
$ rpki-client -vvf repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft
File:                     1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft (raw, json)
Hash identifier:          VHf22IT5ZPjHQoP+773mwjHB4KvMRHsL4fgBpAO0UUY=
Subject key identifier:   B2:E4:83:AD:AF:7E:12:33:17:13:C1:D3:C6:B5:26:1E:53:AC:76:77
Authority key identifier: 18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B
Certificate issuer:       /CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B
Certificate serial:       10A12DAC765C2E9CEC96F83A5E5151BD81DA2AD1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft
Manifest number:          038B
Signing time:             Mon 03 Nov 2025 05:40:51 +0000
Manifest this update:     Mon 03 Nov 2025 05:35:51 +0000
Manifest next update:     Thu 06 Nov 2025 08:01:51 +0000
Files and hashes:         1: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: P8qheu64b1l5b4rB30UV/NbiZ7Eie1YYkFGoi6rHg2Y=)
                          2: 1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl (hash: 7GeQjJugV1ZbmNU2GTrtczYwjuOxdEl7INqXMgcyxkU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl
                          rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 08:01:51 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a1:2d:ac:76:5c:2e:9c:ec:96:f8:3a:5e:51:51:bd:81:da:2a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B
        Validity
            Not Before: Nov  3 05:35:51 2025 GMT
            Not After : Nov  6 08:01:51 2025 GMT
        Subject: CN=B2E483ADAF7E12331713C1D3C6B5261E53AC7677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:00:81:e3:95:62:e8:2f:df:a5:0d:cc:7e:
                    7b:dd:18:1f:33:e8:bf:1c:2a:9f:de:cf:9b:ce:25:
                    bf:e1:db:9c:a3:1c:64:b5:ee:af:f5:93:9a:1b:20:
                    b5:91:47:1d:9b:1b:93:bd:fb:84:ee:9e:aa:d7:42:
                    55:27:20:f0:09:cb:7e:94:8f:bc:01:7f:85:d9:32:
                    4c:60:61:fe:41:fc:d3:b2:63:b2:d3:16:83:4d:f0:
                    0a:47:7d:f6:82:17:b7:5e:67:8c:09:80:5c:73:c0:
                    36:ed:f8:10:e5:af:10:f1:a0:9e:5f:83:5b:9d:24:
                    cc:2d:f0:d8:a2:5a:bf:22:c9:e0:e1:08:33:cd:6f:
                    f7:a1:68:c0:a0:90:0a:15:a9:34:bb:10:a6:cb:f1:
                    c4:59:83:fb:fd:67:48:ec:9e:90:43:5f:be:e6:14:
                    0b:76:45:81:e8:6f:35:48:54:1a:05:66:0e:a5:6e:
                    79:d7:28:60:f8:5f:45:9b:4f:88:c6:23:35:c4:f2:
                    a1:85:38:4c:69:fb:93:09:47:aa:0b:43:61:0e:6d:
                    dd:ec:3b:fa:aa:a8:e9:9b:33:8f:a2:63:d1:e6:62:
                    77:34:3e:c2:ff:3f:2c:9a:83:ba:25:e4:e3:17:48:
                    36:cb:bd:a3:83:0b:60:3f:24:cc:49:ca:b1:03:ae:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E4:83:AD:AF:7E:12:33:17:13:C1:D3:C6:B5:26:1E:53:AC:76:77
            X509v3 Authority Key Identifier:
                keyid:18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         8f:56:d3:fd:e1:63:a8:e0:fc:f7:ae:8d:ce:0a:e2:f4:33:f9:
         aa:3c:49:7e:2c:68:92:4b:b8:31:b2:f0:bc:36:87:61:19:16:
         bd:eb:f7:f8:23:98:3c:60:c7:76:bd:b0:00:1e:39:56:66:b4:
         07:e9:07:0a:d0:d1:4f:df:3b:0e:e7:78:50:83:8c:32:f7:53:
         94:be:59:89:f5:9d:55:ab:db:d7:1c:54:7a:56:e3:0f:d2:84:
         99:48:71:2a:eb:44:87:ae:ea:12:61:35:71:78:59:00:04:ac:
         a2:77:e3:1f:3b:9f:6f:ec:42:f0:87:ec:74:8d:eb:92:16:80:
         16:2c:74:74:c6:ec:88:cd:49:0d:af:08:a9:02:2f:34:3a:da:
         59:8e:3a:7e:56:a8:af:4f:b1:78:b7:ae:c1:55:c8:51:95:56:
         f7:8b:ca:81:70:7f:73:a1:cf:4e:2f:e1:33:b3:b0:63:c0:ad:
         0a:27:11:4d:8e:74:d1:30:87:de:09:02:27:8b:9c:6c:2a:f7:
         cf:e8:d3:4f:9f:43:8a:1c:60:20:7c:2c:a2:72:fe:70:0f:71:
         b5:42:44:79:66:71:ba:5f:31:0e:5f:87:6a:df:13:b3:77:53:
         e5:60:67:30:59:be:5e:9d:86:5f:a5:38:41:8c:00:cf:68:ef:
         bc:ed:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:55:14 2025 by rpki-client