Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
File:                     8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json)
Hash identifier:          oi00MghxteoC+hoBiaQ4/pALlHqbYSqWG6+D77E5UzI=
Subject key identifier:   81:BD:05:D6:03:AC:05:6A:32:15:7E:48:81:40:56:AA:AE:C1:D8:C5
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       49BC66FA024D848A6339908298853B5DB7AF51A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
Manifest number:          0526
Signing time:             Wed 17 Sep 2025 19:52:14 +0000
Manifest this update:     Wed 17 Sep 2025 19:47:14 +0000
Manifest next update:     Sun 21 Sep 2025 06:34:14 +0000
Files and hashes:         1: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: LN+YrVCzUblkTbFghEN9RcfZWB+oIkio+9woygN18Nk=)
                          2: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: q6gnQ689gbyPRWkFyTqwu7clrVFZi6YA0qntQoU052Y=)
                          3: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: lejxupJB/ypozilIjk9IOKEOtlHup4PnPlCfI+BqLVI=)
                          4: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: 0on0Zr09JZO2uwExsn4al/aKrzhro4Rbk1hM7yfdFaI=)
                          5: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 8kcmZ4RG24jB44cBv71IJKv0c+Dtp9Ygk9nrjPzZQxo=)
                          6: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: 6BZFe33/a07P77heVgE/RRa/s7Eo4pTfBbM0ftWFlFs=)
                          7: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: zqqM4+D0YvV3kzADDLg9UoTtA+fv3LSZ59niExdp6h4=)
                          8: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: 1wEjJgzGmGFQx1qLaHwF1vXvoQd7g22cQT5tuVMpCSs=)
                          9: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: nBHgJ9scpxnDLh4WsmH3WPakx6Rx02RsuPBuZbUxKAs=)
                          10: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: mVz7y5GIjdMsotwbqCSm43esq8jjhGSc0SXDmY9f/To=)
                          11: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: w3mgpqsf+QCQ0IESSJ7u/cpRjR0jksdX+ZR9wNYh8rI=)
                          12: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: t5dSILf0M9LETh0ONTCtPeHbE5Gq+eulQJzX449lTa8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Sep 2025 06:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:bc:66:fa:02:4d:84:8a:63:39:90:82:98:85:3b:5d:b7:af:51:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Sep 17 19:47:14 2025 GMT
            Not After : Sep 21 06:34:14 2025 GMT
        Subject: CN=81BD05D603AC056A32157E48814056AAAEC1D8C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:d8:4f:2d:5c:ce:7b:c5:84:30:23:c6:8a:
                    c4:ad:c2:80:c9:88:c9:4c:a4:73:45:0f:92:0a:e4:
                    cc:3f:37:33:0a:da:d6:3b:c1:1b:a3:29:28:11:bb:
                    32:02:7e:a0:e1:2f:9c:50:8b:4d:00:93:e5:9d:30:
                    10:d9:5a:68:61:25:2b:f1:73:d3:21:dd:e7:28:12:
                    d5:d2:3c:02:5d:7a:4c:d6:21:26:45:38:a9:cb:c4:
                    f5:71:69:a8:0d:5f:92:62:b7:20:33:34:cf:00:96:
                    9a:aa:3d:80:8b:18:c3:9e:98:1f:89:ea:b0:34:d8:
                    20:07:50:1f:be:86:b9:d2:22:1d:11:36:84:2e:fa:
                    41:9b:95:25:5f:f6:b8:e9:c0:4d:53:ab:83:0e:f2:
                    c2:5b:09:f1:bf:6d:94:32:39:21:f5:96:e4:4a:ce:
                    cb:28:31:88:e7:dd:03:3b:f5:99:7c:65:c0:5c:25:
                    7e:c6:c4:81:a0:df:a9:d4:bc:3c:6b:15:43:f6:bb:
                    f0:2c:e5:e2:09:7b:a6:20:2c:58:e1:08:a3:6f:07:
                    c9:76:93:94:30:2c:61:88:b7:d0:2c:eb:3f:00:58:
                    9a:e2:a0:e8:7a:42:0d:94:da:c2:86:df:7f:14:93:
                    00:42:09:c3:86:21:d2:8e:f4:92:3d:94:e3:c8:08:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BD:05:D6:03:AC:05:6A:32:15:7E:48:81:40:56:AA:AE:C1:D8:C5
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:48:a8:2a:a8:fa:a9:62:1c:a2:7c:a4:ea:49:0a:df:96:80:
         db:14:fc:7b:34:9b:07:81:ea:a5:e7:5d:0b:dd:07:99:29:1a:
         c0:97:25:3b:19:75:f9:2f:31:36:bc:82:03:7f:cc:9f:e0:f1:
         eb:bb:6b:36:5d:7c:49:1d:14:ab:99:69:ee:5f:75:6c:25:13:
         02:05:fb:10:f7:41:e8:18:a2:db:85:9a:f2:ac:32:d5:4a:18:
         cb:78:9e:36:f7:1b:d2:64:08:16:38:db:75:14:96:dc:dc:52:
         d0:c2:be:e1:b6:f2:fa:a8:33:1e:22:6d:d6:a6:a0:f6:62:9a:
         b5:b8:bd:dd:4b:7b:11:ca:b1:e0:77:1c:36:74:6d:18:4b:cc:
         53:f6:f3:18:89:5e:47:72:49:87:0e:62:08:6f:8f:9b:13:3d:
         6a:40:09:68:54:e2:90:ae:a0:64:32:0c:15:bd:47:df:65:10:
         33:aa:b0:d2:b7:95:b9:89:14:8d:5a:27:8e:e5:b1:82:49:9c:
         02:9a:f3:5f:05:e2:da:3b:78:4d:5d:9c:b7:6d:5f:f6:47:55:
         47:5e:3f:7e:2a:e6:2d:c6:e0:93:57:e9:df:99:3b:82:66:47:
         3a:6f:08:83:9b:54:fc:25:94:f5:32:b8:99:a3:f2:cf:8e:5a:
         02:ff:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:15:08 2025 by rpki-client