Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
File:                     BE7F813F3C6CA289A9CDAC5630975B7627458103.mft (raw, json)
Hash identifier:          6LpLHjN5nnhIdVqG4tEaJJX8YD3mJ8f8gpW9uU1/gzs=
Subject key identifier:   72:C2:62:FB:E4:72:5F:DB:93:DA:36:48:E5:17:1F:4D:98:A5:53:34
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       519E82166A79656FFDCCE621D6FCA64746464703
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
Manifest number:          02A0
Signing time:             Tue 21 Oct 2025 16:41:46 +0000
Manifest this update:     Tue 21 Oct 2025 16:36:46 +0000
Manifest next update:     Fri 24 Oct 2025 23:04:46 +0000
Files and hashes:         1: 34332e3233302e3135322e302f32332d3233203d3e203435373235.roa (hash: xHPJ7HI+304D7YAd37d8j6skpjceFwNnjTWGzXVwcKM=)
                          2: 3138302e3231312e38382e302f32312d3234203d3e203435373235.roa (hash: 6cpCf7GhdQEpx30p91qB9UYsON8gtbAQPKe5llQv0bs=)
                          3: 3230322e3135302e3136302e302f32302d3234203d3e203435373235.roa (hash: bcb47SdtlV0+rUuQrP25krobOWV4dOeRjxtP0NJ6Hg0=)
                          4: 3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa (hash: Vd4YXu/zv6QpeJqZrRqJLtEJqDsjx9BYEUrETFSOwbg=)
                          5: 34332e3233302e3135342e302f32332d3233203d3e203435373235.roa (hash: FoOUIBlL9T9MhX4bEhccY3Kjn0yIPa1cMqY4C0eO3xI=)
                          6: 3230322e3135302e3137302e302f32332d3233203d3e203435373235.roa (hash: RYaUaP8z76N+rN9/CRDsCKHTh8kwn9eyhhBEqvlMUwo=)
                          7: 3230322e3135302e3136342e302f32332d3233203d3e203435373235.roa (hash: w2ICECGLA7nw6Zv4Eo0IQI3O8W+wpDGsaM5DtnIpJKo=)
                          8: 323430323a3738303a3a2f33322d3438203d3e203435373235.roa (hash: 95U2BXJDC2l18nsj8XM2nUsJ+ABvrMW9ZXaTSbsG2jU=)
                          9: 3138302e3231312e39342e302f32332d3233203d3e203435373235.roa (hash: P35zqgp/DvY+opYrPtfb+V3CygXLWvgpif4jdHfrT6Q=)
                          10: 3138302e3231312e39302e302f32332d3233203d3e203435373235.roa (hash: OgCMc6N8YMB+q9soDBfzLtklXuNaeCduzkpg+Npc+Pg=)
                          11: 3130332e3234352e3133382e302f32332d3233203d3e203435373235.roa (hash: gXSdvzH/obw2tBhIhIcWb1ceK7qyFmLN4iW37pSP6wI=)
                          12: 3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa (hash: BI62UO3dEBMuV7GGUm78ylThtADmbOZbryA9/QTeswk=)
                          13: 3230322e3135302e3136362e302f32332d3233203d3e203435373235.roa (hash: wRnGxN5uNoVdykOfNrkzIuyL1n8LTfsQZxmr2BmoYe4=)
                          14: 3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa (hash: CFmjdJ2vd2S1hwPDr69BfeMIGUvy+yNC1CU/AmoDxB8=)
                          15: 3230322e3135302e3137322e302f32332d3233203d3e203435373235.roa (hash: xC6iCUJS7sp4GX/eEQoZ92l1XLRswuGGeIaV26g4P7I=)
                          16: BE7F813F3C6CA289A9CDAC5630975B7627458103.crl (hash: 3ypCBALlyKxLArRHUNME/gPFEngw7ikfDxeiNcciC50=)
                          17: 3138302e3231312e39322e302f32332d3233203d3e203435373235.roa (hash: 5gtSpN1P146ocldJClXJUUX1hGb29RqzWbJ13iydccw=)
                          18: 3230322e3135302e3136302e302f32302d3230203d3e203435373235.roa (hash: xQ4Ul97jwoDNyJ2eG9oO4TTlF8xSqcDLgnke6Urqw3k=)
                          19: 34332e3233302e3135322e302f32322d3234203d3e203435373235.roa (hash: +4n6/TF4aeSEpR29DkcOnbNK9Y34aOX1PIvKhjQ5Hno=)
                          20: 323430323a3738303a343a3a2f34382d3438203d3e203435373235.roa (hash: q6uWsjDfmvPCM3wtKPBAHFLOKfxyuluuaFv/8slgJu8=)
                          21: 3130332e3234352e3133362e302f32332d3233203d3e203435373235.roa (hash: MSYIfxCSXKVIOCS47ld9jUS6r+ZriPGRUCkoG4RgECY=)
                          22: 3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa (hash: P6E4qcRf4KYQyvZ7AMZmZFaBs6o4L0ILx70mhGz8FoA=)
                          23: 323430323a3738303a3a2f34382d3438203d3e203435373235.roa (hash: srQ63HzedpqK/Z+fkfeTxdmOJkM7qi6/v3UkdQRaL40=)
                          24: 323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa (hash: ksLRob3f5SU2gNY1LxPipDlSLyvRGBxMHRiqu2c9VRY=)
                          25: 3138302e3231312e38382e302f32332d3233203d3e203435373235.roa (hash: 6XFpo57f1LKHWqv/atS95pTJHDHEw9gxmYNcdpJ+RZk=)
                          26: 3230322e3135302e3136322e302f32332d3233203d3e203435373235.roa (hash: GwuWySNcSg5ncnIH7xe0pJhIF0SwLtWfmclvASXmbzI=)
                          27: 3230322e3135302e3137352e302f32342d3234203d3e20323037353731.roa (hash: fxq+INOzYywTpHUeb4pxKeVy8ePaMLmGli2Hhv5MQO4=)
                          28: 34332e3233302e3135322e302f32322d3232203d3e203435373235.roa (hash: pO9hy5n7UjW4vxC4PIPIijgfvw5lRU378EbEfDIE6ec=)
                          29: 3138302e3231312e38382e302f32312d3231203d3e203435373235.roa (hash: UrwHHQXWpjTi59OMqCHennU+aS155yzGb6/9UoO5zVs=)
                          30: 3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa (hash: /MSndQdhW7y2Ps5XO1tBE5LRjY41c2iW6OY/QNg9AHs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
                          rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 23:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9e:82:16:6a:79:65:6f:fd:cc:e6:21:d6:fc:a6:47:46:46:47:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Oct 21 16:36:46 2025 GMT
            Not After : Oct 24 23:04:46 2025 GMT
        Subject: CN=72C262FBE4725FDB93DA3648E5171F4D98A55334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:16:0c:e0:c6:22:05:10:1b:09:9c:b7:97:
                    94:f7:96:c4:e1:1c:70:25:81:6d:9e:b2:b8:c0:98:
                    10:6c:14:c6:65:fa:40:2a:fa:f3:00:88:66:e1:79:
                    ef:19:26:76:63:a8:36:f5:80:eb:ff:c0:00:2d:dc:
                    4b:c6:f3:c5:95:bd:65:2c:3f:3c:22:2e:25:a3:1a:
                    c4:a7:a0:37:b9:26:ef:66:95:aa:9c:31:ca:42:f0:
                    47:a9:b1:a6:2f:a2:78:85:8e:ad:d0:3b:9d:73:4e:
                    db:ed:1b:f6:49:fb:0d:fc:ea:aa:a2:9f:49:9d:4a:
                    35:14:90:99:d9:dd:c4:e8:de:bb:9a:0c:39:27:aa:
                    6d:7a:c1:a1:29:b0:9d:96:e9:7b:84:f4:d8:15:a0:
                    81:85:f5:90:95:96:ee:83:30:b5:5a:69:0c:90:e8:
                    35:ba:7d:50:73:cd:7a:20:bc:e5:cd:31:e2:ca:b1:
                    f5:29:c9:54:21:f1:89:31:99:81:15:0d:3a:b7:35:
                    c7:c7:37:51:3f:f6:1b:4e:2d:b0:5c:2e:bb:e7:66:
                    61:88:29:53:07:8e:4a:d1:1f:7a:10:58:18:9c:b2:
                    e2:70:ac:9c:fd:7b:3f:42:b7:c3:5c:e8:e9:4a:15:
                    05:cc:8c:ae:34:7b:55:89:42:b4:e6:66:f2:55:fc:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C2:62:FB:E4:72:5F:DB:93:DA:36:48:E5:17:1F:4D:98:A5:53:34
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:25:0b:df:1f:7f:54:ce:c9:d7:21:74:83:f3:e3:ce:d5:dc:
         ee:a8:d2:da:ce:3f:98:83:6a:6e:9d:50:a2:60:34:86:34:52:
         92:75:43:d4:d8:6c:a5:9e:9e:31:bb:80:cf:c1:02:6c:58:b3:
         51:75:a3:18:70:04:ab:e6:0b:63:86:e6:00:fb:d5:ec:59:b8:
         31:3d:68:9e:92:d6:94:3e:0f:4c:33:e3:7c:b1:88:3f:97:af:
         4f:3b:73:75:75:d1:df:32:d1:b9:fe:52:b0:c2:bb:b1:dd:9e:
         97:1d:ea:df:bb:a6:76:7b:72:8e:14:57:66:3c:a8:87:66:f2:
         32:b5:c7:e5:45:42:a6:6b:6e:73:71:ca:7e:b8:1b:77:19:5a:
         df:eb:d3:1e:b1:41:6b:87:85:7e:ac:3e:f9:35:7c:43:5f:64:
         c9:f6:02:98:77:a8:4a:f8:d9:69:bd:56:66:bb:4d:a0:38:af:
         8d:ef:01:90:ef:18:70:81:25:c2:6e:6f:22:5b:a6:2c:6d:ca:
         d8:ea:aa:07:e3:dc:41:88:d7:54:38:48:8b:62:e5:68:1c:f5:
         fc:3f:9a:af:8c:10:7f:ff:1b:63:09:d7:47:e9:db:11:7b:6f:
         b1:a8:bd:e6:7b:c6:da:53:c2:9e:a2:21:52:db:31:8b:ac:47:
         a5:d8:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:31:46 2025 by rpki-client