Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
File:                     F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json)
Hash identifier:          0xFOm06kiKLO2L6+eFtblrWNUkgnk9AyM5pheFSvUPw=
Subject key identifier:   9B:58:79:89:4F:E3:DB:DC:85:2D:40:23:7E:AB:2E:11:34:9C:ED:40
Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
Certificate issuer:       /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Certificate serial:       6BF506EE28A42EB6F06D907D77A70181BFA7A345
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
Manifest number:          0520
Signing time:             Sun 19 Oct 2025 12:22:07 +0000
Manifest this update:     Sun 19 Oct 2025 12:17:07 +0000
Manifest next update:     Wed 22 Oct 2025 16:37:07 +0000
Files and hashes:         1: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: LVzLvHlGvkclluFVEiY44EndzlPbN92fYYJEvFwmUZU=)
                          2: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 5vlCAQxD3Rtm38WM/0l+BFIYmxxS60ewb6v8d3eKIKE=)
                          3: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: u+uBgrPGm+40zgnoGLAagJdkp/O9sV2Z6UZd95b5fdg=)
                          4: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: ob6mRc06BCeBAj0X28E3a80wGp9aApab42pA+hcHgrk=)
                          5: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: alaP8Uwaw1NNe4SKQigMfsS5tCM7rfdzWPP2wmiA++4=)
                          6: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=)
                          7: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ky48tvEganYAJKKKh8LACXy3ayIODImWxB2YSjo+hjY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
                          rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 16:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f5:06:ee:28:a4:2e:b6:f0:6d:90:7d:77:a7:01:81:bf:a7:a3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
        Validity
            Not Before: Oct 19 12:17:07 2025 GMT
            Not After : Oct 22 16:37:07 2025 GMT
        Subject: CN=9B5879894FE3DBDC852D40237EAB2E11349CED40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:09:0b:21:ca:6b:49:c9:ec:8e:ba:43:6f:
                    30:14:06:f9:86:96:62:c0:fc:58:a0:51:34:eb:c5:
                    d3:f1:c7:2e:d5:5f:4e:78:a1:d4:a9:ec:90:65:37:
                    26:a2:e5:03:53:7b:08:41:4a:8d:b6:57:3a:42:54:
                    a3:64:be:3f:9d:ec:a8:91:41:51:81:fe:d0:7a:a1:
                    8d:37:ff:b5:36:f8:5d:0b:5d:5d:b9:90:b2:fc:fb:
                    88:6a:1b:6d:ff:51:88:09:1e:97:e9:4e:a1:5d:9f:
                    5d:58:e8:bd:9d:f4:55:e2:1f:5e:06:a4:40:d5:81:
                    89:59:11:6f:68:5c:8e:2e:b0:38:74:57:49:f7:fa:
                    a0:23:f3:3a:58:7d:48:fe:5f:cf:27:19:b5:55:b0:
                    fc:33:2d:ed:6f:ac:7b:f8:d6:b2:6a:96:cd:5a:6f:
                    b3:e0:1d:25:c0:01:8f:55:5e:1e:98:7c:14:7e:46:
                    64:95:b9:5f:41:61:72:67:27:42:aa:34:c8:e0:87:
                    c4:ac:29:99:dd:c6:e5:da:b0:a0:85:f1:53:7f:af:
                    1b:d8:8b:63:c4:c5:39:01:6e:e5:90:99:45:26:32:
                    0f:8a:58:f5:f4:f6:83:44:30:cf:e1:04:00:04:52:
                    33:6e:0e:e0:f7:72:9e:c2:55:50:04:1f:65:88:04:
                    3a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:58:79:89:4F:E3:DB:DC:85:2D:40:23:7E:AB:2E:11:34:9C:ED:40
            X509v3 Authority Key Identifier:
                keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e8:b9:5a:16:62:68:07:8b:26:0a:a4:13:59:63:55:9b:9d:
         f2:42:9b:fe:0b:c4:93:10:a5:77:d6:d8:83:f0:0f:58:84:73:
         60:9f:64:05:a3:f7:81:16:0c:8e:f5:ae:26:70:40:0c:18:1a:
         65:ad:f6:d2:be:e6:43:56:ff:2f:be:17:72:bb:3e:4c:48:2e:
         ea:6e:e1:f3:08:e7:a9:b1:64:81:41:32:9d:64:1e:89:4b:40:
         86:c6:70:29:63:4b:ca:05:b7:a1:5b:c7:37:51:8d:e4:4e:e0:
         fd:16:3f:d7:0a:1e:6e:a9:ef:55:26:6d:3b:b9:87:82:fa:8e:
         2e:eb:f2:3b:3e:21:9c:ab:a2:7a:a6:dc:f8:77:53:f7:56:bf:
         de:b4:94:0c:d6:ce:8d:23:20:62:b2:20:cf:69:36:92:52:72:
         65:31:4e:e5:7a:47:0e:3a:ca:b1:f8:d5:ad:b6:bb:fa:cb:5f:
         b8:42:df:64:16:cf:5b:41:b2:95:9c:20:a0:19:e3:38:8d:00:
         45:11:74:ed:7a:7d:c2:c7:3a:4e:ed:dc:67:ce:6d:79:d1:3a:
         74:07:b2:81:e0:a2:8b:99:bc:af:73:3b:25:d2:9d:d6:09:78:
         d5:36:ee:00:d8:c9:ca:66:e6:78:d3:ef:f1:0f:e6:cb:44:31:
         7f:58:95:8a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUa/UG7iikLrbwbZB9d6cBgb+no0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3
N0JFMTNDMTAeFw0yNTEwMTkxMjE3MDdaFw0yNTEwMjIxNjM3MDdaMDMxMTAvBgNV
BAMTKDlCNTg3OTg5NEZFM0RCREM4NTJENDAyMzdFQUIyRTExMzQ5Q0VENDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ygkLIcprScnsjrpDbzAUBvmG
lmLA/FigUTTrxdPxxy7VX054odSp7JBlNyai5QNTewhBSo22VzpCVKNkvj+d7KiR
QVGB/tB6oY03/7U2+F0LXV25kLL8+4hqG23/UYgJHpfpTqFdn11Y6L2d9FXiH14G
pEDVgYlZEW9oXI4usDh0V0n3+qAj8zpYfUj+X88nGbVVsPwzLe1vrHv41rJqls1a
b7PgHSXAAY9VXh6YfBR+RmSVuV9BYXJnJ0KqNMjgh8SsKZndxuXasKCF8VN/rxvY
i2PExTkBbuWQmUUmMg+KWPX09oNEMM/hBAAEUjNuDuD3cp7CVVAEH2WIBDrZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUm1h5iU/j29yFLUAjfqsuETSc7UAwHwYDVR0j
BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4
RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF
MTNDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz
NDAtZTI4OGQyZTkzNGE4LzAvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlG
Mzg3N0JFMTNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGbouVoWYmgHiyYKpBNZY1WbnfJCm/4LxJMQ
pXfW2IPwD1iEc2CfZAWj94EWDI71riZwQAwYGmWt9tK+5kNW/y++F3K7PkxILupu
4fMI56mxZIFBMp1kHolLQIbGcCljS8oFt6FbxzdRjeRO4P0WP9cKHm6p71UmbTu5
h4L6ji7r8js+IZyronqm3Ph3U/dWv960lAzWzo0jIGKyIM9pNpJScmUxTuV6Rw46
yrH41a22u/rLX7hC32QWz1tBspWcIKAZ4ziNAEURdO16fcLHOk7t3GfObXnROnQH
soHgoouZvK9zOyXSndYJeNU27gDYycpm5njT7/EP5stEMX9YlYo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:44 2025 by rpki-client