Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft
File:                     50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft (raw, json)
Hash identifier:          aUfNG6QOEj5CdMHsF0Jx42GGcfUnJeD026EjBMaTZ44=
Subject key identifier:   1C:4A:D6:41:79:B2:12:D5:08:2D:E4:96:39:84:61:D0:52:3C:54:E2
Authority key identifier: 50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB
Certificate issuer:       /CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB
Certificate serial:       3DE7C6AF6F39B31E61B6BF0517006022DDE7D7DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft
Manifest number:          04C8
Signing time:             Mon 20 Oct 2025 17:11:25 +0000
Manifest this update:     Mon 20 Oct 2025 17:06:25 +0000
Manifest next update:     Fri 24 Oct 2025 04:02:25 +0000
Files and hashes:         1: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: 7xrQRwovsS9OKMLv2YrykZjU8MnTLBOyQSk5mbbd2RE=)
                          2: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl (hash: aT5cDFwOQPCaUCwlc0zkUaRJ5FhxCmc4KyGhlFDQlYw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl
                          rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 04:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e7:c6:af:6f:39:b3:1e:61:b6:bf:05:17:00:60:22:dd:e7:d7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB
        Validity
            Not Before: Oct 20 17:06:25 2025 GMT
            Not After : Oct 24 04:02:25 2025 GMT
        Subject: CN=1C4AD64179B212D5082DE496398461D0523C54E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c2:24:e3:33:a8:8c:a2:02:09:4c:b0:eb:db:
                    bd:75:88:db:fe:4c:ef:eb:d5:fa:a0:1f:f8:e2:64:
                    84:42:7a:11:0a:83:c5:a2:a1:9a:2e:14:7c:25:d1:
                    0a:9a:65:97:4c:55:2e:72:d5:56:cf:65:cb:f1:0b:
                    47:38:d3:6a:60:09:a2:6b:72:34:bc:7c:cd:31:c6:
                    89:49:5a:f4:7f:70:6b:4d:de:11:3c:66:c8:2f:2f:
                    54:ab:18:44:49:78:19:31:51:1b:60:85:e5:ea:b6:
                    b8:22:59:e1:f2:88:25:17:e2:e8:51:b6:86:bf:c0:
                    f4:4d:a4:6f:2e:c4:fc:0d:72:07:1d:19:42:05:01:
                    e2:be:02:3b:c9:98:3d:02:bd:ae:38:4d:86:bb:c9:
                    88:a3:dd:d7:37:90:3f:b8:51:0e:e6:eb:47:e3:2c:
                    4c:8a:c4:66:10:1b:9e:17:1f:03:ac:0a:79:01:7a:
                    3e:e4:33:51:21:03:bf:f5:43:9b:1d:6b:e8:38:e2:
                    f1:57:23:0d:58:b6:ae:0d:4d:22:7e:8e:4f:ea:7a:
                    63:b4:bf:b7:38:35:0a:e6:ff:8d:c6:ad:40:0a:b1:
                    dd:60:2c:ba:3b:fc:ac:19:a0:70:19:14:f6:82:d5:
                    8f:0d:31:9c:48:85:c6:9d:4e:eb:c0:7b:29:3c:fe:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4A:D6:41:79:B2:12:D5:08:2D:E4:96:39:84:61:D0:52:3C:54:E2
            X509v3 Authority Key Identifier:
                keyid:50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:82:8f:18:4e:4d:5b:5e:5d:aa:ae:3f:66:84:1b:5d:82:62:
         fe:e9:c0:d3:70:39:fa:a3:e8:72:78:39:73:16:fd:aa:13:aa:
         4c:b6:dc:3f:c2:87:7a:c2:6d:3a:e9:8d:61:d2:6d:68:1a:9f:
         e1:ff:87:fa:4c:f8:96:41:0b:19:5a:3f:97:4d:85:76:f9:28:
         da:a1:85:4f:49:52:84:87:ce:58:99:6b:1b:94:f7:7c:f9:2f:
         2d:ed:8c:8e:e3:b3:cc:49:f5:bd:7d:03:72:0c:ce:7c:5c:27:
         67:64:87:fb:39:ac:ad:19:b1:69:19:be:27:64:e3:77:fa:a5:
         f7:b7:95:49:2f:19:cf:f2:ed:f3:05:b7:eb:4a:f0:52:ef:62:
         0d:ad:dc:d5:87:86:7b:b7:44:30:bf:bb:31:18:f6:0f:57:7f:
         11:7c:b1:27:bd:78:bd:0d:22:a5:81:07:4e:31:83:92:dd:09:
         e3:ac:fe:f8:f2:e9:7d:4a:97:73:18:87:22:8c:b1:22:34:d9:
         e7:1f:25:28:41:64:dd:6a:d3:c7:09:79:a1:56:ad:c8:45:64:
         56:27:70:3d:6c:e1:39:95:f2:63:48:af:87:32:f9:6f:24:07:
         cb:39:c6:99:53:9c:c6:e7:a0:c5:23:10:f8:61:b7:68:67:60:
         b7:5d:a0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:11:15 2025 by rpki-client