Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
File:                     C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft (raw, json)
Hash identifier:          pb+U119ehku/gsJAM1CVWVrLE/KyLyOxt9PHHMaksvI=
Subject key identifier:   1A:E4:30:16:BB:BC:AE:3E:48:38:CF:6A:83:0E:CD:6D:2E:96:69:88
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       39BF9807522FD8746B72389BB82B41D1ABF88BAE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
Manifest number:          0567
Signing time:             Thu 30 Oct 2025 23:02:25 +0000
Manifest this update:     Thu 30 Oct 2025 22:57:25 +0000
Manifest next update:     Mon 03 Nov 2025 04:43:25 +0000
Files and hashes:         1: 3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (hash: FQpoIAC9AkHOj7gF3JsxAlTSaEMd9sYKYRZgoHuK7yw=)
                          2: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl (hash: l/CP3JV7+uqJ/GQwRmXJLGcB1M1d1mCg9fq9XFK6hHM=)
                          3: 3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (hash: VU0ZIZ2pkWLbL/yZX6A7PXJh4wAgz1Lfo/SmUnfVxjs=)
                          4: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (hash: bNy3O3/D8sze1XtEAGH5p80v+qY7OivRx/ulln1yeBc=)
                          5: 3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (hash: UtJjITDA9JHQ6VJXBVisu99jt556rMiuNEZSGObwvAc=)
                          6: 3130332e32322e3234392e302f32342d3234203d3e20313331313131.roa (hash: aY0anTpEZIat4/VeI01P3kjwTwtzNISJMDgT1crbBNU=)
                          7: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (hash: Ln/zBXifrR3kRN5QO8V+SWT6tpUWR1WnEob5sCVgP4s=)
                          8: 32372e35302e31362e302f32302d3234203d3e20313331313131.roa (hash: K0Qyq4TQNm4Gb6O7QApcWBMQFh1hlsrrhE70FrRZJng=)
                          9: 3230322e34332e3137362e302f32322d3234203d3e20313331313131.roa (hash: o4EuiIX65DjYa3ywyHTPaQSCo34pp+K8+jEM2BCf1A4=)
                          10: 3230322e34332e3137362e302f32302d3234203d3e20313331313131.roa (hash: 2LFPdQC7sfy55qfY3d9WCKIbl57qZU5+z9zs069asuU=)
                          11: 3130332e32322e3234382e302f32322d3234203d3e20313331313131.roa (hash: kWqKP/lyIhDws2h8Me6LYP31KQBLG0udbqPtWea7AOc=)
                          12: 3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (hash: 516xDtvKLseki+IBX6h+mKjxbuiKgwqfJB4LmOXicXw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 04:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bf:98:07:52:2f:d8:74:6b:72:38:9b:b8:2b:41:d1:ab:f8:8b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Oct 30 22:57:25 2025 GMT
            Not After : Nov  3 04:43:25 2025 GMT
        Subject: CN=1AE43016BBBCAE3E4838CF6A830ECD6D2E966988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:2f:33:9a:08:26:1a:20:12:ba:54:fe:7a:
                    24:18:25:61:f0:63:58:ca:36:42:ca:ff:44:0e:6a:
                    71:7c:08:21:ab:7b:2f:83:b7:2f:73:62:49:07:1e:
                    6c:5f:c9:f5:82:67:d6:08:cf:04:4c:39:10:8e:09:
                    d4:2f:ce:9f:28:c5:c5:c9:ff:36:30:07:2e:ab:98:
                    28:f6:18:37:f2:d6:4e:1b:c9:f9:99:c3:f2:ed:e1:
                    f2:07:24:ac:79:b2:61:ee:46:98:6e:ec:57:da:71:
                    e2:c0:66:bc:39:9e:98:13:0b:38:8f:38:69:ea:a6:
                    a1:e3:1e:1d:f6:9f:30:6a:7e:54:df:3c:de:fb:a6:
                    c1:2c:58:89:70:21:64:4b:a0:1e:4a:06:c3:08:f3:
                    3f:12:5a:a5:c3:87:a1:9f:62:86:cb:e1:69:93:39:
                    50:28:c5:df:8c:8d:41:54:d4:35:43:8b:ce:55:37:
                    6e:84:54:ce:fb:8d:d0:d3:7f:8e:fb:c6:f4:63:0b:
                    ae:89:fc:be:73:74:dd:89:95:20:c3:3b:af:b0:5f:
                    6c:c7:99:55:33:54:00:25:84:79:69:99:f3:d4:c4:
                    8c:e8:f1:71:da:c7:4e:13:06:12:46:b2:fe:36:6e:
                    df:1a:ae:75:45:b4:49:39:69:5b:b7:0b:f8:cd:11:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E4:30:16:BB:BC:AE:3E:48:38:CF:6A:83:0E:CD:6D:2E:96:69:88
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ff:8a:53:55:7b:b8:17:3f:1b:7d:c8:cd:f9:fc:52:46:e8:
         b6:f2:3c:d2:3f:32:2c:1c:7c:c5:87:87:0c:d7:fa:e9:23:21:
         c4:1b:5b:7a:ed:7d:bf:70:b5:80:19:81:c9:8b:f4:b9:8d:93:
         cf:1b:46:9d:4e:0e:09:d9:a1:41:f7:57:7b:e3:5d:91:70:4a:
         fc:af:c2:2b:9d:36:b0:48:9c:e7:95:49:11:6b:f3:e3:2e:43:
         08:97:1e:d4:37:08:dc:6d:7a:21:c4:02:ea:dc:6c:2f:fd:b5:
         e2:71:c6:03:e2:84:d0:00:3d:a1:73:6d:70:52:86:d7:7a:23:
         66:a3:b7:af:88:ef:d5:7f:49:c1:c6:ed:16:98:9a:68:7a:d5:
         6c:1f:60:5f:6a:81:c1:b6:7b:98:57:9c:4e:59:db:da:c9:83:
         bc:ad:68:8f:ec:4e:51:74:a4:f3:a4:2e:5e:c8:da:f2:57:5e:
         b2:dc:1b:6f:00:7f:47:f1:d9:f2:20:6e:89:37:6a:e0:93:6e:
         dd:44:92:ea:e5:b8:63:ef:2e:fe:37:4b:4e:93:fa:dc:82:10:
         18:e8:80:f2:b2:fd:16:d8:dd:e3:aa:70:39:db:0f:9c:ac:c5:
         aa:29:a2:d2:cc:63:ad:fc:43:a2:df:f0:22:34:85:b1:ee:cf:
         3a:c4:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 11:03:50 2025 by rpki-client