Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
File:                     1635F5E419798341BDC615D4E1C6AE340C34BEED.mft (raw, json)
Hash identifier:          093vGuDnHX+qybzL6T2dBTk9hnX0K3XqifI9UwKBdko=
Subject key identifier:   B8:8E:4F:6B:D2:8F:B4:36:5B:5F:41:C9:6D:33:BF:F5:6D:9A:A9:A7
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       12B707BAC68A8A98E52F87B254357D02431D8C31
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
Manifest number:          051E
Signing time:             Sun 19 Oct 2025 03:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 02:56:28 +0000
Manifest next update:     Wed 22 Oct 2025 11:57:28 +0000
Files and hashes:         1: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: dVPU6JD2A84NVYrSKQ9v6ag+q7nJt0d3GPOdYg/vAzs=)
                          2: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: Fow2FQnfsWM+t0AdvtL67zUS1huXa7y9vM3+TEZxD7M=)
                          3: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: lS1RAb31GjYc1m7ta2BgMoEsUFuw8zYDY4GO22I3IUc=)
                          4: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: jd6LmOWTW9h+pZpEVT+8YFnE7+vOf7HUJDd4WCtQWm0=)
                          5: 1635F5E419798341BDC615D4E1C6AE340C34BEED.crl (hash: AK2/3dDfmEom+dhhtNGjDUhVIuLjvYtD5dXQ276xwzU=)
                          6: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: IM2twiGIKQqETGmIWQI3vAIIytZPeeD5wgctglA7Hpc=)
                          7: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 1kbjcVz7NV7SFqtMY1gTY7M0GuY6igkJGp6NsdTqDPc=)
                          8: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: kTRg5VWzA/woXO+nc54YqUj1OHro7jOG0YTwaTc42Oo=)
                          9: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: vN2suRuDQ8/GCQHEEEyC7GJFF4AF2Ux2vUSPEF0UgN4=)
                          10: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: SoYj2/CQvnngSSgeQ/2h6CjbPD0PX7O3f0MfyUEw7yQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 11:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b7:07:ba:c6:8a:8a:98:e5:2f:87:b2:54:35:7d:02:43:1d:8c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Oct 19 02:56:28 2025 GMT
            Not After : Oct 22 11:57:28 2025 GMT
        Subject: CN=B88E4F6BD28FB4365B5F41C96D33BFF56D9AA9A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:e0:e8:0d:1c:33:e9:84:c3:8b:35:bb:ab:
                    4e:af:9d:43:6b:f3:5e:87:b9:b7:7a:cc:ff:dc:ce:
                    e0:60:89:d6:2a:1c:5a:08:c8:85:05:ff:64:b0:93:
                    db:e0:bc:85:59:a0:1d:f5:6e:bd:ad:0e:9d:5e:1b:
                    73:6a:e2:9a:be:8b:b2:09:f5:af:bd:78:cd:25:a7:
                    db:9a:c7:fa:36:6b:c7:dc:aa:b7:ea:31:12:c1:3c:
                    4f:fd:cd:e6:af:ca:25:ff:1e:07:2d:2c:5d:63:e4:
                    3b:8c:ee:33:ff:f7:2c:5d:8f:f4:b9:5c:52:95:77:
                    ac:da:3e:53:45:e6:64:21:f8:e3:57:3d:0e:08:22:
                    02:e1:fd:ce:44:44:43:e8:f5:0c:4f:ea:50:d4:d1:
                    40:b7:28:73:c4:1b:62:b3:29:83:6c:db:ed:95:74:
                    e4:86:90:26:3a:0c:78:59:cf:dd:1c:eb:4a:bb:ad:
                    34:d8:23:e9:cb:85:19:e8:08:fd:3f:f9:a4:f3:f3:
                    a1:c1:81:5b:f6:e9:1c:35:6e:79:24:94:a4:1f:31:
                    e9:6a:43:81:1d:c4:96:0a:a0:6c:bf:16:a1:be:b9:
                    f2:e1:70:cf:6f:4e:1d:5d:30:6f:60:06:00:e9:1d:
                    27:8f:f0:55:bf:b9:e7:d5:f2:dd:b9:1d:86:94:34:
                    30:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8E:4F:6B:D2:8F:B4:36:5B:5F:41:C9:6D:33:BF:F5:6D:9A:A9:A7
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d1:de:69:74:b7:89:e5:fd:a4:9a:f8:7a:67:6a:82:0e:a2:
         68:89:4c:0b:d2:98:e6:49:81:70:be:db:06:5f:86:33:02:7a:
         60:2e:71:4f:09:39:e7:d9:bf:22:80:ae:c2:d3:b5:96:5f:87:
         09:6f:41:c9:15:c5:15:d2:4e:f6:f3:c5:98:6f:56:e7:3e:48:
         63:e4:43:1e:da:5e:d6:c9:d2:77:58:5f:95:ba:45:8c:1b:97:
         b2:ad:4c:fc:67:95:ed:31:36:98:24:34:35:58:e8:db:f4:85:
         e0:1d:f3:3d:fb:ff:09:bf:dd:bf:45:46:68:2d:a5:96:8f:df:
         85:7e:a4:76:0a:9d:6b:5a:a9:62:ec:1a:c4:ee:dc:50:94:06:
         ab:f9:d2:a0:bf:9c:67:a6:48:66:fe:e9:ff:46:53:b6:f8:3e:
         77:a2:d4:fe:a1:44:a1:c7:f9:9e:30:a5:f8:f3:b6:65:dc:18:
         fc:ca:91:5f:5b:e0:82:db:24:46:4f:0a:c1:78:cd:af:43:9b:
         9d:6b:0a:c7:c7:ca:fa:ae:1a:f9:48:0b:21:42:ea:b2:21:22:
         38:f5:b2:52:90:6f:38:4c:fc:26:ff:96:b5:01:93:38:16:e1:
         d8:c8:36:a9:e2:09:65:77:c7:06:da:a6:f1:6d:73:5b:a1:d6:
         73:62:57:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:14 2025 by rpki-client