
$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
File:                     E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft (raw, json)
Hash identifier:          F5tHJKiuuPXYUZ8im2UMuPWKiHhF9IaRNRA/FSBuwPg=
Subject key identifier:   4C:DF:E0:AC:E5:5A:2D:40:2D:39:6B:15:E7:C4:6B:84:C0:AA:3F:8B
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Certificate issuer:       /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial:       509F6CC11FA10A8CEDA41643ED8F3945EB24FEE9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
Manifest number:          01A7
Signing time:             Sun 02 Nov 2025 21:00:51 +0000
Manifest this update:     Sun 02 Nov 2025 20:55:51 +0000
Manifest next update:     Wed 05 Nov 2025 23:20:51 +0000
Files and hashes:         1: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: 2f4uu7IrkIZq7UTq+ptH1NLF5HW0iMlWBn9DqvPnp4U=)
                          2: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: t5FEbOLpmmiM+pm5xNk45bS+68qbBIUF8y4AW5jVQqc=)
                          3: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: uQLjUBISMtz6q/VlBRFK79+EJlW80V1U4JVUQySqyvM=)
                          4: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: PfXBdlYDWEtVezNTe8gChl6D2vjrU0fVmVCcz01D0ac=)
                          5: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl (hash: 0itMraoyMILaamldKuM3KhZm55bXvPP2fyWdfHguP+E=)
                          6: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: CzAMVi4LI/hA4dEq+gFLf1t2OAe5Bjc5LnZkwOWw6KQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
                          rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 23:20:51 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9f:6c:c1:1f:a1:0a:8c:ed:a4:16:43:ed:8f:39:45:eb:24:fe:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
        Validity
            Not Before: Nov  2 20:55:51 2025 GMT
            Not After : Nov  5 23:20:51 2025 GMT
        Subject: CN=4CDFE0ACE55A2D402D396B15E7C46B84C0AA3F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:3c:45:6f:5e:df:1d:73:da:50:bc:8b:17:
                    bc:bf:0b:6a:f4:6e:98:b3:44:f4:b5:b3:22:90:32:
                    23:1b:b9:71:6e:4b:dd:aa:52:65:11:c2:a2:66:da:
                    da:60:0e:ed:ca:d6:88:55:62:b6:6f:14:e3:db:be:
                    a5:6a:58:5d:8b:66:f7:a2:30:e9:d3:90:c7:99:cd:
                    9d:0e:a0:c1:71:e1:e5:6f:6b:77:15:b2:92:ca:67:
                    c3:64:4b:2b:1c:6c:6d:ba:0b:0d:b7:94:f7:e3:b0:
                    db:0b:f7:c4:66:4e:3d:50:99:3b:4f:07:0d:27:0d:
                    9d:0a:38:e5:7c:d4:81:78:ae:d0:e7:95:77:e2:58:
                    8f:95:9b:44:47:62:72:ae:72:b1:9e:94:98:ba:d9:
                    57:6d:c7:0e:71:c9:a8:b7:48:7c:aa:0b:ad:e7:06:
                    11:08:17:d4:54:92:91:95:19:ef:86:73:f5:25:d4:
                    de:f0:2b:9c:ce:d7:d8:06:eb:fb:7f:9f:8a:0b:92:
                    31:7a:48:a6:01:1a:df:7b:d0:bf:d9:de:69:01:e9:
                    88:3f:9a:f7:f6:78:61:b2:fc:b4:9c:96:a9:3e:6e:
                    1a:26:0d:f1:17:0b:df:35:c5:f3:a1:a7:f3:70:92:
                    13:77:e9:ac:f8:7f:11:41:1b:aa:1a:b0:d3:4e:ce:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DF:E0:AC:E5:5A:2D:40:2D:39:6B:15:E7:C4:6B:84:C0:AA:3F:8B
            X509v3 Authority Key Identifier:
                keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         1e:2c:73:61:a3:f1:c2:d3:96:39:2c:b6:1b:e8:f5:d2:f7:fb:
         94:5f:db:1e:58:d2:13:20:da:31:20:29:cc:80:fe:40:09:b9:
         63:25:6a:a6:78:a3:a7:48:09:ee:dc:fa:08:c6:5b:1e:5c:b4:
         e0:0d:e4:0b:eb:10:99:25:49:15:1e:3f:33:95:08:2e:6f:77:
         19:cb:a6:f2:16:5b:b8:48:bb:56:e6:82:82:a9:ad:36:be:b2:
         8a:ff:ef:bf:24:10:6a:c9:77:22:89:a7:d5:de:24:5a:5f:b9:
         84:24:c4:18:ea:80:27:03:4e:22:80:51:3a:c4:b9:e9:2c:23:
         9a:e7:51:41:2c:21:3e:6d:a6:6c:23:89:45:2a:b8:b9:c7:02:
         e8:da:c8:21:ba:6c:71:66:18:39:5a:84:5f:31:93:49:8d:f6:
         57:e3:87:5f:f3:23:9e:97:63:bf:11:bf:e1:49:81:7b:73:35:
         b1:1c:41:fc:18:01:41:dd:1e:bc:6a:95:86:0c:89:ff:6e:1b:
         4c:f6:42:8f:3e:35:e6:fd:28:0b:8d:00:df:85:9f:30:3d:36:
         4d:15:f6:41:a2:08:66:88:48:ce:24:96:f5:fe:0e:03:00:eb:
         df:09:61:57:04:55:98:76:f0:22:53:ee:ea:23:d8:54:85:29:
         ec:21:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:58:37 2025 by rpki-client