Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
File:                     35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json)
Hash identifier:          a5Swx3v4LdcZu3CxKqgPXZCN+xtYRgdMta3VHRDmqBE=
Subject key identifier:   79:7B:79:F9:54:6D:10:1A:A3:CA:4B:F7:C3:68:F7:BA:36:DB:A3:EE
Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9
Certificate issuer:       /CN=35526D55C5F4431129EA7CE9304705CE395693D9
Certificate serial:       295C306E7633F5ECF611B37ED7BD3A33347AA149
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
Manifest number:          023C
Signing time:             Sun 19 Oct 2025 03:22:20 +0000
Manifest this update:     Sun 19 Oct 2025 03:17:20 +0000
Manifest next update:     Wed 22 Oct 2025 09:52:20 +0000
Files and hashes:         1: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: J+c709QQoIEIkMy97sqY1YIyZz69ISUARLX/2qaMfu4=)
                          2: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=)
                          3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl
                          rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 09:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5c:30:6e:76:33:f5:ec:f6:11:b3:7e:d7:bd:3a:33:34:7a:a1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9
        Validity
            Not Before: Oct 19 03:17:20 2025 GMT
            Not After : Oct 22 09:52:20 2025 GMT
        Subject: CN=797B79F9546D101AA3CA4BF7C368F7BA36DBA3EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:06:83:0c:82:d8:06:4a:28:1e:10:5e:68:
                    63:50:82:aa:f4:65:7c:2d:36:99:72:22:47:33:84:
                    9a:04:9f:63:7e:09:33:71:95:7d:9d:57:6f:39:7c:
                    84:ce:c6:20:e1:64:83:3c:c4:d6:58:8a:ba:62:f1:
                    7e:90:60:3b:0c:88:07:69:25:25:86:82:2f:12:5e:
                    30:c3:6a:35:60:e0:fb:6e:3f:84:ef:0d:b1:50:e2:
                    fe:e8:30:2b:9c:d6:6c:5e:26:98:4d:95:a4:e6:37:
                    4e:25:11:df:58:ef:a0:83:c9:2c:ab:41:f6:c0:08:
                    51:3c:62:b4:dd:38:ea:88:e8:e9:e8:46:42:41:0f:
                    1e:e9:b4:fe:c0:10:7d:8e:77:e2:50:8d:17:14:5f:
                    91:09:36:ca:d2:2c:82:29:e1:ee:97:43:e9:03:3c:
                    54:12:b3:54:a1:e5:87:63:53:1d:9b:78:b2:f8:b7:
                    d0:47:5f:6c:99:6b:85:05:0d:00:e3:e8:30:fe:8d:
                    39:36:74:ab:92:c7:88:e3:ab:35:20:ca:d1:54:d7:
                    7a:e6:4a:f0:78:ee:77:00:04:a9:c9:8a:cb:b7:97:
                    20:3c:91:1b:29:97:f5:2f:3c:a4:f2:62:be:07:08:
                    a3:79:87:e9:a5:76:e2:43:c9:c1:fe:ae:df:f2:55:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7B:79:F9:54:6D:10:1A:A3:CA:4B:F7:C3:68:F7:BA:36:DB:A3:EE
            X509v3 Authority Key Identifier:
                keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:27:00:3e:ab:c8:c9:8a:14:5c:c7:d3:4c:1f:42:f7:be:02:
         cb:b4:24:2a:22:80:81:cc:0f:ff:a9:64:7a:b2:7f:1c:5f:78:
         d0:69:a5:44:03:7d:dc:6b:58:dd:51:f1:d4:3c:d9:ad:67:f5:
         db:cf:cc:b5:44:5b:d6:27:34:bb:4e:51:fa:7f:5c:79:f8:e4:
         64:ba:38:6e:fe:48:5a:8f:da:7e:33:93:f8:11:4c:30:86:68:
         2f:90:98:7a:43:56:9b:47:28:c3:ae:6c:6c:0a:55:1e:17:5d:
         ba:7e:f3:6e:f3:ea:61:ba:66:85:54:f5:bf:98:a9:7b:5a:34:
         4b:fc:17:4a:ee:7d:51:01:46:95:0e:82:99:f6:cc:a0:35:07:
         21:86:44:22:7d:c0:8c:82:3e:9a:a2:e7:79:0a:88:1e:ca:f4:
         d9:fb:65:fd:66:ec:ea:ef:42:62:af:e5:30:6e:52:c4:27:0b:
         ac:a0:44:80:ed:4b:45:c7:36:a3:80:de:d9:c2:2a:fa:7e:e9:
         ac:1e:07:15:42:f5:bf:30:9b:d9:5f:db:7b:72:ef:1b:58:c0:
         e9:12:3f:c8:32:8a:d5:ff:ff:f1:41:7d:91:72:eb:b3:5b:b7:
         6a:ac:e4:0e:d5:f4:cd:47:56:98:2d:65:68:3f:9d:91:9e:b9:
         a9:25:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:52 2025 by rpki-client