Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft
File:                     DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json)
Hash identifier:          xYYmhxlE8xgN8mxuftIWbR0fDS+RNv+szzEj7Wvduk8=
Subject key identifier:   B2:D3:69:FB:EF:89:69:0B:50:29:17:F6:21:68:9C:B3:B2:6F:80:EC
Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7
Certificate issuer:       /CN=DE99361912581A3A43349B6FFB379A285B0972E7
Certificate serial:       0B8FDC5767B91ECAFFA6EF84AEC2FCA03F982182
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft
Manifest number:          C1
Signing time:             Sat 18 Oct 2025 22:50:43 +0000
Manifest this update:     Sat 18 Oct 2025 22:45:43 +0000
Manifest next update:     Wed 22 Oct 2025 08:49:43 +0000
Files and hashes:         1: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: 57dIAPUwMdZxI+c7wf2A40+QYr5Ub5qktjc7riasoBE=)
                          2: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: bbqaIEYo8vhYE3lTJVoS8rshoqgNnIuyMqWWI5Pf3oU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl
                          rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 08:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8f:dc:57:67:b9:1e:ca:ff:a6:ef:84:ae:c2:fc:a0:3f:98:21:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7
        Validity
            Not Before: Oct 18 22:45:43 2025 GMT
            Not After : Oct 22 08:49:43 2025 GMT
        Subject: CN=B2D369FBEF89690B502917F621689CB3B26F80EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:d0:e1:17:f4:2e:cf:5b:85:b6:27:ff:15:
                    ea:cc:9a:85:3e:3d:0b:d0:97:1c:56:87:fb:f5:b4:
                    e7:10:25:29:25:36:e8:6f:e9:61:10:3c:bb:4d:d1:
                    6c:f5:f0:f5:2f:d0:b2:db:d4:f2:13:6e:ee:4f:1a:
                    34:22:cb:cc:e6:c7:f0:8f:ab:a3:c5:fd:91:a5:fb:
                    f8:52:c9:a2:6d:e3:2f:47:fa:a1:ba:3e:c9:78:4b:
                    d7:56:5a:34:5f:f3:63:7a:12:4a:f5:72:32:87:d5:
                    d1:44:16:3a:00:b5:e1:f1:8d:07:58:93:b4:67:38:
                    75:a3:b7:c7:d2:96:14:a1:5a:8b:ca:4b:16:26:3d:
                    79:38:9f:69:3f:a8:09:6e:40:51:f3:40:54:91:ce:
                    11:9d:7c:f0:14:8b:59:eb:92:2b:f1:9d:58:0e:b0:
                    69:94:ba:e1:65:d9:e3:6f:b8:52:68:85:64:67:1d:
                    d8:07:15:98:e5:09:71:2d:50:47:cb:29:77:f9:68:
                    06:43:81:ec:71:a5:1f:3a:f7:60:c0:71:e6:4d:c1:
                    c2:21:76:98:7b:69:7b:11:45:62:d9:3a:83:b8:1e:
                    c6:8c:56:52:8f:d1:0f:a8:33:c6:fb:7a:fa:d7:60:
                    6e:5a:8a:da:33:03:c3:b0:25:fc:4b:73:c9:b6:51:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D3:69:FB:EF:89:69:0B:50:29:17:F6:21:68:9C:B3:B2:6F:80:EC
            X509v3 Authority Key Identifier:
                keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:47:5e:8d:4f:52:d5:54:85:32:01:61:6f:7e:f4:25:9a:9d:
         c9:65:b0:78:12:a4:89:02:a8:8b:63:2a:30:44:71:5e:2a:a8:
         23:9d:82:1e:c4:af:ba:b5:50:e8:5d:07:0b:6b:c4:f2:59:77:
         c9:83:32:15:5d:00:e6:86:e7:18:9f:e6:6e:08:9d:e3:1c:0f:
         8b:3a:d7:ba:96:12:e9:c8:c5:71:4b:62:7f:76:f0:5b:06:44:
         1d:8c:23:7d:4c:29:da:40:3a:bc:59:30:38:ac:cb:a3:77:d9:
         55:bb:61:eb:ea:05:b6:a9:e5:63:86:62:93:07:b3:d7:ff:7b:
         57:b6:12:f9:d6:51:cd:5d:71:c0:e5:cc:66:3d:74:5a:f7:71:
         fd:ec:64:e1:e1:38:96:9a:11:74:ad:a5:99:00:0e:9b:4f:78:
         d4:ef:8e:f0:35:c9:07:33:a2:ff:95:8b:fb:78:37:50:41:9e:
         09:49:b5:c7:81:9b:14:2a:90:f1:d3:f3:d0:ac:dc:0b:c2:82:
         fe:c9:79:7e:45:eb:4e:71:96:1d:51:5b:a8:d0:23:3a:2b:4c:
         9d:80:db:d4:c2:e7:d7:16:52:20:bc:76:fb:a2:d9:39:c4:0a:
         87:d0:76:a3:8a:72:e5:bb:57:f7:be:24:f0:d3:60:54:99:cd:
         4e:0b:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:42 2025 by rpki-client