Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
File:                     71054E3C02E22D607A90FACC4DE7369B65367EBD.mft (raw, json)
Hash identifier:          brrf7CP3+X8Fs3hDldg6o/b5JzgKMWjBKIcAjwPNDrw=
Subject key identifier:   6E:80:92:60:CB:20:64:1A:B5:5C:DE:70:A4:2C:66:21:F2:51:45:5B
Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD
Certificate issuer:       /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
Certificate serial:       74522B0B612065B353E6EDDB1053DB61779C7A1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
Manifest number:          016D
Signing time:             Fri 17 Oct 2025 23:20:47 +0000
Manifest this update:     Fri 17 Oct 2025 23:15:47 +0000
Manifest next update:     Tue 21 Oct 2025 00:53:47 +0000
Files and hashes:         1: 3130332e32392e31302e302f32332d3234203d3e20313530323530.roa (hash: WJMrEDY6+yYCu4Iz5tUshsi6eLGdRGAnm2hsfXk5iwc=)
                          2: 71054E3C02E22D607A90FACC4DE7369B65367EBD.crl (hash: yv5GmThyDbBoU8Axj8VWNXZe4odekeONzzHMlBuI+rU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl
                          rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 00:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:52:2b:0b:61:20:65:b3:53:e6:ed:db:10:53:db:61:77:9c:7a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD
        Validity
            Not Before: Oct 17 23:15:47 2025 GMT
            Not After : Oct 21 00:53:47 2025 GMT
        Subject: CN=6E809260CB20641AB55CDE70A42C6621F251455B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:f0:3e:90:f3:d1:3a:9c:8a:c2:d0:8f:b9:
                    d5:a4:7b:d3:a1:52:74:6c:c0:7d:34:40:3f:ec:e7:
                    a1:d3:9d:4e:13:a2:d7:3b:d3:bb:4f:ac:0b:38:82:
                    bc:2c:c1:b5:6b:a7:22:9c:49:c8:2d:cc:06:1c:1e:
                    5a:e2:f0:f7:86:bb:85:f5:bc:d0:f2:cc:59:cd:22:
                    db:e3:21:6c:8b:f4:9e:03:7a:fe:06:af:0b:71:a7:
                    2f:da:ab:cc:e3:f8:33:b7:3e:bd:70:b3:0c:08:03:
                    3e:51:3c:8e:d9:cc:36:63:fb:2d:b3:d3:c1:49:9d:
                    bb:11:9b:f6:24:d2:55:5a:ef:91:52:0f:61:6d:22:
                    45:aa:2a:85:70:93:a4:11:57:c3:67:24:94:6c:54:
                    bc:ed:ae:86:55:36:66:74:37:c2:a7:a1:b9:5f:ca:
                    06:5d:48:ad:ba:8b:43:c7:4a:98:cc:49:b6:24:b0:
                    ea:a6:c7:ae:87:9a:f5:fa:e0:27:bc:3d:2d:9b:30:
                    26:60:58:82:07:ee:1f:6b:51:0a:0a:4e:d1:6b:df:
                    b0:85:d8:31:a6:f8:a1:ea:af:85:5b:ae:37:e8:ed:
                    e7:ec:ac:d1:04:77:94:8c:d1:df:90:c8:6e:62:17:
                    21:64:b5:4d:b1:f1:43:03:bf:43:de:8d:66:be:b9:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:80:92:60:CB:20:64:1A:B5:5C:DE:70:A4:2C:66:21:F2:51:45:5B
            X509v3 Authority Key Identifier:
                keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:2a:d2:1b:e5:c3:ba:e6:c0:49:20:03:fa:61:0b:82:e4:78:
         e9:cf:73:67:e2:52:9d:9e:7e:bc:2f:53:f8:76:6c:20:9b:2c:
         e9:6e:17:57:0b:72:2c:d6:ac:6c:20:b8:d2:d0:ef:df:4c:64:
         68:22:f7:33:7b:83:e4:e5:88:25:91:5c:b5:9e:54:18:17:59:
         a6:65:b1:7d:c6:3c:22:ff:fa:d0:b9:40:76:73:29:19:ef:5f:
         4c:df:2b:7b:c3:bf:9a:c8:2a:3f:e7:a9:68:6e:24:07:c2:e8:
         06:dc:e9:50:17:2b:da:9e:9d:da:d5:71:bc:53:f3:ef:81:74:
         0c:e4:31:e3:67:fa:44:66:02:7c:40:5c:65:90:cf:51:42:79:
         24:bb:36:f9:ae:62:60:09:19:e9:2b:09:c7:b0:a7:5e:9f:12:
         9a:05:b1:15:8f:27:02:69:aa:49:bf:4d:cb:c5:ba:91:4a:0d:
         9c:6f:9c:50:c1:5d:a7:28:c8:6f:39:a4:a8:f3:ab:e0:f4:2a:
         68:3f:35:71:38:8f:82:ad:e9:10:f4:41:cb:63:82:22:04:a4:
         5b:e0:52:4c:f0:08:54:56:06:40:95:8e:3a:7b:f3:25:27:c1:
         fc:68:ef:05:b3:4d:31:6c:1b:64:e4:d6:27:dd:67:98:45:21:
         a6:d7:ba:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:57 2025 by rpki-client