Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
File:                     0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json)
Hash identifier:          x2UBqmqE6RDbXprXmzkJ5ZEOdaThKdnSny5RdGD1ZJU=
Subject key identifier:   E4:CC:4A:09:36:53:A7:C9:C9:89:4E:65:5D:B2:24:10:9A:B0:2E:72
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       2487D6DDBF123536C73592B5A8CBEE909AEB71DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
Manifest number:          0255
Signing time:             Tue 04 Nov 2025 07:11:20 +0000
Manifest this update:     Tue 04 Nov 2025 07:06:20 +0000
Manifest next update:     Fri 07 Nov 2025 11:39:20 +0000
Files and hashes:         1: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: KZ/MfJDGlUF+5FRxy7S8cNkPyicIqb4wdkx7H0nRfJc=)
                          2: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: uU+RiPAP5rA80po/0W6dMPifTVUm5kY6ALP/Ca/ACi0=)
                          3: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: jBGgrMGnibBJ35+neDfX4MwBNDGqqmS27hN6Fi2jltI=)
                          4: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: DRnLhFvj0XZm0VXEZ42TGDJPOpd0ZTUBf7MwJZ8bqOE=)
                          5: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: k78QygJvZC5uoGv2K0v+mQ5YwQ0X8MznZdn5hmtLPD8=)
                          6: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: TdPV1Ae9NsfX/q2I6yHzDhMS8SBCOPuv6qM2EykOC0U=)
                          7: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: FJlkjy7Zh6RrMJcyoFN5uq7ubbcgdbOVveGSZgScDgQ=)
                          8: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: vwui1qpHSvDVofVRy/Tt5fu+EupEaZj/9/a37EvMSjI=)
                          9: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: I9GyAIe3s6r5o1IVue8LyW9A/cEmB+1nHgZeZ+VKm1g=)
                          10: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: NRTKisssuBxZObjpfMlPvnnfb3JZpeBG9KHtEvhVsJY=)
                          11: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 2VTD3WI/p1+3+37bAKEOPoRJrNamvZNDqASz/hNbToE=)
                          12: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: LABgsCyLFgioLtUnwOhVK90TbEUsG0VGUIdPxv3Sf48=)
                          13: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: X36QLgVhGJ49HLtt76O3IZYZ5R6XiQpbmzY9UR5vonE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 09:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:87:d6:dd:bf:12:35:36:c7:35:92:b5:a8:cb:ee:90:9a:eb:71:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Nov  4 07:06:20 2025 GMT
            Not After : Nov  7 11:39:20 2025 GMT
        Subject: CN=E4CC4A093653A7C9C9894E655DB224109AB02E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:55:0d:ac:ca:9d:74:8c:49:9e:bf:2f:dd:70:
                    5e:49:53:66:76:0b:ad:d8:b0:79:9b:d6:e8:e7:a8:
                    ba:9f:d3:05:87:ae:13:46:61:b2:e5:6d:3c:ab:0f:
                    a3:aa:75:d0:40:33:0e:e8:3a:60:9a:a1:e6:f3:d2:
                    38:66:d5:c1:5b:68:3f:11:1e:1e:22:6f:18:7b:88:
                    55:5a:e0:a8:32:ab:03:be:50:e9:57:af:77:68:61:
                    46:05:81:65:3e:ee:07:2f:a1:36:a8:21:e4:74:1e:
                    9d:da:a0:3c:f0:51:67:22:0a:8f:21:a4:34:cb:ea:
                    15:88:02:2a:bb:36:10:ce:ac:de:c1:e1:c2:fc:28:
                    b2:30:6a:57:19:a7:b1:89:cd:8e:6f:eb:b4:36:ad:
                    a4:7b:af:40:17:00:2f:a0:b9:ca:8d:14:ac:9f:2d:
                    2a:95:00:a4:16:c8:e4:76:c1:a3:e7:7c:ff:08:b3:
                    33:d6:a7:06:12:a3:22:2b:72:a2:b5:ed:2c:a0:a6:
                    3b:0d:0d:9f:dd:40:b2:8e:ad:09:6a:62:03:0c:b6:
                    91:13:ab:bc:4b:0a:8c:ce:4b:d6:19:6b:ab:25:c4:
                    18:b7:ee:03:30:72:72:17:af:d7:70:0b:37:5f:d2:
                    29:32:c7:e0:ba:1e:bd:33:07:22:4d:3e:9b:b7:db:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CC:4A:09:36:53:A7:C9:C9:89:4E:65:5D:B2:24:10:9A:B0:2E:72
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:fa:78:9d:e5:04:73:96:a8:9b:3e:74:cc:e9:a2:ff:fa:
         1d:62:01:d4:d0:a4:9d:0b:5c:fe:3d:21:57:35:1d:27:88:9b:
         51:b2:3f:d1:d6:ff:1f:4e:b9:b3:25:f1:90:79:2f:00:be:72:
         31:77:45:29:e3:69:e8:dd:58:94:d3:4d:24:2f:4b:06:24:1e:
         dd:a9:d8:63:c0:38:45:0e:0a:3d:5a:b3:3b:e0:75:27:90:7a:
         f3:4f:64:f6:4c:15:7e:b8:75:f7:25:33:c3:fe:3f:e5:30:b7:
         4b:25:32:06:0a:74:59:4f:5c:9c:0e:c9:b6:f1:de:86:ed:4e:
         a5:7c:9f:29:6a:1e:21:f7:03:da:6a:52:1f:ad:5f:6e:76:c1:
         c2:a5:a2:3d:1a:da:5f:9b:9d:c0:2e:ca:4c:a0:d2:82:97:c0:
         dc:6a:86:14:a0:97:30:6b:34:ca:d2:7a:b6:be:0c:85:e7:b1:
         c1:48:e2:38:c9:5d:bc:99:7e:00:02:e7:95:bb:42:eb:e6:65:
         89:76:1f:39:30:dc:34:92:15:75:de:b1:06:01:d7:f7:ba:ae:
         98:2a:5b:d9:2f:cf:68:2b:c1:97:26:56:11:20:66:33:24:c9:
         29:89:e6:8f:83:69:6f:c1:04:9d:16:dd:8b:e9:8a:d1:72:60:
         d3:1c:3a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:30:33 2025 by rpki-client