Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
File:                     10FC4D9D2403FC433C19BB76131325B776505E51.mft (raw, json)
Hash identifier:          bPvJWqZ3kZGUJQXkuDvNhD6x/rOnP50Soa3GFVp+4po=
Subject key identifier:   81:32:87:1C:88:7A:29:66:6B:A3:A4:2D:C2:5E:AF:C7:ED:86:97:82
Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51
Certificate issuer:       /CN=10FC4D9D2403FC433C19BB76131325B776505E51
Certificate serial:       02D138FF2F7DBE6890AAC47865E1FC8297BFE45D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
Manifest number:          049E
Signing time:             Fri 05 Sep 2025 07:40:42 +0000
Manifest this update:     Fri 05 Sep 2025 07:35:42 +0000
Manifest next update:     Mon 08 Sep 2025 14:50:42 +0000
Files and hashes:         1: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: gBuKZp3R0YXrjb4G0M3590pA6J7lO5rSoZLcNrVMmpY=)
                          2: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: vnOWOE8ANRJB3kxmh2kTgRDOD4mP6pnBNqxwGmSsQIw=)
                          3: 10FC4D9D2403FC433C19BB76131325B776505E51.crl (hash: t04TMujwvgkQSnqfr8fUAeRZI5fIEDkZuH7QNuaPvU4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl
                          rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 14:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d1:38:ff:2f:7d:be:68:90:aa:c4:78:65:e1:fc:82:97:bf:e4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51
        Validity
            Not Before: Sep  5 07:35:42 2025 GMT
            Not After : Sep  8 14:50:42 2025 GMT
        Subject: CN=8132871C887A29666BA3A42DC25EAFC7ED869782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:e1:e2:ad:22:59:39:f0:4e:d3:c5:25:f8:
                    af:4c:d8:8a:4b:34:37:a3:47:db:bb:fc:40:0b:f7:
                    0e:2f:30:2e:06:96:39:be:7b:c6:05:10:da:a5:e2:
                    c1:6c:3d:5e:e2:93:14:32:06:29:d4:90:14:d4:4e:
                    66:3c:eb:c7:34:9a:7e:38:8c:56:f9:db:43:4a:9b:
                    8f:39:f6:7d:05:ed:9b:76:77:58:12:3e:c7:43:3a:
                    cc:8b:e8:f0:c6:f3:d5:01:fc:af:34:32:d7:7a:f5:
                    5a:cb:d9:c0:81:e6:ad:d7:e3:3a:ac:f4:df:69:b5:
                    23:a9:b0:0b:64:77:c5:b7:a1:46:9d:58:8a:20:8a:
                    eb:eb:24:a0:29:ac:3f:91:df:97:16:78:91:07:0d:
                    be:80:c5:81:1f:7f:97:5e:44:cd:62:88:cf:62:63:
                    9c:7a:b2:b3:88:24:77:91:4c:d6:38:6c:59:b5:03:
                    25:7b:a4:5c:56:08:05:2d:fb:6c:99:7a:2c:1a:ca:
                    38:82:40:74:a6:c9:bb:2d:1d:a3:0e:82:b3:c6:d7:
                    32:3b:b4:4f:91:be:17:c1:63:89:68:19:c1:fc:8c:
                    c3:fd:fa:fa:e9:da:78:11:1e:ef:d9:9c:a9:dc:33:
                    2c:52:2f:fe:48:98:88:9b:29:73:d7:60:c5:ac:06:
                    ab:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:32:87:1C:88:7A:29:66:6B:A3:A4:2D:C2:5E:AF:C7:ED:86:97:82
            X509v3 Authority Key Identifier:
                keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:13:54:08:85:2c:a1:51:51:a3:02:b8:c6:5f:5d:ee:ff:d9:
         2f:e1:65:1e:cb:51:2e:ed:4f:e9:56:37:3b:e3:a9:7e:05:4e:
         64:5e:2a:6b:7a:2b:51:80:a4:f6:d4:f2:b9:b7:a5:f7:b5:18:
         b0:03:3e:4c:3d:b1:a2:d6:fd:0e:54:b9:f5:8f:ec:e6:12:1d:
         b4:fa:12:23:e0:71:02:f5:36:70:d0:a7:74:31:83:a5:a5:db:
         e5:92:ff:47:73:c2:f9:bb:87:4d:1e:c1:46:7c:8d:a2:63:52:
         61:cb:65:76:67:35:af:03:b2:e5:ff:bf:11:5a:c3:b5:84:8d:
         58:99:ea:3a:24:4d:c4:06:0b:c0:4a:b1:78:27:ff:bf:34:4d:
         6f:f9:60:6b:5d:cc:3b:f6:d0:8f:fa:a5:0a:e7:7b:b9:02:5e:
         17:bf:01:ec:82:1f:51:16:93:00:6d:79:ef:00:3b:38:6b:e0:
         d5:af:3e:df:fd:07:d1:27:e7:ba:20:4b:b2:ce:5f:a9:a3:8e:
         43:94:51:a5:ff:0c:d4:de:4b:1a:1a:40:a3:e8:92:32:cc:e3:
         d7:e3:ad:8a:59:d3:56:ba:16:6f:7a:48:a2:d9:09:f1:c0:96:
         44:cf:0f:94:34:ec:45:bc:69:72:1a:05:bc:7d:c0:a5:cb:e2:
         03:74:23:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 12:07:53 2025 by rpki-client