Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
File:                     B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json)
Hash identifier:          HdrNHtc7D7Lp5VtBAAruoA/aIwsT9NCaV3RbTdbWDvw=
Subject key identifier:   37:AD:F4:91:4E:5E:96:EF:4C:3D:66:74:FE:45:87:3D:05:27:23:0A
Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7
Certificate issuer:       /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
Certificate serial:       5596A5940CE1A5EE7CA6B94728C4C29497C43900
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
Manifest number:          01A5
Signing time:             Sat 18 Oct 2025 14:50:37 +0000
Manifest this update:     Sat 18 Oct 2025 14:45:37 +0000
Manifest next update:     Tue 21 Oct 2025 22:48:37 +0000
Files and hashes:         1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=)
                          2: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: 2D4YpFv7DGaafc8XQXAPARVK3ODuMSzNmzYzxxxTioQ=)
                          3: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl
                          rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 22:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:96:a5:94:0c:e1:a5:ee:7c:a6:b9:47:28:c4:c2:94:97:c4:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
        Validity
            Not Before: Oct 18 14:45:37 2025 GMT
            Not After : Oct 21 22:48:37 2025 GMT
        Subject: CN=37ADF4914E5E96EF4C3D6674FE45873D0527230A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a9:52:3b:da:ce:ec:2e:e5:26:2c:40:ad:da:
                    81:02:67:4e:33:31:25:10:6a:2b:b9:1e:f0:12:24:
                    1c:e9:2b:1a:ee:41:ea:42:45:30:e2:e5:df:f4:e4:
                    f9:81:0b:6a:ef:b0:a6:12:da:b3:9a:ae:34:ce:3e:
                    c2:cb:11:b9:af:ae:c4:b1:50:b1:f1:08:f4:e2:fc:
                    5c:fe:58:9c:06:90:ff:b1:a2:0b:80:d5:d4:c8:d8:
                    d8:d0:eb:46:86:a7:e8:d1:f4:71:1d:65:a3:62:94:
                    82:95:ef:e7:28:6f:61:8d:c1:cf:21:e2:94:e7:5d:
                    90:ec:eb:df:8f:8b:87:0f:00:ca:62:e8:e1:18:c4:
                    0e:d2:2c:1a:81:38:92:72:c9:6f:8e:92:ca:2b:ec:
                    7e:f5:93:d0:32:02:28:62:8d:27:ec:a3:03:5f:2d:
                    78:43:83:eb:7e:35:87:6b:75:70:95:7c:df:14:27:
                    dc:65:47:83:24:64:ce:35:44:6d:a6:7e:3a:71:02:
                    bf:3f:98:ac:f8:c9:16:99:f3:c5:bd:f6:88:fb:c1:
                    f6:4e:75:78:14:7e:e3:36:dc:68:23:39:1e:07:47:
                    2d:9a:81:04:05:bc:a0:78:af:d2:aa:b8:f2:20:94:
                    27:7b:60:ef:ca:5f:a7:40:f3:76:c3:01:13:d8:17:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AD:F4:91:4E:5E:96:EF:4C:3D:66:74:FE:45:87:3D:05:27:23:0A
            X509v3 Authority Key Identifier:
                keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:dc:76:4b:ba:87:2a:c9:3c:55:c0:b4:bb:d5:2e:f5:86:98:
         d1:ad:b1:b8:11:65:43:36:9a:34:46:17:c2:97:ff:27:48:3c:
         71:9a:e7:92:f5:1b:b0:53:60:17:f2:2d:e0:18:a3:ce:49:96:
         b6:b1:a4:c9:9a:45:e7:d4:87:a7:48:60:47:2a:e9:8b:bd:da:
         dc:2a:8e:61:e1:e7:98:02:0b:bc:2d:7f:bd:6f:0a:64:dc:b9:
         63:9a:88:ca:88:d2:0e:f6:1c:3e:78:09:0d:d3:31:64:09:21:
         f5:12:86:03:a4:51:b2:ef:cf:8a:dc:31:36:98:55:9f:c9:99:
         af:9a:a4:9b:9a:10:bd:87:df:bb:1e:c9:d6:e9:d6:09:51:f3:
         0f:92:22:5a:1d:b9:30:e3:73:6a:d7:d2:b4:73:07:73:46:8b:
         c9:ac:38:19:85:7b:01:96:21:b5:67:3e:1e:08:73:34:20:48:
         e1:a9:d2:1b:8d:6b:8b:46:17:d7:e7:fd:55:bc:a0:c7:16:b5:
         62:9c:35:05:2d:9d:08:1a:4a:bb:d6:c4:68:5d:ef:db:ed:25:
         e8:56:b3:2e:6f:8e:77:04:98:cf:51:bd:a5:f5:d9:bf:66:bf:
         e5:1a:bf:69:d9:d8:7c:e4:74:40:ba:c3:3e:38:99:d6:63:b6:
         c2:e6:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:40:48 2025 by rpki-client