Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
File:                     B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json)
Hash identifier:          DIidOrA64THeGfjJSA/m1IBYUxRlNrpVFTEUp3ALXHE=
Subject key identifier:   9E:A8:52:A5:1E:FC:BF:23:9C:8C:49:89:FF:92:AB:FD:89:E6:6A:89
Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7
Certificate issuer:       /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
Certificate serial:       582DE5E8D567CDC4984DF27FDAEF645D001A444D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
Manifest number:          01A6
Signing time:             Mon 20 Oct 2025 22:50:43 +0000
Manifest this update:     Mon 20 Oct 2025 22:45:43 +0000
Manifest next update:     Fri 24 Oct 2025 03:13:43 +0000
Files and hashes:         1: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=)
                          2: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=)
                          3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: lXf6eskYqb3EYqiGGqhHfzLUczDtlrpp6lsJ18Q6dXk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl
                          rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2d:e5:e8:d5:67:cd:c4:98:4d:f2:7f:da:ef:64:5d:00:1a:44:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
        Validity
            Not Before: Oct 20 22:45:43 2025 GMT
            Not After : Oct 24 03:13:43 2025 GMT
        Subject: CN=9EA852A51EFCBF239C8C4989FF92ABFD89E66A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cf:2b:c1:c6:f3:c5:a0:b5:0f:c3:88:0c:5a:
                    74:23:11:f5:48:4a:16:53:fd:45:a9:0d:e3:69:0c:
                    aa:57:d5:17:71:be:c7:d0:4e:1d:9c:61:29:c2:7a:
                    5c:cf:68:3c:75:b5:83:36:db:f0:56:71:e9:ac:8f:
                    f2:3a:3b:88:64:43:ad:5e:52:a9:c4:9a:78:bc:8e:
                    00:9a:cc:60:7f:ae:94:43:59:78:22:d0:fa:97:e1:
                    c0:76:96:d8:58:9f:ac:2a:c7:27:b2:61:5e:77:94:
                    37:35:b6:c5:eb:4a:4c:9d:12:ad:44:da:b3:58:1c:
                    f6:97:61:d4:2c:d9:62:56:bd:e0:c8:b7:5f:17:bf:
                    1a:12:9e:d1:81:c9:1c:27:af:c7:44:d8:fd:2b:41:
                    9c:04:98:71:81:a0:e7:c6:04:69:eb:ec:62:57:45:
                    c3:94:e8:d9:59:54:b0:be:00:13:f1:ff:ed:db:42:
                    c8:df:21:b0:9c:8a:39:d2:a2:1b:09:d7:bc:79:39:
                    8c:42:ac:69:9c:34:7a:f4:0d:49:a7:64:42:dc:35:
                    eb:81:4a:a8:5c:47:10:b6:31:f8:59:e3:fa:23:78:
                    6a:d4:88:15:34:a7:20:07:11:a4:5f:a8:66:9f:ca:
                    52:28:59:7a:13:49:a3:c4:65:f0:e3:e7:fa:66:49:
                    d3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A8:52:A5:1E:FC:BF:23:9C:8C:49:89:FF:92:AB:FD:89:E6:6A:89
            X509v3 Authority Key Identifier:
                keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:57:c1:d0:c2:c9:6a:a5:c8:26:8e:49:bf:a8:b4:f3:bc:43:
         e9:99:b3:2e:54:c9:3b:55:e3:a8:3b:fd:d9:5b:a5:6e:3e:d1:
         52:c4:6a:38:81:c9:5a:21:40:6c:64:dd:7f:be:0b:09:00:7c:
         c8:c1:58:76:97:7e:2f:22:a8:83:2f:73:37:47:b0:97:35:dd:
         96:25:ea:d8:24:f7:3c:6c:53:e4:9c:1a:78:16:1f:07:fe:96:
         58:e3:fe:c4:d1:43:89:79:f9:df:82:4d:77:77:b4:28:45:1f:
         18:17:3f:1a:87:6a:3a:02:83:d0:23:d9:17:0d:65:ab:c0:56:
         fc:45:0a:11:69:c5:c7:b8:9d:75:4e:e5:d1:17:ce:57:57:e3:
         2f:6d:77:c8:fc:81:a9:b8:b3:84:06:ca:f7:26:ad:07:21:a3:
         04:82:bc:1f:cb:bd:54:ac:ae:8b:98:18:99:75:e4:4c:0b:fe:
         fb:6a:27:49:87:61:02:f5:0c:1e:ad:50:dd:9d:98:34:30:f9:
         ba:6b:85:d9:5b:ac:63:1f:61:0f:c0:0f:88:ad:76:95:f2:6e:
         8e:d4:0a:8f:04:c7:58:c7:c3:7b:8f:01:c3:15:79:8e:a6:18:
         ed:86:8e:43:ac:2b:bd:37:ca:01:37:db:00:c5:e5:cb:9a:0b:
         eb:c7:fd:75
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWC3l6NVnzcSYTfJ/2u9kXQAaRE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz
QTgxRkZGNzAeFw0yNTEwMjAyMjQ1NDNaFw0yNTEwMjQwMzEzNDNaMDMxMTAvBgNV
BAMTKDlFQTg1MkE1MUVGQ0JGMjM5QzhDNDk4OUZGOTJBQkZEODlFNjZBODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgzyvBxvPFoLUPw4gMWnQjEfVI
ShZT/UWpDeNpDKpX1RdxvsfQTh2cYSnCelzPaDx1tYM22/BWcemsj/I6O4hkQ61e
UqnEmni8jgCazGB/rpRDWXgi0PqX4cB2lthYn6wqxyeyYV53lDc1tsXrSkydEq1E
2rNYHPaXYdQs2WJWveDIt18XvxoSntGByRwnr8dE2P0rQZwEmHGBoOfGBGnr7GJX
RcOU6NlZVLC+ABPx/+3bQsjfIbCcijnSohsJ17x5OYxCrGmcNHr0DUmnZELcNeuB
SqhcRxC2MfhZ4/ojeGrUiBU0pyAHEaRfqGafylIoWXoTSaPEZfDj5/pmSdNPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnqhSpR78vyOcjEmJ/5Kr/YnmaokwHwYDVR0j
BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2
MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx
RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5
NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw
QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACRXwdDCyWqlyCaOSb+otPO8Q+mZsy5UyTtV
46g7/dlbpW4+0VLEajiByVohQGxk3X++CwkAfMjBWHaXfi8iqIMvczdHsJc13ZYl
6tgk9zxsU+ScGngWHwf+lljj/sTRQ4l5+d+CTXd3tChFHxgXPxqHajoCg9Aj2RcN
ZavAVvxFChFpxce4nXVO5dEXzldX4y9td8j8gam4s4QGyvcmrQchowSCvB/LvVSs
rouYGJl15EwL/vtqJ0mHYQL1DB6tUN2dmDQw+bprhdlbrGMfYQ/AD4itdpXybo7U
Co8Ex1jHw3uPAcMVeY6mGO2GjkOsK703ygE32wDF5cuaC+vH/XU=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:14:39 2025 by rpki-client