Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
File:                     1635F5E419798341BDC615D4E1C6AE340C34BEED.mft (raw, json)
Hash identifier:          90DJBV6940QIBYGECN45iBW3OTODPKPjDWkHhBwMedE=
Subject key identifier:   DE:B6:D9:5A:E5:6B:92:02:38:99:4C:62:B1:40:3B:7E:0A:47:84:2B
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       56EC1165E3A61E59347E56B1BD6D9F0B46D18DB5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
Manifest number:          050A
Signing time:             Fri 05 Sep 2025 12:51:26 +0000
Manifest this update:     Fri 05 Sep 2025 12:46:26 +0000
Manifest next update:     Mon 08 Sep 2025 20:41:26 +0000
Files and hashes:         1: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: bEXjgt5oe/QCk1NlQcPsjuArMBUfj88EZpYXft80tYY=)
                          2: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: jd6LmOWTW9h+pZpEVT+8YFnE7+vOf7HUJDd4WCtQWm0=)
                          3: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: 53tgdiqtdjNpYH/nxHiWdMfkZz/bYs/54zzLtN7gns8=)
                          4: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 1kbjcVz7NV7SFqtMY1gTY7M0GuY6igkJGp6NsdTqDPc=)
                          5: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: C106cMZ7nVpbdEo6RtpPPocV8QkCM3iy9iSeYnPa1lI=)
                          6: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: +LKBbBTxZfejrH0n6yxZTpzAQ0ctc1KNHYYJokKKnzg=)
                          7: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: Fow2FQnfsWM+t0AdvtL67zUS1huXa7y9vM3+TEZxD7M=)
                          8: 1635F5E419798341BDC615D4E1C6AE340C34BEED.crl (hash: X68AmtJtp1T3LYUflDoQRx0T6W3ODkzM4Y+8bI/HWHA=)
                          9: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: Yz30CPTYH/dOzjwnz1TP6tkfawJNbjkHzYhNkLuWAMM=)
                          10: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: IM2twiGIKQqETGmIWQI3vAIIytZPeeD5wgctglA7Hpc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 20:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ec:11:65:e3:a6:1e:59:34:7e:56:b1:bd:6d:9f:0b:46:d1:8d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Sep  5 12:46:26 2025 GMT
            Not After : Sep  8 20:41:26 2025 GMT
        Subject: CN=DEB6D95AE56B920238994C62B1403B7E0A47842B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:a3:56:8c:3a:4f:41:6e:5a:2a:82:9c:f0:
                    ed:36:f8:da:b8:9f:49:ce:61:6c:d2:28:92:e0:e1:
                    3f:86:19:7d:24:bc:0d:0c:ff:95:27:9f:24:ef:6c:
                    33:78:05:d3:6c:09:e5:c1:53:1a:6c:16:b1:0c:f1:
                    77:be:c3:17:6d:a7:9a:26:b1:b5:96:8f:67:a6:6b:
                    2a:a7:ae:05:fe:67:63:ef:2e:4c:d2:fa:0d:b0:af:
                    ba:df:19:0f:e3:2a:59:fa:38:86:85:67:b1:6e:de:
                    fc:f2:ad:89:1c:ca:19:df:00:fe:d7:e9:59:70:91:
                    75:bc:92:9d:21:e2:c1:55:a2:19:de:3f:ba:9d:e2:
                    f2:b9:68:3e:94:07:b8:d6:0c:15:a6:56:38:35:cd:
                    7f:c9:bb:29:4f:97:3b:27:03:18:1f:75:db:31:03:
                    86:e7:ec:2c:55:f2:ff:83:be:76:7b:ba:d0:08:79:
                    2b:23:b2:9c:49:f5:21:22:be:53:ad:0f:b2:30:8c:
                    e4:fd:1a:c9:c9:1b:c8:7a:8f:78:6a:65:5b:fc:ce:
                    9d:04:1f:bf:9a:d2:c3:a7:a4:82:6d:17:8a:f5:40:
                    63:d3:ec:de:95:8b:9a:27:b4:83:25:80:a5:23:0e:
                    8e:3c:29:14:85:05:06:10:88:f5:6b:92:95:a7:b0:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B6:D9:5A:E5:6B:92:02:38:99:4C:62:B1:40:3B:7E:0A:47:84:2B
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:f4:6f:26:b8:3e:6b:8c:0a:d5:a3:eb:e6:c3:d5:f8:b1:
         ea:5f:07:f4:61:c7:81:d7:ed:d7:f3:94:1a:27:97:fd:ab:a2:
         41:39:34:28:da:c8:b7:6e:53:be:03:2f:80:91:67:fd:bf:61:
         9e:f1:16:0e:bd:ef:f2:3f:9d:1e:0d:27:e5:c0:22:39:36:eb:
         91:a0:c1:7c:ad:9b:6a:c5:0a:d3:5a:09:81:67:64:64:12:8f:
         30:35:27:d5:85:9c:a4:3c:78:bb:b7:bc:8f:55:af:65:45:24:
         d3:09:73:cd:cb:f4:81:f7:74:8c:6f:95:92:79:9a:f6:10:5a:
         80:c2:a3:27:75:a5:0b:ee:49:92:36:2e:98:8b:0a:41:ac:9a:
         3c:94:9e:e6:57:9d:b8:3e:05:75:72:18:f3:3f:8c:55:cf:7b:
         8f:39:cf:9a:70:0c:34:12:4e:39:e4:ef:8c:43:d0:31:87:f9:
         3e:51:4b:ce:32:af:f7:e4:e6:c9:e6:4f:5f:91:46:5e:c5:b6:
         6c:17:be:5a:2c:36:dc:11:20:26:4a:d3:28:71:6f:47:28:c8:
         2b:fb:d9:22:b2:37:f6:af:ab:61:9b:d9:4e:48:27:c8:fc:be:
         81:89:d5:fa:4f:ca:b4:99:b1:95:2a:61:02:fb:10:43:f6:e1:
         8a:a0:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:02:46 2025 by rpki-client