Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft
File:                     5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json)
Hash identifier:          fEJztEw38A9jXe4mbjnFNIUQMjFSdc+kzUxRyldRza0=
Subject key identifier:   B5:D0:D3:D1:E3:B2:07:5A:7F:19:B8:0C:D1:45:32:FF:78:C5:D0:15
Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92
Certificate issuer:       /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792
Certificate serial:       44CD7533BE19B7407A2613B12E6D75842A7975B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft
Manifest number:          01F8
Signing time:             Sun 01 Mar 2026 15:10:41 +0000
Manifest this update:     Sun 01 Mar 2026 15:05:41 +0000
Manifest next update:     Wed 04 Mar 2026 15:22:41 +0000
Files and hashes:         1: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: 0xZpg4gg609xykIoNkTarvsof9Vg1cwjZDIh71AhZ/c=)
                          2: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: DZ9aFZwF9ggTsXgvyFo7pS14fMoFuaypTJy0+7wDw/w=)
                          3: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: jOayWyAgZCsvj+hLghVgXXEurXODkcmj5Sfa+RC7w5g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl
                          rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 15:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:cd:75:33:be:19:b7:40:7a:26:13:b1:2e:6d:75:84:2a:79:75:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792
        Validity
            Not Before: Mar  1 15:05:41 2026 GMT
            Not After : Mar  4 15:22:41 2026 GMT
        Subject: CN=B5D0D3D1E3B2075A7F19B80CD14532FF78C5D015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:6e:66:29:c8:db:4b:65:4a:16:34:cf:df:
                    0f:8f:d4:fe:92:90:d9:18:ec:0e:d4:02:20:d8:04:
                    35:f9:ca:4f:3e:66:34:1c:20:a8:0a:2e:27:ca:d4:
                    11:c4:36:56:d8:28:9b:f0:1d:2a:c6:28:05:a9:b3:
                    63:8e:62:6a:45:f8:8b:66:59:32:ac:19:26:b9:ce:
                    72:38:55:04:6c:0c:ff:79:ef:f3:35:ff:bc:d0:78:
                    f6:a7:67:a9:04:70:2d:44:ad:ec:f9:8a:8c:f6:71:
                    06:12:35:b7:48:07:0a:54:ac:03:a6:3f:6b:5e:d9:
                    cc:1c:d0:72:fe:2e:ad:33:d4:1a:88:1c:22:3b:08:
                    a2:06:c3:c6:cf:ed:9f:23:36:75:cf:4b:0d:51:fa:
                    69:b5:f8:d7:4c:05:0c:4f:cd:e3:ec:1d:1e:a1:07:
                    4b:d3:1f:1b:ca:bb:ec:38:3f:ae:a1:2c:51:6f:7d:
                    1a:34:2b:d2:97:a7:4a:52:ea:67:7d:16:f0:79:4e:
                    e6:66:23:d6:00:b5:4e:b0:f1:72:1f:57:29:de:a7:
                    8a:bd:a4:75:16:5a:c6:44:e1:c7:0f:ad:6f:78:27:
                    41:a5:34:4a:c5:35:da:1b:7e:38:1a:a3:31:d4:78:
                    46:2c:c7:fd:66:86:12:88:fd:11:4b:c7:12:31:4c:
                    37:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D0:D3:D1:E3:B2:07:5A:7F:19:B8:0C:D1:45:32:FF:78:C5:D0:15
            X509v3 Authority Key Identifier:
                keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d4:0e:ae:bb:30:54:4d:79:a1:b0:dd:2b:a6:a1:91:f2:ee:
         63:16:78:6b:f4:66:b6:2f:10:bc:ac:c1:d1:63:45:51:44:4c:
         c5:23:dc:1e:97:81:a2:81:ab:bb:97:0f:72:63:8e:81:dc:cf:
         55:13:ea:51:f1:1b:c7:bc:ae:61:91:78:2e:4e:b1:e7:ed:5c:
         a6:10:09:49:b3:11:60:59:ad:a7:33:a5:24:2c:cf:c1:31:e2:
         5e:89:77:5c:37:4d:bb:be:47:73:8e:e0:31:e0:de:92:3c:07:
         f5:62:ee:b7:35:50:18:ee:c9:7f:ff:e5:5e:18:2c:8d:c1:e2:
         11:ad:3f:10:be:08:21:0a:b2:90:e3:ae:0f:f6:f3:82:6c:ad:
         25:7d:33:5f:d8:03:b3:df:c6:86:c4:b9:db:9c:24:f0:cb:94:
         f2:f1:75:1f:e1:64:73:ed:22:74:57:90:af:fa:69:e8:2e:a9:
         c3:e5:5c:9e:f9:01:93:85:84:86:0f:7f:58:7d:84:5f:0b:48:
         89:89:fd:82:89:ec:f0:ce:8a:6c:0e:a7:f1:d1:4d:89:08:03:
         86:05:f7:05:d6:67:86:bb:3c:f3:3b:a1:b1:93:c7:25:5f:98:
         8e:78:d0:16:c8:99:3a:10:d9:5c:80:6b:0d:c6:50:de:e0:c5:
         0f:b7:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:20 2026 by rpki-client