Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
File:                     945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json)
Hash identifier:          bZPW1jK46reg1z2h5dCL34gTtFOiIu5Kr28Gi7Ddi+E=
Subject key identifier:   78:53:4D:4F:5E:D3:36:A0:86:BE:A1:13:BF:A4:17:A0:A9:5E:DB:42
Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
Certificate issuer:       /CN=945AD192B10F71CE48362295A9C6281FE3395786
Certificate serial:       0EA4DD2F47018E86E85E2CC115648BB191A7203C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
Manifest number:          022B
Signing time:             Sat 15 Nov 2025 09:42:17 +0000
Manifest this update:     Sat 15 Nov 2025 09:37:17 +0000
Manifest next update:     Tue 18 Nov 2025 17:46:17 +0000
Files and hashes:         1: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: WREFzieTjkVnSngPtnMvzbWO7XiQPmuNrBJuEuu68Xs=)
                          2: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: HzhAdkWVPqyzjRfrKdf+sGJ5e8Q6OGeF8fvX/eoLEO8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
                          rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Nov 2025 17:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a4:dd:2f:47:01:8e:86:e8:5e:2c:c1:15:64:8b:b1:91:a7:20:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786
        Validity
            Not Before: Nov 15 09:37:17 2025 GMT
            Not After : Nov 18 17:46:17 2025 GMT
        Subject: CN=78534D4F5ED336A086BEA113BFA417A0A95EDB42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:2e:7f:1a:98:43:bb:24:45:73:43:44:b2:
                    7b:57:05:dc:06:af:33:01:83:e0:3e:7e:3c:c0:4f:
                    2e:73:db:b6:e4:d3:97:ee:2f:9d:34:82:94:71:d7:
                    ac:d5:8e:4c:6f:d7:5c:28:f9:ac:fc:f2:97:10:7b:
                    fd:f7:ea:e9:ef:27:3b:cf:13:0d:23:16:ea:b3:61:
                    f1:b0:64:b3:d7:f4:d8:27:f7:de:91:13:a7:d2:16:
                    cf:5b:33:a6:a0:9d:1c:c4:4c:ad:90:66:3d:4f:7c:
                    18:52:76:54:86:2f:0c:1d:94:81:58:14:d8:d2:55:
                    70:f8:8b:7b:f7:5e:0a:95:5a:0e:fd:60:bd:6b:7c:
                    06:7d:d2:c8:0b:9c:43:cd:6b:07:d8:67:01:21:81:
                    cd:29:57:9c:00:b2:b3:85:b0:94:8e:d2:cc:80:70:
                    4c:81:98:29:34:78:2d:4d:21:ea:a6:79:28:cd:3d:
                    69:99:50:b0:fe:c8:f5:a7:a7:1d:e5:16:db:f7:a0:
                    18:88:37:72:48:f7:39:6a:db:8b:fa:41:22:f2:c6:
                    e0:fa:e1:e5:77:a2:43:df:74:a3:27:7c:24:75:fb:
                    d2:a4:75:d6:4f:ab:90:0c:65:90:7f:32:6f:ad:d2:
                    ca:94:00:47:85:b6:88:c3:ae:6d:cd:14:63:f0:9e:
                    ab:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:53:4D:4F:5E:D3:36:A0:86:BE:A1:13:BF:A4:17:A0:A9:5E:DB:42
            X509v3 Authority Key Identifier:
                keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:32:fb:d7:62:c3:f7:4d:98:8c:20:22:99:10:99:72:08:ac:
         db:4e:fd:5d:6f:31:93:db:b2:bc:4f:87:a9:8c:8e:55:d5:a4:
         f1:7b:c2:0f:1d:b1:89:74:c5:39:c0:df:cd:2f:ba:44:ec:4a:
         9e:ae:53:83:35:f5:aa:b6:80:4d:22:ad:7f:52:f4:46:8a:4d:
         db:99:e0:30:bd:8d:06:ff:ad:2f:6e:94:5f:7c:3c:9a:6f:32:
         71:f3:34:03:b4:6b:0e:87:a7:99:67:74:7a:06:b6:64:32:56:
         46:b2:af:48:d7:e5:5d:44:ca:24:74:b2:60:e6:2a:07:d0:0e:
         7f:68:b4:9d:54:54:ea:b0:be:52:80:88:37:18:13:fc:53:95:
         1e:de:cb:b4:fa:7b:2c:3a:ea:5f:d3:81:21:ad:03:d4:d4:6e:
         13:74:4b:aa:d1:17:46:a3:e2:2e:ff:01:eb:bb:49:99:20:f8:
         67:71:98:71:25:5f:4d:d4:b2:62:85:27:b9:e7:8f:6d:1a:bd:
         bb:83:e0:34:ee:5e:0b:c3:08:18:d7:e9:d9:59:f7:01:20:62:
         33:f5:12:96:69:90:3b:bf:3e:c2:4e:ae:c1:72:04:4c:ec:c0:
         b2:8b:bd:03:b6:f9:a1:a9:52:88:cd:d0:fd:08:c1:1e:c4:1e:
         3e:2d:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 18:53:30 2025 by rpki-client