Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft
File:                     8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json)
Hash identifier:          ATCt0WlRlMz6ejuRLMOEH9SinxbQFMr+GSX+FajQhHc=
Subject key identifier:   53:E2:59:BF:51:56:FE:19:47:0F:8C:1C:CC:34:75:7F:75:D9:C2:0C
Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8
Certificate issuer:       /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8
Certificate serial:       784CB900B974A430065FB0A41AC7DA8BEB0FC250
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft
Manifest number:          051A
Signing time:             Sat 18 Oct 2025 16:50:37 +0000
Manifest this update:     Sat 18 Oct 2025 16:45:37 +0000
Manifest next update:     Wed 22 Oct 2025 03:18:37 +0000
Files and hashes:         1: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: K3XT23vnnfkDexvik4zvcooaxURHsBbWEvURVjFd/Ko=)
                          2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl
                          rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 03:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4c:b9:00:b9:74:a4:30:06:5f:b0:a4:1a:c7:da:8b:eb:0f:c2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8
        Validity
            Not Before: Oct 18 16:45:37 2025 GMT
            Not After : Oct 22 03:18:37 2025 GMT
        Subject: CN=53E259BF5156FE19470F8C1CCC34757F75D9C20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:af:6c:ad:db:e3:c4:a8:3e:95:38:f2:f3:c4:
                    c4:9a:a1:ac:27:c3:43:40:a4:12:81:9a:76:b5:51:
                    c4:98:64:65:f1:38:bf:64:df:d8:cb:da:a1:47:6b:
                    5c:ac:93:a4:bd:24:69:bb:21:6e:ca:06:6b:1b:62:
                    b0:46:b8:e2:2a:90:4c:df:74:cc:44:10:d1:65:25:
                    ad:d1:f7:13:73:b4:d3:e5:43:fa:7c:10:56:2b:1d:
                    76:a5:81:27:ba:96:1c:8a:9b:e2:68:91:53:be:81:
                    44:25:3f:85:23:5e:31:da:c6:8c:d7:21:49:a6:6c:
                    80:dc:dc:ff:d2:eb:3b:09:46:48:ac:9e:0e:76:6d:
                    44:99:68:e5:5d:70:f3:b4:9e:ef:67:58:40:df:9c:
                    9a:e8:b7:85:f2:66:65:59:9d:3b:63:65:bf:9e:c2:
                    95:5f:42:d9:2b:a7:a7:95:e5:8a:94:94:f1:6c:e6:
                    6f:21:8f:0b:54:ee:f3:43:1b:cc:97:bb:60:25:7d:
                    0a:fa:12:f7:c3:3a:4e:06:36:1e:ad:3b:88:6d:9c:
                    15:c5:5b:01:fc:52:27:8e:13:61:e1:9d:06:a4:2c:
                    84:5d:1a:dc:9c:78:cc:a2:aa:4e:c8:3b:29:14:42:
                    d8:ea:0d:92:ff:71:9a:3c:51:1f:fa:5f:7b:18:25:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E2:59:BF:51:56:FE:19:47:0F:8C:1C:CC:34:75:7F:75:D9:C2:0C
            X509v3 Authority Key Identifier:
                keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:85:78:00:9e:9c:6e:3d:5c:be:ad:02:f4:36:03:da:60:bd:
         81:e2:32:64:a7:ab:9b:81:4b:b6:48:1d:ed:bc:10:d2:7e:7d:
         68:17:dc:37:48:77:88:b0:8d:16:12:93:82:fd:7f:22:b4:fd:
         10:b1:db:ae:20:45:c6:03:ed:5a:8b:83:8d:3b:cf:fd:39:d7:
         a6:44:e0:cc:44:ce:ae:48:15:50:3c:0a:a6:19:93:eb:2d:a2:
         70:77:b2:7c:96:58:43:9f:4c:ef:8c:7f:f4:dd:9d:30:69:65:
         b0:37:40:fc:78:03:4c:07:ac:8a:4f:d9:fc:ce:3a:fb:61:e7:
         95:4d:12:8c:f7:c4:ce:92:53:df:e3:98:c1:18:c2:4b:81:85:
         22:e2:68:2a:2b:6d:e8:77:9d:85:d9:92:4b:05:00:27:8e:c9:
         b7:15:ca:f7:08:6c:ea:f6:ab:78:76:bd:5a:a5:09:35:34:b7:
         0a:9d:71:2b:3c:ce:99:3e:4c:f2:ba:55:c9:f8:04:0b:5e:6f:
         84:86:e2:1e:55:ac:0f:98:85:23:91:4e:99:87:55:d6:88:77:
         cd:c3:96:6e:db:63:79:67:a8:3f:81:4c:f9:f6:c8:a9:87:43:
         bd:f1:ac:cf:31:4e:18:56:d5:c0:47:16:f2:25:ed:0b:4d:0d:
         89:93:1e:bd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeEy5ALl0pDAGX7CkGsfai+sPwlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx
NzE1ODlFODAeFw0yNTEwMTgxNjQ1MzdaFw0yNTEwMjIwMzE4MzdaMDMxMTAvBgNV
BAMTKDUzRTI1OUJGNTE1NkZFMTk0NzBGOEMxQ0NDMzQ3NTdGNzVEOUMyMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDur2yt2+PEqD6VOPLzxMSaoawn
w0NApBKBmna1UcSYZGXxOL9k39jL2qFHa1ysk6S9JGm7IW7KBmsbYrBGuOIqkEzf
dMxEENFlJa3R9xNztNPlQ/p8EFYrHXalgSe6lhyKm+JokVO+gUQlP4UjXjHaxozX
IUmmbIDc3P/S6zsJRkisng52bUSZaOVdcPO0nu9nWEDfnJrot4XyZmVZnTtjZb+e
wpVfQtkrp6eV5YqUlPFs5m8hjwtU7vNDG8yXu2AlfQr6EvfDOk4GNh6tO4htnBXF
WwH8UieOE2HhnQakLIRdGtyceMyiqk7IOykUQtjqDZL/cZo8UR/6X3sYJWsnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUU+JZv1FW/hlHD4wczDR1f3XZwgwwHwYDVR0j
BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0
RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1
ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh
MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2
RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAaFeACenG49XL6tAvQ2A9pgvYHiMmSnq5uB
S7ZIHe28ENJ+fWgX3DdId4iwjRYSk4L9fyK0/RCx264gRcYD7VqLg407z/0516ZE
4MxEzq5IFVA8CqYZk+stonB3snyWWEOfTO+Mf/TdnTBpZbA3QPx4A0wHrIpP2fzO
Ovth55VNEoz3xM6SU9/jmMEYwkuBhSLiaCorbeh3nYXZkksFACeOybcVyvcIbOr2
q3h2vVqlCTU0twqdcSs8zpk+TPK6Vcn4BAteb4SG4h5VrA+YhSORTpmHVdaId83D
lm7bY3lnqD+BTPn2yKmHQ73xrM8xThhW1cBHFvIl7QtNDYmTHr0=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:45:59 2025 by rpki-client