
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
File:                     1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json)
Hash identifier:          amBY4R3s8h1mgqqwQsQ8FkC9L8QHG2Psq8DVTShHgIY=
Subject key identifier:   26:94:02:1D:42:3F:5E:F7:CB:3F:67:08:78:94:3C:7B:1C:7A:97:F9
Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
Certificate issuer:       /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Certificate serial:       1F8892C03F4F3BC65ED798C663BE6DB4A526A366
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
Manifest number:          0124
Signing time:             Mon 03 Nov 2025 18:01:36 +0000
Manifest this update:     Mon 03 Nov 2025 17:56:36 +0000
Manifest next update:     Fri 07 Nov 2025 00:13:36 +0000
Files and hashes:         1: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 18f8OBM8+ia5Uh/H3tljNYXZldWb+K9faa9nLSg225M=)
                          2: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: 4uTLKiRhjulU7GOXHvon2zkM6nMTkkXWkFIniQjvCOg=)
                          3: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: e9mfn2TZpA97bNUAVISI23imEGzh1RseXbhUXtsnwpo=)
                          4: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: Jd1nQVdoPb9xeVhKiBu85pl1W/vsrnMXJ91FlIH1uQw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
                          rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 00:13:36 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:88:92:c0:3f:4f:3b:c6:5e:d7:98:c6:63:be:6d:b4:a5:26:a3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
        Validity
            Not Before: Nov  3 17:56:36 2025 GMT
            Not After : Nov  7 00:13:36 2025 GMT
        Subject: CN=2694021D423F5EF7CB3F670878943C7B1C7A97F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:c7:f3:2b:f0:84:55:f4:60:90:df:85:8b:
                    5b:00:e7:81:1a:ea:74:81:a9:e9:f8:d7:42:b4:69:
                    dd:40:72:3b:e3:04:16:d5:c9:d6:db:d5:cb:12:47:
                    79:f0:06:76:26:a3:b5:e0:41:c0:9e:bf:4a:52:a6:
                    f9:91:77:68:ba:70:ce:a4:86:dc:a1:cd:69:0c:00:
                    cb:64:43:9e:db:24:fa:97:fb:32:3a:c8:03:f3:03:
                    c5:52:35:83:aa:ca:f8:7c:60:5a:8c:14:7a:d3:cc:
                    52:da:71:c0:bc:a2:5e:7a:28:eb:92:d5:ca:20:ba:
                    f7:be:cf:a3:fa:a0:8c:f0:bc:fb:7f:3d:ad:1c:3b:
                    01:e0:1c:2f:c5:0a:cd:a9:12:b3:e8:b3:7c:76:a0:
                    88:f2:62:31:70:88:53:c5:40:f4:ba:8d:71:df:80:
                    11:4d:d0:f0:83:f1:e6:85:a9:1a:ba:90:a8:9e:60:
                    59:ed:60:e8:8b:e6:cf:99:c4:75:e1:76:25:66:90:
                    eb:2f:83:1c:2a:a9:52:6e:f2:0d:60:60:5e:06:ce:
                    57:f8:5f:6d:c2:17:a1:c1:9f:c0:b4:31:ca:76:39:
                    d7:b9:32:f3:1a:28:b8:da:b2:6a:0b:4d:d4:0e:d9:
                    6a:cd:57:df:ce:c4:65:0a:22:83:47:2e:b8:a6:d2:
                    47:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:94:02:1D:42:3F:5E:F7:CB:3F:67:08:78:94:3C:7B:1C:7A:97:F9
            X509v3 Authority Key Identifier:
                keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         0e:b3:86:df:28:09:2b:17:dc:c8:58:7d:bf:8d:5a:be:58:cf:
         40:6e:3e:d9:86:8c:8b:60:8b:88:e6:84:2d:9c:bc:a8:79:e5:
         1d:6b:fe:75:8f:20:3d:dc:cb:f1:01:5f:80:40:28:34:48:40:
         e4:e6:17:9e:8f:5c:2b:24:6f:3e:68:f3:16:87:22:13:5a:f4:
         d2:7e:4c:97:dc:3b:c9:2a:06:9f:c9:ec:d0:65:d1:f4:70:2d:
         87:58:01:e4:4b:3e:24:eb:e1:d9:c9:c7:96:a0:fd:94:ef:75:
         62:cd:1d:43:b6:1d:c3:9d:14:e1:b2:8e:1e:9e:30:be:64:45:
         fc:3d:4a:11:b5:28:60:bd:b7:37:07:5d:12:29:5d:f1:45:69:
         65:27:a3:4b:eb:db:18:0a:26:0e:28:e7:44:e9:d0:41:5e:a9:
         03:7f:a0:50:83:88:43:31:77:cc:2f:ee:7e:9f:a0:e4:b2:f6:
         41:26:9b:10:27:b2:f3:d7:20:0b:9a:52:f7:2f:4a:91:43:84:
         6e:89:66:f9:8a:86:5f:83:fb:a4:5d:b6:6c:59:51:d9:e2:68:
         17:0d:d8:c0:d8:1a:52:17:c4:7c:65:35:d7:30:b8:2a:55:c5:
         5a:6d:b9:97:50:f2:e6:ad:5b:35:2b:35:90:19:ce:ea:67:5c:
         ca:df:e2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:58:59 2025 by rpki-client