Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
File:                     A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json)
Hash identifier:          zdLYqInPxud1DNbrP4xlxdWD1+6fs5vGGLoNPciDPjU=
Subject key identifier:   42:A5:CB:45:B7:F6:2E:2F:94:E5:29:E9:97:95:77:A5:6D:A3:15:07
Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
Certificate issuer:       /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Certificate serial:       3B789E1B7AC83363BD846899EEC33B33D25473A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
Manifest number:          0228
Signing time:             Sun 19 Oct 2025 19:00:03 +0000
Manifest this update:     Sun 19 Oct 2025 18:55:03 +0000
Manifest next update:     Wed 22 Oct 2025 19:39:03 +0000
Files and hashes:         1: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=)
                          2: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=)
                          3: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=)
                          4: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: g/gl944UyRgs4Ti77/LmWGVjJDz1z3Fl8AfF0hAOfYU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl
                          rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 19:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:78:9e:1b:7a:c8:33:63:bd:84:68:99:ee:c3:3b:33:d2:54:73:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
        Validity
            Not Before: Oct 19 18:55:03 2025 GMT
            Not After : Oct 22 19:39:03 2025 GMT
        Subject: CN=42A5CB45B7F62E2F94E529E9979577A56DA31507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:68:ad:ff:65:6a:65:49:1e:75:c8:e8:4f:2f:
                    ab:b4:85:9e:f4:8d:68:e2:23:04:1e:45:a0:e7:cd:
                    d7:e2:8f:25:b6:38:3b:35:ac:61:03:06:5e:26:99:
                    f6:43:72:9d:a5:dc:8a:14:bd:ca:ea:ed:1c:7b:f3:
                    25:9b:b3:6d:4c:85:6e:1b:24:04:e4:37:6d:83:53:
                    39:50:5b:a3:21:73:94:bf:ad:00:9f:cd:6b:2b:ae:
                    80:33:2c:6b:30:18:b9:ef:46:e9:c9:b4:2f:fd:0f:
                    1a:17:02:a2:d1:55:75:3a:d9:5e:71:3e:6b:cc:ac:
                    90:dd:20:89:9f:67:78:0e:74:3d:16:1e:ca:03:08:
                    12:35:da:22:f4:30:95:13:2d:3f:7c:7b:ba:ca:43:
                    ed:c0:16:76:2f:28:5b:f3:76:aa:7f:4a:aa:c6:5f:
                    1f:c4:85:4f:a3:40:dc:b1:60:cf:50:a5:ce:ee:3d:
                    19:21:d0:b0:58:86:d7:c2:c6:3b:ac:ef:a9:dc:cd:
                    ae:e4:2e:e2:d4:18:19:53:dd:12:75:1a:1f:f3:04:
                    00:c6:ed:41:d5:58:6f:9f:84:fc:30:28:82:06:8d:
                    9e:d0:7a:94:28:03:46:12:d1:92:54:3a:d5:60:0c:
                    a5:c7:40:ab:83:d9:25:3f:ae:cb:9a:0f:44:34:28:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A5:CB:45:B7:F6:2E:2F:94:E5:29:E9:97:95:77:A5:6D:A3:15:07
            X509v3 Authority Key Identifier:
                keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a2:fd:d7:62:fc:63:eb:c3:52:87:44:71:67:78:32:0e:9e:
         1f:2a:27:31:65:21:81:38:39:0b:e3:94:eb:ab:f5:97:9a:16:
         73:96:38:c9:cf:ad:26:b5:25:03:40:09:f0:ad:07:62:3b:cb:
         e4:6a:5c:b4:86:86:f9:61:ba:b6:6a:04:7a:2c:42:d4:fd:31:
         0d:f8:05:63:6b:b4:50:22:7b:72:9f:18:6f:be:fb:c1:e1:76:
         71:6c:68:74:76:d9:8c:03:f4:dd:1d:25:8b:8a:6a:0f:27:66:
         23:6d:24:17:69:f6:24:99:32:c9:29:0f:91:fc:1a:ed:db:c9:
         26:0c:5d:ca:be:0a:2d:ae:44:3c:f5:23:27:f4:b1:3e:ea:b3:
         f2:a7:17:cd:31:60:13:6f:72:40:ab:9f:7b:b1:34:85:2b:cf:
         da:5d:12:aa:ab:f2:0b:27:59:83:f9:18:cd:9e:89:1d:c9:b7:
         04:d7:c6:01:8d:3e:76:9c:3a:15:34:79:1e:2b:31:b9:3e:c0:
         49:32:d4:88:28:67:1c:97:df:d8:54:df:66:2c:17:07:31:c1:
         08:c8:34:89:4b:71:b0:3a:45:4a:f3:75:23:4c:88:4b:a8:16:
         19:e4:c6:13:f0:b0:a8:15:9b:84:ee:5b:01:0d:e7:76:15:23:
         1f:cd:be:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:06:37 2025 by rpki-client