Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
File:                     C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json)
Hash identifier:          a6MQDLjVPhlENTBEjSnAmgTaedL2Uyjj6uW5DsCi4SI=
Subject key identifier:   4F:3C:5E:E5:23:9E:81:05:C3:72:40:9B:0F:C9:C3:7F:BB:A7:FA:83
Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7
Certificate issuer:       /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
Certificate serial:       7AC20A923BCF378DC4EF183042461208CA8F7BFD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
Manifest number:          051E
Signing time:             Mon 03 Nov 2025 12:51:54 +0000
Manifest this update:     Mon 03 Nov 2025 12:46:54 +0000
Manifest next update:     Thu 06 Nov 2025 20:36:54 +0000
Files and hashes:         1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: l+8k6RF4N/kOoPS79QVWFg9bzKPUvxmTzfIS888gGzA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl
                          rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 20:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c2:0a:92:3b:cf:37:8d:c4:ef:18:30:42:46:12:08:ca:8f:7b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
        Validity
            Not Before: Nov  3 12:46:54 2025 GMT
            Not After : Nov  6 20:36:54 2025 GMT
        Subject: CN=4F3C5EE5239E8105C372409B0FC9C37FBBA7FA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:df:e7:1f:4c:ba:a6:f6:7e:0a:3a:4c:d3:
                    4b:17:34:00:b1:3f:6e:da:2d:a1:6d:4a:85:f6:dd:
                    3f:e7:58:96:f4:bc:48:20:f2:c0:93:50:80:f1:36:
                    f9:93:83:aa:62:d2:02:8b:5b:e2:40:61:ff:c2:f7:
                    37:e8:8d:45:d1:5d:fb:a7:9a:cc:18:e3:35:6c:0a:
                    66:2c:ec:63:95:37:00:96:d7:ac:70:55:2f:ba:3c:
                    0e:21:d2:a4:b4:9e:3a:27:1d:65:d1:9c:b0:8d:d3:
                    06:d3:37:3a:e7:f8:0d:17:8d:dc:be:df:b3:e3:ab:
                    63:89:a3:7e:05:b1:e2:5f:89:ca:7e:0e:82:86:fb:
                    00:99:f9:8a:99:18:7f:60:7e:28:ba:7b:04:5b:b4:
                    1f:c7:f1:92:dc:d7:c1:da:61:8e:64:cf:00:1e:b2:
                    5f:82:9f:6f:4d:c7:c0:f1:6a:36:cf:cc:cc:71:38:
                    ec:b0:65:42:66:4e:86:cf:8e:5e:da:7b:13:c9:e5:
                    96:1c:88:12:f6:c7:ce:c6:e2:f1:18:43:53:b4:c9:
                    04:ec:0a:af:52:66:22:73:35:13:4a:37:76:cf:1d:
                    62:a2:4a:a4:2f:d1:6e:34:40:1e:a0:81:a4:d8:4e:
                    a7:55:ef:e6:b7:97:b8:f1:c3:3b:0f:47:7f:6d:8e:
                    33:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3C:5E:E5:23:9E:81:05:C3:72:40:9B:0F:C9:C3:7F:BB:A7:FA:83
            X509v3 Authority Key Identifier:
                keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:af:f0:f2:ed:70:35:c1:12:62:3d:e4:39:8b:1e:81:c5:73:
         a8:f1:a7:ef:bf:14:c8:28:81:4b:13:f6:44:56:94:04:28:70:
         c8:4f:bd:22:81:2f:fb:e2:f8:50:6e:83:6c:cb:27:65:cc:14:
         68:07:cf:a2:63:60:4e:2e:6d:d0:c4:53:73:a1:5c:56:04:27:
         89:e8:56:d8:10:53:81:36:4b:0c:ad:d0:5e:0c:af:b8:d9:a3:
         54:42:67:b1:58:05:de:89:6f:d8:45:b1:e7:7b:7b:28:d4:63:
         cd:4f:f1:b5:d0:6c:88:09:f3:8f:d1:f4:86:4c:94:03:a5:76:
         4e:91:2d:8c:83:aa:aa:c5:27:54:7d:df:79:0b:0e:e5:d1:d3:
         3c:9d:13:18:fb:21:1e:2d:3f:54:0d:ef:a3:ba:3b:6a:ab:02:
         82:9a:42:62:fb:71:3d:e2:6d:49:05:49:d3:cb:72:54:13:c4:
         6d:9b:34:95:c1:a7:68:aa:8e:d0:b0:ab:f8:0a:5d:54:77:08:
         fe:1e:17:6d:9b:ad:5e:35:bc:5d:5b:22:eb:98:b1:4e:94:b4:
         41:6f:52:91:27:b8:76:f5:c3:b7:af:95:68:ad:95:b2:3e:66:
         8b:bd:fd:4c:34:c9:c3:76:21:b3:f0:e6:b5:8f:c6:97:f8:d7:
         a3:2f:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:14:39 2025 by rpki-client