
$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
File:                     A575236C1BE8E700EF4D54FB243030C7256654C6.mft (raw, json)
Hash identifier:          a2C1q5AvgzNUgzrcXd2wtpDEOnxi2L834XZDfsSQRns=
Subject key identifier:   9D:4B:A2:2E:91:3B:C1:A3:43:7B:24:47:27:F0:8D:1E:A5:A6:73:07
Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
Certificate issuer:       /CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Certificate serial:       628176051ADA26FB20F7EDC8CE6F156F84AEBA5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
Manifest number:          0104
Signing time:             Mon 03 Nov 2025 19:41:25 +0000
Manifest this update:     Mon 03 Nov 2025 19:36:25 +0000
Manifest next update:     Fri 07 Nov 2025 02:49:25 +0000
Files and hashes:         1: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: FwokdY5Winm64kPdNPud+dd5Ep75CI564UTa5xn81h0=)
                          2: A575236C1BE8E700EF4D54FB243030C7256654C6.crl (hash: SBShFlE5Enq9SNr0GjXCiiFJRweGz9rz7/gMEv17qLg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
                          rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 02:49:25 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:81:76:05:1a:da:26:fb:20:f7:ed:c8:ce:6f:15:6f:84:ae:ba:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6
        Validity
            Not Before: Nov  3 19:36:25 2025 GMT
            Not After : Nov  7 02:49:25 2025 GMT
        Subject: CN=9D4BA22E913BC1A3437B244727F08D1EA5A67307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3a:47:1d:d6:1b:b5:2f:51:ef:2c:8e:55:96:
                    10:56:82:45:1f:13:ca:f3:f3:27:ae:76:bf:e2:33:
                    f1:21:f2:2c:5c:1e:3b:d4:e1:80:45:39:ee:6d:2a:
                    8a:1d:94:ff:8d:c8:c1:12:33:7e:aa:f6:81:a1:0f:
                    c8:c2:8c:3d:e1:c6:ff:1b:6e:88:29:43:26:bf:a4:
                    ec:a8:22:90:a1:69:70:2f:c9:31:2b:cf:ab:72:a0:
                    dc:28:bb:c4:8e:00:af:c7:77:f4:29:66:c5:7b:70:
                    99:69:a3:5d:d4:43:f8:65:a1:05:1a:7b:0e:e2:02:
                    cf:a6:71:8c:4d:46:ed:ce:84:7c:91:1d:e8:f3:7f:
                    da:8e:02:c0:28:8d:ac:83:ad:9d:1b:ee:3f:ff:fa:
                    85:bf:b0:29:b2:a0:fe:28:7f:9e:82:f1:32:df:76:
                    1f:7f:97:bf:d1:4b:28:e8:4f:a9:fe:ce:11:db:9f:
                    91:17:e1:c8:b9:68:48:87:33:c6:b0:87:c4:5f:bd:
                    6a:77:4d:f1:d0:12:41:13:39:7c:fb:4a:64:2e:c8:
                    f6:3b:e6:7d:d9:f5:90:16:3e:4d:2a:5c:32:68:20:
                    67:a3:39:76:e3:8c:b7:90:b2:30:7b:4c:b8:7b:06:
                    e1:83:2e:18:e0:4a:d1:4f:f7:b7:bf:b1:d6:49:dc:
                    09:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4B:A2:2E:91:3B:C1:A3:43:7B:24:47:27:F0:8D:1E:A5:A6:73:07
            X509v3 Authority Key Identifier:
                keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         2e:26:54:2d:1e:bf:23:64:24:25:e5:ff:e3:8b:df:36:a0:c3:
         82:63:46:72:fd:17:64:22:8c:ee:cb:d1:fa:f1:c2:b2:b3:47:
         aa:bf:80:40:a5:f3:d8:a2:0c:6a:4a:d8:ec:9d:9e:af:19:09:
         b3:4c:cf:65:3f:35:48:8a:15:1e:8f:51:18:88:63:43:3f:13:
         6e:d8:26:e1:6b:9a:70:49:92:f6:43:b2:ed:9c:36:62:09:58:
         5e:cf:8a:01:07:9c:6d:af:39:49:12:c8:13:47:8e:7a:73:0a:
         6a:23:a4:ce:b5:9a:c4:5a:a2:26:2e:87:db:b3:40:34:36:ae:
         5f:54:77:64:ef:5f:d5:b0:be:0e:84:17:f1:c4:24:81:9f:53:
         11:27:54:42:da:7b:6a:c0:7d:0a:a0:fc:2c:6d:a1:53:3b:f0:
         82:90:58:e3:87:b1:e7:d3:34:d4:f2:61:bb:72:1b:76:51:d2:
         01:6f:22:75:15:65:8b:17:47:0b:e0:89:5e:40:c4:80:be:bc:
         a7:02:5e:be:35:73:de:98:12:28:3d:da:63:ae:c0:52:c7:53:
         74:5e:c6:ee:3b:12:a7:6e:d2:43:fc:9e:04:55:68:90:97:d7:
         e0:40:72:b0:6f:0a:05:e9:d0:25:10:ca:db:71:8d:6e:04:c8:
         ac:67:e2:9f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYoF2BRraJvsg9+3Izm8Vb4SuulwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcy
NTY2NTRDNjAeFw0yNTExMDMxOTM2MjVaFw0yNTExMDcwMjQ5MjVaMDMxMTAvBgNV
BAMTKDlENEJBMjJFOTEzQkMxQTM0MzdCMjQ0NzI3RjA4RDFFQTVBNjczMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjOkcd1hu1L1HvLI5VlhBWgkUf
E8rz8yeudr/iM/Eh8ixcHjvU4YBFOe5tKoodlP+NyMESM36q9oGhD8jCjD3hxv8b
bogpQya/pOyoIpChaXAvyTErz6tyoNwou8SOAK/Hd/QpZsV7cJlpo13UQ/hloQUa
ew7iAs+mcYxNRu3OhHyRHejzf9qOAsAojayDrZ0b7j//+oW/sCmyoP4of56C8TLf
dh9/l7/RSyjoT6n+zhHbn5EX4ci5aEiHM8awh8RfvWp3TfHQEkETOXz7SmQuyPY7
5n3Z9ZAWPk0qXDJoIGejOXbjjLeQsjB7TLh7BuGDLhjgStFP97e/sdZJ3AkdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnUuiLpE7waNDeyRHJ/CNHqWmcwcwHwYDVR0j
BBgwFoAUpXUjbBvo5wDvTVT7JDAwxyVmVMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDY5YzNlMy03YjU5LTQ0OTAtODRjZi1mZWYxNTg1YWM3NWIvMC9BNTc1MjM2QzFC
RThFNzAwRUY0RDU0RkIyNDMwMzBDNzI1NjY1NEM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcyNTY2
NTRDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ2OWMzZTMtN2I1OS00NDkwLTg0
Y2YtZmVmMTU4NWFjNzViLzAvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMw
QzcyNTY2NTRDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC4mVC0evyNkJCXl/+OL3zagw4JjRnL9F2Qi
jO7L0frxwrKzR6q/gECl89iiDGpK2Oydnq8ZCbNMz2U/NUiKFR6PURiIY0M/E27Y
JuFrmnBJkvZDsu2cNmIJWF7PigEHnG2vOUkSyBNHjnpzCmojpM61msRaoiYuh9uz
QDQ2rl9Ud2TvX9Wwvg6EF/HEJIGfUxEnVELae2rAfQqg/CxtoVM78IKQWOOHsefT
NNTyYbtyG3ZR0gFvInUVZYsXRwvgiV5AxIC+vKcCXr41c96YEig92mOuwFLHU3Re
xu47Eqdu0kP8ngRVaJCX1+BAcrBvCgXp0CUQyttxjW4EyKxn4p8=
-----END CERTIFICATE-----
Generated at Tue Nov  4 12:40:32 2025 by rpki-client