Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft
File:                     FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json)
Hash identifier:          9IRzTzMoT7nQl5aF2p8x2HzS6ynHEMW+RFZRPU9a9xU=
Subject key identifier:   10:14:CE:A3:09:E3:C7:39:DF:E8:04:C3:BD:24:B6:4C:32:D2:D9:87
Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF
Certificate issuer:       /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF
Certificate serial:       54A94B0325A030D105A9849FD337C9D0AFF4D6C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft
Manifest number:          02A9
Signing time:             Mon 20 Oct 2025 06:00:59 +0000
Manifest this update:     Mon 20 Oct 2025 05:55:59 +0000
Manifest next update:     Thu 23 Oct 2025 11:20:59 +0000
Files and hashes:         1: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=)
                          2: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: VzIrvYP6KFC1mAx7wX3RN4NZG8l17bK+Y9jG1uOOVyo=)
                          3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: pdL/jDmC/bRYeiHS8cnl+uvo57Pja48iQZSIZZK07no=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl
                          rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a9:4b:03:25:a0:30:d1:05:a9:84:9f:d3:37:c9:d0:af:f4:d6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF
        Validity
            Not Before: Oct 20 05:55:59 2025 GMT
            Not After : Oct 23 11:20:59 2025 GMT
        Subject: CN=1014CEA309E3C739DFE804C3BD24B64C32D2D987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:e6:b6:c6:e8:c7:10:69:80:66:49:b2:f4:
                    77:da:3d:26:67:1c:e8:23:85:29:be:8b:95:37:50:
                    e9:8e:76:10:51:a8:49:65:7a:61:39:ec:e4:e9:60:
                    e5:ed:4e:e4:36:0d:22:99:6b:78:5f:2d:c1:34:22:
                    6e:3e:e3:fe:74:85:8b:ec:56:58:90:ba:8f:57:a4:
                    1c:ca:ee:83:8a:6e:7a:7e:4f:c0:aa:d8:a6:a4:90:
                    1f:27:82:52:30:df:61:04:d7:55:bd:89:3c:4f:f7:
                    3d:fb:8e:43:43:fd:f0:df:ac:31:79:83:32:ad:a3:
                    eb:30:20:d4:08:8c:18:cb:6f:0a:09:1f:13:04:07:
                    70:4e:fe:85:d5:42:9a:14:a4:a0:e3:7e:37:e1:36:
                    8c:3e:88:4a:4e:56:d3:dd:53:54:45:46:83:0d:0e:
                    2f:87:80:08:d0:c5:9e:af:ea:2e:1f:30:33:22:62:
                    b3:82:a4:40:90:ba:6c:51:3a:f1:6e:10:10:b1:41:
                    18:a8:54:b3:83:2f:f0:ff:b7:90:d9:19:5d:56:34:
                    e2:94:e2:a0:f8:86:44:ae:4c:90:5e:26:f9:a2:88:
                    56:1e:00:ba:9e:0a:49:13:08:0a:2f:f5:4f:c2:0a:
                    57:c1:0e:68:73:a3:64:e2:3d:55:ae:16:1b:c0:3f:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:14:CE:A3:09:E3:C7:39:DF:E8:04:C3:BD:24:B6:4C:32:D2:D9:87
            X509v3 Authority Key Identifier:
                keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:41:ea:ce:72:04:af:f4:31:44:cc:ac:34:7c:36:ff:02:71:
         a8:2a:79:c4:2d:8d:6d:8c:28:fa:36:21:07:36:1e:2b:43:2b:
         e2:4f:b3:5a:3e:2d:e9:1a:97:a7:45:7b:f3:34:05:a4:9b:9d:
         b5:1e:c1:97:66:6c:a3:fc:c9:2f:c7:04:b2:89:9a:46:25:9b:
         2a:27:e7:d7:2a:23:a6:95:be:1e:f0:a9:95:6c:22:10:0e:28:
         4f:f4:63:b6:13:3f:da:c4:76:79:84:f5:bb:2e:9d:40:67:0f:
         0f:8e:f3:a4:42:06:f0:a0:92:36:c8:d4:7c:73:7e:f9:23:a2:
         aa:57:8c:f8:66:5b:18:48:a5:c6:42:66:d1:18:b6:5c:bd:8c:
         81:67:75:8c:89:6d:4b:c6:27:7b:60:a2:01:06:9f:44:88:f1:
         be:9d:4f:d9:f7:6b:6b:8a:83:e9:14:78:9b:ad:94:0f:25:44:
         47:0f:d4:18:c4:63:69:db:ea:19:21:20:9c:bd:13:e0:79:63:
         01:74:43:36:d9:60:53:9b:ef:04:67:11:07:b9:5d:ab:65:36:
         7b:b4:67:1d:b2:c2:b0:b3:bc:ce:0a:7d:8b:63:6c:06:ba:a5:
         6c:a6:f8:51:01:0e:1a:04:e3:3e:96:64:a8:5a:bd:df:39:7f:
         94:0e:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:42 2025 by rpki-client