Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
File:                     BE7F813F3C6CA289A9CDAC5630975B7627458103.mft (raw, json)
Hash identifier:          rmTXdBcksv9imbqrRHppJBucliruen64bbUJigPxUwE=
Subject key identifier:   72:FF:EC:0B:BF:E3:CE:8E:20:C3:C5:F3:3A:6B:A2:32:BA:F4:BC:EC
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       1C486ABE869144FF0758E3F5F68B41243A3CE725
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
Manifest number:          029F
Signing time:             Sun 19 Oct 2025 10:21:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:16:47 +0000
Manifest next update:     Wed 22 Oct 2025 16:40:47 +0000
Files and hashes:         1: 3130332e3234352e3133362e302f32332d3233203d3e203435373235.roa (hash: MSYIfxCSXKVIOCS47ld9jUS6r+ZriPGRUCkoG4RgECY=)
                          2: 3138302e3231312e38382e302f32312d3234203d3e203435373235.roa (hash: 6cpCf7GhdQEpx30p91qB9UYsON8gtbAQPKe5llQv0bs=)
                          3: BE7F813F3C6CA289A9CDAC5630975B7627458103.crl (hash: A4rzeBIachckF/OFdEikb3vFlC54mMeRy1xto/e0zyQ=)
                          4: 323430323a3738303a3a2f34382d3438203d3e203435373235.roa (hash: srQ63HzedpqK/Z+fkfeTxdmOJkM7qi6/v3UkdQRaL40=)
                          5: 323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa (hash: ksLRob3f5SU2gNY1LxPipDlSLyvRGBxMHRiqu2c9VRY=)
                          6: 3230322e3135302e3137352e302f32342d3234203d3e20323037353731.roa (hash: fxq+INOzYywTpHUeb4pxKeVy8ePaMLmGli2Hhv5MQO4=)
                          7: 3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa (hash: Vd4YXu/zv6QpeJqZrRqJLtEJqDsjx9BYEUrETFSOwbg=)
                          8: 3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa (hash: /MSndQdhW7y2Ps5XO1tBE5LRjY41c2iW6OY/QNg9AHs=)
                          9: 3138302e3231312e38382e302f32312d3231203d3e203435373235.roa (hash: UrwHHQXWpjTi59OMqCHennU+aS155yzGb6/9UoO5zVs=)
                          10: 3230322e3135302e3137302e302f32332d3233203d3e203435373235.roa (hash: RYaUaP8z76N+rN9/CRDsCKHTh8kwn9eyhhBEqvlMUwo=)
                          11: 3230322e3135302e3136322e302f32332d3233203d3e203435373235.roa (hash: GwuWySNcSg5ncnIH7xe0pJhIF0SwLtWfmclvASXmbzI=)
                          12: 34332e3233302e3135342e302f32332d3233203d3e203435373235.roa (hash: FoOUIBlL9T9MhX4bEhccY3Kjn0yIPa1cMqY4C0eO3xI=)
                          13: 3230322e3135302e3137322e302f32332d3233203d3e203435373235.roa (hash: xC6iCUJS7sp4GX/eEQoZ92l1XLRswuGGeIaV26g4P7I=)
                          14: 3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa (hash: BI62UO3dEBMuV7GGUm78ylThtADmbOZbryA9/QTeswk=)
                          15: 3138302e3231312e39342e302f32332d3233203d3e203435373235.roa (hash: P35zqgp/DvY+opYrPtfb+V3CygXLWvgpif4jdHfrT6Q=)
                          16: 3138302e3231312e39322e302f32332d3233203d3e203435373235.roa (hash: 5gtSpN1P146ocldJClXJUUX1hGb29RqzWbJ13iydccw=)
                          17: 323430323a3738303a3a2f33322d3438203d3e203435373235.roa (hash: 95U2BXJDC2l18nsj8XM2nUsJ+ABvrMW9ZXaTSbsG2jU=)
                          18: 34332e3233302e3135322e302f32322d3234203d3e203435373235.roa (hash: +4n6/TF4aeSEpR29DkcOnbNK9Y34aOX1PIvKhjQ5Hno=)
                          19: 323430323a3738303a343a3a2f34382d3438203d3e203435373235.roa (hash: q6uWsjDfmvPCM3wtKPBAHFLOKfxyuluuaFv/8slgJu8=)
                          20: 3138302e3231312e38382e302f32332d3233203d3e203435373235.roa (hash: 6XFpo57f1LKHWqv/atS95pTJHDHEw9gxmYNcdpJ+RZk=)
                          21: 3230322e3135302e3136302e302f32302d3230203d3e203435373235.roa (hash: xQ4Ul97jwoDNyJ2eG9oO4TTlF8xSqcDLgnke6Urqw3k=)
                          22: 3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa (hash: P6E4qcRf4KYQyvZ7AMZmZFaBs6o4L0ILx70mhGz8FoA=)
                          23: 3230322e3135302e3136302e302f32302d3234203d3e203435373235.roa (hash: bcb47SdtlV0+rUuQrP25krobOWV4dOeRjxtP0NJ6Hg0=)
                          24: 34332e3233302e3135322e302f32332d3233203d3e203435373235.roa (hash: xHPJ7HI+304D7YAd37d8j6skpjceFwNnjTWGzXVwcKM=)
                          25: 3130332e3234352e3133382e302f32332d3233203d3e203435373235.roa (hash: gXSdvzH/obw2tBhIhIcWb1ceK7qyFmLN4iW37pSP6wI=)
                          26: 3230322e3135302e3136362e302f32332d3233203d3e203435373235.roa (hash: wRnGxN5uNoVdykOfNrkzIuyL1n8LTfsQZxmr2BmoYe4=)
                          27: 3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa (hash: CFmjdJ2vd2S1hwPDr69BfeMIGUvy+yNC1CU/AmoDxB8=)
                          28: 3230322e3135302e3136342e302f32332d3233203d3e203435373235.roa (hash: w2ICECGLA7nw6Zv4Eo0IQI3O8W+wpDGsaM5DtnIpJKo=)
                          29: 3138302e3231312e39302e302f32332d3233203d3e203435373235.roa (hash: OgCMc6N8YMB+q9soDBfzLtklXuNaeCduzkpg+Npc+Pg=)
                          30: 34332e3233302e3135322e302f32322d3232203d3e203435373235.roa (hash: pO9hy5n7UjW4vxC4PIPIijgfvw5lRU378EbEfDIE6ec=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
                          rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 16:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:48:6a:be:86:91:44:ff:07:58:e3:f5:f6:8b:41:24:3a:3c:e7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Oct 19 10:16:47 2025 GMT
            Not After : Oct 22 16:40:47 2025 GMT
        Subject: CN=72FFEC0BBFE3CE8E20C3C5F33A6BA232BAF4BCEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:51:53:95:b4:f8:c4:84:78:af:79:e1:41:
                    93:a5:0d:02:48:0e:df:f4:e9:90:17:0b:6f:44:81:
                    d3:b7:1e:14:08:29:7c:81:a6:53:45:3b:aa:55:2c:
                    12:28:bb:78:3e:a3:9a:60:ce:59:c6:b6:e9:d9:3b:
                    42:40:f7:a8:14:cc:bc:f6:11:80:42:5c:25:a9:c2:
                    1d:28:54:ce:c3:07:3f:9c:ca:c9:65:a8:63:16:92:
                    f0:af:58:d8:9c:ca:22:ca:9c:f5:1b:be:21:98:4f:
                    8f:17:45:bf:44:8f:87:53:9e:72:6c:6f:e7:00:8b:
                    b3:5f:f4:80:a2:3f:bd:43:68:d8:db:78:3a:ba:b8:
                    73:92:0b:ca:a5:eb:b7:00:78:17:0c:70:bf:95:ff:
                    01:ed:c4:02:26:c8:6b:e2:59:16:f8:0e:48:ef:9f:
                    69:af:e1:c7:da:07:35:03:70:95:25:c9:4c:ed:c4:
                    8b:0a:1c:3e:08:49:31:b9:a2:ae:c8:e6:6c:0b:3b:
                    cf:6d:97:3a:d0:8f:6b:48:9f:fa:b7:de:60:53:9c:
                    c5:05:2c:e1:9f:17:0a:59:81:9a:a3:cf:9c:09:45:
                    f4:16:08:08:4e:1c:33:42:71:f9:5d:9b:c0:62:57:
                    e4:e4:42:bc:2a:a9:76:12:ee:52:4f:67:d8:aa:89:
                    8c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FF:EC:0B:BF:E3:CE:8E:20:C3:C5:F3:3A:6B:A2:32:BA:F4:BC:EC
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:06:67:9d:ce:47:c3:1c:a2:a7:87:37:d6:70:7a:ad:26:47:
         44:6c:8e:68:29:7a:19:ad:3b:81:a4:48:c7:24:b7:a6:fd:33:
         88:ca:05:7f:6d:2b:fb:f3:2b:66:1b:a8:71:d5:02:34:c5:6d:
         0e:1d:8f:8c:d8:13:aa:63:5d:79:50:45:a4:38:ce:6d:72:56:
         43:b0:09:f0:e5:57:00:f4:f1:5a:58:3c:9d:bc:f5:08:db:83:
         0d:e5:d7:f2:f0:04:ac:a2:3e:7d:56:96:52:bd:1e:df:1b:f1:
         c5:21:8d:99:8f:7f:74:e2:76:13:fd:e3:23:71:9c:0d:4d:12:
         19:ad:82:4d:90:48:be:c4:a1:5f:c6:ff:ff:d0:df:74:e1:e3:
         36:99:ea:30:e9:ab:15:07:ad:2a:67:86:52:57:99:28:8e:c9:
         4d:48:55:76:df:75:60:91:3c:d0:e5:1e:e4:2b:c0:dc:33:a0:
         72:03:e9:26:42:7b:f6:eb:71:4c:75:5e:2d:34:5c:65:0a:04:
         b2:e8:21:8a:2a:73:a4:00:06:9b:dd:e8:52:b3:e9:ee:e5:08:
         02:3f:c1:96:43:b3:be:09:21:44:b7:9e:d6:54:84:20:f5:a7:
         ba:20:b8:a8:fd:ac:e1:49:47:51:54:03:a2:a4:e9:c6:55:44:
         42:57:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:53 2025 by rpki-client