Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft
File:                     DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json)
Hash identifier:          zF0U843GHQkH9JMrK7Jpt7IGN6kvBougWjDvGtnq0Uo=
Subject key identifier:   22:7F:E2:F3:D6:66:30:E1:54:47:44:4D:63:9E:02:9E:44:82:61:1F
Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C
Certificate issuer:       /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C
Certificate serial:       7400545301FF85F094F56E725A63E94366E58D44
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft
Manifest number:          01E1
Signing time:             Fri 17 Oct 2025 12:01:37 +0000
Manifest this update:     Fri 17 Oct 2025 11:56:37 +0000
Manifest next update:     Mon 20 Oct 2025 21:12:37 +0000
Files and hashes:         1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: d8a47uvb8GdoCNEqIhIOqfevScYeDFBzwWAjCwE8VEg=)
                          2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl
                          rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 21:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:00:54:53:01:ff:85:f0:94:f5:6e:72:5a:63:e9:43:66:e5:8d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C
        Validity
            Not Before: Oct 17 11:56:37 2025 GMT
            Not After : Oct 20 21:12:37 2025 GMT
        Subject: CN=227FE2F3D66630E15447444D639E029E4482611F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:a0:03:91:db:3f:fa:d2:8f:f0:88:b6:71:
                    0c:9b:18:3d:57:d7:f5:89:5a:45:aa:72:de:42:d6:
                    95:9a:9f:c1:97:6a:51:fd:f3:17:29:2f:d9:79:dd:
                    1a:9a:b1:fc:fc:1c:94:79:7d:ad:8d:15:f0:78:99:
                    ec:58:b9:a9:ea:36:4f:6a:bd:5b:61:7f:ca:04:2b:
                    af:13:70:96:eb:98:af:d0:1e:e7:3a:07:0d:00:d3:
                    84:85:65:35:02:b1:db:44:ac:5b:a0:90:b3:22:ce:
                    56:80:2f:5c:b8:15:8c:28:6f:e9:4c:69:92:1f:60:
                    eb:65:ef:1c:2e:a7:a1:37:32:3f:f2:8d:ac:9b:d5:
                    d0:62:19:51:93:dd:7d:ea:f5:fa:0a:6b:1f:21:59:
                    ad:ac:46:66:6a:47:9f:20:86:38:5f:b3:c0:69:ae:
                    bb:c9:4d:4a:36:1b:c6:7e:e2:8e:04:c2:37:c7:9e:
                    08:71:2a:a5:7e:75:ba:06:db:c0:15:e4:ff:0d:62:
                    e8:38:90:1e:f6:e7:96:38:7c:8b:bf:01:10:a4:98:
                    60:3c:ab:50:12:06:1a:2b:4c:86:27:60:6f:21:31:
                    b9:3a:9c:b8:34:b2:fd:a6:b2:1b:41:d9:21:7d:db:
                    cf:c7:b7:de:ae:2f:4f:d5:d2:a9:54:3a:3c:6e:9f:
                    64:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7F:E2:F3:D6:66:30:E1:54:47:44:4D:63:9E:02:9E:44:82:61:1F
            X509v3 Authority Key Identifier:
                keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5f:6e:a8:02:b7:ba:6e:7c:78:0d:0d:86:1a:a6:a1:13:30:
         a1:ec:e6:34:48:51:00:20:a2:83:97:b2:b3:08:cd:27:c8:ce:
         84:fe:7c:f2:23:af:b6:7a:a0:b3:0c:0d:5f:7f:ef:d6:81:dd:
         80:92:ab:c5:b5:6d:b1:df:6c:00:a8:7e:f8:df:c1:4c:ef:0e:
         1c:d6:09:48:ea:d9:8a:21:98:8f:1b:f8:ed:f8:6a:16:61:bb:
         1b:15:a3:d1:f9:e4:a8:fa:da:b0:8c:b8:bb:b8:c2:43:90:67:
         4f:f0:45:14:de:e9:dc:35:cb:7d:40:58:d8:de:32:01:87:47:
         c8:6e:37:11:c1:40:a1:95:be:79:b6:b1:0c:6a:3a:1e:ef:6d:
         91:bd:9c:44:01:91:2f:95:f1:6e:52:70:a9:73:dd:58:46:d7:
         d9:a5:c1:d2:2f:56:f1:2b:cf:29:6c:4c:fc:3e:44:b7:21:f3:
         ad:03:e7:a8:88:50:98:e4:6d:43:1f:0a:9a:bd:a1:d8:82:0c:
         7f:98:62:0f:19:c8:97:0a:d6:79:bb:9c:d1:e5:68:08:d2:1f:
         5d:a0:d6:21:9e:3e:67:8a:76:f2:ee:52:88:d3:66:42:2e:14:
         e9:b0:3b:e3:4c:74:20:0f:d6:e6:73:68:f7:f0:95:da:cc:a6:
         53:56:f7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:41:39 2025 by rpki-client