Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
File:                     98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json)
Hash identifier:          aNeZuKFYe/O1+f/E9KDKEQ1SRH505VfksMvCX8H7jjY=
Subject key identifier:   96:30:79:DC:9F:E8:C4:F3:82:C5:03:93:72:ED:83:36:B6:33:CB:88
Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C
Certificate issuer:       /CN=98F94938EA9072872BE06639F79DC61C000F849C
Certificate serial:       272E337005D44F6BD02067FB1F751194552BE048
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
Manifest number:          051A
Signing time:             Sun 19 Oct 2025 10:10:02 +0000
Manifest this update:     Sun 19 Oct 2025 10:05:02 +0000
Manifest next update:     Wed 22 Oct 2025 14:37:02 +0000
Files and hashes:         1: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=)
                          2: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=)
                          3: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: tpzIsO87v1EKJrX9YTP4gCSZ8urCBV3b6cIF77TJtB8=)
                          4: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl
                          rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 14:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2e:33:70:05:d4:4f:6b:d0:20:67:fb:1f:75:11:94:55:2b:e0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C
        Validity
            Not Before: Oct 19 10:05:02 2025 GMT
            Not After : Oct 22 14:37:02 2025 GMT
        Subject: CN=963079DC9FE8C4F382C5039372ED8336B633CB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:41:cb:1b:fe:aa:c3:b0:1a:41:cd:63:01:f6:
                    36:ad:46:15:81:1c:70:da:78:a0:b0:a8:20:63:c6:
                    bb:87:6d:03:8a:17:f9:a3:03:6b:e7:34:ee:de:bf:
                    f5:10:c6:f6:7a:be:9b:89:ec:31:06:33:20:6f:36:
                    5a:ab:1f:ce:91:d3:69:c8:33:b5:0d:56:32:9e:84:
                    12:c9:b1:ff:2c:9e:b0:a3:5d:48:9a:53:dd:1d:55:
                    c3:cf:72:49:0e:0b:01:1e:1e:f4:4c:0b:1c:5f:44:
                    5d:4d:8f:62:6d:1f:08:23:54:92:28:f1:8c:6c:1f:
                    a3:9a:57:e8:5c:d9:ed:88:ce:7d:72:e5:08:d7:8b:
                    a3:b4:79:28:2c:4c:49:aa:d8:71:5c:80:4c:64:2b:
                    be:16:a1:a8:b8:0f:81:4c:25:8a:ab:fe:db:31:4c:
                    18:07:73:cb:b4:96:41:d0:c3:31:1d:40:ba:c2:2d:
                    9d:f6:ad:4d:b9:3f:08:32:ab:fd:34:de:fa:81:ea:
                    eb:09:1b:18:3e:2b:23:0f:fa:3c:b1:14:f4:fa:09:
                    d4:ae:fb:84:9e:6d:db:02:38:ff:08:c1:2c:78:e2:
                    90:d5:00:bd:12:ee:6f:e5:a2:e4:8f:b7:39:55:c2:
                    ab:45:46:5b:b0:2d:fb:8a:ad:cc:54:10:14:53:71:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:30:79:DC:9F:E8:C4:F3:82:C5:03:93:72:ED:83:36:B6:33:CB:88
            X509v3 Authority Key Identifier:
                keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:53:60:e6:fc:8d:7f:a4:21:96:13:79:b6:36:31:6b:41:cf:
         7f:90:ea:05:42:6e:6d:9f:49:49:f4:b3:7b:46:8b:ea:5a:b1:
         9c:c4:18:89:da:e1:0a:71:67:ec:29:82:80:0c:d8:e5:1a:99:
         62:bd:77:59:41:ba:68:1b:99:97:ea:88:ad:fa:35:ab:5a:0a:
         99:e8:0b:1c:f8:d6:ac:84:b6:71:aa:b4:6e:f8:78:5b:ee:e2:
         29:cd:b1:cd:92:4f:53:59:8f:c3:04:9c:f8:2c:98:81:a0:1b:
         39:8b:ac:aa:9a:43:15:6b:05:9b:22:fb:a5:25:a9:97:68:15:
         af:ef:1b:a0:5e:f6:e7:0e:02:c4:2c:eb:2c:6b:c0:78:42:76:
         70:6e:4d:03:45:bc:8b:25:4c:97:fb:7e:c2:a1:f2:d8:a6:bb:
         37:fd:f5:3d:3b:64:f7:b9:4e:94:bd:6a:c9:5e:a4:db:97:51:
         65:81:2f:fc:b7:37:db:06:2d:5a:11:bb:d3:e1:e8:ec:86:6c:
         52:8f:a6:36:fd:06:a1:f1:8f:78:f6:9f:6d:b6:fa:7f:91:ec:
         d5:d5:02:b2:eb:a3:f5:7a:f4:47:51:28:21:b2:7a:64:1c:c3:
         4d:d8:1d:f6:65:b5:8f:fe:bf:bf:d4:e1:41:49:3a:e8:c3:7b:
         a3:2d:93:93
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJy4zcAXUT2vQIGf7H3URlFUr4EgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw
MDBGODQ5QzAeFw0yNTEwMTkxMDA1MDJaFw0yNTEwMjIxNDM3MDJaMDMxMTAvBgNV
BAMTKDk2MzA3OURDOUZFOEM0RjM4MkM1MDM5MzcyRUQ4MzM2QjYzM0NCODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhQcsb/qrDsBpBzWMB9jatRhWB
HHDaeKCwqCBjxruHbQOKF/mjA2vnNO7ev/UQxvZ6vpuJ7DEGMyBvNlqrH86R02nI
M7UNVjKehBLJsf8snrCjXUiaU90dVcPPckkOCwEeHvRMCxxfRF1Nj2JtHwgjVJIo
8YxsH6OaV+hc2e2Izn1y5QjXi6O0eSgsTEmq2HFcgExkK74Woai4D4FMJYqr/tsx
TBgHc8u0lkHQwzEdQLrCLZ32rU25Pwgyq/003vqB6usJGxg+KyMP+jyxFPT6CdSu
+4SebdsCOP8IwSx44pDVAL0S7m/louSPtzlVwqtFRluwLfuKrcxUEBRTcVe9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUljB53J/oxPOCxQOTcu2DNrYzy4gwHwYDVR0j
BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB
OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG
ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy
NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2
MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJBTYOb8jX+kIZYTebY2MWtBz3+Q6gVCbm2f
SUn0s3tGi+pasZzEGIna4QpxZ+wpgoAM2OUamWK9d1lBumgbmZfqiK36NataCpno
Cxz41qyEtnGqtG74eFvu4inNsc2ST1NZj8MEnPgsmIGgGzmLrKqaQxVrBZsi+6Ul
qZdoFa/vG6Be9ucOAsQs6yxrwHhCdnBuTQNFvIslTJf7fsKh8timuzf99T07ZPe5
TpS9aslepNuXUWWBL/y3N9sGLVoRu9Ph6OyGbFKPpjb9BqHxj3j2n222+n+R7NXV
ArLro/V69EdRKCGyemQcw03YHfZltY/+v7/U4UFJOujDe6Mtk5M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:46 2025 by rpki-client