Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
File:                     A62202F88CE61D6BD47195FB36103CDD061D7D27.mft (raw, json)
Hash identifier:          MiVMPTYIPpAGehO93Lhb0Y+fgNrV8Hof2DZCb3iGEd0=
Subject key identifier:   76:68:EA:8E:7E:63:CE:17:24:19:05:F8:CD:49:3F:F0:1A:8B:7A:92
Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
Certificate issuer:       /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Certificate serial:       65C46320DD0AD6167890499BE25248CA1F4FE91B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
Manifest number:          01D4
Signing time:             Sun 19 Oct 2025 23:02:09 +0000
Manifest this update:     Sun 19 Oct 2025 22:57:09 +0000
Manifest next update:     Wed 22 Oct 2025 23:46:09 +0000
Files and hashes:         1: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: KFUWTEUvZvgc2Sp7OplQf3StiF5G7GN7f9NvxoAUowM=)
                          2: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: BOpg9hyAPDl8hg69J18XcZBmeLqMIq91C57NuMalFfc=)
                          3: A62202F88CE61D6BD47195FB36103CDD061D7D27.crl (hash: jCtrEiKi7d1rBYTDG0HWKqzEld0UdKcpxXYG/AnZ2Kc=)
                          4: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: dehAdCQa2rj7pyUCMHYZPbkXEG87vkJWPD4EN4G4cvU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
                          rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 23:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c4:63:20:dd:0a:d6:16:78:90:49:9b:e2:52:48:ca:1f:4f:e9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
        Validity
            Not Before: Oct 19 22:57:09 2025 GMT
            Not After : Oct 22 23:46:09 2025 GMT
        Subject: CN=7668EA8E7E63CE17241905F8CD493FF01A8B7A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:af:1c:c9:33:16:4d:66:2b:26:0f:bb:38:
                    4e:94:5f:0a:73:4d:a1:8d:12:13:2c:f0:39:67:ef:
                    58:c1:8c:a6:37:51:20:eb:ca:8b:74:b0:00:a5:a1:
                    4e:af:51:42:4c:34:d0:f0:d5:13:c0:a8:82:a9:28:
                    69:f2:b6:80:89:73:9b:b4:a4:ab:79:6c:4a:aa:1f:
                    6c:a5:96:e5:f7:30:c1:23:05:d3:6e:5e:ac:04:fb:
                    c8:12:aa:99:2e:2e:dd:9f:4f:21:d7:f0:a5:27:27:
                    12:ec:5c:79:e1:43:84:29:62:b8:13:6b:83:4a:77:
                    94:2f:fa:d8:af:06:e1:63:2f:ee:75:b8:91:e3:e7:
                    4e:b6:89:4f:29:b2:7e:f3:18:59:7d:44:8c:8d:4f:
                    18:b6:3a:8c:38:07:79:c3:ef:4e:c5:b9:2a:15:98:
                    82:85:67:e1:c6:7a:d6:4e:cc:bb:37:9e:00:f6:c4:
                    cb:5a:30:d2:a7:84:05:d6:57:38:e2:f1:13:3b:cb:
                    8f:8b:05:0b:35:4b:ac:79:a3:6a:40:f8:bd:f8:e9:
                    fc:94:f5:ee:3c:f0:a8:f0:22:32:7f:a1:81:d7:63:
                    81:50:d9:2d:49:84:7d:7d:3f:d5:e6:49:d8:70:ce:
                    0d:ee:85:6f:6d:1d:26:e6:b5:d2:83:6e:40:ae:77:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:68:EA:8E:7E:63:CE:17:24:19:05:F8:CD:49:3F:F0:1A:8B:7A:92
            X509v3 Authority Key Identifier:
                keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:51:6c:de:0a:aa:8c:5d:e3:46:b0:ea:6d:c7:7b:80:55:03:
         7d:bd:5c:43:a9:3b:d3:11:33:0f:f8:8f:35:fa:88:51:d1:1d:
         a4:3d:c9:e1:5d:db:57:99:95:45:e5:d3:0a:74:49:bd:5e:87:
         c5:12:4f:91:7a:a5:77:58:4b:08:b3:f7:f0:43:9b:0b:21:75:
         50:54:20:b5:11:49:ae:94:72:42:52:17:03:3b:ec:11:0a:7e:
         34:8d:6f:f8:cd:94:8d:95:fb:19:00:aa:86:a4:d9:69:89:98:
         f9:74:11:41:52:92:b9:97:34:cb:55:5b:69:df:32:d1:3a:17:
         83:70:90:31:97:2f:ae:3e:e9:7c:e5:4d:3c:dc:4b:eb:10:d7:
         ac:fd:33:82:80:06:ee:50:5b:95:eb:af:29:42:aa:07:38:f0:
         0e:5c:b4:df:1d:e4:9f:77:3f:8c:83:0c:ea:28:84:52:45:59:
         10:1c:79:34:73:15:1e:bf:c4:d6:11:84:4f:8f:31:a9:99:47:
         99:15:2b:b9:54:82:9d:44:30:ae:7c:ad:6b:1e:ae:7f:5e:3e:
         87:3d:8f:ab:4a:5a:7b:3f:d2:a9:28:9e:62:21:89:78:04:e9:
         14:31:b5:fa:fa:8e:6c:85:73:7a:4e:93:23:d6:99:da:36:22:
         b6:1e:5d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:00:57 2025 by rpki-client