Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft
File:                     B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json)
Hash identifier:          diz3I7pbTN4t+csxGLyZToI5lJV32+26unpV1K5RbsM=
Subject key identifier:   8E:3C:AA:A8:66:FA:BE:4B:0A:44:BE:2C:56:31:D4:37:2E:49:51:93
Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12
Certificate issuer:       /CN=B2650BD2D997B6C198A4B362B7395AC364683312
Certificate serial:       3C766B894634316507FEBCDE391BA34BCFF1D474
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft
Manifest number:          01F6
Signing time:             Thu 30 Oct 2025 03:30:58 +0000
Manifest this update:     Thu 30 Oct 2025 03:25:58 +0000
Manifest next update:     Sun 02 Nov 2025 13:53:58 +0000
Files and hashes:         1: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: 0JxUHmriRDMAE/MNY+hKzSfk4jhAQrUyn9W0XUfKuVw=)
                          2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: IFrFNgL9nGnkBy6pVhjob4v5DLOWZyxcdQ+rkKOm7OM=)
                          3: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: Din5W7YK7LMJbRJUi9wsZasS4GJU6jj09R0J09VzjXg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl
                          rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Nov 2025 07:08:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:76:6b:89:46:34:31:65:07:fe:bc:de:39:1b:a3:4b:cf:f1:d4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312
        Validity
            Not Before: Oct 30 03:25:58 2025 GMT
            Not After : Nov  2 13:53:58 2025 GMT
        Subject: CN=8E3CAAA866FABE4B0A44BE2C5631D4372E495193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fc:11:6a:e5:a8:67:41:85:90:f1:72:a8:86:
                    09:49:14:6b:88:b7:ee:72:88:ac:47:9d:be:16:e0:
                    ed:25:d3:e3:f2:4a:c1:a9:ef:02:ad:0f:e9:ec:94:
                    3b:c7:16:ba:39:9a:11:11:ec:ce:b9:60:eb:fb:e8:
                    e3:12:c7:25:05:4d:9d:46:e4:ff:9e:b7:b0:20:bd:
                    8e:7d:0c:3f:81:bd:19:eb:46:59:a6:3a:e5:48:b9:
                    44:64:a0:0b:1f:9a:c0:b7:bb:57:e6:02:c8:a2:7b:
                    ba:07:28:39:34:87:e0:2b:3a:6a:04:32:32:a0:20:
                    79:11:b8:1f:35:7b:33:71:08:b3:26:43:ce:2f:00:
                    75:c4:9a:5d:4c:cb:79:21:f1:80:f6:52:7e:78:00:
                    db:76:32:52:7a:f6:a2:7e:28:c9:0d:83:a4:7b:41:
                    0f:4d:39:f4:59:30:c8:99:b4:60:6a:d1:06:0d:5a:
                    fc:08:f5:93:55:2d:51:42:c8:c5:52:ef:92:be:b4:
                    a8:3f:87:4f:3b:ff:75:a2:9c:6b:d3:af:9b:c2:6a:
                    86:ef:5a:14:25:14:0a:8d:b3:e7:1d:40:3f:a4:14:
                    23:b9:f1:1c:55:ed:75:60:7a:73:a0:31:9d:c9:7a:
                    e4:2c:1d:1d:1f:ca:f3:bf:e1:29:07:4e:98:8c:a8:
                    88:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3C:AA:A8:66:FA:BE:4B:0A:44:BE:2C:56:31:D4:37:2E:49:51:93
            X509v3 Authority Key Identifier:
                keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:33:4c:88:a4:d2:ab:0c:89:13:11:f6:36:d6:c2:1f:1e:ea:
         c3:a4:00:d5:12:81:c8:e3:d2:ea:f6:07:eb:7a:cb:2e:9f:f4:
         5d:99:59:ff:9b:27:44:7a:d6:93:b1:5e:fb:53:bd:56:75:8c:
         4d:44:7e:39:77:95:d0:9d:ab:df:43:09:c1:e4:f9:f8:33:39:
         50:69:27:93:da:b5:62:b3:d5:b7:70:54:54:46:16:61:c8:a1:
         ef:4d:75:3e:b5:a7:e0:d9:38:ed:6f:f0:34:13:e1:b9:bf:29:
         2a:70:20:e5:08:29:75:ec:46:e1:26:7c:55:12:39:78:80:6d:
         65:c9:26:ab:cd:27:eb:82:7c:6d:38:04:f2:9c:a4:28:b4:2e:
         fe:28:86:cb:a1:11:81:f2:7b:ce:ff:82:0f:e2:20:b6:1d:31:
         74:b1:fd:fa:c3:a2:67:0b:e2:79:e9:cb:8a:cf:bb:49:17:f2:
         29:43:c8:f3:f4:a9:5c:85:c0:94:d7:50:38:fa:ef:2d:37:78:
         3a:9d:09:a8:50:f8:22:16:4c:53:af:24:3e:9c:21:cc:ea:f7:
         9a:3e:05:d5:3c:9d:fe:ee:b5:43:b1:8e:c7:43:46:43:a3:8d:
         60:97:d3:a3:b9:f9:a0:87:2c:2a:6f:64:bd:78:61:c8:60:bf:
         3e:a4:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 07:57:05 2025 by rpki-client