
$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
File:                     7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json)
Hash identifier:          fGAzoORK46xVNu0XRGe4ouVoUbJyYRCk7Psc4DyT++o=
Subject key identifier:   78:33:8D:D4:E9:C5:E8:17:82:6F:9C:A6:99:AC:B0:EA:4E:04:59:83
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       49D468638715A9448B198FBAADB70AFD6578F15E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
Manifest number:          0538
Signing time:             Mon 03 Nov 2025 23:12:05 +0000
Manifest this update:     Mon 03 Nov 2025 23:07:05 +0000
Manifest next update:     Fri 07 Nov 2025 05:25:05 +0000
Files and hashes:         1: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: BQTtvc745IuKZaE72oqsQIokxS6D/NEUcrmFIac+agM=)
                          2: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: IDS7wT53F/9d+GGxnBDomzis7H+va5MBv/3bGTQques=)
                          3: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: qQ/OJJBLuknzR6dOBM+bTowxaxIwEUGdeh8g4k+xMHc=)
                          4: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: 56yoy1pZXhES0/QXKkOUvjrn9k9A+/MhvPggVyF266U=)
                          5: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: J/jPlTXp+kWKv5LyWjv+I0N1cAy55yAD17Rj2NwYkPM=)
                          6: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: NEhivRqvBCnBURZf09iLRn6F9NwBbv/MNUQSDs4qTsQ=)
                          7: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: vPo4xg80UOtB6VJUwA4UWFKXU9vTxzV/7Yqjm3eG2dU=)
                          8: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: N0fiZGpp7G4AcyGQiECW3/6Q5p0a7A1fAhfbX9FH1ms=)
                          9: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: 5PsJDXodeNIJh5knU0di+fUcvy1ri44lUE/NdrRs1AY=)
                          10: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: UkRWHYHFSXJQvTnbIud8PmlndW+kHrowErEkvw8GIIU=)
                          11: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: KTTSzhJyEe2+3+LNGtWkObwsWEdVtFCSQXuEdew12yU=)
                          12: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: 7qX9WcxP/RC8tMcJg/P60OwjJ/UboqeJrbX2Ange7f0=)
                          13: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 0fYEP8T/Nnelfp7GTy05C/LwRW0usrD9PvaWq6iCxUk=)
                          14: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: H7BZrybLTpX0NJFsDuTjqzH8VF1huH+0BD/mvn2lSto=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 05:25:05 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d4:68:63:87:15:a9:44:8b:19:8f:ba:ad:b7:0a:fd:65:78:f1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Nov  3 23:07:05 2025 GMT
            Not After : Nov  7 05:25:05 2025 GMT
        Subject: CN=78338DD4E9C5E817826F9CA699ACB0EA4E045983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:78:bf:6a:63:d5:95:d0:90:0d:48:23:51:27:
                    72:eb:a5:4b:21:a0:8a:03:d8:62:ce:b5:3a:6f:66:
                    68:ca:e6:7f:35:89:3b:c7:66:06:dc:c2:c9:8f:39:
                    fb:33:35:c6:89:ca:3a:b8:e1:7b:d1:8f:d9:e8:68:
                    a4:52:30:96:c4:d9:ac:7f:82:75:19:23:47:0f:16:
                    f5:bf:13:82:b1:16:68:df:14:cb:d6:47:c9:f2:bc:
                    88:0e:6c:f4:6a:fd:4e:63:13:61:77:f5:83:06:2b:
                    84:9a:b9:90:94:2c:49:9d:bb:d3:b1:13:97:4c:70:
                    83:c0:4d:6d:c6:cc:e6:f4:6e:b7:b2:9b:fc:c4:a5:
                    11:3b:68:cf:d4:93:92:a1:ef:34:ea:9f:9f:07:e0:
                    6a:5c:99:d3:6f:74:11:ab:8a:6c:d1:04:b0:94:5a:
                    00:66:b4:2b:7d:0f:8d:77:5b:87:2c:8e:f1:98:9e:
                    49:9d:35:61:d9:ab:2c:33:14:d6:4c:85:5f:2b:89:
                    d8:04:76:05:12:3c:28:1d:2b:ba:2c:98:58:cf:9d:
                    be:1e:41:09:a1:af:65:04:f3:1d:d2:dd:f3:df:57:
                    d5:35:df:76:cb:65:f2:aa:a7:1e:5b:aa:d3:01:94:
                    47:31:6f:d8:14:4d:08:b9:f3:c8:52:0e:f6:ae:c1:
                    de:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:33:8D:D4:E9:C5:E8:17:82:6F:9C:A6:99:AC:B0:EA:4E:04:59:83
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         84:af:ff:08:26:3d:51:4e:ba:8f:78:26:52:e5:ae:69:2f:a8:
         ea:d9:fb:f3:80:95:51:bf:08:5b:2b:ff:1d:c3:4c:af:dc:4a:
         97:d4:f0:7d:b5:2d:43:94:e4:c4:56:46:98:1b:a1:ef:9f:1c:
         6c:30:85:9a:25:83:f8:fa:ab:60:f2:3a:3f:11:4d:12:0b:0d:
         ad:c7:33:a9:3f:46:09:07:61:f0:df:c5:a4:17:fd:65:90:3f:
         27:35:ab:a5:df:0d:c2:4e:70:6c:e0:f7:aa:b9:a2:f7:76:27:
         4a:58:26:6f:6c:92:52:ad:b4:23:93:07:d9:bc:2b:15:5a:55:
         ef:92:82:ff:0f:42:cf:6f:5c:35:13:d3:f6:8b:ac:cb:1f:9d:
         d5:2a:14:1e:03:5c:da:52:73:b8:1a:71:16:a6:56:13:92:8f:
         1b:57:b3:43:33:57:36:da:73:07:30:9f:d8:e8:08:8f:52:6b:
         eb:10:59:9d:4f:f5:6a:eb:5b:f7:bd:54:67:4c:9b:53:e4:49:
         40:c4:ef:e9:fa:cc:70:85:87:84:63:7a:d6:15:9d:81:6c:ae:
         a6:53:a3:53:c9:07:ef:d8:92:04:37:00:d3:1c:e9:ef:88:6d:
         51:ea:5d:13:88:60:5c:1a:e1:3d:77:e7:c1:f1:3c:50:fb:42:
         bb:9d:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:12:32 2025 by rpki-client