Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft
File:                     F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json)
Hash identifier:          1pBbfq1yqrntRLqnw7XM3ZQyTFJrFPIM2CYaXjGFqy8=
Subject key identifier:   8C:E4:4E:28:DC:03:4A:CE:08:97:42:B8:30:C5:43:49:FB:ED:2D:DD
Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8
Certificate issuer:       /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8
Certificate serial:       647465237D21CB530C7238B6AEE48E65BF4829B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft
Manifest number:          0525
Signing time:             Mon 20 Oct 2025 07:10:47 +0000
Manifest this update:     Mon 20 Oct 2025 07:05:47 +0000
Manifest next update:     Thu 23 Oct 2025 11:58:47 +0000
Files and hashes:         1: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=)
                          2: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=)
                          3: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=)
                          4: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: wWRbckelk/EdlDV54B35Tof/gAUeAmIisobr23+wmbQ=)
                          5: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: PqeFBMmCxWfD824pPn9xm7j9NLtgK4mpMJgmDQzThss=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl
                          rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:74:65:23:7d:21:cb:53:0c:72:38:b6:ae:e4:8e:65:bf:48:29:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8
        Validity
            Not Before: Oct 20 07:05:47 2025 GMT
            Not After : Oct 23 11:58:47 2025 GMT
        Subject: CN=8CE44E28DC034ACE089742B830C54349FBED2DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:db:05:cc:8a:78:0c:2f:8d:16:d3:4a:45:c1:
                    c6:e1:b6:49:f9:75:9f:11:93:f0:76:33:fd:91:ba:
                    bc:d5:2c:21:62:c3:15:94:76:a1:dc:6b:c5:01:a3:
                    bd:f8:9c:a8:46:a0:33:21:e2:f6:c6:5b:4e:9d:d0:
                    3d:0f:ea:61:9c:f6:b3:b0:17:85:f9:75:14:e3:12:
                    72:9c:0c:14:87:74:dc:e4:19:7b:01:95:dc:df:74:
                    e3:f0:7f:7a:53:03:53:94:6d:65:be:a0:dc:f3:94:
                    e0:ab:61:f0:aa:10:7d:8d:f0:be:c1:57:2e:64:b9:
                    de:af:fe:02:cb:bb:e9:76:36:34:f0:56:9f:e3:29:
                    a3:51:5a:c4:26:65:7d:c5:74:d3:f7:f4:10:2f:1a:
                    13:dd:ab:53:8e:9a:64:c9:e9:fc:c3:e3:c2:c8:f4:
                    24:4c:5c:84:89:ee:4e:d1:89:07:dc:1d:3e:d2:c3:
                    ab:bb:e4:af:31:44:5f:de:18:d8:bc:c0:8e:c3:8f:
                    2a:ba:b4:11:c4:21:be:e1:93:eb:45:c7:da:65:90:
                    26:e3:3d:c6:cc:e8:d5:c9:93:ff:0d:ab:db:ea:0e:
                    c4:a0:aa:ab:4b:1e:20:f8:82:ac:e6:e2:15:43:98:
                    25:ff:a9:65:8f:32:ff:24:c3:0a:90:ec:a5:f8:08:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E4:4E:28:DC:03:4A:CE:08:97:42:B8:30:C5:43:49:FB:ED:2D:DD
            X509v3 Authority Key Identifier:
                keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:58:e1:df:db:af:c3:56:fd:e2:f2:ee:b8:0b:eb:d6:61:88:
         8f:65:73:f0:11:4d:b7:4f:86:f8:c3:93:2b:c5:cf:de:d1:8c:
         48:6f:09:bc:ea:39:6d:96:59:06:26:a7:85:19:1e:a5:bd:f3:
         54:c2:d8:5e:f4:00:37:51:64:49:0f:a3:3b:f7:31:13:c1:8d:
         03:0b:b7:24:39:50:98:94:1f:3c:7c:3b:19:5d:a1:78:3c:37:
         77:cb:97:75:80:3d:1f:ce:b5:59:0b:14:9c:ce:ff:be:ff:e1:
         53:30:0c:dd:01:83:86:5b:24:1b:46:d4:c8:ad:a4:26:93:ad:
         f4:45:ff:a4:58:d1:cb:e8:d2:9c:b4:54:68:7f:43:4d:fc:68:
         9d:f2:76:c3:e3:fa:4a:d2:1d:e4:9c:3d:fa:dd:68:ca:67:50:
         84:2e:e1:78:ff:ce:40:5f:c5:c0:d1:e0:7c:b7:18:63:49:bd:
         b3:3b:ee:22:b8:2b:66:68:c2:fb:46:c1:15:b7:db:ba:c4:b8:
         94:13:c5:05:a4:6b:5d:8a:89:e0:2b:c3:77:f3:5e:3b:a9:95:
         37:c7:6d:6a:c2:98:94:ca:52:a6:0f:03:38:70:6f:72:a4:8e:
         5b:89:64:cb:ca:04:43:2b:b2:d0:61:9c:f4:16:27:ee:3d:b6:
         1f:73:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:56 2025 by rpki-client