Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
File:                     1976DD7D4FBDFBEB355F0B96690613959E106872.mft (raw, json)
Hash identifier:          2Is76WJDSN7JGxPM/HPz6wOJ63mTUqlMcKinGg4hxns=
Subject key identifier:   B0:5E:F3:FC:C7:C6:E2:29:AB:9C:00:E7:C0:D2:28:39:39:D1:E8:76
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       59B57A123E85300F01D21ED2B59955924F3BE1B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
Manifest number:          0525
Signing time:             Mon 03 Nov 2025 12:01:57 +0000
Manifest this update:     Mon 03 Nov 2025 11:56:57 +0000
Manifest next update:     Thu 06 Nov 2025 22:14:57 +0000
Files and hashes:         1: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: KQGoiV9BbegSAyEwUGTDu3EKXx16FmPyMikvR+g+1xM=)
                          2: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: IBqG3JTOb2BDjjHywaslInJ9v2wxZNaFPsj9QnGmFyU=)
                          3: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: LXI9mNoX4MU73UV9+XQILK6lbIuNFPN8Km57asx93mE=)
                          4: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: QRbMpzKdAfgfaj6wVJQ8tKGh3zUVZXKDZTbjWChNsSM=)
                          5: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: yJK4a8K11r+E+tJag+nY+8xsV5fpS89Sq9CzTcNXWcQ=)
                          6: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: GRueTMA2O7baTL3L4l0x1m5orgjkTOBplI10xnIAWvE=)
                          7: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: 7SlCCBwvpXf5oNDVNUKjezl2ujoj3pY3VJsCEIji7gA=)
                          8: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: Z0HkArdqIMJrBesbtTWXeTOTwVWpOh3aH8V39csunso=)
                          9: 1976DD7D4FBDFBEB355F0B96690613959E106872.crl (hash: BsbWl1WSZdoet81hSBO8AQOP2nJesJrXda8KjzdmSBI=)
                          10: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: 5aSqM2G2yl80LesSPcdF7TAurA8t2nRlgTMy90PqfEI=)
                          11: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: y4LCjeHJUSobMj/KV8lbwGmURe5cadaNn3OVULBwa7M=)
                          12: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: 8hhOR4WCINakOuDn9ngdKAlBm2vVq/aSfVO70m35uwA=)
                          13: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: X7lH+ZABzDfLLUY93QifZSz4LLPKca9OeiY0/c7tpYs=)
                          14: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: pgKybEe1UDr8NMq8IDGfdGJ30yQQRx6GVXnTuNxgMuU=)
                          15: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: 6MeWYAWtNqzt67sAV06u6BArwq93v2nLiPhDZr8DwFc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 22:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b5:7a:12:3e:85:30:0f:01:d2:1e:d2:b5:99:55:92:4f:3b:e1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Nov  3 11:56:57 2025 GMT
            Not After : Nov  6 22:14:57 2025 GMT
        Subject: CN=B05EF3FCC7C6E229AB9C00E7C0D2283939D1E876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4f:6d:71:b0:f6:58:76:09:be:54:f2:fc:96:
                    e0:bc:e1:c3:05:31:e2:72:e0:b7:8d:9e:84:80:33:
                    a0:e9:0a:ca:15:2f:c5:dc:e8:2e:d9:75:1d:11:0e:
                    ad:31:50:c5:92:13:73:04:6d:ff:e0:54:87:e3:f4:
                    d3:8c:29:ed:b9:be:6f:c8:11:87:57:c7:be:d5:d2:
                    5e:0a:77:94:6d:b8:0f:83:7a:d6:9b:4f:4e:10:aa:
                    c6:24:aa:1c:82:5d:d6:0c:a9:bc:07:24:a6:d7:89:
                    7b:5d:aa:cf:c1:c6:2f:72:10:0e:49:0f:b7:ab:c9:
                    44:c6:cb:4a:07:47:27:84:91:ad:81:df:12:e8:07:
                    46:13:bd:bf:c3:90:18:62:66:ae:b9:e9:43:ce:ac:
                    df:f7:3d:34:39:58:d3:ac:38:a6:6b:57:2f:e2:b7:
                    77:17:38:d0:be:f5:3d:cb:ea:89:4e:7d:98:34:ec:
                    5a:e1:da:7b:0c:bc:f2:00:ee:66:b1:5c:09:25:0d:
                    b7:40:e4:40:50:45:16:8f:d2:f6:1e:e6:d5:f2:d4:
                    ce:00:4f:96:51:a7:7d:e0:04:f7:5d:f1:f6:08:ca:
                    d8:8b:98:47:44:d8:11:af:66:2c:6b:ff:50:f4:ab:
                    b2:f9:ac:74:fc:a0:70:53:23:26:75:36:63:47:63:
                    9a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5E:F3:FC:C7:C6:E2:29:AB:9C:00:E7:C0:D2:28:39:39:D1:E8:76
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:57:a4:34:fe:8c:34:81:0e:89:5a:e5:4d:42:5f:21:06:cd:
         a9:40:e6:50:c9:13:d8:9e:ea:20:b4:37:36:d5:ee:32:5e:52:
         23:71:ab:de:50:ec:e7:ee:d9:ae:da:04:fc:e8:7d:12:2f:5a:
         80:60:43:01:06:8f:a3:12:f9:09:0f:2e:2e:b8:0a:f7:c0:c9:
         30:0f:94:97:12:31:28:14:c6:64:27:31:a7:b7:bd:6a:36:05:
         50:f2:9a:83:bf:3d:28:db:cd:6a:d5:57:ab:27:d0:d2:11:84:
         c6:81:3e:9c:a1:08:b7:2d:1a:4d:a2:19:37:59:e5:d8:27:1f:
         ef:de:8e:39:2e:f5:dd:25:21:ce:5d:43:8d:c3:79:6b:39:ca:
         18:02:e1:19:ec:77:2a:21:68:7a:81:fd:be:d5:64:4f:f0:22:
         35:ef:0e:62:2f:f2:ba:0b:d8:b9:ff:eb:5c:0b:22:ba:5e:1f:
         e4:34:79:3f:ad:22:2f:f4:19:f6:45:16:7f:be:8f:3f:74:18:
         35:92:b2:ab:f8:95:ad:23:89:16:3d:86:ab:ae:64:10:22:c3:
         ab:8e:91:a6:5c:b5:5f:51:dd:b8:37:87:c0:08:63:07:80:39:
         19:3e:6d:7f:b6:d9:0d:e2:8f:47:4e:81:68:fa:f5:57:39:2b:
         2b:de:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:49 2025 by rpki-client