Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
File:                     C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json)
Hash identifier:          GkGGFXM4GtdidKlSqQtFEEpWO3MT1A6g8ZlEn0nTa18=
Subject key identifier:   BC:D8:02:F1:65:12:68:2B:EA:7B:F8:B6:22:B5:CD:4E:BC:00:28:C7
Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A
Certificate issuer:       /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
Certificate serial:       4FCEEDE25531E0A6EE59ED0D5F3F8F2001A08B68
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
Manifest number:          04B9
Signing time:             Sun 02 Nov 2025 18:21:32 +0000
Manifest this update:     Sun 02 Nov 2025 18:16:32 +0000
Manifest next update:     Wed 05 Nov 2025 23:38:32 +0000
Files and hashes:         1: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: m0WKFr7Q9JfSEuoay78BCi3cNgU52tNMlZWVG7Fhi1s=)
                          2: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: yxV12cP+17+f4nsu4Qt/0TyM0Yc+PlYZYCbNR6RBl54=)
                          3: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: pstrM+TKcj0ZaDskvb8CeNn1xWy4wlNok+/RWuj2kA4=)
                          4: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: 8zY41tTngWvKTe/HAKHtyytdzc6XdijkL5LcFd6Ewbk=)
                          5: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: ZQ63p3M+wzXAXpgNpBD0Iq30pmnSOSGVBCaMjIYT+N8=)
                          6: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: VElKMVk3iPulNjS9HeHc93PPFZl5g9fy4/nN9cMU7rI=)
                          7: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: IQxqj9PY3nbC6wwPV82C6ExLe7/jv0UMpi+DEeQSqxQ=)
                          8: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: GMDlJkIYSBbaiHdAVmprXvGw9l46ixxNam2eRH2A4Uo=)
                          9: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: 7tgGUn+YrUZ/MWVDGtrerXtqbOMhyZDoTldLslkYYTI=)
                          10: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: Ffjrt07F64qfTUTQRM4q8gB9QS8eehDO7qAs3NtubXM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl
                          rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 23:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ce:ed:e2:55:31:e0:a6:ee:59:ed:0d:5f:3f:8f:20:01:a0:8b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
        Validity
            Not Before: Nov  2 18:16:32 2025 GMT
            Not After : Nov  5 23:38:32 2025 GMT
        Subject: CN=BCD802F16512682BEA7BF8B622B5CD4EBC0028C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f9:09:58:8f:15:ec:fa:4f:46:ec:b2:1c:27:
                    f6:b1:7d:4f:5b:28:37:8a:04:8d:38:ee:9d:51:15:
                    0b:77:33:a6:77:66:ca:0b:ab:24:46:fd:86:eb:10:
                    db:dd:40:8f:1e:2f:e3:74:63:1f:3e:9d:41:a6:e0:
                    63:05:17:5e:fd:da:64:13:b0:e6:b4:0b:c5:0e:f9:
                    d4:e2:ac:6a:13:95:bf:e6:f8:c8:ae:03:e9:34:6a:
                    2c:14:4f:d3:4e:db:a5:02:7f:24:b6:01:32:55:60:
                    34:2e:7b:c3:c8:87:e8:a3:e7:20:89:18:1a:7e:27:
                    67:6f:4d:77:1f:83:59:8a:ed:f0:5c:87:dd:9f:42:
                    f7:60:27:62:87:42:72:0c:63:c9:a3:da:0e:f4:a4:
                    70:0d:a9:48:c2:f1:cd:9d:8c:6c:c3:78:46:27:c3:
                    d3:1b:11:67:4b:0c:e7:70:1e:3e:cb:33:93:b1:be:
                    2c:9a:f3:d2:1a:f3:00:18:cb:27:35:5a:16:f6:17:
                    5b:5c:51:c1:8d:08:9c:08:c9:84:8d:b0:4e:5f:9f:
                    cf:ab:44:f6:d6:62:b1:0a:f6:4a:ec:cb:ab:69:cb:
                    84:c3:f3:47:33:2e:ff:f6:ef:bb:2d:2d:fe:19:41:
                    31:be:1a:23:51:01:d5:93:d9:7a:7a:6f:53:09:c6:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D8:02:F1:65:12:68:2B:EA:7B:F8:B6:22:B5:CD:4E:BC:00:28:C7
            X509v3 Authority Key Identifier:
                keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:66:99:51:43:0b:3f:d2:c2:6b:49:6f:b6:d8:ab:ff:02:
         6a:eb:7d:32:19:be:df:45:6a:79:dc:03:17:78:68:c0:4a:ef:
         e1:bd:cd:04:98:48:d1:38:6f:62:63:45:ab:9d:7e:ba:c1:a9:
         1c:20:a7:66:8b:ee:5b:92:ba:e7:e0:6a:ed:f5:3c:13:f6:20:
         65:f9:34:db:81:42:92:13:9f:1b:ed:2b:b9:5e:69:55:c8:91:
         66:85:ce:e0:d6:79:e5:d3:8d:fc:d6:98:b0:fe:8d:4f:e4:a9:
         a6:2e:0c:28:3c:7b:34:e5:41:a9:18:7a:9b:14:93:57:6b:5f:
         e9:ce:ec:98:6f:30:10:c8:11:1d:b7:bc:c5:10:5f:a6:e4:81:
         4f:32:37:2f:fa:c1:08:66:ff:99:95:97:fb:e6:32:7e:ec:10:
         92:f2:6d:c7:4c:aa:f1:44:72:91:57:67:ea:16:4f:2c:a1:dd:
         1c:2e:d4:5a:34:c3:c3:77:8d:4d:61:8d:b5:98:db:2b:1c:c3:
         78:53:ea:d4:a5:90:ee:e6:32:5e:dd:32:3d:ca:5f:3d:a6:cc:
         98:6c:52:28:ae:39:3e:c0:6a:d1:ee:37:4d:26:63:ec:b3:8f:
         bd:c8:b9:96:f5:3a:b7:5c:76:08:7f:29:f6:8b:86:ef:38:1c:
         f8:3d:f4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:17:37 2025 by rpki-client