Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft
File:                     99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json)
Hash identifier:          vrSfSQ97L/aVQtsFxr+QJVbTfinriPVzxPmh4cI4wsY=
Subject key identifier:   00:C5:F1:F9:28:88:7F:A8:F4:07:38:3E:4C:69:F2:DF:B7:B1:7E:81
Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A
Certificate issuer:       /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A
Certificate serial:       3621C3C91DEC45922B13C23D275C0E276D1ACF83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft
Manifest number:          0132
Signing time:             Wed 05 Nov 2025 03:21:09 +0000
Manifest this update:     Wed 05 Nov 2025 03:16:09 +0000
Manifest next update:     Sat 08 Nov 2025 04:03:09 +0000
Files and hashes:         1: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: 1BYWvqNatXQASklKBHBi5yBQ+iNM2BiIdKkQGqpsJGg=)
                          2: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: CADdODhlwrtv7aHSOcyvhK/IDuhX6EVBNzN87XcC7go=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl
                          rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Nov 2025 04:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:21:c3:c9:1d:ec:45:92:2b:13:c2:3d:27:5c:0e:27:6d:1a:cf:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A
        Validity
            Not Before: Nov  5 03:16:09 2025 GMT
            Not After : Nov  8 04:03:09 2025 GMT
        Subject: CN=00C5F1F928887FA8F407383E4C69F2DFB7B17E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:dc:42:13:18:47:11:28:30:e6:c6:51:1f:
                    89:da:b1:62:19:61:75:a7:47:9c:d7:a3:ca:10:c7:
                    fe:09:57:a3:f5:cf:bc:a4:fe:c3:7d:c7:1c:95:01:
                    4c:b5:6d:bd:97:bf:ab:09:72:ec:dc:c2:7b:a0:9d:
                    47:69:ab:d4:72:8d:70:45:d7:9b:2f:d4:8f:f4:aa:
                    f2:0e:45:b5:73:9e:e7:68:c3:7b:cd:8e:1f:1c:68:
                    b1:37:12:1c:5d:03:02:18:b5:ee:73:28:1b:7b:81:
                    60:5a:0e:50:92:5a:0e:c6:d6:df:c8:dc:80:65:01:
                    23:f2:ec:11:f7:81:e0:41:70:c2:0f:17:d8:a4:0b:
                    49:f3:9a:10:11:8c:27:a1:3b:a3:ee:b4:d6:8f:bf:
                    c1:aa:6c:3b:05:98:77:78:f7:f3:99:b4:4e:8a:13:
                    82:a0:c4:bf:6d:e9:6e:49:cf:0c:0e:40:84:b0:21:
                    69:94:79:b1:87:26:99:4d:93:44:ad:80:cd:8d:b6:
                    b2:ce:bc:b1:99:bb:f6:f4:f2:7f:b1:d9:30:b1:c6:
                    f2:98:ea:bc:cb:93:15:d4:17:49:2f:49:fa:1f:74:
                    b8:bb:dd:ba:f2:cc:30:d0:19:56:fc:43:0c:80:f2:
                    26:79:8d:b6:4a:0e:e6:e0:04:54:19:5f:9d:49:a2:
                    7b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C5:F1:F9:28:88:7F:A8:F4:07:38:3E:4C:69:F2:DF:B7:B1:7E:81
            X509v3 Authority Key Identifier:
                keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:a6:35:90:3c:a7:33:66:d5:12:e2:e4:76:b2:89:46:9d:
         d6:2f:00:51:1d:00:e1:10:d1:72:5b:3b:99:5a:71:cd:c6:a9:
         e6:26:2e:9f:c2:a6:88:f8:29:de:23:18:c2:67:5c:fc:23:77:
         4e:9b:e9:ee:84:6b:15:5f:fd:c8:95:c6:53:3e:fd:99:7f:c1:
         e6:e5:31:d9:21:67:72:03:f7:83:c1:dd:88:47:03:e0:1b:26:
         6e:c7:bf:54:92:64:12:24:70:d4:d2:57:b1:3e:86:df:dc:8f:
         af:f2:c9:7a:2b:5f:8e:1e:27:f6:c3:4d:b1:12:66:db:2c:c4:
         c8:f5:5b:b0:06:34:38:09:fa:47:84:cb:04:73:f3:1d:65:24:
         c6:ad:21:c5:63:f7:c3:47:3d:95:df:86:c8:88:ff:7c:ad:ef:
         17:ae:71:b8:ff:3a:45:a6:51:f8:1a:4a:bd:4f:ab:6c:b9:13:
         be:f5:58:a1:31:3e:79:fc:fb:f9:00:47:aa:48:a1:a6:dd:d9:
         cb:74:29:54:1e:6c:98:d1:aa:5c:91:90:10:c6:93:7c:6c:df:
         c8:d2:11:f3:a1:dc:93:bf:11:1c:8b:e8:8b:18:50:6d:ff:ea:
         c9:19:85:14:71:d3:83:a1:99:de:04:84:e0:c1:60:10:87:00:
         28:2b:d6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:21:25 2025 by rpki-client