Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
File:                     0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json)
Hash identifier:          Brl1bOnIJedbfyX5hYwBrfar/9IkpCRMUBMQAtFcFVk=
Subject key identifier:   54:0C:6B:5D:87:3B:F0:22:24:74:91:D5:EA:54:E3:23:51:F5:10:B1
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       76E3B0386A6DD7A4DF795AA128691B17C513E56B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
Manifest number:          024E
Signing time:             Sun 19 Oct 2025 07:21:22 +0000
Manifest this update:     Sun 19 Oct 2025 07:16:22 +0000
Manifest next update:     Wed 22 Oct 2025 18:37:22 +0000
Files and hashes:         1: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: vwui1qpHSvDVofVRy/Tt5fu+EupEaZj/9/a37EvMSjI=)
                          2: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: uU+RiPAP5rA80po/0W6dMPifTVUm5kY6ALP/Ca/ACi0=)
                          3: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: NRTKisssuBxZObjpfMlPvnnfb3JZpeBG9KHtEvhVsJY=)
                          4: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: FJlkjy7Zh6RrMJcyoFN5uq7ubbcgdbOVveGSZgScDgQ=)
                          5: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: DRnLhFvj0XZm0VXEZ42TGDJPOpd0ZTUBf7MwJZ8bqOE=)
                          6: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: KZ/MfJDGlUF+5FRxy7S8cNkPyicIqb4wdkx7H0nRfJc=)
                          7: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: TdPV1Ae9NsfX/q2I6yHzDhMS8SBCOPuv6qM2EykOC0U=)
                          8: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: jBGgrMGnibBJ35+neDfX4MwBNDGqqmS27hN6Fi2jltI=)
                          9: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: tl5Ev+PkZ3ReKGybXVr8d9DOrJzj4Y1CWnpe/eItR3A=)
                          10: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: k78QygJvZC5uoGv2K0v+mQ5YwQ0X8MznZdn5hmtLPD8=)
                          11: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 2VTD3WI/p1+3+37bAKEOPoRJrNamvZNDqASz/hNbToE=)
                          12: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: I9GyAIe3s6r5o1IVue8LyW9A/cEmB+1nHgZeZ+VKm1g=)
                          13: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: X36QLgVhGJ49HLtt76O3IZYZ5R6XiQpbmzY9UR5vonE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 18:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e3:b0:38:6a:6d:d7:a4:df:79:5a:a1:28:69:1b:17:c5:13:e5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Oct 19 07:16:22 2025 GMT
            Not After : Oct 22 18:37:22 2025 GMT
        Subject: CN=540C6B5D873BF022247491D5EA54E32351F510B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7b:a9:64:aa:a8:cc:f8:f0:3b:2c:b3:65:df:
                    ca:de:bd:d7:f4:4e:05:ef:48:8b:0a:b0:0f:4a:2c:
                    51:84:1e:98:13:4b:88:5f:2b:74:cd:8d:c3:c2:c2:
                    df:bd:ef:ea:30:f5:a9:4a:e3:64:4f:06:48:3c:9f:
                    7f:a8:bf:56:0d:e3:bb:fb:c2:26:48:b7:0d:7c:d3:
                    fc:da:a5:86:69:a4:1b:4b:31:bf:01:0b:74:91:d4:
                    b4:e1:55:4e:ff:b1:7c:35:e7:64:2e:c0:70:4d:5b:
                    04:e8:b5:05:77:a7:98:da:29:8b:b5:56:3d:49:3a:
                    a9:92:d8:5f:a1:73:c6:e4:6c:bf:bf:6f:8e:0e:64:
                    49:23:94:8f:44:9b:95:88:89:90:f9:a5:2a:34:2c:
                    5c:c7:20:1b:8d:05:3d:27:78:d0:ca:cb:97:e7:34:
                    5e:35:c9:db:30:ae:4f:2a:16:d7:55:d9:10:f8:2d:
                    6f:e3:16:8b:82:f9:d2:9d:91:be:cb:bd:10:d7:d6:
                    60:e2:ee:ed:e9:f0:fe:5c:97:74:da:10:83:a6:b3:
                    78:bc:88:d9:75:96:4c:c9:ab:76:7a:01:f5:30:5f:
                    89:61:8b:19:e2:dd:c5:28:71:a8:34:ed:20:98:1e:
                    19:4c:f6:64:af:ff:a8:2e:d5:d5:c9:6c:80:7b:31:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0C:6B:5D:87:3B:F0:22:24:74:91:D5:EA:54:E3:23:51:F5:10:B1
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e4:4a:85:73:76:18:fe:43:e4:26:54:04:81:b8:77:bb:cd:
         09:8c:ca:1e:de:91:de:82:5e:3d:01:a6:bb:17:75:35:9b:ce:
         18:fe:62:d3:c5:25:f5:a2:89:d0:eb:82:f1:e4:36:1a:1d:cd:
         f9:df:37:f8:9e:b2:44:0a:2e:59:47:5e:70:bd:0c:48:c8:10:
         8a:82:a3:ce:04:ee:45:31:3e:c5:23:96:30:21:71:2e:0f:76:
         12:39:79:de:ea:42:e3:7b:b5:91:79:0a:8c:8b:ee:9d:87:30:
         ed:15:1f:83:b7:ac:68:13:a3:7c:13:30:5f:32:c2:36:3c:ee:
         74:83:46:7f:7b:c2:95:49:41:f3:1e:1a:0b:30:70:10:16:ca:
         84:2b:ab:86:41:9f:be:06:5e:09:2b:a8:96:c5:9d:91:93:0c:
         a7:93:c7:8c:f8:f5:48:59:de:68:1a:02:d5:4b:e1:91:27:99:
         f3:7b:d2:5a:cd:27:80:55:fc:32:a9:68:33:b1:f6:73:d7:44:
         dd:9e:d8:58:ed:5a:00:de:a5:94:e3:c7:98:87:02:82:ae:23:
         71:3c:35:49:fc:d0:91:5f:76:83:1f:38:7d:01:83:cb:9d:5d:
         ce:05:f1:d2:7a:59:d6:f0:b1:74:42:e8:07:fc:38:f9:d9:1b:
         ce:8f:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:31:01 2025 by rpki-client