Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft
File:                     9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json)
Hash identifier:          CqCQy4O3OPBrB0z9GHZdHv6uERUkuxgDZn1J4kiV2NY=
Subject key identifier:   0F:2C:5A:E7:CE:86:C8:0B:4E:A5:1D:B9:DE:FA:84:37:6A:FD:7A:B1
Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43
Certificate issuer:       /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43
Certificate serial:       70BEE88770C4D8F0895145FE37C1983BB3CF08F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft
Manifest number:          B6
Signing time:             Mon 20 Oct 2025 02:41:28 +0000
Manifest this update:     Mon 20 Oct 2025 02:36:28 +0000
Manifest next update:     Thu 23 Oct 2025 05:53:28 +0000
Files and hashes:         1: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: MCVSrZnp3fz4fw87jR64KXv8KOsE854ZhlmdcXevMtQ=)
                          2: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: sDgjE8ymqlBE9cw/ir42Gp3BLLczy7m3TqUyfVT9fkU=)
                          3: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: +ocSAGB3dBIAVC5M40zigsYrVPiW6jAUz0b74ynxGfc=)
                          4: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: GbOOON5SAD6ikmj8Ksu9duAVZzbA37sW5twd8qtTwpA=)
                          5: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: RFcogeaEPWKhAE9n7Pl04rx41EdOlubzKnwCzsq//8U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl
                          rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 05:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:be:e8:87:70:c4:d8:f0:89:51:45:fe:37:c1:98:3b:b3:cf:08:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43
        Validity
            Not Before: Oct 20 02:36:28 2025 GMT
            Not After : Oct 23 05:53:28 2025 GMT
        Subject: CN=0F2C5AE7CE86C80B4EA51DB9DEFA84376AFD7AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:54:62:eb:36:5c:21:76:9a:d5:7a:02:9c:
                    f2:25:90:94:d6:e5:d8:2f:4b:e2:a6:19:86:53:cf:
                    cd:9c:d7:26:a2:46:6e:57:37:4e:ec:2b:99:6f:96:
                    05:7b:ae:e6:0c:fd:65:60:44:4c:5f:6c:69:29:fe:
                    95:db:99:3d:bc:b2:ae:8a:cb:da:28:e9:c7:db:c4:
                    9e:90:1f:2a:90:a1:2d:81:bf:af:87:45:42:01:47:
                    94:2c:ec:36:be:1a:14:03:3c:9f:40:3f:db:e4:fd:
                    e1:46:d3:26:43:f3:4c:11:cc:07:27:d9:4e:ed:7d:
                    0b:04:90:a6:08:99:72:b8:29:44:dc:01:d7:9f:05:
                    18:7e:6c:09:48:5c:94:4c:2e:29:be:5c:c4:12:ad:
                    84:05:5f:6f:82:5a:48:d5:65:ca:a5:ee:73:db:42:
                    4e:3b:4e:23:00:db:69:7c:86:6d:c9:8d:f9:c2:e7:
                    ec:6e:db:83:21:73:5f:fe:16:70:3b:22:b0:bd:c8:
                    32:33:a6:74:20:b1:03:9e:37:1e:9c:9b:92:be:94:
                    9f:5e:8b:db:4a:8b:5e:25:37:c3:00:d4:53:d2:57:
                    97:0e:e2:58:7b:2c:99:e1:c6:39:5a:e9:4c:6a:1b:
                    07:16:4a:db:7b:96:77:f5:ae:ba:ac:3f:c6:f1:c7:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2C:5A:E7:CE:86:C8:0B:4E:A5:1D:B9:DE:FA:84:37:6A:FD:7A:B1
            X509v3 Authority Key Identifier:
                keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:12:8a:0c:a0:2f:c4:1b:f6:87:32:3a:01:3f:2d:be:8f:7b:
         ec:cf:f7:94:45:a9:6b:c7:6b:16:8b:33:bf:74:0e:af:0c:77:
         fe:58:4b:8e:a0:32:0d:e2:b1:b5:c4:ed:22:4a:90:32:fe:44:
         62:56:ed:46:9c:9e:33:0c:cc:8c:cf:d5:a9:34:1b:8b:fe:4e:
         49:99:74:03:d4:96:36:13:dc:31:7d:c1:1d:a4:17:4e:7d:aa:
         58:ce:c7:59:cb:09:bc:f5:78:d3:c6:f4:75:8f:bb:46:ab:da:
         4c:90:d0:0b:da:05:24:53:53:06:10:9e:6b:f1:f0:9f:37:37:
         d9:ec:4d:d9:b5:55:76:96:db:25:57:4a:38:8e:c8:a7:db:37:
         0b:03:d0:5b:af:e1:6f:36:d6:32:2d:65:4e:6e:1c:df:dd:33:
         21:71:8b:cf:8b:83:fa:af:32:bc:51:9c:93:f7:26:bc:00:80:
         fd:53:e4:40:a5:36:c6:72:9f:fb:08:40:4a:fc:68:c5:d0:0d:
         9a:02:b8:4e:7c:8e:d9:6d:c6:12:74:fd:4b:81:59:7e:df:d4:
         4b:51:23:78:ee:14:7b:e8:97:7a:5f:10:f8:7c:96:cf:6f:0b:
         5e:61:92:01:96:e6:4e:6b:0e:1f:e1:bb:11:f6:15:5a:71:8a:
         27:2c:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:15 2025 by rpki-client