Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
File:                     AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json)
Hash identifier:          6WcW3vXBDtBkEB3dsHvOyzNCQ9I0KSE5HIBPMKea6Ag=
Subject key identifier:   3F:A9:01:9F:13:B5:BE:D0:9D:63:A5:88:23:F8:81:62:EC:70:0E:28
Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F
Certificate issuer:       /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
Certificate serial:       36364914F9B3523203E6207026C930F261CFA63E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
Manifest number:          02C2
Signing time:             Sun 19 Oct 2025 23:11:34 +0000
Manifest this update:     Sun 19 Oct 2025 23:06:34 +0000
Manifest next update:     Thu 23 Oct 2025 09:13:34 +0000
Files and hashes:         1: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: Xus+gTrEzED/50k+ikFAZAroaOvQgjG07KQh1SIGBA8=)
                          2: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: vFZDJyrW7Nf7Z4DcMgOnKecQwvqUWGovWuuXKrThLwM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl
                          rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 09:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:36:49:14:f9:b3:52:32:03:e6:20:70:26:c9:30:f2:61:cf:a6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
        Validity
            Not Before: Oct 19 23:06:34 2025 GMT
            Not After : Oct 23 09:13:34 2025 GMT
        Subject: CN=3FA9019F13B5BED09D63A58823F88162EC700E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:33:7d:ed:33:26:22:1b:b9:3e:9f:39:bb:
                    98:64:28:ea:72:12:0a:1b:8c:73:b8:7c:5a:b1:6a:
                    97:08:b7:c2:f2:7e:52:82:17:ef:70:32:04:fa:72:
                    05:cd:1a:f5:88:82:d1:34:ea:e6:7f:1b:2d:fe:51:
                    e2:c6:82:53:27:3e:b0:bd:ff:04:dc:8a:7e:fd:7d:
                    98:f7:0f:eb:3b:43:34:89:bb:ed:65:dd:1c:7b:29:
                    1c:c7:3c:b6:92:84:cd:02:5d:78:a3:8e:5e:bd:77:
                    b4:5c:3e:62:a4:d5:c7:24:0b:db:24:bb:85:bc:b4:
                    85:c9:6b:33:8a:51:8c:cc:f4:e0:cb:24:08:88:2c:
                    43:8e:01:f4:98:8a:a2:45:ef:37:80:e2:c2:e5:d7:
                    a9:c0:c9:41:7a:81:e0:e5:e4:3d:90:7e:83:16:52:
                    52:5b:67:1c:1a:22:08:f5:56:a7:19:b7:4f:2e:f5:
                    fe:01:ed:1e:cb:73:4f:9d:e1:e2:cc:b2:bf:96:b4:
                    96:76:80:58:61:ee:af:fd:94:c1:06:08:c1:be:5f:
                    ce:25:7a:4d:06:e0:1f:b1:6f:82:da:83:ce:c5:5a:
                    62:0c:d2:02:b8:b5:07:6b:e9:75:62:c9:63:04:5b:
                    14:7e:97:8a:18:a8:c5:84:57:07:1a:34:5a:27:98:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A9:01:9F:13:B5:BE:D0:9D:63:A5:88:23:F8:81:62:EC:70:0E:28
            X509v3 Authority Key Identifier:
                keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:29:1b:f6:d3:ef:d9:b9:4d:a8:57:0f:f5:55:e4:e0:c3:1f:
         29:7d:bb:23:26:39:cf:08:93:b3:56:c5:55:8c:34:b4:9a:26:
         d9:84:5a:15:6d:99:21:8d:0c:77:1a:b2:4c:e2:03:5a:7a:51:
         bd:38:ed:42:86:a6:d5:0d:54:c8:f1:e3:ae:8c:4c:e4:5a:0b:
         a0:0b:4f:16:af:ba:a5:04:43:3c:96:a0:97:79:8a:48:af:86:
         67:73:e2:01:89:5b:43:4e:4a:52:05:00:3c:52:18:95:08:70:
         dc:74:aa:76:71:83:f9:24:46:ae:46:34:71:1c:f7:bf:77:f9:
         22:a6:60:e2:be:49:4e:a3:e4:d9:7c:c1:62:b8:3b:10:fe:46:
         d0:29:24:1b:f1:86:fe:aa:96:e0:c1:6a:b6:bb:64:4a:be:d8:
         d3:7e:3d:02:60:27:ed:4d:88:fa:4f:f8:ed:e0:b3:d5:fd:02:
         67:0e:3c:49:3e:20:6e:40:87:60:8c:d2:a9:25:c5:ca:ad:98:
         3c:df:00:01:3d:7a:66:f9:b4:67:23:e1:b8:48:f2:35:b6:e6:
         4e:cf:0c:e0:8d:30:51:b4:9e:1b:86:bf:13:3d:12:38:7c:b2:
         fe:e9:6e:fa:82:6b:4c:e5:c5:e7:45:ab:c4:95:19:a1:e4:ec:
         f1:d6:db:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:10:01 2025 by rpki-client