Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
File:                     C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json)
Hash identifier:          2ANL9fHBC2/MhSBfk8gEWAnB+YIPeJF0MvdoGhnUYj4=
Subject key identifier:   33:F2:19:59:96:7D:77:CE:F3:2D:93:03:E6:77:77:CB:98:F6:82:85
Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
Certificate issuer:       /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Certificate serial:       1686A0E49F9ADE1323CB60BAAC47138AD11F0660
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
Manifest number:          0211
Signing time:             Mon 20 Oct 2025 15:21:51 +0000
Manifest this update:     Mon 20 Oct 2025 15:16:50 +0000
Manifest next update:     Fri 24 Oct 2025 02:41:50 +0000
Files and hashes:         1: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: xtjpkayX42ahjTFsnuY46Hlm9SoehvE8O0HLSPjq06w=)
                          2: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=)
                          3: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=)
                          4: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=)
                          5: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=)
                          6: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=)
                          7: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=)
                          8: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: VlqU+vZhYjQZF1JZPdWoo7tkxRBPwM7qc4jvLpSlRqU=)
                          9: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=)
                          10: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=)
                          11: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=)
                          12: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=)
                          13: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=)
                          14: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: DZw3cfVpl9eMlsIinfHwKcH6/KtzgbcJ6EVoNMOzf5I=)
                          15: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=)
                          16: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=)
                          17: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl
                          rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 02:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:86:a0:e4:9f:9a:de:13:23:cb:60:ba:ac:47:13:8a:d1:1f:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
        Validity
            Not Before: Oct 20 15:16:50 2025 GMT
            Not After : Oct 24 02:41:50 2025 GMT
        Subject: CN=33F21959967D77CEF32D9303E67777CB98F68285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8e:ec:7a:d8:8f:57:20:3a:dc:5a:ce:8f:23:
                    ca:d4:72:5f:97:f1:86:ae:80:24:fe:f7:cd:3c:a3:
                    d9:60:f3:8e:5b:b1:78:c0:57:4d:5d:8d:7a:f6:99:
                    6c:08:7a:99:e7:e9:f9:a5:6e:43:30:5c:b1:f7:24:
                    42:fe:e9:b3:4e:60:78:ff:7d:7a:0f:3e:0c:fe:16:
                    ca:a6:76:bd:51:bc:f1:9c:5a:23:07:81:e8:b8:08:
                    cf:ed:c9:bf:7e:d1:5a:e1:d8:20:a8:c9:30:ba:87:
                    63:cc:32:bc:64:b4:e2:d1:d4:00:b5:75:5c:a6:bd:
                    70:ba:94:bd:17:74:d4:54:20:79:61:1d:6b:55:53:
                    f5:26:44:bd:b0:d3:c7:12:08:cb:dd:70:c1:23:79:
                    d2:e2:fd:f5:bc:2f:d6:9c:82:c0:38:fb:13:46:c8:
                    09:05:b9:1c:33:98:b1:8d:9e:69:f6:d2:3c:56:7d:
                    5b:3f:8e:09:07:a3:df:0c:77:d7:58:dc:f9:78:84:
                    85:e6:5e:98:b7:33:00:8b:dc:a7:6c:f6:f9:1d:9e:
                    71:f4:a1:81:7b:f5:8b:43:f5:95:3e:e0:05:9c:d9:
                    d4:44:ea:77:a3:20:3e:6f:e9:5c:99:9d:d1:b5:aa:
                    a9:78:88:de:14:62:55:78:e2:97:0b:59:2b:fe:0e:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:19:59:96:7D:77:CE:F3:2D:93:03:E6:77:77:CB:98:F6:82:85
            X509v3 Authority Key Identifier:
                keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:00:52:c8:8e:09:94:b1:e6:c6:d2:17:e2:dd:99:71:4b:11:
         b2:32:66:60:d5:58:06:21:4c:e8:d4:67:62:2a:0d:bb:00:7b:
         6f:37:e2:81:37:03:29:b3:c0:8c:81:c0:12:21:0d:80:e7:68:
         27:bf:72:70:84:1d:8b:34:16:a3:ac:a8:85:3e:91:b7:d5:cc:
         93:80:af:cf:de:1e:48:cc:fc:f8:b1:71:50:7b:c4:94:f4:44:
         b5:46:4b:ea:e6:ca:e9:09:85:34:61:68:16:c5:2d:2c:73:cb:
         af:4c:a8:41:86:72:4b:0a:3a:16:22:cf:95:0a:b7:50:71:0b:
         1f:c2:cc:3b:8c:80:fd:d4:a5:b0:c9:4a:06:1e:c7:06:b9:c8:
         39:f8:b7:bf:8d:73:8c:f4:ef:a9:eb:9e:a1:dc:3c:48:d2:d1:
         93:89:1a:b9:a5:43:e7:20:18:51:e1:65:ee:b1:ab:60:28:9e:
         f1:5c:45:c0:e4:5c:95:df:b5:a5:87:d5:9f:0d:2d:7c:18:24:
         a5:09:d5:03:db:64:a4:46:22:4e:67:57:e1:eb:fb:f0:41:69:
         2a:39:1f:37:89:e3:ad:53:cb:c6:de:d3:0c:45:84:6f:8c:5d:
         97:5a:6f:0f:ce:7d:10:9d:e7:b7:cf:97:44:d7:99:20:29:20:
         c6:15:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:44:14 2025 by rpki-client