Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
File:                     83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft (raw, json)
Hash identifier:          BZ9BvZNkwWSD0t3EEIGgbxHMNFor0NbEzCQ4QvSc9vU=
Subject key identifier:   C2:CE:2B:D5:6F:0A:C2:D9:0C:24:70:F7:90:E0:4D:7D:9D:FE:7D:26
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       4B1765BB7A69C468A67A7D37B6C7D98BCF6767B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
Manifest number:          051F
Signing time:             Wed 03 Sep 2025 15:32:19 +0000
Manifest this update:     Wed 03 Sep 2025 15:27:19 +0000
Manifest next update:     Sat 06 Sep 2025 19:41:19 +0000
Files and hashes:         1: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: hmU/fFbEB5MHfxnUZwzr2O0p+/FFdJYTbJLKljW/yfY=)
                          2: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: KvSvkJVty1qHjYffQieqFJAuh3dt1BHzGki9sQiAFXI=)
                          3: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: uPV0voLTxjHrIsHmaExj5+EGVw7Nm+iGd6nJEj83KUE=)
                          4: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: Au0lkFPRKVBvBG5KfA74Xt/Sxl2Jzxo+Ex2p9zz5DkQ=)
                          5: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: 4nd2DLm/J+RolIn9aIGsW+HXsvu2ybFSiuHkPOngkOI=)
                          6: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: EZdh60eQJ0O5FCzuczO3QBjbRRYgOvtWbCa5RUYH7z8=)
                          7: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: 1FsOdleRSG3IEtzn2Y5KIghx/oCLGSKZKVzGT9z4mXU=)
                          8: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl (hash: xmaXt9rzhnMDvwaBh24+DODaBuWtFqdNISVugoXbuFU=)
                          9: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: h7NsaP81E/4rqIyGV1dg1JRgScEeK/hJwwlj/aFKArk=)
                          10: 3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa (hash: kM52J1VyVwAmdb6lGcMZz88a3uWT1MsaW2EWZd11F4g=)
                          11: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: IrBPaOzrnHx8A3kF5U8FLypO1fdlWfu1886gczEN4Os=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 19:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:17:65:bb:7a:69:c4:68:a6:7a:7d:37:b6:c7:d9:8b:cf:67:67:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Sep  3 15:27:19 2025 GMT
            Not After : Sep  6 19:41:19 2025 GMT
        Subject: CN=C2CE2BD56F0AC2D90C2470F790E04D7D9DFE7D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b7:c6:4d:c0:9d:bb:6a:d2:3d:9f:d6:ef:fb:
                    41:68:b6:41:ce:50:92:06:6e:ad:e2:77:f5:7e:88:
                    e8:31:ca:a2:b7:78:20:51:5d:f8:49:47:00:6f:f3:
                    73:78:ed:28:8d:db:83:81:21:9e:ae:f6:69:4c:13:
                    ef:24:43:a1:ca:9a:ab:b0:2c:1c:8e:af:82:05:35:
                    fe:01:d8:cc:21:23:3e:c3:b9:06:a8:11:38:3a:bb:
                    e7:bb:b3:1d:2a:41:35:a4:c9:e7:e0:e5:2b:ce:06:
                    de:34:63:b7:30:b8:69:fb:4b:a6:d8:fa:93:a3:a8:
                    4b:53:62:9a:dc:b7:ce:49:d5:e0:05:2c:58:c2:b8:
                    97:42:af:38:86:af:53:fb:fd:6f:ce:ce:fe:dc:f7:
                    f4:26:65:a8:16:5e:9b:36:f5:21:cf:71:04:4a:35:
                    97:58:b1:5b:39:6a:84:de:81:e2:46:f6:d4:e5:9b:
                    00:c7:3e:da:c2:6a:a0:d5:9a:65:a9:8f:18:40:0a:
                    9b:4f:63:a2:7a:c1:7e:54:6a:e0:38:29:78:ad:32:
                    e2:72:f0:6a:06:b2:88:71:a2:ac:7f:ed:3c:9e:4a:
                    b4:cf:b3:a1:a8:7e:25:85:ed:31:20:32:14:84:61:
                    f0:ec:49:a0:91:3b:a5:ee:dd:b6:ae:8c:0d:fa:0f:
                    f1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CE:2B:D5:6F:0A:C2:D9:0C:24:70:F7:90:E0:4D:7D:9D:FE:7D:26
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:0e:5d:00:44:db:19:fb:81:e5:44:76:76:df:d9:a4:c6:71:
         0f:05:7a:6f:b0:76:78:11:35:bf:28:10:a6:17:42:b6:90:53:
         2c:d7:72:8c:43:7c:f6:c1:45:07:a8:45:6d:90:a0:0e:c9:da:
         28:98:3a:b0:bd:7c:d7:7b:0d:dd:36:b9:31:c0:03:69:6e:e3:
         0f:ce:2a:0b:c9:32:a0:44:7e:75:49:25:bb:f6:2e:e6:f8:e5:
         a0:ae:2d:2a:67:6f:c8:2d:70:06:a0:87:05:cd:f4:00:36:d5:
         08:26:b3:2a:3e:11:48:aa:04:40:f0:23:c8:14:87:dc:d1:3a:
         c3:11:bd:43:07:9b:3e:6f:bc:65:32:cd:bb:63:0e:71:81:87:
         ac:5e:08:2a:ce:e4:63:fc:e1:2c:bf:17:af:54:c6:db:00:6e:
         c7:59:2f:79:95:ad:43:d4:77:fd:b9:c6:77:a6:16:4f:09:93:
         64:03:b0:f7:08:24:2c:cf:c1:e5:61:34:18:05:ec:b5:a2:b9:
         53:c0:47:00:aa:ef:d0:70:78:e1:37:06:d6:3a:fd:a9:b4:da:
         b0:39:93:94:dd:d1:0a:d6:3e:3f:a5:a6:90:0e:3d:9a:0d:ad:
         71:81:c5:36:25:4e:9d:20:91:c3:3e:18:74:6a:7f:03:e8:f1:
         1f:8e:d6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:13:40 2025 by rpki-client