Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
File:                     F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json)
Hash identifier:          tQ7yRilxTCbvrT4XXtfj7VKlYqxDahnCnFI71HhUaGw=
Subject key identifier:   27:DF:8C:19:E6:19:D7:8D:2C:47:4C:42:D4:06:0F:BC:F1:EE:36:7F
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       52D6D380BC92821222FB17B614C4F63C5792CF5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
Manifest number:          0537
Signing time:             Fri 24 Oct 2025 03:51:33 +0000
Manifest this update:     Fri 24 Oct 2025 03:46:33 +0000
Manifest next update:     Mon 27 Oct 2025 04:07:33 +0000
Files and hashes:         1: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=)
                          2: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: +0TglIi2p7jwKSstfwGK7HxpA9aZK4fp6xgZ4tfuSJ0=)
                          3: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: 0PzoQhjtIBIp5z3u6ZT2GigMXbei3fP0btsZYcijF1o=)
                          4: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=)
                          5: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: hceiRn1k+oO/x+5WpC4OSWhZbFgi/4V0uwvwpTc+nOA=)
                          6: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=)
                          7: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=)
                          8: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: yp7YYUGfEi7m0LLSnf3xhw/IgYSZYGNpCN1qo/q9Vug=)
                          9: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: 3LrSfqwaVihGWTxA2+Lkyb2WX9bv36J0fqukm2XEEg0=)
                          10: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: C2SSV6l4PIV/2AjjXlwr1QY5lzBadYfvShLh+b2ERSY=)
                          11: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: 9c49vJ806rinKU2yZDXFYCFMBIoAnvTzCxv8zv5wDgg=)
                          12: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: Ukwgls6QusI0sVPeKowIBEMKKVNZ7qicjc7eWe3Bawc=)
                          13: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: HilnfBfyMvNFPQVFJ8bMdWO7V80Cp99wsDpOjOBytPM=)
                          14: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: OolbpeUpBXtFe5uwnVMRBxDj4cHLKQcUAfTTgB8M49A=)
                          15: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: +ULriNL1i1nU37Wxup/0FyWzsRtKq1c09nU9dI4qvF4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 04:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d6:d3:80:bc:92:82:12:22:fb:17:b6:14:c4:f6:3c:57:92:cf:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Oct 24 03:46:33 2025 GMT
            Not After : Oct 27 04:07:33 2025 GMT
        Subject: CN=27DF8C19E619D78D2C474C42D4060FBCF1EE367F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:4b:62:05:9e:87:4b:2f:f9:66:6a:68:7c:
                    4c:c0:72:d6:e3:4c:0a:16:ba:93:a1:e1:4d:94:37:
                    94:ef:d5:08:94:29:1d:8b:83:80:3c:51:0a:4b:ed:
                    a1:95:a1:16:77:35:38:87:a1:f9:6e:8e:e0:02:b2:
                    da:8a:ad:f0:0a:61:1a:4b:c9:b2:1c:28:73:eb:e9:
                    d6:d5:92:ee:24:78:5d:c2:6c:34:12:d6:81:5b:d2:
                    e8:02:aa:8e:24:46:98:f1:cd:be:51:35:ac:57:a4:
                    86:6f:d6:41:2d:0b:3b:60:11:8f:ff:b5:31:54:02:
                    7f:67:06:ad:aa:19:dd:af:1e:8d:f9:be:91:75:a1:
                    ab:93:42:2b:22:08:97:6a:8e:ff:61:7d:dc:7c:c9:
                    ee:e7:34:d4:bd:33:e6:c8:1b:bc:13:ef:a2:33:62:
                    ea:ad:3e:04:2e:e7:f7:c7:db:39:d7:b6:b5:c7:6f:
                    a9:8e:c6:0d:c9:c5:7c:64:ad:bd:85:04:05:df:61:
                    d2:a9:4c:66:83:52:03:8e:8a:d9:74:60:28:cd:ca:
                    1c:6b:85:d9:84:f8:b7:a5:b3:bb:ac:48:40:c6:1e:
                    e1:5a:6e:1c:6e:82:ee:7f:a8:af:5f:e5:7b:b3:24:
                    54:ce:6b:81:5a:8d:b1:3e:39:ac:76:16:a7:e8:8c:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DF:8C:19:E6:19:D7:8D:2C:47:4C:42:D4:06:0F:BC:F1:EE:36:7F
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:85:4c:61:ec:26:ea:f5:f9:0a:c8:02:11:f7:f1:7f:cc:e0:
         bd:2d:28:56:a2:13:9d:3e:5e:3c:2c:1d:a6:98:d7:45:e1:00:
         a7:4f:71:aa:e2:de:32:27:4b:92:dc:1e:de:98:02:3f:6e:8f:
         07:0b:45:52:f0:c3:0d:a7:72:bf:f8:db:47:18:bf:5d:85:b5:
         1c:ae:2d:d0:ea:09:15:24:c8:f6:35:df:b6:bd:99:54:9e:36:
         e4:58:76:02:c9:03:24:f0:9a:7a:f6:89:d4:05:82:e2:85:00:
         0b:8d:22:51:11:84:a0:e0:5e:54:10:15:25:84:9c:19:77:42:
         1f:4d:fa:ba:91:d4:2d:ed:59:04:57:de:e7:d6:b6:7e:93:0c:
         5f:60:b5:41:ff:60:06:30:fb:f3:e5:35:56:cf:00:88:1f:65:
         4c:f2:77:c6:ac:e3:7f:4e:f5:d2:90:2a:24:2e:7b:5d:3b:d0:
         0f:59:da:48:e5:c2:68:db:31:00:0f:fb:fb:62:b1:77:d0:86:
         7d:29:26:4b:40:d7:e1:ec:75:ec:15:3e:39:de:bb:8f:85:41:
         39:5b:c3:6b:94:5e:b5:5d:76:3b:c4:cf:10:97:e9:20:3c:94:
         5a:b2:a6:34:6e:7a:f0:df:70:28:e0:3b:7d:99:ce:33:44:d4:
         cb:84:0f:09
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUtbTgLySghIi+xe2FMT2PFeSz1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3
NzgwOUQwMjAeFw0yNTEwMjQwMzQ2MzNaFw0yNTEwMjcwNDA3MzNaMDMxMTAvBgNV
BAMTKDI3REY4QzE5RTYxOUQ3OEQyQzQ3NEM0MkQ0MDYwRkJDRjFFRTM2N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpUtiBZ6HSy/5ZmpofEzActbj
TAoWupOh4U2UN5Tv1QiUKR2Lg4A8UQpL7aGVoRZ3NTiHoflujuACstqKrfAKYRpL
ybIcKHPr6dbVku4keF3CbDQS1oFb0ugCqo4kRpjxzb5RNaxXpIZv1kEtCztgEY//
tTFUAn9nBq2qGd2vHo35vpF1oauTQisiCJdqjv9hfdx8ye7nNNS9M+bIG7wT76Iz
YuqtPgQu5/fH2znXtrXHb6mOxg3JxXxkrb2FBAXfYdKpTGaDUgOOitl0YCjNyhxr
hdmE+Lels7usSEDGHuFabhxugu5/qK9f5XuzJFTOa4FajbE+Oax2FqfojBOTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJ9+MGeYZ140sR0xC1AYPvPHuNn8wHwYDVR0j
BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF
MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw
OUQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFkNmRjYzktMTcwMC00OGViLTkw
OTktNjY3OGY5MWJmNDRlLzAvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZE
N0Y3NzgwOUQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAyFTGHsJur1+QrIAhH38X/M4L0tKFaiE50+
XjwsHaaY10XhAKdPcari3jInS5LcHt6YAj9ujwcLRVLwww2ncr/420cYv12FtRyu
LdDqCRUkyPY137a9mVSeNuRYdgLJAyTwmnr2idQFguKFAAuNIlERhKDgXlQQFSWE
nBl3Qh9N+rqR1C3tWQRX3ufWtn6TDF9gtUH/YAYw+/PlNVbPAIgfZUzyd8as439O
9dKQKiQue1070A9Z2kjlwmjbMQAP+/tisXfQhn0pJktA1+HsdewVPjneu4+FQTlb
w2uUXrVddjvEzxCX6SA8lFqypjRuevDfcCjgO32ZzjNE1MuEDwk=
-----END CERTIFICATE-----
Generated at Sat Oct 25 15:21:26 2025 by rpki-client