
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
File:                     232967D03C1169374A898D1C8991F1ABE7744870.mft (raw, json)
Hash identifier:          5lsox8i8zO+40ZsQssLnLCk0Z5HLPZQSZ0gr+WlEGxI=
Subject key identifier:   7F:9B:8D:C8:C5:FF:3B:3F:8F:F0:37:DC:D9:07:44:35:49:96:53:99
Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70
Certificate issuer:       /CN=232967D03C1169374A898D1C8991F1ABE7744870
Certificate serial:       77FC819B63909F2420CEA1F6BAE2FE05E1DC9550
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
Manifest number:          02B1
Signing time:             Mon 03 Nov 2025 06:21:32 +0000
Manifest this update:     Mon 03 Nov 2025 06:16:32 +0000
Manifest next update:     Thu 06 Nov 2025 11:19:32 +0000
Files and hashes:         1: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: OrYEci2LXcYUd7zO3w5vMjUiO57zzyli3tlZ6qJrtVM=)
                          2: 232967D03C1169374A898D1C8991F1ABE7744870.crl (hash: sDRXnhaaK84N094QY01BrgNkgBbAj83b5NycpPJCovE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl
                          rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 11:19:32 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fc:81:9b:63:90:9f:24:20:ce:a1:f6:ba:e2:fe:05:e1:dc:95:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870
        Validity
            Not Before: Nov  3 06:16:32 2025 GMT
            Not After : Nov  6 11:19:32 2025 GMT
        Subject: CN=7F9B8DC8C5FF3B3F8FF037DCD907443549965399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:ac:59:69:02:e9:69:5f:6b:56:a5:92:d0:
                    08:dd:e1:d3:b8:de:5b:d3:b1:3c:a5:aa:c4:11:fe:
                    ea:69:b2:93:7b:89:f7:b4:47:41:ea:23:a5:af:a7:
                    ad:d6:f5:32:bb:50:1e:39:49:e2:2f:90:0f:28:35:
                    5a:99:3e:90:e0:14:4c:24:d0:ab:c9:d2:30:b5:c9:
                    e5:41:f4:c6:04:f5:39:8e:ca:22:8d:a7:6b:28:a6:
                    c1:6d:e2:e1:7a:c2:56:71:6a:f7:55:c5:96:40:88:
                    9b:a4:38:7c:7b:4b:80:6a:66:a4:97:1f:c1:08:43:
                    83:bb:d9:90:d9:c5:9e:16:05:e8:0d:74:97:b6:6d:
                    12:26:8b:68:4f:e7:7f:10:d1:e6:7d:68:bf:2f:c3:
                    c5:60:2b:8f:52:95:4c:53:79:78:7e:ef:c6:19:7a:
                    db:d7:cc:d6:e1:f5:f8:cc:5f:62:88:74:43:8e:e6:
                    50:af:9d:e3:87:9a:f7:03:f3:18:cc:6a:78:d4:d8:
                    aa:1d:25:b9:9c:d3:16:6c:cc:b7:b0:e1:f7:d5:d9:
                    3b:04:5e:c9:11:95:d7:2a:77:35:ef:c8:f2:4d:2a:
                    23:c7:90:9c:1a:ff:30:7a:dc:0a:4b:ca:74:2b:d1:
                    52:06:49:9a:50:0e:22:68:c2:21:d4:3e:94:9e:b0:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9B:8D:C8:C5:FF:3B:3F:8F:F0:37:DC:D9:07:44:35:49:96:53:99
            X509v3 Authority Key Identifier:
                keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         9c:9c:26:a2:21:2c:53:64:51:e2:90:84:e0:bc:cf:29:73:1f:
         da:2b:d8:3d:30:d8:36:92:2d:73:a7:90:6e:0a:b2:29:7d:cd:
         45:01:13:6a:c0:c7:d7:13:5c:e7:f3:46:9e:4c:5b:37:36:7e:
         12:15:3d:f5:af:e9:db:ef:50:3a:00:4c:16:ba:7b:87:98:39:
         3e:db:aa:dc:ee:f6:4c:59:60:ee:37:dc:15:e5:45:90:ab:3d:
         f6:b7:91:bd:26:08:07:15:c9:4a:7c:2b:42:0e:fe:88:57:31:
         11:9a:3f:cf:60:d5:59:59:0e:75:86:08:78:93:64:64:34:f7:
         47:b9:57:d8:b3:c7:70:f0:9f:f8:4d:45:39:71:1b:fb:3a:3c:
         2c:27:1e:9d:71:21:59:2d:30:32:90:a3:4b:58:5d:bc:9b:02:
         c5:02:16:d7:af:63:23:d7:ca:00:a2:5e:36:4b:83:37:a3:0e:
         5f:8a:da:0b:1e:c0:98:d5:b7:7d:c0:55:2f:d6:1e:84:bc:1e:
         28:82:61:94:07:88:59:97:76:d4:08:81:e9:0c:f9:dc:35:4f:
         55:ba:2b:a7:86:db:86:f1:31:90:49:35:ae:39:d0:7b:df:00:
         6f:23:ae:67:59:21:5e:45:8e:59:04:d6:1c:e6:4a:bf:96:40:
         26:0c:22:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:12:39 2025 by rpki-client