Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
File:                     3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json)
Hash identifier:          lpV+Mr2w2Y7uRgK98TzkAj30br7g/0P5ypgFTt2Mo68=
Subject key identifier:   55:11:00:AA:94:D0:1A:A6:E6:05:06:39:B7:BD:68:24:66:70:8E:65
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       760584FB9FE14C942025F7D62941D70D71253335
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
Manifest number:          023F
Signing time:             Sat 18 Oct 2025 16:12:20 +0000
Manifest this update:     Sat 18 Oct 2025 16:07:20 +0000
Manifest next update:     Tue 21 Oct 2025 23:38:20 +0000
Files and hashes:         1: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: E7Xvq+98P7calV+Tra/HI6VBncPkJLZ2WfRUwzVpBzQ=)
                          2: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: aZ1nkOt0ZwL5bWsxMWDTHMMRjscg2q9LS9hs3Z383Ew=)
                          3: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: gQMVqNF5pbofU8fWwfLf24IOx5Rve68FRF/gYFgAFMM=)
                          4: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: OXb58XdJvFeTkl1pb8qqXtG1NjsRZSztJ+uUatv4+8w=)
                          5: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: lQ+fQzdjr0S1DLs1lSSCMj5N6c3fuO+jsggHmQtAADw=)
                          6: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: YHuUg4uxFrthFFepE05C4PM9gH2UZAw5dOg3ZxdbMHs=)
                          7: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: tSzx8au6P/Wn0G0+CbiAVPxRQJ32Kuk9x67KOlz99Dc=)
                          8: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: iGn1V/gq7zu3cpw0mI8Bqv3oMJsgKj/I69u4ba5O7zE=)
                          9: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: 74adhrSbVzuFjVRQo3T/YKEFIp0ssVu9vw6ZXWstTjg=)
                          10: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: tqVbqJyQTApYbizYu59I5NZoSysKTPKf9ZllM4I7v64=)
                          11: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: fmU/gB/7itVGB2sFtyfrKlK+5/0j2F7s2JNU9ipGEtI=)
                          12: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: VDmzAE5nsSn3VcTtdUYB+JjYbBbEx+qEZDLzkKkFw30=)
                          13: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: FzI5GbnAo75yoelWpGp51ySqxG4wQ2wlQL4r6iiASgc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 23:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:05:84:fb:9f:e1:4c:94:20:25:f7:d6:29:41:d7:0d:71:25:33:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Oct 18 16:07:20 2025 GMT
            Not After : Oct 21 23:38:20 2025 GMT
        Subject: CN=551100AA94D01AA6E6050639B7BD682466708E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:ff:a0:f5:b6:87:39:00:46:7a:10:1c:19:
                    c6:ef:25:ed:ac:31:12:53:69:1c:69:6e:80:5d:44:
                    b6:c8:36:07:ce:08:44:67:a2:0c:ff:c0:b7:ca:25:
                    50:6a:c8:8a:27:62:72:ef:f6:d8:e7:bf:8b:50:8e:
                    d7:01:ae:ce:3f:08:8d:c5:d4:80:4b:3e:e6:f8:45:
                    09:09:cc:4e:f9:eb:9f:c0:af:0d:24:2f:ab:9e:8f:
                    be:69:32:3c:8d:de:5b:47:e1:f1:70:b2:c4:e3:cf:
                    eb:e9:5e:35:a1:52:3a:c0:78:97:05:17:79:fe:e4:
                    49:be:3d:98:69:31:81:3b:15:6f:79:42:0d:44:2c:
                    4c:91:ab:17:9c:94:a3:60:c9:1a:89:c0:6f:05:85:
                    7a:63:32:f6:15:51:dd:bf:f5:9c:7b:54:4c:fc:8f:
                    44:76:e2:1b:e1:42:19:c2:b3:f3:95:0f:8a:6c:92:
                    29:3f:c9:7e:4f:5e:2f:a3:ce:aa:e8:56:17:1d:96:
                    52:b9:f8:6d:7a:f3:10:79:ee:bc:96:65:0a:df:ca:
                    93:37:b2:e6:eb:41:bf:84:19:fe:94:08:ef:ef:dc:
                    0a:04:52:93:61:0c:81:05:f5:1e:88:7e:96:3c:b2:
                    e0:21:0a:1c:56:dc:35:a4:97:d7:76:ba:cb:10:40:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:11:00:AA:94:D0:1A:A6:E6:05:06:39:B7:BD:68:24:66:70:8E:65
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:be:60:fe:3d:3b:44:d5:cb:13:b7:9e:7d:b8:a9:d7:28:1b:
         cb:bf:69:44:8a:e9:eb:70:fe:75:2e:b2:47:8d:f5:a8:67:f6:
         ed:ce:15:d4:fa:ec:af:e5:b8:e6:14:ec:f0:2e:77:0d:04:1d:
         85:3a:61:17:be:d8:68:75:b8:55:fd:1e:91:63:68:cb:db:a2:
         db:2b:8b:18:fd:7a:58:75:a2:32:31:82:f6:71:ee:bb:0c:b4:
         4f:69:6c:18:6d:7c:36:c8:5c:53:46:0a:94:b0:72:c3:8c:dd:
         4d:76:56:44:38:04:0d:3e:36:48:95:1c:a3:36:a2:1d:a9:42:
         d8:f3:0a:76:79:a8:e2:66:10:c0:b5:85:2b:e8:a2:3d:59:4f:
         f5:60:9a:44:1f:80:86:8d:6f:7a:c2:4c:4e:31:97:5e:09:84:
         20:14:f0:d2:c8:16:d7:51:7d:e6:60:be:b4:e1:bf:d0:a8:eb:
         bf:83:a3:ca:47:25:03:53:7a:9a:a0:8b:c3:43:44:93:cd:03:
         82:2d:87:51:b5:c2:67:4b:2b:f6:9c:44:be:42:7b:6c:ac:6e:
         f5:72:d6:89:6d:24:f0:39:1c:93:7f:69:06:ea:76:7f:77:fc:
         41:e6:75:30:7e:c1:dd:56:62:5f:c6:16:6e:fa:1e:a6:0a:be:
         2a:28:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:29:12 2025 by rpki-client