Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft
File:                     19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft (raw, json)
Hash identifier:          Sn/rqKCSVJ+OrlbCTnSQtS5C0aF4ueztoiYPqcnIJFU=
Subject key identifier:   6C:D1:C9:74:B9:0B:93:D1:37:37:2E:51:05:F3:53:ED:EF:F2:14:45
Authority key identifier: 19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3
Certificate issuer:       /CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3
Certificate serial:       120B5CC1DE305B323492EEA1476F8283B8D434E3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft
Manifest number:          BC
Signing time:             Tue 04 Nov 2025 00:40:49 +0000
Manifest this update:     Tue 04 Nov 2025 00:35:49 +0000
Manifest next update:     Fri 07 Nov 2025 04:45:49 +0000
Files and hashes:         1: 19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl (hash: EcTjttXNGfkg/jwHGG57mKcPXy6aeUOyxVS7dPNgfPo=)
                          2: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: UlKfFD3Jx7idatTOHjtFDcw+Wj0A2uPP8QvwywC4jKg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl
                          rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 04:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0b:5c:c1:de:30:5b:32:34:92:ee:a1:47:6f:82:83:b8:d4:34:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3
        Validity
            Not Before: Nov  4 00:35:49 2025 GMT
            Not After : Nov  7 04:45:49 2025 GMT
        Subject: CN=6CD1C974B90B93D137372E5105F353EDEFF21445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:3e:f8:3e:60:45:38:5c:73:25:1b:57:9d:
                    60:4b:78:1b:51:5e:6b:4a:64:13:9c:7c:9e:09:88:
                    0a:d4:e8:64:62:15:99:03:e3:53:ce:86:7a:67:60:
                    e0:17:70:05:10:79:48:1d:46:8f:0b:0b:9c:9a:3f:
                    a5:83:a6:8f:90:f9:6a:3c:0b:08:d8:23:97:7b:1d:
                    84:70:09:ab:ec:f7:90:6a:8f:19:ab:8f:c6:72:36:
                    18:69:06:86:7a:19:13:f1:f7:b5:26:83:7b:6f:9b:
                    b4:b8:db:ba:ca:e0:0c:df:cc:1a:03:40:f5:8f:c2:
                    f0:32:fa:e2:17:63:ea:5f:cc:8b:9e:a5:8c:f1:f5:
                    1a:f6:4e:b4:1e:a2:3a:fa:a5:76:00:7b:b4:91:15:
                    a1:ef:cb:a3:de:35:90:f3:a1:01:c7:66:28:7e:7e:
                    41:75:14:d1:0a:ee:6a:ee:c7:c9:4d:d8:c6:fa:93:
                    7f:fe:44:d7:ef:72:d5:e4:1f:20:bd:85:8d:68:d6:
                    46:fb:98:ea:28:9c:3c:24:32:bd:a5:4e:fc:27:ef:
                    c1:84:13:28:eb:e5:42:53:94:3d:a3:54:bf:e9:25:
                    b8:d6:cc:b3:52:99:4b:f5:13:d2:d9:76:9f:17:4b:
                    d0:69:f4:c0:ac:2a:49:34:37:7f:b8:bc:86:d3:65:
                    46:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D1:C9:74:B9:0B:93:D1:37:37:2E:51:05:F3:53:ED:EF:F2:14:45
            X509v3 Authority Key Identifier:
                keyid:19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ea:93:c7:05:35:70:60:01:36:25:e0:d9:36:5c:cc:e6:16:
         7d:b3:cf:11:0f:e2:df:86:f7:e9:3b:c2:73:f7:27:a1:e6:8c:
         22:4f:02:3e:43:f3:7f:56:f7:af:74:e1:c0:d9:a5:9e:86:3c:
         5f:76:56:1e:de:54:2d:0e:a2:00:39:1b:d9:c3:04:2e:9a:01:
         b7:15:36:ed:ea:42:69:0d:f7:33:bd:d3:58:9c:f1:d4:5c:3a:
         48:8e:99:c7:5c:28:ce:73:ad:79:26:ef:4a:47:bd:92:0a:92:
         b8:d9:96:3b:e2:36:8f:6e:fc:f0:02:28:d5:bd:3c:e6:bc:8b:
         58:58:c8:61:dd:dc:af:58:6a:c8:1c:45:f6:61:fd:8f:45:66:
         96:a2:b6:6c:e6:b5:fd:c6:00:dd:45:d7:01:86:d8:8b:3d:f2:
         4f:61:ef:10:55:5a:58:d2:a2:1c:ca:7b:86:ea:37:35:ee:06:
         12:2e:7f:5c:b0:c4:b3:7f:ae:1f:c0:70:da:85:34:15:f6:c6:
         69:02:ce:a7:79:b0:7a:cd:21:80:36:1d:2b:89:cf:1c:78:2d:
         7d:27:b8:8c:85:bc:81:7c:d1:3d:c9:ae:36:f4:5a:f7:4c:e9:
         88:ac:c6:21:cc:49:5e:ad:68:dc:f1:9e:7a:a6:5f:d1:5a:9b:
         4f:ff:63:94
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEgtcwd4wWzI0ku6hR2+Cg7jUNOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJG
QkIxMzJEMzAeFw0yNTExMDQwMDM1NDlaFw0yNTExMDcwNDQ1NDlaMDMxMTAvBgNV
BAMTKDZDRDFDOTc0QjkwQjkzRDEzNzM3MkU1MTA1RjM1M0VERUZGMjE0NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1AT74PmBFOFxzJRtXnWBLeBtR
XmtKZBOcfJ4JiArU6GRiFZkD41POhnpnYOAXcAUQeUgdRo8LC5yaP6WDpo+Q+Wo8
CwjYI5d7HYRwCavs95Bqjxmrj8ZyNhhpBoZ6GRPx97Umg3tvm7S427rK4AzfzBoD
QPWPwvAy+uIXY+pfzIuepYzx9Rr2TrQeojr6pXYAe7SRFaHvy6PeNZDzoQHHZih+
fkF1FNEK7mrux8lN2Mb6k3/+RNfvctXkHyC9hY1o1kb7mOoonDwkMr2lTvwn78GE
Eyjr5UJTlD2jVL/pJbjWzLNSmUv1E9LZdp8XS9Bp9MCsKkk0N3+4vIbTZUbdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbNHJdLkLk9E3Ny5RBfNT7e/yFEUwHwYDVR0j
BBgwFoAUGbBcRNnG64AmtsZQZYnkwvuxMtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMC8xOUIwNUM0NEQ5
QzZFQjgwMjZCNkM2NTA2NTg5RTRDMkZCQjEzMkQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJGQkIx
MzJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz
ZTgtMTBiZGQ2MDgwZmRhLzAvMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0
QzJGQkIxMzJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABLqk8cFNXBgATYl4Nk2XMzmFn2zzxEP4t+G
9+k7wnP3J6HmjCJPAj5D839W96904cDZpZ6GPF92Vh7eVC0OogA5G9nDBC6aAbcV
Nu3qQmkN9zO901ic8dRcOkiOmcdcKM5zrXkm70pHvZIKkrjZljviNo9u/PACKNW9
POa8i1hYyGHd3K9YasgcRfZh/Y9FZpaitmzmtf3GAN1F1wGG2Is98k9h7xBVWljS
ohzKe4bqNzXuBhIuf1ywxLN/rh/AcNqFNBX2xmkCzqd5sHrNIYA2HSuJzxx4LX0n
uIyFvIF80T3Jrjb0WvdM6YisxiHMSV6taNzxnnqmX9Fam0//Y5Q=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:39:54 2025 by rpki-client