Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
File:                     490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft (raw, json)
Hash identifier:          fXhwsVYKuh8DSjHwMFUekBVMxRVH8WrN66AzghTNjKM=
Subject key identifier:   47:65:1D:27:BA:49:C1:87:2B:3E:6D:80:66:83:93:CD:23:17:F1:61
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Certificate issuer:       /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial:       1439F69AAEF7A8E016ED9D369FF44A3F8B516631
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
Manifest number:          051C
Signing time:             Sun 19 Oct 2025 13:11:02 +0000
Manifest this update:     Sun 19 Oct 2025 13:06:02 +0000
Manifest next update:     Wed 22 Oct 2025 21:31:02 +0000
Files and hashes:         1: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: UD6uPbiybd2gYQ34RwGBqvbNDHuw/OBXgpqqJ4vtt5c=)
                          2: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (hash: pXz40XnCPDHjX6ETU549n8DZU0gFVrvM11PQ2EVGj3Q=)
                          3: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: uuH+ziNBEr2lIwcdPkvVugSjVKRTjk8bgzFRk7pTIbw=)
                          4: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: mSVrT9nxgdbO5zEJl0JNWqbaa5yXAY0zHugt4tIrWAI=)
                          5: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (hash: d+qfmJX6WG8MNu+fGfy0UM9kQ8qVSJz1W4rWMZJ2HL0=)
                          6: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (hash: Oed5Ss8UCWFYg2IP6FcmD4GyOtzzcl9PEDa+w2C64YA=)
                          7: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl (hash: XbdsUZL76N6ew0LBWPqSeNgWrisL2uGyF6Wtv8Xy6Qg=)
                          8: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: Og1WIa42Ljyk1coTqcyrLMYu4TjgeM0yBlFnoKhLkxg=)
                          9: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: 7fQVmlkjjbtviTL2Fj7ic9MZZ5loTg5W7CHv/vNGE0s=)
                          10: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (hash: i7aYSENMEfGKEvc4Lk7qqNHogOL9IdoberdA+QXB6Ks=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
                          rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 21:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:39:f6:9a:ae:f7:a8:e0:16:ed:9d:36:9f:f4:4a:3f:8b:51:66:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
        Validity
            Not Before: Oct 19 13:06:02 2025 GMT
            Not After : Oct 22 21:31:02 2025 GMT
        Subject: CN=47651D27BA49C1872B3E6D80668393CD2317F161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:e4:9f:2a:ff:ac:04:9d:35:d3:37:8d:ea:
                    2a:d2:6e:f2:ab:37:4e:49:65:ac:3c:a0:d8:51:76:
                    89:99:b8:2d:88:f9:75:f1:db:3b:dc:d0:92:20:6c:
                    19:a6:8b:30:2d:14:98:a7:a0:32:89:6a:3c:9b:e1:
                    8d:c2:8d:c0:b6:a1:3a:11:7a:b6:e8:9c:67:5d:d4:
                    61:ab:5c:4d:fd:64:bc:56:a4:cc:63:0a:b4:3e:d7:
                    78:94:ee:d7:96:04:6e:65:ff:9d:e4:4f:14:d1:21:
                    5d:4a:48:e4:c1:43:ad:75:97:b2:f0:7b:2d:46:6c:
                    66:3e:e7:cd:f4:1a:5c:0c:95:94:ad:37:68:2c:35:
                    36:a6:51:b9:23:fb:c3:02:82:57:c1:f6:b3:70:be:
                    89:52:22:b2:25:48:62:d8:13:81:46:4d:fc:ee:21:
                    8d:e4:37:75:35:51:cc:89:cd:77:2c:b6:d6:b7:42:
                    8c:c9:59:7f:53:70:87:7d:18:ef:b5:a4:5c:0d:be:
                    17:a4:06:c9:ce:9b:91:51:33:92:9d:b8:4f:a3:c2:
                    b4:2f:9c:fd:2c:84:4d:d4:55:6c:83:89:2e:27:38:
                    88:d2:be:68:ad:aa:73:40:93:f8:72:9a:3c:bf:f7:
                    83:55:7f:89:e6:b7:a6:2c:5f:51:23:15:57:94:88:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:65:1D:27:BA:49:C1:87:2B:3E:6D:80:66:83:93:CD:23:17:F1:61
            X509v3 Authority Key Identifier:
                keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:20:71:a5:f2:3a:1a:88:43:3d:5f:31:ae:51:2b:e2:08:65:
         ce:b4:42:2c:b6:48:ad:39:91:38:2c:d9:a7:59:0b:67:60:ac:
         f4:af:f1:4e:2d:0b:15:cc:19:21:8c:ab:7c:88:c2:a2:a0:b2:
         66:b3:f2:04:5f:84:21:9a:2e:15:6c:fc:fa:b0:38:ac:ff:c1:
         d0:fa:55:35:be:74:2f:6e:56:26:6b:7a:19:c4:77:e2:85:3c:
         47:48:6a:2e:9b:15:36:63:3c:3e:d7:4d:dc:d3:cb:c5:cf:20:
         b5:8d:59:04:82:02:94:da:f6:c1:59:eb:34:a3:f2:d2:45:34:
         47:46:56:c7:4b:25:88:fe:f2:db:a3:7f:9e:1f:e8:85:c9:c4:
         30:50:31:88:e5:ed:7e:9a:0e:5e:4a:d2:da:bf:98:1b:80:b3:
         4d:1d:21:4c:87:ad:24:15:c4:02:f7:05:0a:83:22:c3:e4:5c:
         8e:59:f7:50:33:fe:27:b7:af:17:fb:dc:ab:36:a9:58:fd:dd:
         cb:02:3f:09:e7:48:00:ee:6b:11:cf:fe:7d:5e:f6:ba:8d:d5:
         69:51:e0:ea:8b:3b:94:ee:4c:84:e6:c3:eb:88:93:c1:0d:60:
         e8:12:ed:0f:33:36:1a:a3:25:98:35:32:c2:56:cb:dc:66:40:
         bf:82:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:17 2025 by rpki-client