Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft
File:                     4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json)
Hash identifier:          T+vssdl7mYlpmaHvc66jLhDlOVO4CFCJ4rMf/j1LcrM=
Subject key identifier:   4D:AD:F1:31:79:A4:91:61:54:B5:BD:E9:E5:B6:35:E4:09:98:90:D7
Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50
Certificate issuer:       /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50
Certificate serial:       BE18FAF785B8D583DE9C41B1F5CC37D0CF75A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft
Manifest number:          020B
Signing time:             Mon 20 Oct 2025 17:20:49 +0000
Manifest this update:     Mon 20 Oct 2025 17:15:49 +0000
Manifest next update:     Fri 24 Oct 2025 01:19:49 +0000
Files and hashes:         1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: d87u5FesKhbLmBuyEL7Q5hqab1g16DH0eirp47E3BQM=)
                          2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: D4xO8SkIE8jeNebf9M5hiqlhcLrsrkGAhopy0O7d3p0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl
                          rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            be:18:fa:f7:85:b8:d5:83:de:9c:41:b1:f5:cc:37:d0:cf:75:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50
        Validity
            Not Before: Oct 20 17:15:49 2025 GMT
            Not After : Oct 24 01:19:49 2025 GMT
        Subject: CN=4DADF13179A4916154B5BDE9E5B635E4099890D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:85:a9:d3:07:72:12:94:67:e9:36:8f:19:86:
                    6f:2b:e0:39:a9:e4:f0:74:1c:bc:ee:f8:7c:dc:21:
                    a7:53:61:09:57:e1:61:c7:58:87:5c:c4:dc:13:5b:
                    98:b3:71:40:e4:05:f5:c7:5e:3b:aa:9c:87:a1:7e:
                    f8:74:8e:0a:a7:6d:09:c3:3c:2d:7a:eb:46:0a:f9:
                    4e:c3:fb:7e:98:e8:0a:78:d8:6f:0a:cc:1f:17:d9:
                    d8:a3:35:e4:c8:c4:28:55:24:72:1f:e9:06:70:e7:
                    a6:5b:4b:06:75:72:58:1a:9e:0b:28:07:b5:40:0e:
                    8e:d5:d9:f3:e2:01:68:21:7a:50:5d:9d:c8:38:44:
                    71:5b:35:d9:3b:b9:65:25:28:83:f3:9b:e3:57:47:
                    0b:42:0c:95:5b:bf:d7:5d:f7:6e:75:19:2c:42:5f:
                    6d:5f:4d:0a:ab:86:be:1d:5c:c6:e7:fa:4c:22:c2:
                    ab:16:8c:62:5c:db:87:2f:bc:14:6c:33:95:15:ec:
                    8d:62:ea:23:e3:b2:ca:a6:a9:85:be:15:80:09:03:
                    e2:d0:8f:d3:8c:71:d2:c6:bd:c0:07:bd:d2:55:98:
                    2c:c3:9a:61:15:76:2f:6c:c7:1b:2a:17:d0:a1:62:
                    84:2f:f0:ac:5b:1a:52:4c:d1:70:13:da:25:c9:ab:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AD:F1:31:79:A4:91:61:54:B5:BD:E9:E5:B6:35:E4:09:98:90:D7
            X509v3 Authority Key Identifier:
                keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fc:04:df:e5:90:da:c3:62:ef:54:4b:ae:1b:44:73:ee:69:
         58:a5:06:ea:df:b0:a5:2a:d7:69:b1:31:10:e1:bf:3b:fc:e9:
         1e:78:91:f6:52:16:c0:20:4f:96:bf:2b:bc:f2:7b:f9:ce:84:
         e5:79:c7:58:80:2a:d1:27:59:a8:dc:16:03:fe:91:6e:90:18:
         b2:da:d8:8e:bd:4c:9c:1e:b3:f0:4e:4e:b7:f9:37:2a:75:d9:
         2a:1a:a8:96:e5:90:c3:1f:d7:40:ba:09:02:3d:98:d7:04:c8:
         e5:7b:b9:ff:ec:e1:2b:01:fc:31:a7:d8:26:ec:bc:65:a9:3d:
         57:4b:91:15:cb:ce:30:0c:e4:40:af:e3:85:ff:f4:e3:94:32:
         11:71:29:f2:09:9b:dc:ed:b5:76:d5:ba:74:7d:69:cc:96:54:
         27:59:6e:2e:92:d0:4d:43:ee:82:cf:7e:37:3f:e9:62:2a:45:
         95:f0:63:a4:92:b3:e9:42:5a:97:64:43:cb:42:83:cf:00:7c:
         97:c2:0b:a4:fb:b3:2f:92:ae:77:48:46:fc:9f:41:94:dc:2d:
         51:66:66:d7:92:6b:76:04:59:af:78:82:2b:e4:53:1e:e4:98:
         93:95:56:65:5a:2a:53:f3:f0:6b:4e:88:f3:53:d4:35:a8:fb:
         cb:51:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:42:49 2025 by rpki-client