
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
File:                     2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json)
Hash identifier:          ZKwhuYryJavr/16JlZmY0GIR1v+OclrekkV8RxO7X6Q=
Subject key identifier:   B9:F0:53:9E:53:27:4E:F4:3F:8F:B1:53:F0:1A:98:53:8F:D0:E5:45
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       13F3CF3902EA562C2273CD637422D6BACCB8651F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
Manifest number:          01C4
Signing time:             Mon 03 Nov 2025 00:41:30 +0000
Manifest this update:     Mon 03 Nov 2025 00:36:30 +0000
Manifest next update:     Thu 06 Nov 2025 06:54:30 +0000
Files and hashes:         1: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: 5m5TlKYtb1BvkeOY5L0iLxzd9TDfvf4dSOsCxsnrroA=)
                          2: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: 5t1AVxnTVPWVliNjx4dePm/Uoa7VF9/XPOB2dVW7zIc=)
                          3: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: CV4aj5c0qTtoAuk2gjVJIigxTtOqOHVk941GV0y4c2o=)
                          4: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: KnUhOivFyTwSLl1lFtmGPDtu87HmW4jCAVjkx4JXtuo=)
                          5: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: 7u4efn7bHYzED6nyNb+Hqw9a6DQWqirinCujiYt23iE=)
                          6: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: b6WR2/tkj/TJmHf4T96jHhe4cr6ziz5DRZJiP/dYI8w=)
                          7: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: ItE1oa3zcA/J6v7neMwAUFSJuwJHlB5fYUCcNJ52lrY=)
                          8: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: Q14M8/H1GKD5N/6iQpjuxENjm1t2nAKNH5gzPjfdhGE=)
                          9: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: zkaOl3WDUKt7L8bc11OX90l50YOHPUCk7N8DGiMpczs=)
                          10: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: Fp3TdqFb3PCcEDYFQYYU/EXsl8Z+niV/5Guw5uw0Pl4=)
                          11: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: 2KzZDAzCYvLDGmuyMQTwS12UkngL2r4uYLx3E6PowDU=)
                          12: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: Og2Q3pkFZ4RS1IltvMh5+zdPdJjL3PWI9O/DVgS24lg=)
                          13: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: kRRcaFc2J9dVlk1FFSz0s3hPY1eoKnszPg9ucUh3LNQ=)
                          14: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: 1qIDwmf6H3mEaUgvN2oFExXVVv8QpKj00JvdsYifsuk=)
                          15: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: oxNl3kL7pfOEMCZna82D8P/b9qkWwOtKEU4nTRdcl3U=)
                          16: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: cEeTKWmwIc5D8VRx4Wjyqi25fM0+EqJrs6oXdMSObyg=)
                          17: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: 8OfgAbNQVhDJJTxQBxc34yWofgtcid4J/JQSeq4njCk=)
                          18: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: hamVtzyWWFgDoUv3GhJNoDFMf/gHi6nIkoDk9iZqkLo=)
                          19: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: ViX8ZbaSYLE6pfdiJ7WRLmeE3/fUbo2vKPyePHehzpo=)
                          20: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: +UYTL16FoJzljt1WcPKnLkea4mRmhRtr/yGtN5BCt4Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 06:54:30 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f3:cf:39:02:ea:56:2c:22:73:cd:63:74:22:d6:ba:cc:b8:65:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Nov  3 00:36:30 2025 GMT
            Not After : Nov  6 06:54:30 2025 GMT
        Subject: CN=B9F0539E53274EF43F8FB153F01A98538FD0E545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:44:04:c9:6d:54:98:89:5b:ba:e2:d9:33:
                    27:64:d7:0e:ea:7d:25:85:55:2e:b0:bd:03:73:49:
                    3b:ed:f6:34:ca:ef:03:f2:8a:e0:b3:9c:48:7c:79:
                    a1:a2:98:85:66:e5:9d:57:0b:72:ac:0d:ce:fe:2f:
                    af:45:94:17:14:77:6d:43:64:86:77:e6:d7:c9:db:
                    54:b4:26:d5:78:62:55:b4:ea:63:b7:01:7f:c0:06:
                    ca:61:7e:38:6f:c2:ef:cb:03:63:9f:06:2f:c6:54:
                    02:76:8c:f4:1a:5b:ce:da:db:94:f6:bf:e5:82:65:
                    66:e7:6a:8a:43:14:45:65:f7:da:45:c4:03:25:c6:
                    9b:d5:58:e3:0a:ae:ad:8a:dc:2d:87:9a:35:4e:07:
                    28:8a:5a:16:be:45:6d:09:d0:9b:8e:ff:b0:9c:b9:
                    57:6b:09:72:b0:dd:92:0a:a6:83:48:43:28:e3:18:
                    f0:83:b8:4f:96:81:6c:a8:54:d1:c0:3e:00:2c:81:
                    8b:34:27:a3:fe:fb:32:99:e2:d4:fa:c3:e6:0e:42:
                    17:0b:42:1f:44:6d:ad:a0:c1:74:49:63:2c:03:27:
                    9b:94:08:20:2b:c1:74:9e:da:31:17:17:cd:dd:18:
                    56:12:ab:cd:16:46:4a:3d:e8:45:55:e0:0f:d0:2a:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:53:9E:53:27:4E:F4:3F:8F:B1:53:F0:1A:98:53:8F:D0:E5:45
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         3e:52:24:01:4b:c7:0f:6a:fb:ba:2a:84:7a:65:54:59:1c:0c:
         da:2e:18:0d:ca:7b:b4:48:65:9b:f7:69:40:6d:3b:a3:63:61:
         8c:92:4b:d9:24:e3:b0:d8:a2:8e:b7:12:60:23:32:54:c0:e2:
         37:60:3c:74:dd:ea:70:a0:57:60:5d:e9:47:b4:a4:c3:ad:a5:
         cc:24:75:6f:3f:19:9a:b3:61:b5:f2:4a:33:6f:f3:a8:f0:07:
         b8:1c:ad:50:07:ed:2e:79:2e:8b:ac:4a:f8:cf:14:9c:d9:15:
         81:38:90:7d:94:0f:f7:ed:26:8d:08:57:d4:a9:eb:e6:86:ca:
         02:28:2c:59:98:34:0c:31:48:05:02:6e:fa:ab:a6:00:9e:25:
         b3:c5:e1:80:9d:db:f6:d1:20:2d:5c:af:8b:70:85:38:ee:2a:
         ac:46:29:23:79:cf:da:b1:e0:87:d1:9d:e7:09:9d:78:97:45:
         54:0f:c4:ae:01:1b:9b:d3:75:a8:47:48:43:38:f3:75:38:7d:
         12:b1:c5:07:4f:61:9e:63:9b:02:20:6f:02:76:50:9b:0f:c3:
         61:bb:d9:a3:4c:07:62:df:58:5d:bc:a0:1d:39:e2:62:77:3d:
         26:a9:84:cb:5d:fb:05:21:e0:61:47:73:63:fc:01:a2:2b:59:
         6a:24:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:12:48 2025 by rpki-client