
$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
File:                     9EDE64DBC4098881F11B70123DF514D38F7881EE.mft (raw, json)
Hash identifier:          OZb2v+exsbsJafJM8u9VPvZum0b8vEx/WpzzGjOFFSY=
Subject key identifier:   6B:E2:B4:3A:77:91:74:5B:05:72:5C:3C:E9:68:2A:DA:96:EC:9D:79
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       08E5BCCB4FE509D67AF0E73ED83DE3EAF24F881A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
Manifest number:          0521
Signing time:             Mon 03 Nov 2025 21:52:11 +0000
Manifest this update:     Mon 03 Nov 2025 21:47:11 +0000
Manifest next update:     Fri 07 Nov 2025 06:41:11 +0000
Files and hashes:         1: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: GdxXTcqOs77ZDWh2maZVFcjOZNFSKj6ecuomfp+ELnY=)
                          2: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: Jse+7YyAFU6B19QF+EnGon6ubeg0wEMkIY6HtcfnBwc=)
                          3: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: ClWieUUujizdV+v3zWqEr3zcFrew9Y3pcCg166brANs=)
                          4: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: puFXisSoUi7NizeL8UnUBZSF9nSgq80apGurKcIfDx4=)
                          5: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: IOVVBORu5O/pgeUVzl7VawBTg7EM0DqmgCa3hNVO+Xc=)
                          6: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: 4JRHGlgTjiQ2E4ohNDpjmFcrV1mqUH90bgY8D6I5glU=)
                          7: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: dCgYQVEarcna28gmSfUk7VoXXuxd4x7SFqSDwv0sDbY=)
                          8: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: 5QPif0gj1bjrqgACnfODfusTFmrjqdVRY0shct/itK4=)
                          9: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: bEx2L/DI98HUxCv/5pxB9Xae6pY7P92MPJV4QBKaeJ0=)
                          10: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: EZK2HW82EoviLvpddG+zTsR++pGZRfxBTBEevg15VUQ=)
                          11: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: V8XIKsuHM3AcbKg6tSx3WP5UFaD99XoTgjHedx3ebJM=)
                          12: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: RQlHQFKjRMocIaoJ23CKpmV6pCLM6t6aYekY3LLmG4U=)
                          13: 3230322e37322e3230372e302f32342d3234203d3e203538353532.roa (hash: SgsotEI1SZ9oJNKPcNIzjjmNECtgKeHbBcJfhx89iX4=)
                          14: 9EDE64DBC4098881F11B70123DF514D38F7881EE.crl (hash: KQqgd7ldPyz/gRFTilGPGr9oIIQJC/RpJrKkzl2qLlE=)
                          15: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: z35rtBPMp8YFiSMqabTLze0z5N+QVHUo3BCJ9n9BLFY=)
                          16: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: gVVEZCabi7tKzG7WnkOcz1INBITtjz6Gg7pU/p/uLbE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 06:41:11 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e5:bc:cb:4f:e5:09:d6:7a:f0:e7:3e:d8:3d:e3:ea:f2:4f:88:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Nov  3 21:47:11 2025 GMT
            Not After : Nov  7 06:41:11 2025 GMT
        Subject: CN=6BE2B43A7791745B05725C3CE9682ADA96EC9D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:6d:39:86:b6:95:2d:d6:71:cd:6d:1c:60:
                    ba:1c:6f:60:e9:cf:e9:fb:49:cd:f8:2c:5b:e0:82:
                    fb:34:91:c2:07:93:75:39:ee:ac:6a:10:32:21:7d:
                    44:45:99:95:db:2e:17:4b:6e:db:61:cf:f9:a6:8f:
                    7f:73:d3:ce:d9:44:4b:c8:8b:cd:ba:f0:84:7b:be:
                    ba:3d:d7:8b:41:7d:e2:c9:ea:f2:f7:c9:95:9d:09:
                    e4:bc:8c:52:d0:84:07:40:fc:0b:12:18:0c:5e:79:
                    0c:c9:d5:4f:3b:dc:e7:37:fa:83:b1:18:5e:e5:4b:
                    f5:28:f9:e7:08:86:11:d0:d7:d4:5c:c9:9d:f6:2a:
                    26:4a:4b:21:2d:85:e3:3b:35:99:70:cc:c5:7a:89:
                    44:16:cb:69:ec:44:ec:4a:f8:2e:fb:1f:8c:0e:84:
                    cb:5d:a0:bf:45:25:62:61:d7:5d:b9:af:cb:a7:12:
                    2f:dc:67:1e:12:83:54:29:f8:af:1e:78:e8:90:15:
                    f6:ca:4a:84:42:95:2a:32:56:a9:fd:e9:58:4a:60:
                    85:0c:c9:bb:c6:a7:d7:90:b2:2d:19:7a:9e:58:6b:
                    a2:da:57:08:88:dd:b7:a3:21:30:39:ec:15:33:ab:
                    63:f0:fe:54:0b:22:3d:df:97:27:28:2c:a2:cf:2d:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:B4:3A:77:91:74:5B:05:72:5C:3C:E9:68:2A:DA:96:EC:9D:79
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         b9:52:f9:87:a6:9d:0f:f8:eb:f0:26:a6:b3:09:4b:78:df:30:
         6e:33:85:0f:b9:03:67:18:e7:6f:d6:f6:eb:73:ea:c2:73:19:
         12:30:f8:be:b0:b8:9e:68:80:68:d4:b2:81:b1:d1:d1:ac:1a:
         50:1b:a1:0a:a6:2c:0a:c7:62:86:69:bb:f6:6e:e7:21:17:2c:
         be:37:18:6e:2b:92:5c:62:18:2c:ba:16:c2:d1:5b:ae:63:46:
         3c:ea:fe:3c:3b:f0:b6:5d:bf:f6:1f:88:3c:5e:15:30:89:56:
         0b:8d:e6:2b:fa:cf:56:0f:f6:48:b9:26:15:c8:35:72:ba:e5:
         1a:61:ab:ca:c3:ea:1d:15:a1:ad:a0:19:e3:81:cb:3e:be:c5:
         f6:9d:2b:79:ba:43:fe:b1:6f:8c:5d:09:32:58:f2:18:2a:e6:
         94:db:f4:15:4b:57:1b:1e:10:a1:37:a5:1c:59:99:d1:22:04:
         8c:90:46:b4:a4:4e:11:3f:62:d8:c7:bc:36:4b:ae:48:c0:40:
         b0:24:f9:fa:f7:28:6e:16:df:ab:5c:c9:6f:f6:89:d8:03:fd:
         d5:90:d6:10:37:73:73:53:9a:67:38:d1:9b:e8:18:cb:10:37:
         39:89:91:ab:be:8c:c5:94:56:ff:58:bc:16:b1:57:6b:81:0f:
         a8:b7:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 13:35:47 2025 by rpki-client