Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
File:                     764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft (raw, json)
Hash identifier:          zD2J6i404nG6r3ZC2EXvZWxY3+it7I8ecPU+ur1siQM=
Subject key identifier:   AF:4E:A5:2C:5B:AD:69:8F:73:4B:E8:09:8F:E1:B8:EF:B3:63:13:AC
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       765033DDE1166CD02E40A1D1579BFC4F8E2EB5A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
Manifest number:          0529
Signing time:             Sun 19 Oct 2025 21:22:03 +0000
Manifest this update:     Sun 19 Oct 2025 21:17:03 +0000
Manifest next update:     Wed 22 Oct 2025 23:06:03 +0000
Files and hashes:         1: 3130332e34392e33312e302f32342d3234203d3e203633383632.roa (hash: qwHFJlzE75soHgkgF3RpDwO4DScSGg2bNwgpJLGwqV8=)
                          2: 323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa (hash: MvAl+VLsKwMPS7SAuBK6iH2yg75H3l7BSJCwZaIQZeA=)
                          3: 323430313a663938303a663030303a3a2f33362d3336203d3e203633383632.roa (hash: RsZDfa4l/Ykdunatg9OGqKFYnr67kX/kc9LRRc5DAps=)
                          4: 3130332e34392e33302e302f32332d3233203d3e203633383632.roa (hash: Tgc1IbbEQhYrvRTCHCliK+0ORHrdqANdS7E500/DQ9M=)
                          5: 323430313a663938303a333030303a3a2f33362d3336203d3e203633383632.roa (hash: BJzh6fi2j7EDPGFdArFNRS0CDexcva0kRaMPjrQlvKk=)
                          6: 323430313a663938303a613030303a3a2f33362d3336203d3e203633383632.roa (hash: PJfON3J1hibYxig1JJVo+LbXyiXk9NNpTQwuQ3g8s5A=)
                          7: 323430313a663938303a3a2f33322d3332203d3e203633383632.roa (hash: vp7VR25cL+7Dj8J5Als0e0/zfWMWTajGC19u/9W7zjc=)
                          8: 323430313a663938303a633030303a3a2f33362d3336203d3e203633383632.roa (hash: gZ6EFD5pd+8gqNQ96WtmpwvO7RdgA9TqPZ0oZeX1RxE=)
                          9: 323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa (hash: 4RvKbxqsxmFphFFT0AR0YU3P7kO33nsvJL0cm7fON84=)
                          10: 3130332e34392e32382e302f32332d3233203d3e203633383632.roa (hash: o40OEDlcfuYKgduOIU7wYZ/BDlWQXnYxeN2j94AR8Ow=)
                          11: 3130332e34392e32392e302f32342d3234203d3e203633383632.roa (hash: 30F4ZCW17S7UiR04g4PJbkgorb4jv9z7nexloi8E1NQ=)
                          12: 323430313a663938303a3a2f33362d3336203d3e203633383632.roa (hash: HCKRR7Yvu8AkSEZO+RpqEPEhCQGAmhX74tzgagWiyVg=)
                          13: 323430313a663938303a383030303a3a2f33362d3336203d3e203633383632.roa (hash: Iq/SBWkbL1WifsnbkuHlgUB3Ay9q9AsfpCUsgBLRWpg=)
                          14: 323430313a663938303a323030303a3a2f33362d3336203d3e203633383632.roa (hash: 2pZ6uFkAKxXYLAE9HtmsiFsHAr3GYPDr20QIIqwtmL0=)
                          15: 3130332e34392e32382e302f32342d3234203d3e203633383632.roa (hash: Qke1nNFSxZLmY9LyDaTEBEuRylh5toA4mPl9cPKxAU4=)
                          16: 3130332e34392e32382e302f32322d3232203d3e203633383632.roa (hash: j29Wbria+1pTAZNNhlMKdGisstrftTQc0GZrNCUupag=)
                          17: 323430313a663938303a373030303a3a2f33362d3336203d3e203633383632.roa (hash: fDdIZ4P43rgAn2eW58sEJiSJIBnEytrfazd7HGt6WcE=)
                          18: 323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa (hash: vMFZ3J2IVHCkbQrjErXMN4qM62WgQCjGOgATugsFtb0=)
                          19: 323430313a663938303a313030303a3a2f33362d3336203d3e203633383632.roa (hash: ZRSeKc4pMgl+FGQHx8mqpdUVwvZ/a1dodM6UIQdaa88=)
                          20: 323430313a663938303a393030303a3a2f33362d3336203d3e203633383632.roa (hash: ORRj6N+z+lWYq/tm4C40gunFOFz4fBOQOt4AnDlgOcU=)
                          21: 323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa (hash: M8k1ObpwWRLtpo6cotfacaJuetwePH7UVQJ67SzDIUk=)
                          22: 323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa (hash: 0u0kW/z+IwveHT8952wWEDeMzwjeuOZR3r03FnvuCUk=)
                          23: 323430313a663938303a623030303a3a2f33362d3336203d3e203633383632.roa (hash: OIXgMAkVr/N11Akj2gSI1RIkXDHXPy2DRGOsurzJVOo=)
                          24: 764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl (hash: tM+AskthbhxU/kc+f9XMIrQoLI1My5JuQKNdsHupLuM=)
                          25: 3130332e34392e33302e302f32342d3234203d3e203633383632.roa (hash: Zytgh6xk872eCWCODvRgqwCZiUirR+4sQkw++qo2eSI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 23:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:50:33:dd:e1:16:6c:d0:2e:40:a1:d1:57:9b:fc:4f:8e:2e:b5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Oct 19 21:17:03 2025 GMT
            Not After : Oct 22 23:06:03 2025 GMT
        Subject: CN=AF4EA52C5BAD698F734BE8098FE1B8EFB36313AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:ed:9a:94:68:43:1e:43:6c:94:74:a4:cc:
                    0a:6a:6f:cc:a3:8b:2e:e8:0b:ba:0f:8b:26:0d:9f:
                    f0:32:aa:47:31:03:84:3d:13:67:e9:ef:a8:ca:34:
                    2b:62:81:de:02:de:08:1a:44:50:24:cd:3c:96:02:
                    37:e9:e6:ad:30:fa:19:c4:fd:6d:6e:f0:dd:31:3c:
                    de:ae:93:a0:ac:08:c2:f5:aa:39:95:7f:57:71:9a:
                    77:6b:ad:de:3d:fb:00:35:95:39:90:8e:e3:f4:96:
                    8c:a3:f4:7a:a6:66:c2:34:04:f2:9b:9d:2a:14:4a:
                    14:96:2c:94:bf:a7:b1:77:8a:0b:37:9b:93:28:98:
                    cd:7e:4c:c6:35:6c:06:88:0c:ad:ae:a7:67:bc:15:
                    23:f4:fd:c0:9c:ca:5b:90:90:a7:81:02:08:12:46:
                    ec:2e:b1:54:0d:e2:5b:86:07:a8:cb:74:2d:ae:d7:
                    c0:12:d9:98:e6:fc:87:ab:79:80:4b:29:93:5b:04:
                    4c:f1:28:75:f8:d9:53:1c:47:44:cf:8f:e6:76:15:
                    25:55:40:1e:d3:5d:27:f3:07:62:32:fd:c0:84:51:
                    43:d9:66:03:8a:65:7b:16:64:40:3e:4e:7e:62:44:
                    af:af:bb:3b:81:56:ff:b4:12:3e:2d:13:ff:97:af:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4E:A5:2C:5B:AD:69:8F:73:4B:E8:09:8F:E1:B8:EF:B3:63:13:AC
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2b:c8:29:90:b5:fb:39:f3:77:46:a0:80:dd:ba:cb:f3:03:
         12:85:31:3e:32:c7:70:8d:b7:f4:01:c5:16:9c:b9:09:ed:c8:
         4c:81:48:1b:56:7f:0f:67:94:6a:c3:9d:61:b5:e4:c2:50:71:
         88:1b:ab:c4:6d:11:f8:67:71:8e:fb:1a:24:6f:de:4f:54:d9:
         a4:00:9a:64:ec:d0:df:e9:76:4b:2a:3c:77:f5:6e:0b:d3:93:
         c0:53:ae:69:4a:f1:ed:5d:e2:ff:37:86:4e:d9:c3:7e:7c:d5:
         a3:92:6a:a1:76:da:c5:73:3d:4a:bc:75:69:a8:f0:63:68:33:
         f0:ec:c2:f1:df:02:ff:46:01:b0:f4:b6:40:5d:3f:e7:63:27:
         95:87:e9:cd:32:49:b7:22:d7:bc:67:c1:ad:59:73:ec:59:5a:
         01:04:bd:c1:cb:31:42:8f:b5:a0:04:32:c6:54:78:d2:85:5c:
         dd:ee:34:1a:82:19:fd:3d:0b:9a:69:b4:1d:e5:ee:ee:eb:0f:
         22:a8:fa:64:4c:73:dd:d7:ac:53:9e:ea:b8:d5:e2:46:da:cb:
         b9:ef:5b:27:26:86:b5:d0:0f:de:3b:4f:4a:77:1d:ff:b2:0e:
         f3:2b:f8:28:9e:fb:45:05:29:be:bf:4c:21:e2:8b:a8:d1:6d:
         24:5c:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:54 2025 by rpki-client