Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
File:                     389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft (raw, json)
Hash identifier:          0sMaNDA9/U81hmonhGBHCxxWbCLjIeohBuOV5Qi2t6M=
Subject key identifier:   62:AB:E3:94:FD:B5:FB:86:A5:01:C6:07:84:FC:3E:3D:A2:82:02:58
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Certificate issuer:       /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial:       3E0D4D6E4FCEBB4068BED10DCC1DA8E6B0E5448F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
Manifest number:          0501
Signing time:             Sat 23 Aug 2025 03:22:07 +0000
Manifest this update:     Sat 23 Aug 2025 03:17:07 +0000
Manifest next update:     Tue 26 Aug 2025 13:41:07 +0000
Files and hashes:         1: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: TuOuwC+HTY3+zsq30NoK3C4u4uR9Kt6tuzw+MAyTb4o=)
                          2: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: /yhg5qr+BfUwCEkWIHjx5Xurv6fbCx8q1w5UII3HZ8w=)
                          3: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: wlegEJoNWqrWT2tySFrwLRqLsXDXFl0OFT0Nuvvp7LI=)
                          4: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: ShEOWvu/KCYTTrKo5vrKeCwlexfHyDbC4uTV8yZtzEM=)
                          5: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: lX37Ym1HtH8/+BNNZ7vVVvmLTRPAVgTV6qXoJU01xNo=)
                          6: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl (hash: x2EODxJ8Z9jENEtr2bpBGEtaYQlReYrTkKm/teq2HEA=)
                          7: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: nLub1P+aFMPWReFe8FfiX+yqIND5D1X2l5ebLcrAixg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
                          rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 10:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0d:4d:6e:4f:ce:bb:40:68:be:d1:0d:cc:1d:a8:e6:b0:e5:44:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
        Validity
            Not Before: Aug 23 03:17:07 2025 GMT
            Not After : Aug 26 13:41:07 2025 GMT
        Subject: CN=62ABE394FDB5FB86A501C60784FC3E3DA2820258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:df:a1:d6:61:96:06:12:a9:c9:16:3c:07:
                    5c:c1:e5:f5:56:5e:04:b1:4d:94:cd:e7:7c:4a:9c:
                    2a:fd:32:4d:5a:1b:22:c3:25:f6:40:ec:2f:9f:74:
                    35:f3:b7:19:7a:9b:dd:aa:7d:8b:ff:56:49:19:f4:
                    89:0b:97:29:1c:37:e0:41:69:48:a5:98:fc:ec:7e:
                    09:76:b0:4c:a2:7f:b3:8d:7c:90:3b:a8:b0:fd:7c:
                    8d:9b:82:5c:a8:1e:0e:f9:bf:68:e7:c2:f7:da:e2:
                    f0:e1:10:04:5f:2e:ce:84:45:5c:78:4f:62:91:53:
                    f3:fd:23:1f:51:a2:ce:a1:6c:25:5c:35:4c:e6:10:
                    87:cd:e1:7e:ae:6a:8f:cc:a3:7b:a9:42:de:26:df:
                    be:63:d4:d3:d9:41:bb:4e:fd:15:7b:39:f0:2e:67:
                    25:ba:fb:53:c2:52:02:22:84:ca:1a:55:5d:fe:7c:
                    1b:db:db:e6:59:dd:3b:b4:29:3c:83:8f:b3:c7:4b:
                    8f:ca:50:f4:c0:bf:de:9e:6f:12:d8:65:74:0d:40:
                    49:20:88:e7:af:a8:e9:db:e4:32:f9:5b:48:8c:8c:
                    c4:79:8c:83:67:83:03:98:34:36:ba:9a:66:5d:e0:
                    ee:11:43:92:9c:6f:85:2d:1a:3e:c5:10:33:00:a5:
                    b2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AB:E3:94:FD:B5:FB:86:A5:01:C6:07:84:FC:3E:3D:A2:82:02:58
            X509v3 Authority Key Identifier:
                keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:bf:c5:a9:10:35:73:46:f0:dc:e8:67:7a:c7:99:bd:1f:cb:
         3d:2e:e5:57:35:d8:85:eb:ed:38:7e:03:a2:3a:75:14:46:9b:
         06:3c:b7:af:39:c1:08:00:b0:b3:c8:9b:36:b7:ce:f3:ec:b4:
         86:64:3d:91:96:a5:03:fe:7f:d5:f9:8b:3b:29:60:e3:46:52:
         a0:07:42:fe:94:30:b9:61:89:f4:19:92:59:ce:fe:61:37:86:
         31:da:5e:d2:73:46:6f:f3:a5:af:05:91:ff:ca:1f:be:e8:d7:
         89:51:b9:55:60:1f:54:7e:0b:ce:3b:f8:52:f1:d2:98:1a:b6:
         00:8d:6e:38:60:3f:59:5e:15:1f:db:c3:a7:b1:a3:99:d3:63:
         aa:8a:e1:11:a0:f2:eb:dd:71:36:29:26:86:97:4a:5c:ed:8d:
         6b:32:10:89:29:55:15:d6:c0:ee:e9:5a:3c:13:9d:47:5c:7c:
         ad:ee:3e:17:79:1d:07:e6:cf:bd:9a:cb:05:ce:98:5a:d9:f6:
         2b:aa:7e:8c:99:4d:33:9d:1e:49:b0:f6:d1:6d:59:f5:46:7c:
         c1:f6:6f:53:d7:a1:89:b9:bb:f1:b5:32:b4:20:5b:76:44:d1:
         ae:64:46:30:64:ff:66:52:07:f2:26:e4:17:e4:3c:5a:f9:5a:
         ab:76:62:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:50:19 2025 by rpki-client