Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft
File:                     43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json)
Hash identifier:          WlOIB1Y0+sDWS0lJZOL3bXpHnVecjT4kSMwrMPU5XzE=
Subject key identifier:   67:0B:95:7C:0B:39:B5:05:12:E6:41:14:11:43:8C:E3:E4:57:68:AE
Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB
Certificate issuer:       /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB
Certificate serial:       7325EE80276B062CB8292921638E9F51050BA1E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft
Manifest number:          012F
Signing time:             Sun 19 Oct 2025 00:01:35 +0000
Manifest this update:     Sat 18 Oct 2025 23:56:35 +0000
Manifest next update:     Wed 22 Oct 2025 08:38:35 +0000
Files and hashes:         1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: q3+/tfcea23JBjvDKOPYoF0T8lJl4/w1ukwF8DCr3Dg=)
                          2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: eKlpAMaerIj4ztfnPXyqh7QFFTLNHjFi35suT4UM+pw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl
                          rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 08:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:25:ee:80:27:6b:06:2c:b8:29:29:21:63:8e:9f:51:05:0b:a1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB
        Validity
            Not Before: Oct 18 23:56:35 2025 GMT
            Not After : Oct 22 08:38:35 2025 GMT
        Subject: CN=670B957C0B39B50512E6411411438CE3E45768AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ee:e6:69:ee:fd:ef:f9:1b:cb:d7:f3:b7:ad:
                    6e:21:6a:23:e9:39:b9:e5:1b:59:f7:4a:19:dc:8a:
                    0f:9d:09:73:03:6c:45:5e:da:78:6a:4e:4b:53:d6:
                    26:6c:72:81:99:e0:22:2b:a2:0c:e5:04:23:62:4b:
                    2c:82:24:b7:36:f2:2e:0e:a2:eb:c0:24:ea:36:96:
                    a2:ed:03:40:ba:42:77:d5:40:47:41:09:7c:87:6b:
                    2f:a6:04:6d:92:5b:2a:4f:19:6f:9e:f7:b9:63:75:
                    c8:07:49:97:fb:44:03:f9:4c:4d:4f:3a:1f:27:a7:
                    85:da:81:74:af:4e:57:5c:d6:6b:8c:d4:aa:49:3b:
                    3c:05:bc:50:a7:a7:b9:5a:02:49:7f:e3:30:44:6a:
                    45:5b:ac:d3:14:ed:77:62:33:32:05:5f:19:1b:dd:
                    36:22:9f:09:29:01:26:e8:19:0f:45:3d:bd:57:56:
                    89:35:80:d8:67:c4:82:e0:a7:ca:bd:60:01:22:ba:
                    2c:cd:9d:35:93:96:61:76:5d:2a:32:08:3c:27:0d:
                    51:7a:ba:41:e4:a2:3d:5d:9b:00:2b:56:2e:4b:32:
                    d7:60:0c:3d:54:34:9e:84:c7:dd:4d:34:8f:51:e7:
                    db:84:44:9e:65:3b:02:46:3f:52:20:53:bc:d4:0e:
                    3a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0B:95:7C:0B:39:B5:05:12:E6:41:14:11:43:8C:E3:E4:57:68:AE
            X509v3 Authority Key Identifier:
                keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:05:8b:c0:a0:7c:07:fa:20:2c:b8:10:2b:84:5c:9e:e7:0d:
         d4:71:94:f0:44:bb:48:f6:e1:63:7e:73:61:11:03:af:47:80:
         37:97:6d:9c:f3:60:25:38:e8:ec:b6:33:5c:c1:48:89:a2:06:
         98:ac:cf:d2:50:a1:48:11:0d:31:f7:d1:69:18:ef:c2:59:9c:
         d0:6a:86:78:eb:b9:7e:03:95:cc:b4:50:5b:37:9c:d6:39:6c:
         fa:d1:cf:be:db:16:e6:e4:1e:23:38:35:3b:e5:4f:00:cb:d4:
         ad:e1:e5:d9:f1:c5:6a:8d:23:cb:9b:9b:08:ae:2d:d3:b4:cd:
         fa:d5:24:c0:98:83:19:a5:69:04:e5:24:05:eb:25:3b:17:04:
         bf:79:4b:bc:8a:f4:20:b8:d5:13:16:ad:a3:75:7e:7c:02:47:
         1f:ca:99:3d:5a:d1:02:f7:e2:ff:fe:f2:cc:7b:35:77:d0:4b:
         11:85:bd:bb:43:7b:a9:20:78:df:f5:52:07:d2:fa:2f:60:ad:
         02:1d:b5:7f:32:dd:b1:b6:24:1c:31:eb:8c:8a:41:d1:49:87:
         36:76:d2:dc:66:02:b4:d0:14:b5:2f:e0:11:b8:a6:e6:61:19:
         ec:b1:e5:86:be:cb:90:6f:97:e4:a3:02:50:19:93:73:36:e4:
         c8:0b:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:28:15 2025 by rpki-client