Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
File:                     1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json)
Hash identifier:          qbgA1VYZDPOKV8L6OcSm9gwTJVM5AByBJU/+8Pdkb5k=
Subject key identifier:   19:E2:1B:FF:6C:1F:F0:3D:1E:11:43:6F:2F:AC:40:E5:9D:3A:CB:BD
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       132BFADD54EF67A475E2937D7B0EABEAB8B4C4FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
Manifest number:          0278
Signing time:             Fri 31 Oct 2025 00:31:53 +0000
Manifest this update:     Fri 31 Oct 2025 00:26:53 +0000
Manifest next update:     Mon 03 Nov 2025 05:18:53 +0000
Files and hashes:         1: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: N2Cye2k2ArU32sR4BIWlxYfXaoMWkhmX2inof4bL/qc=)
                          2: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: 0bz9arJVEpW8niw69al2HqlLatQbtnCd6cPuE1FtiQQ=)
                          3: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: I2GxvF+hElG1yAh007aM/yMEViDm+JYfJmwRWj1ftM0=)
                          4: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: s1oc4oY30dv4ZziJEtii0WqAjWHN4yIZ+Wcll5R6Lx0=)
                          5: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: qNzsGiJwf7XGjGP4j+CDhg7oJnuuTy/kX7unl+wQ3hg=)
                          6: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: jfT+fFK9MuHkEFZ88hcVlJwwMYmz7o5P6pVJldda2zA=)
                          7: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: KyjP36QU2B5WmwOGj/w2MpttC7+1bk2GysORLqVSxsM=)
                          8: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: RIaxQt2BdMly6jZqFEt6v4+R9ZCRoPt0bRRhz87aHRQ=)
                          9: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: tVX60KIpnKMB23Pkr3pSMdVfDO+7BdFgyKjSfJSbpxU=)
                          10: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: pyK+jcOUykm+t8TqsiBiASQSX3weZBQz2lnXkKpEWw8=)
                          11: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: zszkuvV/DGJtyi38SwI+iyz6P0zwyMAcKOGOc8uu7vs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 05:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2b:fa:dd:54:ef:67:a4:75:e2:93:7d:7b:0e:ab:ea:b8:b4:c4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Oct 31 00:26:53 2025 GMT
            Not After : Nov  3 05:18:53 2025 GMT
        Subject: CN=19E21BFF6C1FF03D1E11436F2FAC40E59D3ACBBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:cb:67:21:0f:e5:f2:ad:c1:8c:34:46:32:
                    a1:11:56:b9:2b:47:e2:81:0e:41:8c:79:cf:ac:6f:
                    2f:b8:10:1f:ab:86:70:ba:ca:41:8e:89:a7:f0:9a:
                    1b:4b:c8:24:a4:21:5d:de:85:92:7e:d4:df:78:1b:
                    e3:9d:c4:19:21:a9:ca:54:bd:fe:22:28:cc:c6:93:
                    6a:88:65:32:9b:15:a5:52:e1:99:a5:76:22:0a:fc:
                    06:c2:3a:fb:25:f6:e9:06:69:b4:af:0a:ec:ea:05:
                    0f:33:3a:04:2d:3e:e8:2f:7c:45:44:b6:7b:15:da:
                    7b:a7:67:1c:53:af:9c:51:a5:0d:46:32:dd:7b:ab:
                    b8:57:2e:56:91:88:35:ec:3f:81:d5:6e:b7:03:b9:
                    b9:a2:d3:bf:87:e9:36:aa:67:9a:2b:1e:e0:a2:12:
                    76:ad:a6:15:d5:27:5e:3d:94:8d:d2:3a:8f:39:50:
                    87:74:42:bf:8f:52:fc:12:bc:5f:ea:c3:4c:32:01:
                    93:6e:b7:b6:f0:31:ea:3c:cc:e1:e7:79:17:3e:32:
                    3a:20:b0:3e:86:be:c0:b7:5c:e8:4d:fa:c4:a0:76:
                    5c:82:25:52:08:8a:ef:9a:79:e8:4b:c1:9a:c7:71:
                    04:d4:d7:01:e6:8f:4b:95:ca:50:2f:ba:dc:41:b6:
                    fe:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E2:1B:FF:6C:1F:F0:3D:1E:11:43:6F:2F:AC:40:E5:9D:3A:CB:BD
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:56:11:49:4a:f1:1d:55:fc:e0:b2:91:0c:8e:f5:41:1e:84:
         6d:c0:92:85:de:ae:81:c5:ab:06:84:34:e0:80:af:64:da:f2:
         b7:bb:69:4d:2d:30:17:72:8a:fd:a6:9f:fe:28:9a:dd:ac:66:
         a7:67:81:f8:31:4e:84:07:e5:e8:0e:13:9c:45:34:73:36:8f:
         78:1d:d2:16:0b:48:c5:78:f9:92:54:8c:68:ca:e0:19:2c:07:
         03:46:39:62:62:4f:95:3f:60:d8:0d:e9:5e:47:0a:f8:24:ae:
         fd:3b:ce:55:30:35:b7:de:71:b6:3f:96:43:31:37:e3:02:f4:
         e3:5a:77:21:71:36:89:26:57:0b:39:cb:82:d5:e8:1c:0a:13:
         78:80:cc:5d:c1:0b:0f:1a:91:f4:b2:fe:62:d5:e6:64:0e:a0:
         b4:b8:56:43:7b:b1:95:90:d8:01:89:54:6c:7e:ae:98:b9:73:
         e5:b0:8e:aa:94:8b:48:55:8f:66:60:55:fc:5e:df:b4:d9:97:
         bf:76:bc:6b:4b:55:d1:b3:bb:ce:56:aa:a6:90:c2:81:2a:7e:
         59:64:03:da:c1:16:e7:2e:70:3b:aa:0d:22:16:fe:97:40:c7:
         e1:36:b1:97:a2:0f:96:58:d9:bb:9b:54:53:6b:95:76:bc:a9:
         ef:8b:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 13:30:22 2025 by rpki-client