Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft
File:                     F137C794398E5F88909A244EC978EA476CCF76CC.mft (raw, json)
Hash identifier:          lpthu5Ryk9dKQV16kp1ymxdiIKu8hxSCy6R6/Xaz+Kg=
Subject key identifier:   CB:9B:1A:7D:8D:06:AD:1A:E2:C0:C5:45:24:A4:74:FE:49:85:B6:13
Authority key identifier: F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC
Certificate issuer:       /CN=F137C794398E5F88909A244EC978EA476CCF76CC
Certificate serial:       22026A76EC90A15423B061AD74D04283536BD9B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft
Manifest number:          01CE
Signing time:             Sat 18 Oct 2025 15:41:56 +0000
Manifest this update:     Sat 18 Oct 2025 15:36:56 +0000
Manifest next update:     Wed 22 Oct 2025 03:01:56 +0000
Files and hashes:         1: F137C794398E5F88909A244EC978EA476CCF76CC.crl (hash: vvYwrJPwLtVLVj/5OrZf+TqNpW784/83PIHa/BPyeoU=)
                          2: 3130332e35352e3232342e302f32332d3234203d3e20313530343832.roa (hash: bYXObqHIEuwgYntbLAkXiZDYp6ozXDo0Cjhn/uYq1JU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.crl
                          rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 03:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:02:6a:76:ec:90:a1:54:23:b0:61:ad:74:d0:42:83:53:6b:d9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F137C794398E5F88909A244EC978EA476CCF76CC
        Validity
            Not Before: Oct 18 15:36:56 2025 GMT
            Not After : Oct 22 03:01:56 2025 GMT
        Subject: CN=CB9B1A7D8D06AD1AE2C0C54524A474FE4985B613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:a6:69:73:10:77:ce:16:e1:d5:9b:66:52:
                    37:5d:fd:f6:bc:61:32:44:2e:ed:11:89:58:a2:e5:
                    38:dc:50:ce:f8:c4:d7:4e:5b:b0:2f:e9:50:7f:b6:
                    9a:21:d2:43:19:ea:0e:72:1e:a4:53:2b:c1:4b:c6:
                    64:bd:b9:a7:95:9b:bd:90:75:86:3b:ef:88:07:00:
                    c2:31:ae:68:73:fd:9c:14:32:ba:e1:b3:d5:7b:43:
                    06:8e:82:da:bd:ed:94:58:2a:dc:a0:9b:e2:36:f8:
                    fe:8b:aa:ff:d3:36:15:21:55:b2:62:e1:49:6d:06:
                    ce:cb:4d:eb:d3:f1:55:cc:20:40:ce:fa:13:00:41:
                    27:73:c5:65:5d:66:60:2c:99:f9:f9:81:6f:65:39:
                    d3:a7:75:50:6b:bc:6a:42:d8:90:a8:3d:fd:8b:39:
                    76:0a:c4:54:86:d1:98:76:0f:6d:b8:b5:65:52:9e:
                    6b:17:d0:a8:93:b3:34:b8:d0:bc:35:38:d3:e8:d5:
                    c7:67:5e:31:cb:9e:86:2d:e0:0c:ab:96:3d:b7:a7:
                    61:72:ea:ff:24:c0:99:27:c9:e2:df:11:9d:54:9c:
                    2b:d3:0f:cd:29:4a:ba:e5:e8:49:2a:2d:e9:08:cb:
                    8c:c2:82:3f:93:9b:fc:83:35:67:6a:a6:82:fd:a9:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9B:1A:7D:8D:06:AD:1A:E2:C0:C5:45:24:A4:74:FE:49:85:B6:13
            X509v3 Authority Key Identifier:
                keyid:F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:ef:a4:d9:cb:ae:3f:db:ff:96:1c:0d:46:27:a8:e9:b0:
         f1:64:9b:74:75:73:03:f6:28:5d:b3:a5:c6:0a:10:f1:a4:8a:
         dd:4e:6d:a6:dd:67:bb:f4:68:62:0b:6e:51:71:28:cb:69:a9:
         e5:e6:91:b1:e5:6a:5e:53:2f:54:9d:64:d7:ef:df:3a:df:eb:
         85:27:8d:9d:e3:8b:cc:2e:5f:f2:2e:73:15:84:87:c0:ff:7c:
         81:db:42:96:4f:16:d6:76:85:09:42:22:b9:aa:62:30:c5:59:
         55:b2:20:7e:88:c6:9a:1b:73:85:fa:b4:1d:df:58:18:8e:58:
         bb:e5:82:24:9d:46:57:04:d5:56:57:31:93:9f:1d:b0:e6:b0:
         20:f5:9f:f0:c8:04:8b:4c:7a:2b:52:ac:2a:ba:fc:3f:44:ac:
         83:96:81:a0:fb:9e:e4:c0:7d:84:36:32:20:33:dd:70:f9:ef:
         c3:9e:89:41:65:4c:a5:da:ff:73:d1:1b:ab:a5:d4:12:81:9b:
         21:ce:cf:85:1b:ca:f7:8f:98:2c:f1:5d:2b:89:c8:c4:9b:79:
         2a:49:0d:9e:d2:8c:73:c3:6b:dc:11:9f:67:9e:12:cc:3f:99:
         b7:25:3a:b0:8b:15:0e:de:02:bb:a9:21:f0:1f:99:16:bd:4a:
         df:67:df:95
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIgJqduyQoVQjsGGtdNBCg1Nr2bUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVBNDc2
Q0NGNzZDQzAeFw0yNTEwMTgxNTM2NTZaFw0yNTEwMjIwMzAxNTZaMDMxMTAvBgNV
BAMTKENCOUIxQTdEOEQwNkFEMUFFMkMwQzU0NTI0QTQ3NEZFNDk4NUI2MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2KZpcxB3zhbh1ZtmUjdd/fa8
YTJELu0RiVii5TjcUM74xNdOW7Av6VB/tpoh0kMZ6g5yHqRTK8FLxmS9uaeVm72Q
dYY774gHAMIxrmhz/ZwUMrrhs9V7QwaOgtq97ZRYKtygm+I2+P6Lqv/TNhUhVbJi
4UltBs7LTevT8VXMIEDO+hMAQSdzxWVdZmAsmfn5gW9lOdOndVBrvGpC2JCoPf2L
OXYKxFSG0Zh2D224tWVSnmsX0KiTszS40Lw1ONPo1cdnXjHLnoYt4Ayrlj23p2Fy
6v8kwJknyeLfEZ1UnCvTD80pSrrl6EkqLekIy4zCgj+Tm/yDNWdqpoL9qR/3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUy5safY0GrRriwMVFJKR0/kmFthMwHwYDVR0j
BBgwFoAU8TfHlDmOX4iQmiROyXjqR2zPdswwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2YyYzczMy1kNjdmLTQ4MTMtYjhmNy0wNThkOTVhMDk1ODcvMC9GMTM3Qzc5NDM5
OEU1Rjg4OTA5QTI0NEVDOTc4RUE0NzZDQ0Y3NkNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVBNDc2Q0NG
NzZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmMmM3MzMtZDY3Zi00ODEzLWI4
ZjctMDU4ZDk1YTA5NTg3LzAvRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVB
NDc2Q0NGNzZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABJt76TZy64/2/+WHA1GJ6jpsPFkm3R1cwP2
KF2zpcYKEPGkit1ObabdZ7v0aGILblFxKMtpqeXmkbHlal5TL1SdZNfv3zrf64Un
jZ3ji8wuX/IucxWEh8D/fIHbQpZPFtZ2hQlCIrmqYjDFWVWyIH6Ixpobc4X6tB3f
WBiOWLvlgiSdRlcE1VZXMZOfHbDmsCD1n/DIBItMeitSrCq6/D9ErIOWgaD7nuTA
fYQ2MiAz3XD578OeiUFlTKXa/3PRG6ul1BKBmyHOz4UbyvePmCzxXSuJyMSbeSpJ
DZ7SjHPDa9wRn2eeEsw/mbclOrCLFQ7eArupIfAfmRa9St9n35U=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:53 2025 by rpki-client