Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
File:                     6969B3009665224541D322068C9E3444C78F90F9.mft (raw, json)
Hash identifier:          VNMQBOxDO1smlvtDOmtEw0PEl+Y5++P1YNvxf0UuIZc=
Subject key identifier:   99:C7:E7:2D:02:E5:62:8D:49:68:BD:24:B8:82:2F:C2:28:B6:FC:AE
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Certificate issuer:       /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial:       7280A55BDFD8BEDE7F5691AF9045A30556717395
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
Manifest number:          04A6
Signing time:             Sun 19 Oct 2025 16:00:35 +0000
Manifest this update:     Sun 19 Oct 2025 15:55:35 +0000
Manifest next update:     Wed 22 Oct 2025 18:57:35 +0000
Files and hashes:         1: 323430353a633434303a3a2f33322d3332203d3e20313339393732.roa (hash: 7B9NMIAt6o2ouwcqf5Q5a326EHxky3KwQZQYJ3mikGI=)
                          2: 323430353a633434303a393937323a3a2f34382d3438203d3e20313339393732.roa (hash: Pu0wJEo+XXadVijB7isyEjKAERKeoNWdSqwY7VuwWUs=)
                          3: 323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa (hash: 7I1Bs101/iTn1fXI/3h4GvzMfanTKUOjRc8cRguPLfg=)
                          4: 323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa (hash: QsRvRtbvklzx+fVhZ+bHLVPp5flqQEGx3NdKmk6EOjo=)
                          5: 323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa (hash: MRKapDwhJWKDpN14X0h/O1jz/ZplSxgiOCb6cDtszqE=)
                          6: 323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa (hash: +bc7dUDcl/zyxgFD9hjH1WhAYFjRstDV27EEB/SKBg8=)
                          7: 323430353a633434303a343a3a2f34382d3438203d3e20313339393732.roa (hash: iT+MaDJ4i5BeR8TDDIOP07f7P6GIAJ+rbvY/CrktoQk=)
                          8: 323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa (hash: OSOXxJexRBCXGpEnlOsOg5TOUDuRwzl9RE1pFY2Qqhg=)
                          9: 6969B3009665224541D322068C9E3444C78F90F9.crl (hash: ZyVlzQR/VDc4WL8F1FAMyarLOoalA5NUti0EULrINIM=)
                          10: 3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa (hash: Nt5yIQQRjM3EYZ6LLAJtlTQeYmFOb12a5fWQTQgyftY=)
                          11: 323430353a633434303a3a2f34382d3438203d3e20313339393732.roa (hash: a6npMa+FlITcHX71eVXaeqWPwvQUau4yeny3IXatXbE=)
                          12: 323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa (hash: cUXfxLq9SrJidRBDLWjTWhlyTdpXk138loj4yvcAltY=)
                          13: 323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa (hash: UQ99M3V6H/oFrfldgf9Xq1Fi/A6v60uZYgPA1HT2lMI=)
                          14: 3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa (hash: teCWdBffnsSq00HVFNB0zTbUb3mhJ+Mb1bWy4BeWvPg=)
                          15: 323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa (hash: PqiUcpNf/7FxBWSo0M7ORKTw4r0GFcdqTZ8jW03mfAU=)
                          16: 323430353a633434303a353a3a2f34382d3438203d3e20313339393732.roa (hash: gyPh3b00K9+EtWewGNdy24gtbijTmPkvS+xaYyHiNaA=)
                          17: 3130332e3134372e3234372e302f32342d3234203d3e20313339393732.roa (hash: E1pvmLC0oScYJCQ1VqOLQ7iP3RGB0Zu4FP5c2Qeaw1g=)
                          18: 323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa (hash: UZJBFUmGOWcyCUvIIFKUbAc9VXTri6PNHyeB4hhkFvw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
                          rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 18:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:80:a5:5b:df:d8:be:de:7f:56:91:af:90:45:a3:05:56:71:73:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
        Validity
            Not Before: Oct 19 15:55:35 2025 GMT
            Not After : Oct 22 18:57:35 2025 GMT
        Subject: CN=99C7E72D02E5628D4968BD24B8822FC228B6FCAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:37:f9:6c:7e:11:64:de:52:62:e9:67:d5:
                    9e:08:da:e0:b8:47:ce:ec:e6:d6:5f:42:6c:b7:2f:
                    8d:be:04:1e:1b:51:d7:05:49:d4:99:ca:86:b7:78:
                    22:b0:93:f5:34:e6:37:f2:13:54:d3:63:d5:28:f0:
                    cb:6a:b0:b9:3f:a2:ed:fc:bd:1a:7d:3e:3b:f1:0b:
                    d0:b5:e9:12:3c:a0:13:eb:17:76:cf:b1:4d:24:cc:
                    9c:93:9e:4b:e6:cf:f5:e9:58:06:a5:21:63:d1:70:
                    51:97:02:ed:c5:79:01:09:00:08:74:86:2a:9b:f4:
                    b1:69:8c:0f:ed:de:81:ee:be:d9:14:2a:84:31:64:
                    fa:42:82:ae:8a:2e:38:67:a3:f0:9e:ec:0b:40:2a:
                    b8:d4:68:e8:18:e6:e4:c7:10:6c:1e:35:fe:c3:2d:
                    87:44:16:0c:1a:e9:67:92:83:35:df:ab:df:f0:17:
                    e2:36:13:68:78:28:14:82:15:f2:59:01:34:a8:fc:
                    95:fc:24:b1:c9:5a:25:e9:0d:5d:f3:1d:f4:4b:85:
                    55:56:15:eb:29:bc:6a:29:7c:2a:8c:e4:0d:6f:da:
                    31:3e:5f:85:67:e8:89:44:7b:c8:4d:0e:a4:ba:a6:
                    6c:7c:86:5e:11:59:da:ca:b3:d5:f8:9d:dc:e0:4c:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C7:E7:2D:02:E5:62:8D:49:68:BD:24:B8:82:2F:C2:28:B6:FC:AE
            X509v3 Authority Key Identifier:
                keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:08:f7:e7:90:0f:af:af:f1:4e:c5:89:7f:7d:1c:80:e5:87:
         8e:cf:e9:07:0c:a7:8d:26:41:f4:7c:86:1b:90:1c:80:f1:09:
         e1:6e:60:a5:64:c9:1e:31:c6:50:ad:94:53:53:52:6e:26:89:
         78:6e:3c:b7:41:84:40:7a:31:62:f4:7c:bb:c3:ae:5f:18:5a:
         c2:51:27:02:59:77:8d:ec:84:71:b4:f3:d3:f4:fb:bb:12:59:
         2e:e2:61:85:c0:e6:f3:50:52:36:d8:4b:c4:e8:ff:4b:69:e0:
         b8:b9:d1:52:32:96:ff:8b:a0:b4:f0:58:c3:df:f9:8d:c1:01:
         80:01:77:93:74:c8:e4:60:e9:71:42:ad:2d:49:fc:a5:75:d6:
         bf:8f:92:47:7e:5c:21:41:f0:fd:21:9d:58:02:25:c5:81:fc:
         0f:f8:c6:6e:32:d6:3b:ac:05:0a:5e:39:5a:10:cb:ef:65:49:
         ed:76:26:c5:ca:0f:48:d1:28:98:01:f3:89:92:af:c7:17:d5:
         d1:cf:0a:bf:7b:98:99:6d:6e:d1:53:b6:1a:46:19:f7:be:42:
         ad:4a:d6:3e:91:a6:44:01:1e:eb:a0:a3:f2:6c:16:dc:09:5a:
         9a:35:7d:6b:05:56:b1:24:c7:62:31:ab:fb:a8:32:ef:e5:65:
         62:e9:e0:84
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcoClW9/Yvt5/VpGvkEWjBVZxc5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD
NzhGOTBGOTAeFw0yNTEwMTkxNTU1MzVaFw0yNTEwMjIxODU3MzVaMDMxMTAvBgNV
BAMTKDk5QzdFNzJEMDJFNTYyOEQ0OTY4QkQyNEI4ODIyRkMyMjhCNkZDQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWhDf5bH4RZN5SYuln1Z4I2uC4
R87s5tZfQmy3L42+BB4bUdcFSdSZyoa3eCKwk/U05jfyE1TTY9Uo8MtqsLk/ou38
vRp9PjvxC9C16RI8oBPrF3bPsU0kzJyTnkvmz/XpWAalIWPRcFGXAu3FeQEJAAh0
hiqb9LFpjA/t3oHuvtkUKoQxZPpCgq6KLjhno/Ce7AtAKrjUaOgY5uTHEGweNf7D
LYdEFgwa6WeSgzXfq9/wF+I2E2h4KBSCFfJZATSo/JX8JLHJWiXpDV3zHfRLhVVW
FespvGopfCqM5A1v2jE+X4Vn6IlEe8hNDqS6pmx8hl4RWdrKs9X4ndzgTCJlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmcfnLQLlYo1JaL0kuIIvwii2/K4wHwYDVR0j
BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2
NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG
OTBGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllZWJmN2MtZmUzOC00NmE5LTgz
MTEtZTA1M2ZjYTUwZGZkLzAvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0
NDRDNzhGOTBGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGUI9+eQD6+v8U7FiX99HIDlh47P6QcMp40m
QfR8hhuQHIDxCeFuYKVkyR4xxlCtlFNTUm4miXhuPLdBhEB6MWL0fLvDrl8YWsJR
JwJZd43shHG089P0+7sSWS7iYYXA5vNQUjbYS8To/0tp4Li50VIylv+LoLTwWMPf
+Y3BAYABd5N0yORg6XFCrS1J/KV11r+Pkkd+XCFB8P0hnVgCJcWB/A/4xm4y1jus
BQpeOVoQy+9lSe12JsXKD0jRKJgB84mSr8cX1dHPCr97mJltbtFTthpGGfe+Qq1K
1j6RpkQBHuugo/JsFtwJWpo1fWsFVrEkx2Ixq/uoMu/lZWLp4IQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:13 2025 by rpki-client