Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
File:                     3E0D060F214DF8E6493243033EBD30ABD627ED36.mft (raw, json)
Hash identifier:          812F2mbOVOjuoE1A0SNFmjWK9ulTiXLexwZtHI5ygdQ=
Subject key identifier:   A7:39:78:5F:00:8A:5F:C0:4C:C1:0A:97:11:24:53:CA:9A:EB:47:5F
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       0F5EF0F00CA535A3938C404F85B303E7BB92BED2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
Manifest number:          0364
Signing time:             Mon 20 Oct 2025 15:31:23 +0000
Manifest this update:     Mon 20 Oct 2025 15:26:23 +0000
Manifest next update:     Thu 23 Oct 2025 18:38:23 +0000
Files and hashes:         1: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: 3D9vuP9WnybAIy/tjpIyzYKT6Y/ASbbbLJ7Kn+x1z7Q=)
                          2: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: jx7v0Idpebq1Ou6PCUn6oQ0kEGw/RyRx4sL+jxJLcZU=)
                          3: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: JWZBNDnWrENdctaqQmnbVevM+3EqtVlewochx0EfS+s=)
                          4: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: fOY5dkAcQph8EWJTLprRbPuleZdE/MLjzsb7GZ9f9kI=)
                          5: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: Ez6QIdOXrwH3cf8oEyXk+iBGNJ8xFXIz0jGNdzgCm5M=)
                          6: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: xxFYLgnOs6wDgHlT3HJi54CQjUA2KWj+T7DvpjE3DPU=)
                          7: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: CbVKZtVYvVOggDO1uOKPHPfiUdMOnMjVJFDe5xCk8Yw=)
                          8: 3E0D060F214DF8E6493243033EBD30ABD627ED36.crl (hash: yEodyd9ghFt+kDWxEPPY+ds/UI6b2ew0dSHwZDVqiao=)
                          9: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: weBnxCBwkaeNxkdjFOdohMOR+sXn3+vCk0UPpAqaQI8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5e:f0:f0:0c:a5:35:a3:93:8c:40:4f:85:b3:03:e7:bb:92:be:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: Oct 20 15:26:23 2025 GMT
            Not After : Oct 23 18:38:23 2025 GMT
        Subject: CN=A739785F008A5FC04CC10A97112453CA9AEB475F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:84:de:ee:d7:95:0e:e0:91:51:7a:70:55:
                    5e:7d:45:ab:85:90:34:ab:2a:e6:6e:9b:10:81:87:
                    b3:59:96:54:84:4a:90:c1:df:f0:61:91:a8:54:78:
                    af:21:22:86:61:bb:7e:0d:37:40:f1:4b:19:83:ea:
                    80:b9:40:4d:fc:af:7e:1d:bd:98:88:37:09:07:3d:
                    ac:5c:fc:a7:a5:ed:fc:70:b3:b5:3e:d4:f5:b2:d3:
                    f2:19:c8:0a:c6:d3:5a:c6:7a:4a:ab:4c:0a:8b:a4:
                    95:3a:a9:3b:36:09:5d:ed:7b:35:b7:83:62:01:ea:
                    f1:93:37:03:e2:7d:dd:6c:27:22:a8:4a:d9:48:2e:
                    68:31:3e:1a:56:76:a6:b0:a9:b2:68:93:03:e7:fb:
                    8c:4e:8d:6a:64:e6:3a:54:3f:9d:e4:0a:8c:d9:66:
                    c8:90:b4:a3:f0:95:07:4a:ac:6b:90:30:6d:56:4b:
                    39:36:00:1c:7f:2b:b5:14:0c:2d:37:15:6d:1c:24:
                    d0:36:10:b9:e4:13:a9:7c:e8:0c:31:4a:17:c2:15:
                    ce:c6:cf:70:af:55:0c:e4:05:ef:5f:11:48:e2:7f:
                    6d:9b:3d:41:96:a1:c5:37:13:d2:ff:52:32:5f:7b:
                    af:cb:50:dc:dc:74:8e:64:e1:ae:f0:e8:f4:8a:b1:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:39:78:5F:00:8A:5F:C0:4C:C1:0A:97:11:24:53:CA:9A:EB:47:5F
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:a8:f3:d0:a1:33:1b:ac:ce:b3:b9:c9:c4:b8:e5:38:c4:
         06:d5:6d:43:13:b8:49:6c:ec:4b:d7:1b:05:58:47:20:73:8b:
         f6:f4:92:6e:46:53:50:8f:63:1e:c7:83:37:85:76:bc:e4:1a:
         a0:fa:84:b2:38:77:7d:be:91:44:0f:81:4c:7a:dc:73:86:d4:
         24:e8:e5:4f:aa:05:7d:b4:71:75:b7:73:5e:b7:11:f3:9f:14:
         42:7a:f1:66:e2:05:70:96:ba:06:5d:a2:2b:25:1b:77:45:d0:
         61:59:76:0f:df:c0:dd:4f:22:97:c0:2f:93:0c:22:eb:9e:bb:
         a0:cf:b8:4a:16:57:46:56:f0:6d:be:ad:a5:5c:cb:5e:12:ea:
         0a:66:03:8e:2b:87:15:f8:0d:b7:b4:3b:3b:4d:14:db:11:12:
         f0:46:e0:3c:35:97:ec:25:ea:c3:1d:01:09:a0:a9:0a:84:59:
         f6:ca:31:61:82:55:11:0f:5c:ae:d8:3b:28:39:56:b0:db:6a:
         ac:17:0d:f3:96:b6:9c:06:f2:97:24:8c:e0:fb:0c:1e:9c:07:
         99:ca:59:8d:cc:af:91:1f:56:ec:f3:ca:e6:9c:8d:78:ad:b6:
         e8:25:71:1d:7d:64:5b:fc:df:74:35:75:bd:81:b6:d3:1e:3f:
         47:f2:47:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:50:40 2025 by rpki-client