
$ rpki-client -vvf repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
File:                     0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft (raw, json)
Hash identifier:          kgpErPs4P0bM02mM0U+gZZa50q5N2ViEGQQevGnMeTg=
Subject key identifier:   E6:79:48:82:3A:F0:89:44:AA:9D:92:27:E9:0E:2B:46:10:B3:2E:17
Authority key identifier: 0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC
Certificate issuer:       /CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
Certificate serial:       2BD2C92994401500B2B89947213AA8DB9CB54730
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
Manifest number:          051B
Signing time:             Tue 04 Nov 2025 00:10:51 +0000
Manifest this update:     Tue 04 Nov 2025 00:05:51 +0000
Manifest next update:     Fri 07 Nov 2025 01:29:51 +0000
Files and hashes:         1: 3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (hash: 55PcLzem2BCpJqiABflzpPI/pSTP6UsU+JbaeHq127k=)
                          2: 0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl (hash: Kh/hgbH+JhYTaGeAmWfHAUek+CNoMJAWAusBSRDEJLY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl
                          rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 01:29:51 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d2:c9:29:94:40:15:00:b2:b8:99:47:21:3a:a8:db:9c:b5:47:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
        Validity
            Not Before: Nov  4 00:05:51 2025 GMT
            Not After : Nov  7 01:29:51 2025 GMT
        Subject: CN=E67948823AF08944AA9D9227E90E2B4610B32E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:8f:3a:82:fd:7a:d7:11:c8:a0:11:49:15:
                    0a:3d:f1:50:c9:53:46:b5:e4:d1:51:56:74:6c:10:
                    55:e4:a0:1b:fb:04:e5:36:59:3e:fd:f3:04:d7:12:
                    28:1a:9c:69:c5:44:bf:ae:f7:06:d2:08:85:2e:ca:
                    a0:54:ec:dd:26:5c:d7:92:aa:d4:40:f6:02:06:b0:
                    36:bd:9b:43:ab:eb:05:23:8a:3e:d9:86:ed:d8:82:
                    72:50:3c:b5:f8:6a:ae:54:f3:2b:85:a1:08:82:bb:
                    d6:23:9a:ca:e0:8f:ae:81:1a:8d:5e:76:7c:33:a1:
                    8f:e5:fc:7d:c2:d1:f9:08:e1:8a:aa:bf:66:17:4b:
                    84:27:19:78:45:d2:83:0d:49:16:5f:a6:94:c4:19:
                    b6:a1:d5:d8:e9:10:69:d8:cb:d3:c0:b2:9c:7d:51:
                    43:f9:17:b5:72:77:6a:48:bf:c9:95:d3:06:3f:eb:
                    af:47:72:0a:68:d7:90:af:15:52:b6:94:43:27:55:
                    75:25:08:f5:df:72:18:a7:b3:4d:f6:5f:0f:cc:4b:
                    d3:cd:74:69:24:e4:9d:3f:18:7c:37:65:6c:da:fa:
                    e6:d3:32:c1:e1:25:62:a9:f6:9d:1d:99:3a:b8:6f:
                    34:eb:48:e5:e7:b9:34:ef:82:60:60:3d:e3:e2:d5:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:79:48:82:3A:F0:89:44:AA:9D:92:27:E9:0E:2B:46:10:B3:2E:17
            X509v3 Authority Key Identifier:
                keyid:0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         7a:81:8a:2b:a2:e0:ae:11:f2:19:df:5c:80:9e:e8:a8:50:fd:
         8e:25:fc:f3:57:2a:17:79:90:b8:39:dd:b1:92:b3:20:b9:2a:
         79:ba:ce:42:f3:3f:41:0c:49:f7:b3:5a:d7:31:69:e9:b6:1c:
         d5:e0:f2:96:2a:1a:0f:a6:35:0d:02:61:d0:5f:bc:b7:19:59:
         b0:b6:d3:3b:91:09:13:34:c7:e3:24:ca:9c:58:7c:05:4d:ea:
         67:bf:69:b5:59:e7:14:2d:a2:08:4f:7f:74:f1:01:a3:84:d8:
         06:35:83:0d:c4:a1:5d:42:f0:06:5c:dd:0a:6f:6f:3b:7f:9f:
         79:e9:94:29:97:9c:ce:04:fe:e6:df:db:90:59:44:a4:07:61:
         e2:7d:61:e3:33:13:cb:f8:fc:2f:36:ce:4e:6d:0f:2b:78:99:
         b0:57:70:20:85:f8:47:94:26:73:a3:78:7e:e1:37:27:d8:e8:
         03:7f:94:78:1d:d6:f5:3f:5c:d4:8a:60:7c:05:d2:13:dc:33:
         41:17:67:db:22:cd:72:2f:ef:b3:ab:0e:5c:90:f6:99:69:a3:
         9b:b1:a5:1f:35:90:1c:16:19:be:9c:43:33:c8:71:47:e0:53:
         a3:03:64:2c:be:db:44:23:61:6c:d5:95:d7:91:31:6a:ab:72:
         8f:b0:9a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:20:37 2025 by rpki-client