Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
File:                     F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json)
Hash identifier:          vpJhy3RqBmVX7w9PdEYMq+fowPAecaeah87TMCOKxXk=
Subject key identifier:   8C:3F:FD:B5:FD:7A:24:AC:C4:D4:CD:3E:48:88:D1:9A:AC:7E:21:6C
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Certificate issuer:       /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial:       5865CC2A3133BCD3E90981A04F8F96231FB1EBA4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
Manifest number:          0374
Signing time:             Mon 03 Nov 2025 09:01:56 +0000
Manifest this update:     Mon 03 Nov 2025 08:56:56 +0000
Manifest next update:     Thu 06 Nov 2025 10:15:56 +0000
Files and hashes:         1: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU=)
                          2: 3230322e39312e33302e302f32342d3234203d3e20313532303639.roa (hash: v4GScNp+JRLvaXyvj8xalK2YN2m8f7pYE4HXkH+LiDo=)
                          3: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 8CMqMpoCs6b6HNia3ifuD/WpzvcJj1kVCsO8zPSQ7wc=)
                          4: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6Gn2L5Gc0xaArWW6fS4YuSQAyW4Nw2vh1NIUwUVsqyA=)
                          5: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: WLK6N6lYU6j7qmPlWLYHBoNW0CsjIHOLp3K/3Jfw78k=)
                          6: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: f+5HOc/sgnjP7t42vcbumcmwD5c7eyke5qlw/e0UPsk=)
                          7: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: 3mPJMmSU87HxOCz1kx2GnX89IU0Xnf2eTb3lccTca1k=)
                          8: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: aOzMI9PHIaU1+JYfqj3PgTWOSMZrS1G3wjVf+KJcQuA=)
                          9: 3230322e39312e33312e302f32342d3234203d3e20313532303639.roa (hash: S7MlEVaiyvjAdB83EWitfmwmyo4wzjPWQGuZFYtjp34=)
                          10: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: tGztSZAQJ35/hLuECvtTcpELlM1IpNOZ8zjyOffPPVE=)
                          11: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: sxphp4GIGCV7hhFuUuJXQKH7CdkIoeuJ+Uc7gPS1Oeo=)
                          12: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: wC1j0hWM3NlwDX6tuI26dn6MnPdR7SMpj66c5NVhqEs=)
                          13: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: nSNHUbZiqo6P3F9SIZ9EN5nCLPpwycyYrfB+M+PV3zw=)
                          14: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: KiKi/4BGJg0K48DdjCfOcOBa77JCOo4OxuIg38BvrXI=)
                          15: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: p6w84x+sTkId9KJBAsf0out+ASQwEBO6MAkMqXPQJmY=)
                          16: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: nikRTC901Bllan4GreFOs5fithEDsAsxTQDrjRSiako=)
                          17: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: FgWk4lEb+N8VyrkhQkA7AsDgO4pzlnxAR+so0eMn0MM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
                          rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 10:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:65:cc:2a:31:33:bc:d3:e9:09:81:a0:4f:8f:96:23:1f:b1:eb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
        Validity
            Not Before: Nov  3 08:56:56 2025 GMT
            Not After : Nov  6 10:15:56 2025 GMT
        Subject: CN=8C3FFDB5FD7A24ACC4D4CD3E4888D19AAC7E216C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:55:6c:48:ff:2f:16:6a:f3:c6:e4:c2:c7:
                    ca:c7:0e:a4:4c:fd:87:df:83:1a:f2:89:87:74:e6:
                    64:cb:57:ee:d2:29:a4:9f:c5:dd:53:12:78:37:0f:
                    8e:3e:ee:7d:4e:ab:a2:2b:b2:ed:33:ae:9c:50:60:
                    f4:17:dd:34:1b:f1:b3:be:8b:1a:80:e0:75:fb:f5:
                    98:96:58:0c:6e:b9:16:a8:03:27:5a:7a:f7:7a:b8:
                    d2:5f:be:66:12:60:9e:3e:67:6c:a9:3c:ac:ac:ee:
                    0e:a4:4f:23:eb:b6:1e:49:4d:cc:49:ae:c5:0f:51:
                    5f:e6:ea:f6:2a:a2:5b:99:b1:bf:a1:17:7a:ad:a6:
                    51:10:31:a7:ed:0e:ba:9a:b7:fc:49:3f:99:c4:3e:
                    d7:6c:17:38:ce:df:a1:e1:fe:c6:21:eb:58:21:aa:
                    11:33:c2:fa:ea:38:8d:53:08:e3:ec:39:31:f0:8a:
                    72:0b:2b:3d:5e:97:8c:3d:82:75:44:1e:5a:df:85:
                    4d:50:a3:6b:a8:3c:5b:5b:62:df:45:8e:a6:df:02:
                    d1:22:bf:50:03:56:f8:67:83:6f:d6:35:32:6e:fe:
                    58:d5:be:4d:4b:38:ac:e7:93:38:9a:15:7e:26:5c:
                    72:bd:8a:47:f3:34:86:62:37:7c:85:e5:d5:65:c1:
                    e5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3F:FD:B5:FD:7A:24:AC:C4:D4:CD:3E:48:88:D1:9A:AC:7E:21:6C
            X509v3 Authority Key Identifier:
                keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ed:fe:0a:6c:79:39:af:82:a9:ce:0f:0a:aa:ec:15:63:6d:
         8b:5f:87:02:65:c9:4f:74:a4:5e:06:89:f5:45:07:c7:29:f8:
         d1:4b:6e:ad:c4:f8:f0:cc:3a:7d:87:46:f3:36:3d:52:c1:6f:
         d1:7e:dd:ea:b9:8e:88:32:4a:c0:0b:53:5f:d9:b5:0f:0f:f9:
         8b:f8:f3:98:2a:dd:2b:2d:90:41:39:2d:c0:39:b0:7f:e6:74:
         44:2a:eb:31:e5:56:40:f6:e3:b6:a7:62:9f:b7:7e:63:c9:02:
         5a:66:14:a8:10:84:bb:28:79:28:0f:40:64:f1:e0:6b:0c:b3:
         85:c9:ec:3b:8c:78:6d:e7:1d:c2:0b:d4:a7:88:59:77:e9:ca:
         db:f8:a2:7b:59:35:ad:72:35:10:a3:59:81:f2:24:45:a7:77:
         3d:ec:7d:12:5a:52:42:17:38:9a:bd:ab:c1:2e:1b:18:f6:cf:
         6f:48:28:3e:f2:b2:68:10:ff:93:48:79:f8:0b:ba:27:bd:ad:
         e7:85:79:29:d8:79:0c:8d:b5:6f:56:7d:34:70:d2:d6:ba:3d:
         f2:ad:2a:4c:d0:07:71:d9:eb:5d:96:12:75:c7:ad:51:c3:e4:
         0a:d2:46:34:91:41:41:02:36:f4:a6:7c:fe:12:1e:94:3e:85:
         38:47:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:51:14 2025 by rpki-client