Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft
File:                     566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json)
Hash identifier:          7TGspmmc82qJch47VvYI897yc8wni45eUkJ6q8mJ898=
Subject key identifier:   B9:3B:B3:2C:7E:54:9C:16:AB:75:84:28:8C:4B:71:F2:D5:14:06:78
Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1
Certificate issuer:       /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1
Certificate serial:       1A3E8A4B3FBD76CCD722622648E2503A9595F631
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft
Manifest number:          EA
Signing time:             Sat 18 Oct 2025 23:32:15 +0000
Manifest this update:     Sat 18 Oct 2025 23:27:15 +0000
Manifest next update:     Wed 22 Oct 2025 10:10:15 +0000
Files and hashes:         1: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=)
                          2: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: hT3OpiIDKtAtZLovXQZcqlkT0XLzrVlQOF4L3X0NV0Y=)
                          3: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl
                          rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 10:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3e:8a:4b:3f:bd:76:cc:d7:22:62:26:48:e2:50:3a:95:95:f6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1
        Validity
            Not Before: Oct 18 23:27:15 2025 GMT
            Not After : Oct 22 10:10:15 2025 GMT
        Subject: CN=B93BB32C7E549C16AB7584288C4B71F2D5140678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:33:08:14:2f:02:a6:d5:d7:af:ad:3f:0a:
                    ed:48:41:82:bc:aa:75:ac:5e:0e:b8:a4:90:55:39:
                    1e:2a:40:4e:ee:0d:83:ac:1f:17:e0:33:51:8f:b0:
                    0b:cf:a0:20:5f:d8:23:a3:6a:ef:8f:52:bc:5f:8c:
                    8a:f0:d1:c8:d9:64:23:bf:79:1b:64:df:3c:8a:cd:
                    2f:9d:a7:f3:83:a9:04:32:0a:20:df:0f:8e:67:19:
                    8a:c9:e0:d0:f7:3a:56:6c:83:c7:88:e1:52:ec:35:
                    b0:2c:b6:f1:7d:a5:33:ea:db:4a:15:f8:61:8d:85:
                    73:33:68:a8:1c:48:d5:87:1e:1a:e4:3c:d2:f2:43:
                    de:46:29:1c:59:81:3b:c8:d5:ba:53:9f:a0:09:d4:
                    d4:64:05:33:1f:52:67:2e:02:0d:70:57:70:33:02:
                    4e:78:e8:70:96:30:49:fe:1b:0b:c5:07:8e:03:b5:
                    44:1a:d0:c9:48:81:97:9d:13:e4:71:4d:3a:f0:d3:
                    60:63:5c:c5:34:1c:7a:eb:1d:d0:20:9e:8a:ea:a5:
                    42:cb:77:2f:77:76:7a:36:b6:fe:f2:2b:fe:5a:d3:
                    68:25:02:47:2f:3f:5c:cc:51:8f:d6:c4:09:5b:c1:
                    42:de:0a:33:42:b9:97:d5:56:d3:89:43:a4:c8:47:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3B:B3:2C:7E:54:9C:16:AB:75:84:28:8C:4B:71:F2:D5:14:06:78
            X509v3 Authority Key Identifier:
                keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:65:6a:c2:80:6c:2f:43:22:12:15:c3:97:9e:f5:32:1e:77:
         84:0a:e3:42:13:b8:4a:57:99:53:ea:1e:6c:6c:72:5e:98:ac:
         98:66:f6:6e:9c:ab:c9:f8:43:df:38:f9:90:bb:8a:10:17:3b:
         26:fb:16:d3:90:99:e9:1a:20:09:54:05:15:e6:22:ad:00:4d:
         0d:79:75:ac:af:c7:c9:2f:41:f5:08:cc:f3:23:b3:99:a0:60:
         46:d0:6f:1a:47:f0:2c:90:f0:90:b3:a0:20:43:7a:40:bc:ee:
         78:f2:4c:b6:d3:13:3f:20:8e:89:bb:0c:3f:b4:cf:68:4b:0d:
         97:b5:c4:9f:8b:04:00:2b:ce:fd:52:33:c9:e8:26:3d:23:c9:
         01:67:31:24:c3:90:11:ae:cc:4c:4c:13:4c:da:d8:d5:20:5d:
         33:57:1b:5e:50:a0:09:98:c4:4f:cf:b5:49:74:3b:03:55:a7:
         56:10:71:cc:25:7e:02:a5:ea:c9:db:00:4e:b8:b3:cc:6f:88:
         e2:21:de:17:b8:85:db:af:48:00:ac:64:73:b0:20:2f:4f:7b:
         97:e6:a2:a4:e2:7a:bf:ec:a4:26:3f:35:d7:88:53:da:e1:dc:
         80:11:30:fa:60:a3:44:b9:b6:f4:db:21:e9:2c:32:3f:37:94:
         85:46:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:27:21 2025 by rpki-client