Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft
File:                     CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json)
Hash identifier:          +hcLrU9kyeASRgtFRG01OJHoQ2zKU7kZjfOIjFdWa/E=
Subject key identifier:   94:85:F0:39:02:56:73:EB:7E:F6:C1:01:8F:72:7D:60:93:39:27:8A
Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00
Certificate issuer:       /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800
Certificate serial:       525E1AB737EBA559F542227701584405891504CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft
Manifest number:          051B
Signing time:             Sun 02 Nov 2025 23:00:53 +0000
Manifest this update:     Sun 02 Nov 2025 22:55:53 +0000
Manifest next update:     Thu 06 Nov 2025 07:50:53 +0000
Files and hashes:         1: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: 9V43hWJhD106Qur+e/iXVkOrJHa3wYOoVgiuMpwP8PI=)
                          2: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 3L/LuNQCHJ1QppGAGjYDYBbeNVsrf3Si2Cax6eMLnCM=)
                          3: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: V0+izgb3kW/OtzIxZT6l6U4KDpKCH9ZjxQM8fPyZ410=)
                          4: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: 0lex9EiSSezUpq4qJvn3VS81MhGtpTgw3AYjES35MH0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl
                          rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 07:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5e:1a:b7:37:eb:a5:59:f5:42:22:77:01:58:44:05:89:15:04:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800
        Validity
            Not Before: Nov  2 22:55:53 2025 GMT
            Not After : Nov  6 07:50:53 2025 GMT
        Subject: CN=9485F039025673EB7EF6C1018F727D609339278A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d8:f6:f2:3a:8a:d1:2a:cd:ee:8b:8a:83:4b:
                    e0:47:a7:81:aa:93:41:62:2b:ae:54:83:97:65:8d:
                    eb:34:b1:3c:2f:24:06:2c:5a:a3:bd:f1:b5:3e:81:
                    bd:47:a3:8c:76:f3:05:f4:40:07:ec:fe:ee:dd:9e:
                    76:72:7c:6c:ed:fe:b7:45:f9:a0:dc:bb:20:83:35:
                    b4:37:38:ef:91:18:1b:15:4c:ca:be:1b:89:3c:4a:
                    18:36:53:a5:06:cc:d2:5e:e4:1f:2b:04:e9:ae:94:
                    94:8b:cb:3f:4a:a0:b5:26:bf:34:95:f6:bf:60:18:
                    f0:6a:0f:6f:b9:df:d1:40:3d:e5:c6:4e:c8:d7:59:
                    6b:c7:15:29:82:3c:6a:24:d5:4d:33:97:42:7b:c5:
                    5e:82:e9:61:6d:46:0b:c9:ca:db:3e:c9:d0:e7:1e:
                    98:1f:58:a7:b9:96:88:8b:f9:44:ac:90:86:dc:33:
                    05:e6:be:57:cd:33:5c:d1:52:14:9a:93:6e:b8:23:
                    5c:ef:b6:42:55:6c:1c:3d:20:9c:db:b8:17:fd:48:
                    2d:ae:53:ee:ff:49:f9:d3:e1:f6:b7:bd:ed:3b:dd:
                    b4:5d:e2:34:c9:83:45:d1:c2:c0:1a:df:57:db:52:
                    6a:be:20:ea:47:b8:23:8c:19:e1:47:8b:94:9e:69:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:85:F0:39:02:56:73:EB:7E:F6:C1:01:8F:72:7D:60:93:39:27:8A
            X509v3 Authority Key Identifier:
                keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:54:f4:a7:29:3d:c7:79:75:08:ff:bc:11:88:cf:bf:2c:4d:
         dc:1e:3e:7d:e7:0f:41:60:c1:b6:6b:64:09:71:1c:49:50:d5:
         a3:91:e8:58:9f:78:9e:20:ba:25:99:50:85:d4:4e:ea:ff:b9:
         6b:90:b0:a5:28:ba:ff:17:48:49:04:ce:94:c8:50:bb:3a:4c:
         b4:f3:4d:40:d0:99:99:e2:9c:11:58:e3:e4:a0:98:f1:52:64:
         5c:a2:7e:5a:1d:3a:01:f0:bd:c6:cb:5f:50:c9:3b:e9:37:bf:
         da:57:f4:11:c6:9a:91:d7:12:f9:d3:40:a8:e5:57:5a:40:6f:
         ea:7d:da:a9:4a:40:3c:77:b2:21:f7:52:37:46:6d:53:47:0c:
         63:09:32:6a:b5:ee:7c:23:28:cf:5e:93:56:5b:3a:64:3e:0b:
         86:09:6e:75:c7:48:0f:64:f2:6e:fb:bd:07:48:57:cd:be:2a:
         8b:b8:4e:4c:71:78:5b:47:9c:4e:7b:5e:9c:5b:02:67:f2:51:
         02:a1:22:54:e1:dd:25:1c:7c:ba:ad:a2:7f:4a:4b:ef:93:26:
         dd:5b:b6:97:e3:51:68:4e:fe:68:db:54:f3:37:fe:fe:9f:0d:
         bc:62:75:4b:41:89:ec:4e:9f:d4:c7:89:4f:d8:ae:91:d2:f2:
         7a:32:41:fb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUl4atzfrpVn1QiJ3AVhEBYkVBM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5
QzhFRTgwMDAeFw0yNTExMDIyMjU1NTNaFw0yNTExMDYwNzUwNTNaMDMxMTAvBgNV
BAMTKDk0ODVGMDM5MDI1NjczRUI3RUY2QzEwMThGNzI3RDYwOTMzOTI3OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2PbyOorRKs3ui4qDS+BHp4Gq
k0FiK65Ug5dljes0sTwvJAYsWqO98bU+gb1Ho4x28wX0QAfs/u7dnnZyfGzt/rdF
+aDcuyCDNbQ3OO+RGBsVTMq+G4k8Shg2U6UGzNJe5B8rBOmulJSLyz9KoLUmvzSV
9r9gGPBqD2+539FAPeXGTsjXWWvHFSmCPGok1U0zl0J7xV6C6WFtRgvJyts+ydDn
HpgfWKe5loiL+USskIbcMwXmvlfNM1zRUhSak264I1zvtkJVbBw9IJzbuBf9SC2u
U+7/SfnT4fa3ve073bRd4jTJg0XRwsAa31fbUmq+IOpHuCOMGeFHi5Seabz7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlIXwOQJWc+t+9sEBj3J9YJM5J4owHwYDVR0j
BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3
NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF
RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi
OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2
NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADZU9KcpPcd5dQj/vBGIz78sTdwePn3nD0Fg
wbZrZAlxHElQ1aOR6FifeJ4guiWZUIXUTur/uWuQsKUouv8XSEkEzpTIULs6TLTz
TUDQmZninBFY4+SgmPFSZFyiflodOgHwvcbLX1DJO+k3v9pX9BHGmpHXEvnTQKjl
V1pAb+p92qlKQDx3siH3UjdGbVNHDGMJMmq17nwjKM9ek1ZbOmQ+C4YJbnXHSA9k
8m77vQdIV82+Kou4TkxxeFtHnE57XpxbAmfyUQKhIlTh3SUcfLqton9KS++TJt1b
tpfjUWhO/mjbVPM3/v6fDbxidUtBiexOn9THiU/YrpHS8noyQfs=
-----END CERTIFICATE-----
Generated at Tue Nov 4 12:55:37 2025 by rpki-client