Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft
File:                     968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json)
Hash identifier:          OArj35XlPCNRsmGcLTNt5/HEcbjx3aMFXuhcLyOIrzk=
Subject key identifier:   0C:83:DB:3E:43:80:39:D5:90:11:35:19:66:C7:CC:E3:02:48:1F:36
Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88
Certificate issuer:       /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588
Certificate serial:       3056F966370D648863A48CF049D8B0835B08855A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft
Manifest number:          01E3
Signing time:             Sat 18 Oct 2025 16:52:21 +0000
Manifest this update:     Sat 18 Oct 2025 16:47:21 +0000
Manifest next update:     Tue 21 Oct 2025 18:52:21 +0000
Files and hashes:         1: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: QUzkBnbK7BBogCXCY9I/tzIujkTESChLebzgUswp99A=)
                          2: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: wVJ7U3kO7lcUuZMqWok4kQ4i6Qz99jUT+kR0YLkpW1o=)
                          3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl
                          rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 18:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:56:f9:66:37:0d:64:88:63:a4:8c:f0:49:d8:b0:83:5b:08:85:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588
        Validity
            Not Before: Oct 18 16:47:21 2025 GMT
            Not After : Oct 21 18:52:21 2025 GMT
        Subject: CN=0C83DB3E438039D59011351966C7CCE302481F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:2e:5a:bb:d6:5f:91:5e:95:23:86:f2:ad:
                    ea:37:b1:99:98:a2:2b:2b:e8:8a:b9:c7:67:2d:89:
                    bf:e1:80:69:be:54:41:d2:50:d8:ed:a5:4c:cf:29:
                    62:dd:35:d5:86:19:b5:37:22:e6:e9:d0:6d:83:48:
                    7d:33:4e:49:f3:43:b1:f3:ca:f3:44:cb:f7:41:3d:
                    d1:67:e8:d3:d7:b1:57:0c:17:65:47:09:ce:c5:98:
                    75:0d:ac:0f:81:27:c1:f6:22:3f:da:5c:bd:16:b2:
                    f4:44:aa:8e:a5:9d:f1:58:f0:39:99:8f:61:99:76:
                    23:d3:81:6d:23:c5:82:67:f1:cf:8b:86:72:d1:ee:
                    e3:f1:9e:c9:32:6b:f2:c5:ef:0f:f9:3b:de:05:bd:
                    61:56:4a:58:c0:18:20:e9:42:47:81:eb:f4:cf:7e:
                    7a:bc:22:d2:d5:8a:24:9e:90:22:bf:cf:8c:dc:4b:
                    6a:26:fe:dc:83:66:94:e8:e2:62:d8:34:99:66:f5:
                    56:d2:e9:f7:78:73:a5:de:38:70:fe:f9:9f:03:3b:
                    d2:5f:17:ed:e5:80:e7:cb:bb:db:bd:32:d1:e7:19:
                    9b:25:8e:74:af:1a:89:0c:a6:a5:6e:2c:bd:44:00:
                    2d:83:91:da:a7:ab:6f:f5:ac:cd:3a:62:b5:da:d6:
                    79:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:DB:3E:43:80:39:D5:90:11:35:19:66:C7:CC:E3:02:48:1F:36
            X509v3 Authority Key Identifier:
                keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:60:8d:82:b4:26:2f:5c:5c:aa:a1:a3:f7:6c:d5:e9:5c:66:
         dd:82:31:36:bd:be:d8:dc:35:2b:dc:07:e7:d6:aa:bb:94:79:
         ba:97:4c:e5:f4:0a:b4:60:25:8f:f5:ab:d5:06:0f:27:fd:ee:
         d8:1a:67:65:4b:6b:b2:6e:06:65:d2:d5:8b:c8:84:6e:bf:52:
         ed:1f:20:d4:2f:f6:76:9b:61:de:5a:67:69:da:5b:51:b8:23:
         86:90:53:a7:ce:b2:f1:44:52:ba:be:d7:1d:cf:e2:6c:bc:be:
         f7:c1:e8:98:7b:13:ec:b0:86:fd:7a:02:02:ee:9b:34:d8:1b:
         3a:8e:29:49:93:04:4b:a3:30:cb:2a:03:f8:54:6f:73:89:f2:
         00:b8:23:29:b7:7c:69:a6:cd:90:14:b7:8d:c0:ce:90:33:1b:
         0a:29:78:2c:81:a0:03:61:b1:4e:84:dd:f9:1b:55:12:eb:c9:
         4b:b3:92:2c:22:c9:96:03:54:d2:07:f2:81:28:48:3f:e0:6b:
         14:a0:95:5a:50:21:2a:59:63:a7:ec:d5:be:78:9f:11:2b:91:
         2f:ae:0b:80:64:49:23:55:33:76:80:a6:e6:8e:84:c0:cf:a6:
         d4:15:23:ba:59:0b:17:03:ae:bb:7d:34:87:d9:e5:c2:85:53:
         58:1f:f5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:06 2025 by rpki-client