Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
File:                     00EE953FD699788668C724460F4D8D420238194F.mft (raw, json)
Hash identifier:          MFSOGPC673v68RcEPnqKCO6NljPpg9slKi+wO3azU7c=
Subject key identifier:   93:56:6E:DA:A7:2E:A4:1A:CA:69:0C:27:61:91:8A:29:26:7E:3F:AB
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Certificate issuer:       /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial:       16877FDAD62D21C46FC7C4707A97CE70F363DEF4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
Manifest number:          0219
Signing time:             Fri 24 Oct 2025 14:00:39 +0000
Manifest this update:     Fri 24 Oct 2025 13:55:39 +0000
Manifest next update:     Tue 28 Oct 2025 00:53:39 +0000
Files and hashes:         1: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: SFv+wuFNNUXZIPzGgJ8H4FmCqsXvXTtUEEjtGiij04Q=)
                          2: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: V10gFKQc+WgMolRvJOryKxPX23lt9/y0uKRD456elbI=)
                          3: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: P5LJ10k2BHWyFCmNYnH84ZTaEVA9KJ8Poi0f/ODMh70=)
                          4: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: YWPfLwfnjAzwyRdQ8HMatujMpctNGsrqPWB+mJd3o7c=)
                          5: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: /6F+dCYfhj8nILz7NzSN2rSqER4M9P3bFQ45j14GuDI=)
                          6: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: jtfCyTfV0URchGl+wzEZEXq1ZK6wyh3Rdim0gK9JxbY=)
                          7: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: sAwAc9IZ0DLVOhouh4zmTpqaxK9YADxytwY1+gNq8u0=)
                          8: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: +0IYJt+ldEx6hRx5/LkWzdAnyMowfs90g5flb4WhwNI=)
                          9: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: s40PNuPdNfcWQatEkq0oOjj78y3YVxe60B1MhUs2hPU=)
                          10: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: FgOjY7TNj+vVOTY+T0f+/7XZ2PEhUJFN/481ZR8iBC4=)
                          11: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: oOdkzUMhWiV8RYKVpP+DjzstiVGxbGTPIWzG22cdnjM=)
                          12: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: rkVkBOM1gxwGdr/crh5svI3UEvA+KgJo/zG78neJc4s=)
                          13: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: ebM/F6KIH60LQhN77naN07o0NG2yDX1tXydmaED/mYQ=)
                          14: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: bvNupIpWmDhaL8rFDaTnVFDhI5fuAg0k+27/VGkzYJs=)
                          15: 00EE953FD699788668C724460F4D8D420238194F.crl (hash: pjM12WMGr11Zt+iIrVx7/mBMtkZS+JzsV2keurYB7jA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
                          rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 00:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:87:7f:da:d6:2d:21:c4:6f:c7:c4:70:7a:97:ce:70:f3:63:de:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
        Validity
            Not Before: Oct 24 13:55:39 2025 GMT
            Not After : Oct 28 00:53:39 2025 GMT
        Subject: CN=93566EDAA72EA41ACA690C2761918A29267E3FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:ef:c4:37:93:b4:d6:d6:e8:a9:43:1d:dd:
                    4b:47:eb:4b:fb:9c:e6:7c:26:72:a7:c6:8b:9e:5c:
                    70:17:6c:dc:11:1c:ad:0b:3a:d8:0e:fa:6d:e6:c8:
                    bb:25:24:e9:b1:c9:e8:b7:ee:4c:6d:3e:23:8e:22:
                    66:2a:87:34:69:b9:a8:22:7e:9c:54:5b:9a:7d:0f:
                    04:1d:52:5e:37:31:72:f0:63:69:5e:5d:43:f6:81:
                    a9:df:a9:36:bf:64:57:3d:71:e4:6d:d5:8c:ac:f3:
                    d6:d1:cf:4c:67:6a:13:30:61:d8:79:ba:f3:e0:52:
                    c3:67:1e:11:97:1c:4f:19:af:53:31:f5:2c:2a:95:
                    3c:71:88:5f:2f:6b:56:21:82:0c:2d:44:0f:1e:bd:
                    a0:e9:ab:79:a6:03:90:e9:da:26:3e:e5:b8:bf:66:
                    9d:8c:03:b7:75:4d:88:5b:64:63:f4:b9:7a:4a:75:
                    2d:2b:72:aa:78:16:a2:65:2a:e1:c8:dc:6d:df:f4:
                    aa:0c:72:06:a7:70:08:9c:a3:70:2e:89:ad:58:ad:
                    9c:ce:82:21:9f:2f:6e:d4:74:6c:5d:02:56:7a:86:
                    cb:59:f1:fc:d5:83:90:90:ef:e1:13:09:26:16:ee:
                    8b:3c:f1:b1:a2:79:1a:26:e4:2f:a5:e5:14:ed:0e:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:56:6E:DA:A7:2E:A4:1A:CA:69:0C:27:61:91:8A:29:26:7E:3F:AB
            X509v3 Authority Key Identifier:
                keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:e1:04:79:4b:81:3e:a2:d3:2d:a9:e8:e7:15:43:40:19:
         e4:21:4a:66:a5:c1:39:3a:e9:b7:4a:5d:3b:45:a7:e5:be:f9:
         33:98:5f:85:26:b0:bb:68:a5:08:93:67:ce:58:28:07:fe:26:
         fa:bc:76:4b:3e:24:5e:ea:bb:6c:b0:fd:73:d1:c3:61:28:3c:
         1e:65:73:22:65:a5:e7:30:03:53:5a:1d:0d:f5:0b:f6:7a:a9:
         56:fe:25:28:b5:8b:4c:58:07:a9:7e:bc:d0:84:18:9e:57:75:
         d5:70:05:74:c4:c7:ad:13:b9:c9:26:f9:0a:58:ea:c4:ee:e3:
         d9:00:5b:96:79:16:00:03:9f:d2:64:4c:da:ba:a7:95:d3:3f:
         29:e1:54:a2:1e:34:bb:fd:ad:21:27:91:7b:0f:ef:1d:2c:8f:
         53:71:ec:b8:75:b4:76:c0:87:c2:87:7c:8b:0d:4d:7b:1a:ad:
         bd:7c:28:1c:d7:4f:3d:ab:f6:37:f4:3a:d3:ed:3c:24:d3:bb:
         7b:de:c8:bf:29:9d:01:82:d2:63:1c:af:64:c5:fc:b2:73:e8:
         94:08:a5:c7:9a:a1:af:97:c9:56:cf:7d:bd:0a:44:52:13:d5:
         89:2d:21:32:4f:6f:fb:a1:68:6b:f4:78:00:42:0d:32:c3:2b:
         19:cb:df:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:20:02 2025 by rpki-client