Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
File:                     C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json)
Hash identifier:          cY/f3JjlutbpraqEYIJs6QhL0sOH9YqGkJ8Xs6EhW7s=
Subject key identifier:   B9:D8:E5:51:27:9A:8E:1C:DC:99:22:50:46:2E:91:56:A2:F6:05:1F
Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7
Certificate issuer:       /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
Certificate serial:       0D1F5229D0C705F842088CD801D7D16CCB09A37A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
Manifest number:          04FE
Signing time:             Fri 22 Aug 2025 18:41:51 +0000
Manifest this update:     Fri 22 Aug 2025 18:36:51 +0000
Manifest next update:     Mon 25 Aug 2025 23:41:51 +0000
Files and hashes:         1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: sgfnTHc/j1Ubv13u/lspt1nSBI3RRejczmuvuao1Agg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl
                          rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 23:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1f:52:29:d0:c7:05:f8:42:08:8c:d8:01:d7:d1:6c:cb:09:a3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
        Validity
            Not Before: Aug 22 18:36:51 2025 GMT
            Not After : Aug 25 23:41:51 2025 GMT
        Subject: CN=B9D8E551279A8E1CDC992250462E9156A2F6051F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:db:6d:a0:60:2f:a9:e9:ba:fa:d6:0c:ef:
                    6a:01:71:61:67:e0:c8:8b:1b:3f:3c:db:18:49:0e:
                    87:16:e8:76:4f:bc:ad:62:d0:d7:80:e4:e1:9a:85:
                    57:07:d9:57:63:47:a7:0e:21:90:3c:ec:f0:1d:a3:
                    3e:25:69:37:fa:6c:4b:61:b6:d6:80:0f:7e:f9:94:
                    e9:e9:30:de:eb:cb:21:34:c5:0a:d4:bf:22:32:15:
                    d3:21:6d:c0:62:c7:6f:fe:28:c1:4b:88:0e:a3:ec:
                    c7:5c:6f:ac:94:0d:b6:1f:fb:6d:bb:93:44:24:12:
                    e0:5e:a1:84:d2:23:dd:0c:a0:6e:ab:1a:7e:a9:a4:
                    13:5a:99:f5:e8:e2:fe:d1:f8:b0:28:30:f1:fe:78:
                    a6:82:1c:7b:aa:81:e1:3e:26:10:04:70:00:c1:fd:
                    a6:6c:c7:39:8b:db:b7:1d:d0:1a:49:c0:f5:d8:58:
                    ec:98:c8:d8:44:a1:e9:d5:8f:bb:5e:d2:bb:bb:a4:
                    95:9c:cd:76:97:8d:73:66:c9:8e:69:04:3c:48:e2:
                    f3:84:bc:17:6c:e5:06:e5:68:8c:f8:c7:43:c1:c8:
                    c4:fd:bb:e1:f2:30:6c:bc:1f:37:70:55:28:8b:75:
                    2d:bd:de:34:ac:b2:fc:3b:03:5e:26:96:be:06:61:
                    fd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D8:E5:51:27:9A:8E:1C:DC:99:22:50:46:2E:91:56:A2:F6:05:1F
            X509v3 Authority Key Identifier:
                keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1a:40:4a:66:c8:a7:09:7f:0b:b0:b4:0b:5d:d6:28:04:a0:
         44:0e:6c:d5:cd:95:9c:5b:4f:e0:bb:55:e9:7f:18:93:53:f9:
         38:0d:21:a1:6b:2c:23:28:9d:f7:44:ce:42:9c:25:ce:06:fc:
         c7:1c:a4:a6:6c:c0:56:71:f2:f7:49:c9:4a:3b:fe:ca:50:18:
         70:ca:24:3d:4d:0d:3e:bd:6c:68:9c:e8:e9:31:0b:80:1b:d0:
         d5:ad:72:e8:6b:e5:4b:64:d3:5d:6e:c4:69:75:33:cd:5d:87:
         1c:5c:dd:15:a9:d4:bb:59:e6:93:ac:28:ff:79:f9:22:29:86:
         b2:5a:d2:5c:ee:09:4b:61:96:7d:62:76:4f:94:83:19:a7:14:
         d6:cf:8a:88:2e:f5:e1:51:37:93:04:62:cb:55:ba:35:6a:42:
         60:f3:91:b3:9e:1b:4b:17:19:eb:41:62:cd:11:1d:8e:1d:a2:
         81:0a:7c:46:eb:bd:f5:6c:13:68:e6:33:43:d8:bc:dc:1e:b3:
         25:4b:81:e8:3e:d1:f5:b4:46:f6:6d:98:1f:67:1a:13:91:da:
         8f:77:98:15:f2:bf:33:ea:25:18:f5:40:80:a4:eb:86:21:07:
         a7:47:0f:77:8c:d2:a1:12:ab:0e:ed:17:20:40:b8:80:4d:42:
         30:30:f5:e7
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUDR9SKdDHBfhCCIzYAdfRbMsJo3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBC
QjZBMjRBNzAeFw0yNTA4MjIxODM2NTFaFw0yNTA4MjUyMzQxNTFaMDMxMTAvBgNV
BAMTKEI5RDhFNTUxMjc5QThFMUNEQzk5MjI1MDQ2MkU5MTU2QTJGNjA1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnjtttoGAvqem6+tYM72oBcWFn
4MiLGz882xhJDocW6HZPvK1i0NeA5OGahVcH2VdjR6cOIZA87PAdoz4laTf6bEth
ttaAD375lOnpMN7ryyE0xQrUvyIyFdMhbcBix2/+KMFLiA6j7Mdcb6yUDbYf+227
k0QkEuBeoYTSI90MoG6rGn6ppBNamfXo4v7R+LAoMPH+eKaCHHuqgeE+JhAEcADB
/aZsxzmL27cd0BpJwPXYWOyYyNhEoenVj7te0ru7pJWczXaXjXNmyY5pBDxI4vOE
vBds5QblaIz4x0PByMT9u+HyMGy8HzdwVSiLdS293jSssvw7A14mlr4GYf0NAgMB
AAGjggH/MIIB+zAdBgNVHQ4EFgQUudjlUSeajhzcmSJQRi6RVqL2BR8wHwYDVR0j
BBgwFoAUyeynMTqhczoeN7wk/2xNQLtqJKcwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0FS
U0VOLUlELzAvQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBCQjZBMjRB
Ny5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3JlcG8t
cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0M5RUNBNzMxM0FBMTczM0Ex
RTM3QkMyNEZGNkM0RDQwQkI2QTI0QTcuY2VyMHQGCCsGAQUFBwELBGgwZjBkBggr
BgEFBQcwC4ZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vQVJTRU4t
SUQvMC9DOUVDQTczMTNBQTE3MzNBMUUzN0JDMjRGRjZDNEQ0MEJCNkEyNEE3Lm1m
dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG
BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAORpASmbIpwl/C7C0C13WKASgRA5s1c2VnFtP4LtV6X8Yk1P5OA0h
oWssIyid90TOQpwlzgb8xxykpmzAVnHy90nJSjv+ylAYcMokPU0NPr1saJzo6TEL
gBvQ1a1y6GvlS2TTXW7EaXUzzV2HHFzdFanUu1nmk6wo/3n5IimGslrSXO4JS2GW
fWJ2T5SDGacU1s+KiC714VE3kwRiy1W6NWpCYPORs54bSxcZ60FizREdjh2igQp8
Ruu99WwTaOYzQ9i83B6zJUuB6D7R9bRG9m2YH2caE5Haj3eYFfK/M+olGPVAgKTr
hiEHp0cPd4zSoRKrDu0XIEC4gE1CMDD15w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:07 2025 by rpki-client