ed:9f:46:1c:ec:07:6a:54:08:2a:ae:76:f1:d6:2c:41:
         7d:fd:92:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:30 2025 by rpki-client