Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft
File:                     4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json)
Hash identifier:          RmQSEK5hx2NV1kaWaRFsqsUK4V/YXtDd0CtzPfNm34s=
Subject key identifier:   1A:72:D1:14:F3:69:2D:96:86:BA:CA:0D:8B:F6:63:5D:58:50:3E:40
Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13
Certificate issuer:       /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13
Certificate serial:       5C7D03C62B4489EA3172E17DE64E9A2997359D1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft
Manifest number:          0205
Signing time:             Sun 19 Oct 2025 10:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 09:56:31 +0000
Manifest next update:     Wed 22 Oct 2025 11:42:31 +0000
Files and hashes:         1: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=)
                          2: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=)
                          3: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: 27AZYxhCxjllm8yzMSmuaPgQ0CcVcIVEOBzaS7lzhCU=)
                          4: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl
                          rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 11:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7d:03:c6:2b:44:89:ea:31:72:e1:7d:e6:4e:9a:29:97:35:9d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13
        Validity
            Not Before: Oct 19 09:56:31 2025 GMT
            Not After : Oct 22 11:42:31 2025 GMT
        Subject: CN=1A72D114F3692D9686BACA0D8BF6635D58503E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:da:a0:94:f9:8c:82:44:d7:70:a9:4a:90:aa:
                    81:6d:3e:d2:82:d3:81:5f:76:78:ce:73:b2:ab:b1:
                    e4:63:98:60:74:60:fe:62:70:1c:3d:4c:70:4a:17:
                    df:33:1e:26:01:e6:4d:79:50:3e:7e:f6:48:92:0d:
                    b8:ca:8d:2e:00:d6:db:2e:98:1c:d8:c0:44:1d:9d:
                    1b:09:f9:b1:fc:7e:3a:01:29:37:0c:31:12:0a:31:
                    61:87:13:6e:9f:5a:36:b5:0b:3b:cc:0f:e5:55:ea:
                    87:a6:3a:7b:08:2a:65:c2:e6:c7:e4:b7:09:51:0c:
                    5c:a1:ef:cb:53:d9:b5:00:cb:94:9a:32:ff:0a:1e:
                    ea:3b:3e:3c:27:c1:b8:75:87:08:50:75:48:3f:9d:
                    6c:5f:99:b2:65:1b:fd:ec:9f:eb:d3:ab:d5:2d:16:
                    76:d5:8c:37:ef:76:1b:56:16:28:6d:a9:f8:07:34:
                    68:e4:17:69:22:7c:2b:be:f3:d3:d6:ae:9c:c5:ac:
                    47:5a:a3:1f:99:63:ba:7b:41:85:2d:fa:47:a7:af:
                    b6:27:64:e9:2a:0b:c4:b1:88:4a:54:ae:09:d1:0b:
                    27:85:f4:73:43:75:d7:b2:6e:91:fd:86:d1:eb:86:
                    e4:b4:2e:46:c7:2b:37:8c:77:18:8e:71:98:97:a0:
                    1a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:D1:14:F3:69:2D:96:86:BA:CA:0D:8B:F6:63:5D:58:50:3E:40
            X509v3 Authority Key Identifier:
                keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:09:e0:4e:bf:94:b7:a4:c3:b2:ff:c3:cd:68:7e:be:1a:
         c7:c0:16:6f:3b:c2:21:fb:c2:bb:44:b9:ff:ce:a9:af:16:21:
         27:e6:7e:5a:74:07:fd:56:59:ba:46:92:45:8b:78:ca:13:2d:
         47:3b:c4:bf:f8:63:9e:44:6e:17:7f:ef:dc:5c:e8:c2:5d:63:
         73:84:fe:9a:0a:2e:b4:a1:83:84:d5:75:90:7f:e5:f5:e2:12:
         8b:ff:e4:92:3c:9b:2f:d1:5b:08:de:25:4d:db:e3:24:63:c5:
         67:18:d1:34:4b:9b:52:d2:ec:b6:ac:ea:7f:55:63:ae:a1:89:
         c2:0e:45:48:40:eb:d3:e8:94:ce:e6:96:58:3c:80:96:57:d5:
         af:62:c7:76:5d:76:ab:ca:b2:15:bd:8b:7b:f1:84:4c:e0:0a:
         6a:ec:66:6a:1a:da:ae:e4:59:fa:90:cb:6b:cf:cc:44:33:84:
         ce:a9:99:31:fe:3b:bb:1b:5e:c4:e1:78:09:a1:9e:cb:c9:7c:
         87:b8:22:dc:9f:3a:1a:89:c3:49:1f:7c:c8:82:8e:b4:f8:60:
         97:42:87:c5:a8:d9:1e:04:ad:fc:b9:cb:36:8e:81:08:41:0a:
         2b:26:35:cb:4a:70:1a:41:c4:4e:55:48:0d:0c:4f:0b:f5:39:
         8e:6a:bc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:15:41 2025 by rpki-client