Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft
File:                     A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json)
Hash identifier:          iR9uYgOG/WuW1TtNhQTXVfLOrrxrHNGvlvCIxCWVErM=
Subject key identifier:   07:E9:BB:42:33:98:5F:A1:ED:5A:44:7C:4D:B1:AE:60:46:C2:34:E0
Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98
Certificate issuer:       /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
Certificate serial:       511EF728DFBF920D29E2A0235D6DDEA3CEE65A66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft
Manifest number:          0502
Signing time:             Sat 06 Sep 2025 20:31:18 +0000
Manifest this update:     Sat 06 Sep 2025 20:26:18 +0000
Manifest next update:     Wed 10 Sep 2025 01:54:18 +0000
Files and hashes:         1: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=)
                          2: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=)
                          3: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=)
                          4: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: 4qDb6nRmG/EoeW69EKwSurZymolPpbg838x9HzPWfko=)
                          5: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=)
                          6: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=)
                          7: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl
                          rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 01:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1e:f7:28:df:bf:92:0d:29:e2:a0:23:5d:6d:de:a3:ce:e6:5a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
        Validity
            Not Before: Sep  6 20:26:18 2025 GMT
            Not After : Sep 10 01:54:18 2025 GMT
        Subject: CN=07E9BB4233985FA1ED5A447C4DB1AE6046C234E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:ff:26:a2:d6:e4:43:63:2b:d8:b3:fc:5b:
                    59:e2:2f:a5:09:7a:fc:e2:80:c6:25:84:bd:aa:fa:
                    d8:02:5f:0c:7c:01:26:f1:e6:27:75:7d:46:e8:a6:
                    7f:36:b4:ef:6a:fc:66:fe:3a:c3:b2:aa:a2:35:46:
                    30:5e:a4:2f:ee:d3:0c:88:62:6b:3e:16:a2:88:9c:
                    2c:ff:6d:40:5a:4f:ad:62:4d:00:40:bf:c2:06:15:
                    e0:4f:14:57:8d:cb:b4:a9:35:8d:75:37:b0:e9:29:
                    15:4d:f0:a3:ef:a5:c0:ea:35:f8:4d:25:f0:53:ff:
                    b8:1a:7d:30:3a:cb:0f:dd:ac:8b:0d:0b:89:97:ac:
                    f2:f2:5f:eb:90:f5:61:d1:78:d1:c1:bd:eb:07:d7:
                    07:48:b9:e2:d6:14:39:c2:a7:8f:5c:db:73:a6:51:
                    e1:a9:03:f2:f1:d7:cb:2e:ca:b5:48:a8:d9:c5:ac:
                    c6:41:c9:96:98:ff:fc:b8:4c:3a:4c:c9:b7:e3:1d:
                    f7:f4:6b:6c:32:28:7d:48:b8:87:b4:7c:ab:f9:18:
                    11:a9:4d:10:59:43:5a:2d:77:32:d3:c5:12:cc:b2:
                    f5:98:88:77:5a:38:62:d7:3c:5e:d7:6b:c7:2f:26:
                    4a:2c:77:69:32:3e:a4:fc:24:9c:a3:fb:1a:51:ea:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E9:BB:42:33:98:5F:A1:ED:5A:44:7C:4D:B1:AE:60:46:C2:34:E0
            X509v3 Authority Key Identifier:
                keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f2:85:71:a2:74:3a:6d:4e:0e:2d:fc:0a:a1:b1:d4:87:36:
         9c:57:15:36:6e:41:17:68:e2:34:68:13:cd:be:37:3b:89:d7:
         c1:81:50:3f:7f:8e:9e:a0:14:ef:c8:2d:86:a2:da:a5:68:79:
         19:6b:c9:fb:3c:01:99:0f:49:2e:ce:4b:7b:c3:3a:d1:11:bf:
         6c:52:b3:ca:0b:c5:f8:72:06:35:2e:ea:c1:4e:7e:eb:b9:fd:
         dc:08:04:a7:8d:55:25:16:87:e4:ea:ea:27:e2:56:3c:23:2c:
         fc:e1:b8:9f:8e:13:47:18:08:b8:54:64:5a:75:39:97:11:6a:
         42:50:90:38:c6:46:83:8a:ef:be:c0:43:35:fb:d1:07:d8:33:
         bc:4b:b7:bc:05:8c:c2:89:be:05:e6:ed:18:3a:9a:ab:17:8d:
         a1:92:20:f4:c4:1f:ee:c4:54:f2:d1:f1:8e:df:cd:a8:5c:d6:
         b9:c5:7b:58:b6:b0:8b:09:08:d0:c4:9f:c0:6c:97:9b:4b:41:
         48:aa:ff:39:32:43:8a:4d:f2:ef:b9:61:a4:bf:d2:33:ef:6e:
         03:6e:6c:ec:11:e4:b3:07:7b:0d:bf:0d:c2:c4:c0:8d:e9:8c:
         41:2d:50:b5:46:3d:be:3d:30:2f:26:64:46:dd:3f:f2:cb:26:
         f6:9b:a1:93
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUR73KN+/kg0p4qAjXW3eo87mWmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG
REQ5N0I5ODAeFw0yNTA5MDYyMDI2MThaFw0yNTA5MTAwMTU0MThaMDMxMTAvBgNV
BAMTKDA3RTlCQjQyMzM5ODVGQTFFRDVBNDQ3QzREQjFBRTYwNDZDMjM0RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Vv8motbkQ2Mr2LP8W1niL6UJ
evzigMYlhL2q+tgCXwx8ASbx5id1fUbopn82tO9q/Gb+OsOyqqI1RjBepC/u0wyI
Yms+FqKInCz/bUBaT61iTQBAv8IGFeBPFFeNy7SpNY11N7DpKRVN8KPvpcDqNfhN
JfBT/7gafTA6yw/drIsNC4mXrPLyX+uQ9WHReNHBvesH1wdIueLWFDnCp49c23Om
UeGpA/Lx18suyrVIqNnFrMZByZaY//y4TDpMybfjHff0a2wyKH1IuIe0fKv5GBGp
TRBZQ1otdzLTxRLMsvWYiHdaOGLXPF7Xa8cvJkosd2kyPqT8JJyj+xpR6p5jAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUB+m7QjOYX6HtWkR8TbGuYEbCNOAwHwYDVR0j
BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC
MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5
N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4
NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1
OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAryhXGidDptTg4t/AqhsdSHNpxXFTZuQRdo
4jRoE82+NzuJ18GBUD9/jp6gFO/ILYai2qVoeRlryfs8AZkPSS7OS3vDOtERv2xS
s8oLxfhyBjUu6sFOfuu5/dwIBKeNVSUWh+Tq6ifiVjwjLPzhuJ+OE0cYCLhUZFp1
OZcRakJQkDjGRoOK777AQzX70QfYM7xLt7wFjMKJvgXm7Rg6mqsXjaGSIPTEH+7E
VPLR8Y7fzahc1rnFe1i2sIsJCNDEn8Bsl5tLQUiq/zkyQ4pN8u+5YaS/0jPvbgNu
bOwR5LMHew2/DcLEwI3pjEEtULVGPb49MC8mZEbdP/LLJvaboZM=
-----END CERTIFICATE-----
Generated at Sun Sep 7 15:25:35 2025 by rpki-client