Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
File:                     0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json)
Hash identifier:          oCKZYhuVOe66bgviaTcQwd++cYqKrz7ztYaW3KweR+A=
Subject key identifier:   C5:EF:70:01:C1:BB:3B:70:43:80:C0:B4:09:32:19:59:77:F9:FB:A4
Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E
Certificate issuer:       /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
Certificate serial:       2F018778A4AB6D51A62AE240FA9EBFFFFFF1FC73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
Manifest number:          0552
Signing time:             Sat 28 Feb 2026 02:30:51 +0000
Manifest this update:     Sat 28 Feb 2026 02:25:51 +0000
Manifest next update:     Tue 03 Mar 2026 11:56:51 +0000
Files and hashes:         1: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: /0ivdWgJqnJaSVnUB+9OuvpQlcxcSIK1E90K9ZECaAA=)
                          2: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: Kw/2sJDovbqcLamhNn36qpz8RozjhJRdtUEEKJ4rTNg=)
                          3: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: PGDA6MIaPn07jcCuJsizjsfFjdB3MPJjRJfu2v+YwBI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl
                          rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 11:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:01:87:78:a4:ab:6d:51:a6:2a:e2:40:fa:9e:bf:ff:ff:f1:fc:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
        Validity
            Not Before: Feb 28 02:25:51 2026 GMT
            Not After : Mar  3 11:56:51 2026 GMT
        Subject: CN=C5EF7001C1BB3B704380C0B40932195977F9FBA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:27:4c:fb:a9:d8:e0:df:63:e7:5c:87:5a:
                    bb:c7:b3:f1:17:43:93:84:86:73:fa:45:da:dd:67:
                    d3:29:82:d4:20:25:9e:6a:ef:71:44:ee:6c:35:f0:
                    60:20:2c:da:5d:b2:ab:e6:49:6a:c6:8f:c9:5e:3f:
                    69:e0:c6:b1:27:38:00:49:08:64:1b:52:e2:1d:b0:
                    86:5f:25:13:57:87:cd:50:0b:2a:ca:11:eb:61:e5:
                    af:e8:11:49:a7:9a:b1:38:fd:72:ad:07:a3:67:c8:
                    36:ed:ac:aa:71:75:df:7d:aa:a7:a7:77:5e:a8:8f:
                    dd:32:61:c4:1d:5f:0f:6d:b3:f1:1b:5f:1d:df:7d:
                    7f:fc:ea:b6:83:83:96:56:a8:22:c3:1d:a3:62:3e:
                    c4:bb:15:37:5a:d5:ad:d1:b8:8f:17:30:38:b1:7a:
                    02:c7:94:33:47:46:12:9d:16:59:a2:28:71:fd:9f:
                    0a:50:7c:30:07:81:e8:37:7e:f2:02:5c:c2:99:c3:
                    ec:42:17:ef:cc:1b:cc:9b:a8:55:a2:21:9b:3c:78:
                    57:24:05:09:90:3b:b4:7d:3d:c5:17:2f:28:b1:5f:
                    bb:da:2f:94:ca:3e:9c:e5:a1:93:2e:f2:fe:37:8d:
                    3a:06:1f:08:14:05:09:18:9d:3f:4e:f1:6a:97:fc:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EF:70:01:C1:BB:3B:70:43:80:C0:B4:09:32:19:59:77:F9:FB:A4
            X509v3 Authority Key Identifier:
                keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:09:d3:b4:0c:2d:4c:07:cd:7e:a3:c1:a8:dc:e2:6d:83:d0:
         cb:d1:01:ae:8c:f2:97:0c:08:97:24:eb:37:07:93:1e:71:45:
         89:c3:64:d0:a4:5b:ca:18:48:19:13:19:2e:dd:bf:8a:5a:ee:
         29:c7:99:1b:5a:9a:8c:f7:a7:38:00:5d:e9:50:f9:4a:80:cb:
         d6:85:7f:07:84:46:8d:99:0d:c4:3b:5c:de:33:a1:2e:78:9a:
         02:df:cb:58:c5:12:81:99:ae:76:c1:24:dc:8b:ea:8f:93:21:
         67:3a:dc:11:9b:10:42:61:a6:ac:9e:8b:3b:15:9b:09:95:b4:
         55:00:23:1e:c9:84:e7:8c:81:89:f2:13:73:18:93:ed:5c:c6:
         63:2c:99:09:42:7a:6c:54:6e:77:ca:e6:23:54:12:5b:98:80:
         e2:1b:e8:24:de:dc:a5:bf:c0:e3:a2:5b:7c:a8:3c:73:c6:f1:
         5a:eb:23:2e:25:19:06:9d:ac:65:67:33:62:06:27:81:a2:60:
         c5:51:51:6e:08:87:fb:43:80:ed:34:13:7a:88:65:bd:e0:4d:
         96:4d:3e:93:85:58:88:13:69:0a:8e:31:16:b8:ab:48:54:4f:
         47:28:21:e7:7e:e4:b9:bb:63:14:13:f3:26:13:fe:9d:eb:14:
         00:51:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:34 2026 by rpki-client