Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
File:                     E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json)
Hash identifier:          4XF8zxctKZcBu5z0wQVZF6yPJVa2waYJlY7yDA8gQMU=
Subject key identifier:   95:91:4A:02:B9:99:79:E2:98:76:48:2A:85:18:A1:67:E8:F0:0C:4D
Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70
Certificate issuer:       /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
Certificate serial:       7636A37A6A81644D274F4467690BA9C86B3AFB09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
Manifest number:          023B
Signing time:             Sun 19 Oct 2025 00:40:58 +0000
Manifest this update:     Sun 19 Oct 2025 00:35:58 +0000
Manifest next update:     Wed 22 Oct 2025 03:51:58 +0000
Files and hashes:         1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: lkC88HJ0pZo8ZzF0pz1OZSMNRnUogkciZSobAR54DHY=)
                          2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl
                          rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 03:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:36:a3:7a:6a:81:64:4d:27:4f:44:67:69:0b:a9:c8:6b:3a:fb:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
        Validity
            Not Before: Oct 19 00:35:58 2025 GMT
            Not After : Oct 22 03:51:58 2025 GMT
        Subject: CN=95914A02B99979E29876482A8518A167E8F00C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:e0:5d:9f:d3:34:67:11:c6:eb:61:63:81:
                    ad:b0:c6:62:dd:94:1e:15:20:d2:7f:e1:ff:42:5e:
                    c4:76:54:88:cf:bc:89:4b:1e:3e:38:58:08:fb:af:
                    54:32:9b:bf:2a:4a:f1:0f:a7:ea:5f:8d:0d:ca:05:
                    5d:04:c6:30:69:e4:1c:f1:f3:3f:f3:a8:81:e8:4c:
                    8e:ef:3d:22:72:58:3d:08:b8:80:d4:aa:d8:2b:cd:
                    fb:1b:8d:6f:fb:ec:80:80:fc:46:6b:bb:2f:45:4d:
                    b3:df:a6:03:b3:0a:d8:a5:4d:f2:0e:ca:24:90:81:
                    89:e1:f0:63:26:89:ad:6a:44:05:3c:7a:ca:b6:5b:
                    0f:2a:1b:9f:94:02:10:df:91:50:e7:60:55:a6:3a:
                    7b:63:6a:8f:6f:bd:1a:e7:1e:87:ed:d8:81:67:6a:
                    93:0f:68:8a:d5:3e:58:05:ee:75:4a:28:0b:c6:47:
                    04:47:1d:90:9e:22:66:9a:65:bd:50:51:57:ba:ed:
                    62:41:9f:b7:21:5f:5e:f5:00:d8:00:a5:af:35:06:
                    98:fb:21:35:46:2d:d5:bd:3e:11:d3:a6:d2:a5:c2:
                    4e:7e:c6:6e:f9:34:37:fd:f2:4e:4a:7f:65:c3:37:
                    d6:97:9f:e9:5c:38:1f:90:99:9f:20:95:3d:e6:8e:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:91:4A:02:B9:99:79:E2:98:76:48:2A:85:18:A1:67:E8:F0:0C:4D
            X509v3 Authority Key Identifier:
                keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:96:d2:81:40:af:1f:41:53:dc:c1:b9:af:44:18:c0:93:
         1d:2d:04:ec:97:9b:fb:5c:d4:1e:fb:b5:f1:d2:33:48:05:39:
         d8:10:ec:19:04:56:f4:00:62:83:c1:a9:36:7d:7a:f6:20:c9:
         f3:e0:cd:0e:6c:df:7a:26:e8:d1:89:ec:bf:7d:22:5d:3c:7d:
         07:01:22:bf:ee:4e:e8:f9:13:0d:1b:c6:bb:00:be:11:4d:a8:
         ef:c8:85:94:a3:4f:3d:49:e8:31:31:3a:e3:1e:73:2f:41:58:
         6b:03:d9:97:83:d7:20:c9:35:22:27:95:2f:76:04:4a:5f:64:
         8e:c3:00:84:2c:ee:5b:1d:7d:97:1b:31:07:88:42:71:e9:b6:
         b8:7c:ab:e2:07:87:59:b9:c0:1a:4d:00:13:6d:be:93:7f:ac:
         fb:cf:a8:28:4c:91:33:8e:a4:d9:81:3d:f7:d4:1e:00:f9:5e:
         e8:d9:97:0b:aa:06:2c:93:2c:88:dc:37:b7:8a:a5:f5:dc:f0:
         53:d8:46:8f:ed:09:55:e1:48:f6:8a:ca:b8:65:6d:4e:0f:76:
         8a:ac:dd:c4:bf:1a:ce:00:bc:a4:72:6d:ff:d7:9a:97:70:ea:
         47:47:0c:18:12:8f:e3:5e:d7:da:08:47:f9:2b:a6:f3:2f:53:
         02:2a:5f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:08:50 2025 by rpki-client