Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft
File:                     D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json)
Hash identifier:          6l5h5UgamWWxutGYk55MYZ6KpsnkcQ1HZAh00neLTbY=
Subject key identifier:   C1:A8:5C:A7:CB:CB:4F:B2:05:28:92:53:14:B6:27:C7:5D:0D:94:A1
Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9
Certificate issuer:       /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9
Certificate serial:       5588B9FDD98C2C1ED549CB9B951B644DC825444D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft
Manifest number:          019C
Signing time:             Sun 19 Oct 2025 16:51:48 +0000
Manifest this update:     Sun 19 Oct 2025 16:46:48 +0000
Manifest next update:     Wed 22 Oct 2025 21:32:48 +0000
Files and hashes:         1: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=)
                          2: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=)
                          3: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: eJMahs5nyu37le9hS6DVclGIOLndhxUSc+ljec7W0SI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl
                          rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 21:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:88:b9:fd:d9:8c:2c:1e:d5:49:cb:9b:95:1b:64:4d:c8:25:44:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9
        Validity
            Not Before: Oct 19 16:46:48 2025 GMT
            Not After : Oct 22 21:32:48 2025 GMT
        Subject: CN=C1A85CA7CBCB4FB20528925314B627C75D0D94A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:34:d2:f9:50:70:87:26:d1:45:a8:0c:d3:
                    76:8b:1e:23:30:e4:f7:d3:9b:ae:a8:c2:0f:24:02:
                    21:b4:85:b9:97:01:32:48:9d:53:8e:f2:92:c7:47:
                    b1:77:46:25:c5:cc:43:ef:06:ad:f1:d9:58:c1:5b:
                    17:da:03:f6:1d:f8:f7:7d:62:b2:f4:c6:82:90:d5:
                    ac:a7:6c:04:8a:b9:f7:c6:64:52:34:31:b8:91:23:
                    f4:ce:99:9b:c1:de:96:03:d0:8d:2d:a8:9d:e1:15:
                    d4:c5:72:94:9e:90:a9:45:bc:99:86:8b:36:98:29:
                    f1:10:12:54:4e:39:d4:d5:34:6b:d5:6a:3b:22:e8:
                    31:38:19:4d:44:a7:30:14:fa:87:ad:68:1e:bf:99:
                    e1:9c:b8:4f:08:d8:59:d3:94:ca:a7:13:fb:d6:91:
                    ed:91:73:51:a4:62:2e:79:7a:59:35:85:06:3f:5d:
                    16:19:12:01:69:dd:6c:e4:f1:3a:6f:c5:42:fd:f7:
                    d4:b2:ab:1a:18:c3:f3:48:25:af:5d:27:11:d5:fa:
                    1f:e8:ca:84:aa:9c:12:0c:17:81:ed:85:8a:98:cc:
                    0c:04:de:88:17:90:05:fd:ee:44:ca:92:2b:50:b1:
                    e0:fd:fb:16:d7:28:31:9a:31:75:dc:3d:e8:ef:00:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A8:5C:A7:CB:CB:4F:B2:05:28:92:53:14:B6:27:C7:5D:0D:94:A1
            X509v3 Authority Key Identifier:
                keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:36:24:8f:25:33:b1:08:3c:7b:ee:c2:db:a7:b9:8c:71:b4:
         e7:f1:14:bf:c5:fa:50:06:a9:41:c0:7c:b0:b6:56:28:e1:cf:
         26:83:ee:6c:cd:0b:85:37:c8:61:f0:1d:0f:61:f9:df:6e:e3:
         00:9c:e1:7e:62:ce:56:52:6b:8a:40:87:6b:c1:d7:d1:0f:36:
         25:9a:b6:c8:af:93:51:03:86:8d:d0:a2:1d:06:6f:4e:5b:7e:
         17:88:78:f5:80:cb:de:8f:fb:98:02:ab:03:c4:e0:b3:fe:78:
         2d:13:c0:a4:f9:b5:7a:b7:0a:0d:3e:d3:84:3e:43:40:f8:94:
         41:fb:89:5d:ff:9a:81:1c:34:5e:5e:48:67:c9:84:af:ca:60:
         8e:fc:67:90:cd:c5:b0:c4:9f:55:b4:1b:d0:f6:81:77:b8:4e:
         1c:92:65:1c:f4:13:a2:28:f6:7a:05:01:79:3e:55:0b:ff:19:
         5c:cd:21:c4:a3:28:70:b5:92:49:aa:41:c6:73:4a:1b:34:f4:
         4e:16:37:65:fc:f8:9a:31:80:13:9f:f4:7c:b8:25:65:06:6b:
         91:b1:a8:c4:47:32:29:67:ed:ae:e0:88:8c:63:eb:bc:cf:4a:
         db:71:1a:48:db:f1:a5:db:3b:45:ad:77:ba:62:05:1c:fa:2f:
         ba:c6:59:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:07:13 2025 by rpki-client