Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
File:                     E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json)
Hash identifier:          9SrS/2xbuE1YAXRwWMxzCJI1vJAnyFdMf9vaWG98tj8=
Subject key identifier:   59:53:31:86:98:9F:5E:24:9A:A8:CA:DD:39:A5:0B:66:00:9B:C2:D8
Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
Certificate issuer:       /CN=E74A2346929DE84143E5DF0DD921764C285B01A2
Certificate serial:       64EBC5C79318761013E63CDF0E212E45F91A5CFA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
Manifest number:          CC
Signing time:             Sun 02 Nov 2025 17:31:17 +0000
Manifest this update:     Sun 02 Nov 2025 17:26:17 +0000
Manifest next update:     Wed 05 Nov 2025 19:04:17 +0000
Files and hashes:         1: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: BuhCbotAHWJEAa0OF8L/PLu0HCq6CuIFblm7pRjH7qE=)
                          2: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: QWlvcWw+MqtfsyLo2e2j057MAyn4Zw7MQ10D6boTyYA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl
                          rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 19:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:eb:c5:c7:93:18:76:10:13:e6:3c:df:0e:21:2e:45:f9:1a:5c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2
        Validity
            Not Before: Nov  2 17:26:17 2025 GMT
            Not After : Nov  5 19:04:17 2025 GMT
        Subject: CN=59533186989F5E249AA8CADD39A50B66009BC2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:15:3c:de:71:e9:4c:78:60:46:a3:a5:af:fc:
                    57:1c:83:c3:d5:23:83:b1:73:f5:7f:33:7f:a8:cc:
                    ba:5e:18:c3:97:bd:26:e7:b6:40:86:ce:db:56:95:
                    54:39:7a:8f:9d:71:de:cc:09:8c:ab:6b:fc:18:08:
                    c8:45:e8:6a:28:b8:e6:ff:cb:62:5b:9a:e1:bf:60:
                    7c:ef:59:33:69:ba:a8:8c:6b:44:f7:7e:e3:f6:70:
                    fe:dc:c5:e2:0a:2e:93:b2:c2:a7:c4:df:7f:c5:0b:
                    00:8e:d9:0e:2c:53:62:63:5b:63:e9:9d:79:9a:71:
                    b5:22:e6:9c:db:16:0e:08:06:7d:04:d5:2c:b6:5f:
                    96:70:6f:0e:5e:24:b8:55:42:5e:49:34:71:a9:b0:
                    4f:14:0a:d6:a0:3a:66:e5:f3:32:22:7f:b0:97:bc:
                    6d:9e:55:a1:26:85:4a:9e:27:23:2f:37:41:6c:ce:
                    22:76:ef:ad:41:c5:b4:fb:e0:b4:db:22:93:04:fe:
                    8b:c6:2d:11:78:c5:10:55:3f:73:82:96:8c:fc:ea:
                    f5:f5:be:53:12:96:76:b7:2a:26:fb:74:b0:c6:37:
                    39:f6:55:2f:a2:bf:e0:07:a6:5b:b9:06:97:89:44:
                    d6:a0:05:61:3f:b3:55:5b:cb:d1:1e:84:ee:bc:36:
                    43:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:53:31:86:98:9F:5E:24:9A:A8:CA:DD:39:A5:0B:66:00:9B:C2:D8
            X509v3 Authority Key Identifier:
                keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c2:fa:ca:ec:70:d2:d9:64:2d:89:fd:61:e7:df:2c:a3:76:
         76:f8:ad:a7:15:d7:80:fe:fe:d6:54:69:eb:64:d9:14:9f:3d:
         2a:7a:e1:c6:31:57:e3:09:3e:7b:1a:7d:89:5c:b6:61:5c:f2:
         dc:fc:65:64:aa:45:59:b1:79:23:83:3e:27:50:ed:4d:e2:ff:
         e7:49:e2:92:42:5f:7f:84:b1:9f:bd:56:bf:c4:8d:2b:81:a9:
         d9:87:39:c1:2b:74:b4:65:bc:e5:ff:23:63:93:f7:a9:ce:06:
         f3:63:4a:e8:8d:d1:c7:36:a3:b7:be:5d:5e:55:a5:73:3a:7a:
         9d:b1:fa:01:09:eb:8e:7b:86:79:e3:c1:20:3a:7b:93:df:1b:
         b3:19:3c:d5:ad:e8:87:4b:b7:a1:fd:6e:2e:86:62:60:dd:71:
         68:45:c6:0b:9e:ce:9c:57:98:71:e9:21:c9:e6:0d:e3:cb:10:
         18:e2:7b:70:8d:cc:a7:06:5e:08:5d:ea:d1:f7:1c:3f:20:9f:
         df:35:40:89:e6:f3:a9:72:cb:d1:2b:67:6f:65:68:60:1b:9a:
         22:5a:0b:c4:dd:58:47:96:25:b0:7c:37:0e:19:af:b6:d3:bc:
         0c:54:cd:15:bb:98:68:b3:b9:a8:b0:81:b2:3b:53:fa:3b:09:
         fd:3e:72:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:20:24 2025 by rpki-client