Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
File:                     981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json)
Hash identifier:          id9pxEul9mrr3PGWUvslBu+HAdFcTq4yOaj0wgbRdu8=
Subject key identifier:   55:C7:96:59:32:FD:43:DE:6C:54:E0:0E:3C:7B:EC:C4:40:11:94:4A
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       3AF1D93F32E0A5490411AAEA7819B53BAD63F2EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
Manifest number:          0580
Signing time:             Wed 15 Oct 2025 09:01:21 +0000
Manifest this update:     Wed 15 Oct 2025 08:56:21 +0000
Manifest next update:     Sat 18 Oct 2025 12:33:21 +0000
Files and hashes:         1: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: B2Tw6HSAM5ulYHKRH75F0h46zKdB8wRJOBFPUl3D88g=)
                          2: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=)
                          3: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: XBonl+MDq5JKpWntnVm6TMfayZbg8tQu2RWN6XgAyJw=)
                          4: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: k8TYiHXc6vZmoqXaKgcDXCYwJI5QRLDArVJpzQsFi0s=)
                          5: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: Wij0WNmFzkS7ii03UOjMpVj1DHEK+SaLjmorAVH1mZI=)
                          6: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: DzgPlEX76YPqKshtrhPz/EVID2lXXaNvCCo/tHgJE8c=)
                          7: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: aaVQCjxDcTZfVP0GXV6UmhAVx/WHjfyhQPMjY9CDL1Y=)
                          8: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: L7B4TlCu6+XGwvVIhFVxD06j+oz/txAbz7A9RLeSSuk=)
                          9: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: slxJrksLG/ugoCdz0xpYsZxbcTeP+M/3OR1Tilc8hic=)
                          10: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: aq3iMOcZU4XVOFPAPd2Nh3J2J2xxy7ZZYh4S2cWkrJY=)
                          11: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: SU/DxOnFopjxkv8c6HfEkmadSFV8VExLgA9VBa2HuUc=)
                          12: 3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa (hash: gGq3gtPXXpT8qmppXJpdYMGRNCe8MtmuCS9LRZ9VUgI=)
                          13: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: 8Z6QdZAm6ipP1goiFZjslQYb9XOb/wZyuYYrPlulaFM=)
                          14: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: njKwh9fBki9cQ9S37NNLRAGEY/gEGO5YoV7LWFXK6D8=)
                          15: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: H0HlMimCqXAso/aispJtA9+9Apf+w3psosa64aEPhuo=)
                          16: 3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (hash: /Id0ptV6KhbD1snBODkIm970DRe1HBZaO2KQ2jikLRE=)
                          17: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: yk2Beo121KKGPqhGrImYDU3EMLdITUqRzn7ocJjo60c=)
                          18: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: T9tknLjTeQ+7ZUfv8SNf4lCYZ42qRdSxxizSEJYn0CA=)
                          19: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: 1MMaA/JALdwU46Gmn5cadR8bFFMn6pjjD2wa0Pe9Aag=)
                          20: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: wu8diV5jdWuux9C39Tvhu1GJ88vcA6Du/7ncHsnVM8k=)
                          21: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: tmM3oKcQYom0eZ0XNJS+YU7h43ssUwLiYaqon6dfaUY=)
                          22: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 9MSiXUftqD7YwgoDDhRkUOlJfbnaxlrR0kRkqPsHDsM=)
                          23: 3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (hash: 4CIlhDwPBWmO489rSkBL096ATSwuK+FjlEMQtzZL/kc=)
                          24: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Oct 2025 12:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f1:d9:3f:32:e0:a5:49:04:11:aa:ea:78:19:b5:3b:ad:63:f2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Oct 15 08:56:21 2025 GMT
            Not After : Oct 18 12:33:21 2025 GMT
        Subject: CN=55C7965932FD43DE6C54E00E3C7BECC44011944A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3b:39:0a:5a:08:e9:14:3c:3c:b0:f9:36:af:
                    0c:79:29:fb:83:a2:38:eb:39:9a:6e:b3:3d:7c:bd:
                    f9:30:11:ab:85:93:71:5a:4a:d2:29:98:8c:72:ee:
                    43:cd:60:1a:29:37:1e:67:13:c5:e0:c3:e8:16:f9:
                    69:35:c4:f0:61:cb:83:16:65:c9:55:4a:48:24:b4:
                    f2:67:6b:a3:98:cb:01:7b:25:b2:49:ea:70:e6:8c:
                    d0:7a:1a:2d:21:ef:0b:4f:56:1c:9e:9b:2a:d0:7e:
                    ca:9e:c3:c6:2d:80:32:bf:f7:da:d3:c5:84:09:09:
                    18:e5:0e:84:c1:d4:25:d0:e7:5f:58:4f:5e:07:db:
                    ae:c7:50:89:bb:d4:22:a8:c0:69:f6:b2:76:d1:40:
                    1a:3d:5a:18:2a:90:19:a3:0b:d7:f1:c2:c5:ee:58:
                    ee:05:f4:94:f5:37:00:6b:e9:94:91:a3:30:ca:ee:
                    c5:83:d1:da:9b:19:d3:65:52:79:9d:2c:67:84:0a:
                    fb:e1:76:d2:6f:67:2e:7e:83:b1:b8:5c:f8:d1:f6:
                    dd:ff:8d:a6:4a:7d:d2:0f:a3:05:b6:3f:cc:50:d1:
                    d4:7b:b7:b2:b9:40:fe:84:0f:b7:1b:6e:80:47:3c:
                    77:3a:de:2a:58:7a:b0:70:68:59:68:91:33:8d:13:
                    9c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C7:96:59:32:FD:43:DE:6C:54:E0:0E:3C:7B:EC:C4:40:11:94:4A
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:91:aa:30:91:35:0b:d6:5a:bc:91:d7:5a:fd:2c:05:cb:a0:
         13:b7:ea:03:cb:cb:1c:9f:b7:4c:45:69:09:d6:63:3b:f5:84:
         63:f7:1f:ad:99:5e:49:bb:30:fd:fc:c0:81:02:ec:c8:03:1c:
         1b:8e:c0:f0:28:9c:56:17:c5:3c:27:e4:00:6b:0c:18:13:fb:
         18:1f:46:53:43:a0:44:3e:3b:57:8c:3f:79:f5:e5:07:16:a3:
         04:8c:e8:89:32:7e:81:28:c1:e4:1d:1e:2b:34:ae:dc:cf:5b:
         81:2f:2a:34:75:86:90:a9:c2:e2:16:0d:87:84:2f:93:d0:3e:
         66:54:92:4e:22:1c:51:74:90:11:68:bd:a6:fc:be:a1:bc:09:
         0c:2d:6e:ef:4a:4e:0c:92:ed:04:6a:18:a2:aa:ac:16:c0:1f:
         6c:58:c7:4a:39:b1:63:4e:ea:5a:19:a1:71:25:f4:b9:1f:a5:
         95:cc:92:70:a4:59:95:70:05:52:29:49:ff:c4:0c:4a:82:29:
         46:6c:03:59:fd:d6:ca:bc:9a:50:39:c1:e3:5c:a5:26:cb:15:
         c0:50:65:9a:a3:55:e8:62:63:11:1f:91:31:6c:76:55:52:bb:
         ca:42:c6:b2:50:fb:fb:56:df:8d:25:f8:05:07:0b:ff:a4:da:
         e7:98:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 17:43:13 2025 by rpki-client