Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
File:                     C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json)
Hash identifier:          d5D0DdI2/5X5Kn8UE7cNSZgXbiQrybmBELo8wFBmVmY=
Subject key identifier:   7B:B6:41:58:5A:1D:DF:83:2C:6A:43:47:6B:BC:AF:10:22:04:43:92
Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7
Certificate issuer:       /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
Certificate serial:       3B12372C0E3727ADF9AF566389F6736B420B9776
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
Manifest number:          0517
Signing time:             Sat 18 Oct 2025 07:01:52 +0000
Manifest this update:     Sat 18 Oct 2025 06:56:52 +0000
Manifest next update:     Tue 21 Oct 2025 17:28:52 +0000
Files and hashes:         1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: KZnMyzsjw8r52jC53rwWtmub1C1fvzLPESKhNqdWwpc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl
                          rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 17:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:12:37:2c:0e:37:27:ad:f9:af:56:63:89:f6:73:6b:42:0b:97:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
        Validity
            Not Before: Oct 18 06:56:52 2025 GMT
            Not After : Oct 21 17:28:52 2025 GMT
        Subject: CN=7BB641585A1DDF832C6A43476BBCAF1022044392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1d:0f:e7:88:3c:7c:22:dd:70:4f:1c:51:ca:
                    f5:f2:92:98:27:8a:af:18:07:43:b9:df:15:cf:32:
                    06:f4:87:f3:2a:b8:aa:ff:34:b2:91:bb:4e:41:09:
                    a9:b3:e7:92:c0:a3:d7:62:d3:9d:5e:e1:09:c8:16:
                    56:e9:d7:15:2a:e8:f9:b9:fe:ef:a3:41:69:78:f4:
                    da:2f:74:e6:c7:6c:2b:f9:ed:2d:a8:d0:5d:bb:1f:
                    51:20:1a:99:f0:f0:93:bb:5d:86:22:2d:09:ac:80:
                    b5:b1:5e:2e:f3:98:05:68:f5:0a:6e:04:ef:ad:30:
                    4e:da:a8:ce:65:ac:9c:4b:98:e0:8f:76:94:7c:92:
                    4c:83:f5:f7:39:a6:9b:40:ff:d2:5a:dc:28:75:78:
                    9c:54:ad:99:2b:41:ab:35:99:ff:d1:12:ac:d8:c8:
                    85:73:83:26:85:34:4c:42:15:a9:56:0d:bb:0d:00:
                    77:94:82:29:3a:a6:76:07:4e:99:f4:95:92:b6:d7:
                    27:cd:11:5d:cd:35:71:f1:f2:3c:1c:6a:72:f3:96:
                    68:95:03:3d:61:3f:f7:e4:e1:d5:6e:66:6a:ad:49:
                    46:f8:48:75:ab:c0:67:f1:aa:14:f0:d1:17:8c:31:
                    90:be:4e:ef:04:44:7c:00:b3:26:4c:fa:70:e0:a4:
                    35:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B6:41:58:5A:1D:DF:83:2C:6A:43:47:6B:BC:AF:10:22:04:43:92
            X509v3 Authority Key Identifier:
                keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b1:23:7a:1c:85:68:a7:fe:17:27:75:fd:94:0c:c8:b1:9c:
         3b:e6:d9:86:59:ab:4b:5c:68:8e:45:dc:5b:d7:86:02:a9:ee:
         7c:3e:99:e7:84:98:3d:89:02:af:83:d3:41:8e:44:fc:45:c6:
         2c:10:14:ad:ba:e0:25:75:0f:fa:77:13:76:4d:25:d8:0b:4f:
         d2:00:cc:9a:21:8d:ca:89:fd:72:60:5f:4e:fc:f1:5e:e5:7f:
         43:18:8c:90:8e:a2:c3:54:60:b5:52:dd:ea:7c:dd:76:19:5e:
         6f:16:66:31:06:4c:82:db:94:39:eb:20:41:40:a4:a1:c9:68:
         f1:b3:f1:21:32:da:df:ce:18:4f:16:76:ec:9e:26:75:7e:30:
         14:95:5b:28:c8:cb:a2:82:0f:2d:93:b1:d0:91:0e:40:b0:04:
         67:95:1d:1f:d5:cb:a9:84:a7:64:c2:25:36:80:be:e5:88:fc:
         48:fa:02:b4:e2:12:9f:90:18:8a:b0:30:20:6c:a3:56:2b:fd:
         ac:3c:40:3b:42:14:99:ba:33:7f:52:bf:66:94:85:bb:30:72:
         a8:d2:49:e2:10:b0:01:c5:80:f7:51:49:85:55:e9:55:3f:6c:
         c4:5f:98:39:dd:a2:78:26:7a:36:81:fe:85:3e:8b:72:84:76:
         6a:73:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:39:03 2025 by rpki-client