Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft
File:                     3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json)
Hash identifier:          vvQzG0A1ZVNsBubnPHFRpYxHzjZdJ3/5NyMOCw1tEUM=
Subject key identifier:   D2:03:68:22:07:3A:E5:0D:64:7A:EF:67:E8:FE:75:F5:1A:A5:58:2C
Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2
Certificate issuer:       /CN=3E788037924369AA3B8E52A5857804BE5D285FA2
Certificate serial:       4B810E48565A2363915BA0AB88C304076D102143
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft
Manifest number:          028A
Signing time:             Sun 19 Oct 2025 09:21:52 +0000
Manifest this update:     Sun 19 Oct 2025 09:16:52 +0000
Manifest next update:     Wed 22 Oct 2025 15:48:52 +0000
Files and hashes:         1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: ilhPhYMwxjxcNC74Yon3xYNd0uQUNUNF+7YCYR6VBOw=)
                          2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: T+TvJ8L62bCZqFmpIphffr8c4LXSlLo4atPH9poDMJ0=)
                          3: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: woUSg1Vx2Byo/6zhBVhpRC/cZBO/SzTf67P78IelAbo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl
                          rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 15:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:81:0e:48:56:5a:23:63:91:5b:a0:ab:88:c3:04:07:6d:10:21:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2
        Validity
            Not Before: Oct 19 09:16:52 2025 GMT
            Not After : Oct 22 15:48:52 2025 GMT
        Subject: CN=D2036822073AE50D647AEF67E8FE75F51AA5582C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:7f:67:fa:7c:d3:c8:c8:65:05:9e:c9:04:
                    47:db:c6:94:93:a8:06:fb:8a:fe:fb:11:18:43:08:
                    e6:cc:79:04:44:97:93:1a:fc:8a:6c:04:9b:f9:7c:
                    6a:59:6b:19:b6:38:df:92:75:87:69:33:0c:ff:fe:
                    cb:96:3c:80:e6:60:84:82:e4:49:96:dc:a0:93:c2:
                    a4:29:e3:6c:0a:c8:d2:ea:bd:da:b7:2c:71:ca:81:
                    ba:35:e1:11:85:26:3a:8c:53:36:f5:b7:ee:ce:27:
                    b3:9b:98:4b:be:01:77:52:fd:5b:86:7b:be:0a:b0:
                    00:f0:0f:aa:28:62:61:19:f5:82:e6:eb:e8:e8:05:
                    3b:37:9e:e9:67:e8:8c:45:d4:30:de:d8:ae:b6:82:
                    55:2d:bb:e6:96:f4:65:02:1d:e1:a4:e3:af:0c:ad:
                    37:2a:f2:04:a3:ec:ce:2e:c2:ac:92:f6:fa:dd:da:
                    c5:4f:af:92:ea:39:e5:6d:49:33:90:81:38:08:32:
                    7c:85:c6:6b:fd:bc:db:cd:5a:fb:7f:e6:74:e5:05:
                    14:15:a5:7b:85:b2:7e:4e:5e:ff:d0:a1:50:ea:d4:
                    0c:1a:19:6e:11:f4:35:cd:28:e5:fb:6a:53:9e:98:
                    8c:7f:74:9b:f4:bd:a5:bb:f2:91:b4:bc:67:d1:f2:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:03:68:22:07:3A:E5:0D:64:7A:EF:67:E8:FE:75:F5:1A:A5:58:2C
            X509v3 Authority Key Identifier:
                keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:03:25:78:43:20:83:35:c8:6b:8a:bb:4f:e0:39:4d:28:ed:
         18:65:0e:97:a3:39:14:68:f5:ca:52:98:dd:d2:d9:dd:1c:02:
         7c:de:6f:82:56:e2:21:b3:cd:72:5c:12:f2:f8:ad:4a:20:d4:
         57:0a:b6:31:36:bd:fb:9c:be:2f:3f:e1:79:44:03:b3:52:f2:
         a9:d1:a0:95:90:c3:c4:4b:06:ab:08:9d:fc:18:23:9f:01:74:
         a1:1e:08:f5:80:ef:0d:d9:a0:3e:e5:57:a9:55:9e:b9:62:a5:
         bc:76:e1:76:b6:ba:36:03:ac:a8:71:ed:4c:45:35:09:73:87:
         8d:b7:0d:5b:94:ce:aa:58:71:2d:f0:49:bc:77:b1:2e:ce:1e:
         c9:76:26:13:8c:b1:80:35:83:9d:15:46:d3:ec:26:48:3d:56:
         70:0e:e3:a2:a0:b0:29:af:48:71:75:fd:d0:26:30:84:51:59:
         b1:5e:24:11:be:a4:79:3a:8c:54:21:c1:16:cc:aa:85:2b:d9:
         57:74:5b:63:71:90:4c:2d:3f:a4:c0:58:8e:48:4b:ad:fc:91:
         45:74:ba:51:bb:93:41:45:21:d6:c8:eb:2b:fd:3a:12:8f:c7:
         62:a3:65:73:63:88:5e:42:aa:f2:02:7c:d2:17:8c:e0:45:5a:
         0b:0c:3d:9c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUS4EOSFZaI2ORW6CriMMEB20QIUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1
RDI4NUZBMjAeFw0yNTEwMTkwOTE2NTJaFw0yNTEwMjIxNTQ4NTJaMDMxMTAvBgNV
BAMTKEQyMDM2ODIyMDczQUU1MEQ2NDdBRUY2N0U4RkU3NUY1MUFBNTU4MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXn9n+nzTyMhlBZ7JBEfbxpST
qAb7iv77ERhDCObMeQREl5Ma/IpsBJv5fGpZaxm2ON+SdYdpMwz//suWPIDmYISC
5EmW3KCTwqQp42wKyNLqvdq3LHHKgbo14RGFJjqMUzb1t+7OJ7ObmEu+AXdS/VuG
e74KsADwD6ooYmEZ9YLm6+joBTs3nuln6IxF1DDe2K62glUtu+aW9GUCHeGk468M
rTcq8gSj7M4uwqyS9vrd2sVPr5LqOeVtSTOQgTgIMnyFxmv9vNvNWvt/5nTlBRQV
pXuFsn5OXv/QoVDq1AwaGW4R9DXNKOX7alOemIx/dJv0vaW78pG0vGfR8j8tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0gNoIgc65Q1keu9n6P519RqlWCwwHwYDVR0j
BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky
NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4
NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi
ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0
QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADkDJXhDIIM1yGuKu0/gOU0o7RhlDpejORRo
9cpSmN3S2d0cAnzeb4JW4iGzzXJcEvL4rUog1FcKtjE2vfucvi8/4XlEA7NS8qnR
oJWQw8RLBqsInfwYI58BdKEeCPWA7w3ZoD7lV6lVnrlipbx24Xa2ujYDrKhx7UxF
NQlzh423DVuUzqpYcS3wSbx3sS7OHsl2JhOMsYA1g50VRtPsJkg9VnAO46KgsCmv
SHF1/dAmMIRRWbFeJBG+pHk6jFQhwRbMqoUr2Vd0W2NxkEwtP6TAWI5IS638kUV0
ulG7k0FFIdbI6yv9OhKPx2KjZXNjiF5CqvICfNIXjOBFWgsMPZw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:09 2025 by rpki-client