Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
File:                     4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json)
Hash identifier:          0X4xmQxdiM6xuBFM7D0YI7WNIMdo2fnw0ROL/Ff7UKA=
Subject key identifier:   C8:BF:EC:5D:9B:07:CE:0A:EE:A6:72:12:D1:57:3E:20:49:8E:D5:67
Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
Certificate issuer:       /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Certificate serial:       0A30700448F0C1A15565AEB05010BD80581C798B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
Manifest number:          0225
Signing time:             Sat 18 Oct 2025 23:51:22 +0000
Manifest this update:     Sat 18 Oct 2025 23:46:22 +0000
Manifest next update:     Wed 22 Oct 2025 07:03:22 +0000
Files and hashes:         1: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=)
                          2: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=)
                          3: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: Izy6UmiIxiGj/a7mzjYg5KzDzOVxS497lYqdY2UIVVs=)
                          4: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
                          rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:30:70:04:48:f0:c1:a1:55:65:ae:b0:50:10:bd:80:58:1c:79:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
        Validity
            Not Before: Oct 18 23:46:22 2025 GMT
            Not After : Oct 22 07:03:22 2025 GMT
        Subject: CN=C8BFEC5D9B07CE0AEEA67212D1573E20498ED567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:99:ce:30:76:b7:5f:47:fb:d5:8f:ee:7d:
                    00:16:63:1f:02:a2:7a:b8:e9:ed:97:1a:d3:f5:77:
                    08:e5:a3:d3:d3:7a:15:ff:19:3d:d2:16:0d:34:5f:
                    29:71:1f:af:0a:b5:f0:ee:22:61:02:db:74:b8:2f:
                    61:da:1a:5b:24:fb:b2:33:6a:54:dc:89:8c:5b:66:
                    c7:61:da:f5:fd:9b:8c:f5:76:bd:f0:1f:31:ac:b0:
                    4b:9f:f7:b8:32:21:67:45:a8:90:45:8a:15:2d:25:
                    f3:7e:0e:99:e4:f6:44:15:3b:4c:70:98:21:44:49:
                    95:d6:ce:39:e8:d9:c9:85:63:b0:94:76:b5:06:ed:
                    61:32:73:ad:d2:96:e4:57:51:19:25:01:8f:c3:59:
                    bc:c4:76:50:ca:d3:93:bb:05:8c:27:f7:55:59:36:
                    bc:11:6d:7c:b9:df:a3:55:b7:6f:d8:c6:e1:fb:1a:
                    f3:ae:29:20:8c:ee:9a:c4:1d:bf:fc:d0:75:66:03:
                    a3:c4:11:a3:49:93:62:b0:35:6f:15:28:c5:aa:bf:
                    a5:48:57:df:1a:48:7b:05:cb:ba:e4:47:cf:e5:d9:
                    81:e7:9b:d8:3d:e1:52:be:22:f6:37:26:f8:1a:78:
                    d1:66:c3:c9:af:23:79:fc:42:bd:7f:3c:30:de:f5:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:EC:5D:9B:07:CE:0A:EE:A6:72:12:D1:57:3E:20:49:8E:D5:67
            X509v3 Authority Key Identifier:
                keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:f7:9e:33:cf:bf:94:4a:cd:d3:64:3f:2e:49:8e:ed:56:
         83:1e:04:ac:33:5f:37:a3:6e:f9:9a:e2:d4:09:94:85:52:63:
         06:91:c2:40:06:25:98:3b:60:7c:f2:b4:9a:9b:38:be:e8:3b:
         c7:e6:a6:41:f6:d0:89:38:5d:a4:6b:79:0c:18:52:67:2d:f6:
         50:4e:fc:93:f4:67:11:0c:22:ec:73:8f:a2:de:ce:a6:5d:0a:
         7c:ed:d3:f1:7a:22:61:81:6a:cb:35:38:d6:75:d2:54:a1:9f:
         05:c1:ac:da:bc:f3:d2:d1:a8:a4:3f:3c:c1:19:c1:a0:29:2b:
         91:24:82:88:69:c9:d8:80:78:0e:bd:ac:8f:89:09:99:72:4b:
         39:94:5e:24:99:c0:d0:4b:57:47:c3:63:6d:e6:0f:92:03:08:
         b5:b5:51:45:07:fc:36:43:6a:d9:c8:49:f3:27:fa:8d:d1:a2:
         99:b7:29:6e:00:25:6d:17:0e:44:75:35:f1:73:63:25:0c:90:
         b3:0e:b9:ef:2e:13:af:fe:1b:24:4f:89:01:79:36:3f:80:78:
         f1:fe:51:54:ce:3a:be:b9:d9:9a:bb:8c:90:ec:7e:2f:0f:77:
         f3:e7:96:05:41:e2:9d:f1:e3:b0:0f:28:9b:5b:e3:b5:43:40:
         21:e8:45:db
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCjBwBEjwwaFVZa6wUBC9gFgceYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4
QjZCRDMxOTAeFw0yNTEwMTgyMzQ2MjJaFw0yNTEwMjIwNzAzMjJaMDMxMTAvBgNV
BAMTKEM4QkZFQzVEOUIwN0NFMEFFRUE2NzIxMkQxNTczRTIwNDk4RUQ1NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lJnOMHa3X0f71Y/ufQAWYx8C
onq46e2XGtP1dwjlo9PTehX/GT3SFg00XylxH68KtfDuImEC23S4L2HaGlsk+7Iz
alTciYxbZsdh2vX9m4z1dr3wHzGssEuf97gyIWdFqJBFihUtJfN+Dpnk9kQVO0xw
mCFESZXWzjno2cmFY7CUdrUG7WEyc63SluRXURklAY/DWbzEdlDK05O7BYwn91VZ
NrwRbXy536NVt2/YxuH7GvOuKSCM7prEHb/80HVmA6PEEaNJk2KwNW8VKMWqv6VI
V98aSHsFy7rkR8/l2YHnm9g94VK+IvY3JvgaeNFmw8mvI3n8Qr1/PDDe9e5rAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyL/sXZsHzgrupnIS0Vc+IEmO1WcwHwYDVR0j
BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5
RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC
RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5
YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1
NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE0c954zz7+USs3TZD8uSY7tVoMeBKwzXzej
bvma4tQJlIVSYwaRwkAGJZg7YHzytJqbOL7oO8fmpkH20Ik4XaRreQwYUmct9lBO
/JP0ZxEMIuxzj6LezqZdCnzt0/F6ImGBass1ONZ10lShnwXBrNq889LRqKQ/PMEZ
waApK5EkgohpydiAeA69rI+JCZlySzmUXiSZwNBLV0fDY23mD5IDCLW1UUUH/DZD
atnISfMn+o3Ropm3KW4AJW0XDkR1NfFzYyUMkLMOue8uE6/+GyRPiQF5Nj+AePH+
UVTOOr652Zq7jJDsfi8Pd/PnlgVB4p3x47APKJtb47VDQCHoRds=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:57 2025 by rpki-client