
$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
File:                     EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json)
Hash identifier:          NPTa6oDoe7W/HmfBQG+tNS5G5sAno2BC/0Pyz5fGN5E=
Subject key identifier:   CF:B3:19:11:20:F9:4F:B0:E2:ED:F9:8F:11:B1:3F:0B:E3:25:9F:C8
Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A
Certificate issuer:       /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A
Certificate serial:       7062AD498BD57748A53607AFF0DBF33AB8A2886B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
Manifest number:          051E
Signing time:             Mon 03 Nov 2025 06:10:38 +0000
Manifest this update:     Mon 03 Nov 2025 06:05:38 +0000
Manifest next update:     Thu 06 Nov 2025 13:09:38 +0000
Files and hashes:         1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=)
                          2: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: RVTNwEJWw6kDahpJeW3Nmjrzlj59aeo5rZNCAJ2uMco=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl
                          rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 13:09:38 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:62:ad:49:8b:d5:77:48:a5:36:07:af:f0:db:f3:3a:b8:a2:88:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A
        Validity
            Not Before: Nov  3 06:05:38 2025 GMT
            Not After : Nov  6 13:09:38 2025 GMT
        Subject: CN=CFB3191120F94FB0E2EDF98F11B13F0BE3259FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:f3:d7:8e:c0:b2:49:3b:c5:bc:dc:6f:fe:
                    47:9b:5e:57:29:b3:b5:18:a7:52:7c:22:55:39:b1:
                    4a:48:17:df:60:64:5a:26:64:d6:da:df:ac:95:81:
                    19:99:17:f3:26:69:39:c2:83:2a:35:97:22:55:d9:
                    ab:1c:1c:f4:67:35:4b:43:c7:70:74:d5:10:8e:c0:
                    ae:99:60:86:92:6f:9a:73:6c:6f:58:35:fe:53:27:
                    31:3c:cf:89:49:52:be:fb:76:2e:ea:4f:00:73:76:
                    6d:f2:75:2e:64:15:9e:af:92:e5:1b:7c:c6:c5:01:
                    14:4e:af:f1:99:14:f1:12:de:20:03:e0:04:66:2d:
                    29:dd:c4:fa:ad:94:a3:92:16:5a:2b:db:41:00:a1:
                    fa:83:5d:57:b6:68:55:1a:88:8b:7b:72:bf:ac:ae:
                    d0:48:9b:16:d0:7c:25:90:0a:30:00:9a:5a:84:89:
                    9b:67:e9:81:47:b9:c9:10:88:c6:fb:61:fd:c6:78:
                    1a:b7:d6:78:c1:fa:b9:7f:59:5b:0e:3d:5f:e5:b3:
                    ba:d7:a3:85:ef:33:47:7a:84:0a:3f:2c:b2:5f:81:
                    e7:f1:2a:c7:fa:f5:70:bd:60:e5:70:ba:c6:d3:45:
                    29:89:c5:31:31:8e:16:c9:05:bd:ab:61:c6:e2:73:
                    26:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B3:19:11:20:F9:4F:B0:E2:ED:F9:8F:11:B1:3F:0B:E3:25:9F:C8
            X509v3 Authority Key Identifier:
                keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         15:1d:af:f1:8c:f9:4e:98:9f:72:79:35:dd:73:07:2b:81:ed:
         68:0b:ec:be:b6:4b:5e:09:10:ad:29:a0:3a:05:af:89:7c:d8:
         65:aa:6a:1f:07:ce:06:ea:2b:b4:81:d6:f5:9b:fe:0f:8a:ee:
         a9:27:06:68:1b:5b:e6:a9:d2:05:84:2d:91:99:4f:ad:68:59:
         d0:c4:97:d9:b1:12:91:35:8f:d8:ca:cc:e3:36:3c:d6:06:4c:
         ab:02:53:ff:57:a2:6e:09:77:8b:da:eb:5f:d2:02:9d:1d:09:
         2e:29:6c:3c:d9:21:1d:37:51:eb:ca:31:94:f5:26:a2:17:2e:
         68:90:60:c0:f1:8b:cd:ff:44:1e:ef:e8:d5:8a:3c:fc:57:8f:
         68:ed:b6:e4:d8:ce:d0:80:03:61:9f:1e:d6:92:0c:8b:28:b2:
         86:3c:0c:9d:f0:95:dd:32:f4:46:b0:59:66:06:14:cf:51:16:
         c3:98:02:7a:34:a9:5d:a6:60:5c:2f:f1:83:f0:a3:1b:37:c1:
         42:72:0b:a8:f5:8b:20:34:9e:82:e4:1b:d7:c5:95:84:a6:de:
         b1:4e:3a:a7:5c:aa:44:f6:f5:56:af:24:df:ef:69:8b:ac:1b:
         72:41:85:12:4c:b9:8f:83:30:50:88:ea:b9:fd:91:82:fe:8b:
         33:c0:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:06:58 2025 by rpki-client