Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft
File:                     DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json)
Hash identifier:          4V2mGZPZFa4z8V2b7wQRtPd5VgLAVhtfokB0SCgkrLs=
Subject key identifier:   CE:4A:E1:D6:DD:F6:8B:BD:68:9B:70:75:A0:7C:AC:BE:EF:47:EF:3A
Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15
Certificate issuer:       /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915
Certificate serial:       0AE285F12A71E565D3998B4446765BF112F312FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft
Manifest number:          0551
Signing time:             Sat 28 Feb 2026 11:51:53 +0000
Manifest this update:     Sat 28 Feb 2026 11:46:53 +0000
Manifest next update:     Tue 03 Mar 2026 22:44:53 +0000
Files and hashes:         1: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: o5iSnMXFzbfM7bfcumif/KmLsLtNWmpJvMu0QqPNyJ4=)
                          2: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: 7oh7gLosxpigXZ1B5YXMaPZ1h+t8yrojfWYMj50/Mhg=)
                          3: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: LeIArO2ugyFzqhOfzyY49jG0OfnapAFQ/XpIZTbnEek=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl
                          rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 22:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e2:85:f1:2a:71:e5:65:d3:99:8b:44:46:76:5b:f1:12:f3:12:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915
        Validity
            Not Before: Feb 28 11:46:53 2026 GMT
            Not After : Mar  3 22:44:53 2026 GMT
        Subject: CN=CE4AE1D6DDF68BBD689B7075A07CACBEEF47EF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:9c:97:30:ff:dc:37:f3:7a:1f:db:9b:cd:
                    95:00:c0:3a:1d:53:1a:62:cc:68:e8:46:61:66:b7:
                    d6:07:44:6c:6d:7c:d2:3a:8d:35:97:eb:70:e5:9b:
                    c2:90:74:ee:64:60:ce:58:a6:a3:ac:93:02:4c:bf:
                    ea:4f:0b:95:95:e5:9e:16:94:5b:b5:e7:fe:29:eb:
                    7b:de:32:5d:6a:da:bb:7a:88:53:09:2e:5d:c8:fa:
                    08:e3:c5:c3:7c:f2:29:06:0c:d5:3a:fa:e3:9b:69:
                    b9:4f:68:c9:8c:92:46:ca:2f:03:a6:ee:f2:6f:10:
                    22:c6:51:00:5d:d3:d0:19:87:88:6f:90:f0:98:a9:
                    12:9d:bb:0f:5f:f1:33:eb:8e:97:89:da:81:66:b9:
                    be:07:6c:09:25:e3:2e:3f:d2:b7:b6:eb:84:88:c1:
                    ea:3b:13:48:1b:6f:92:25:3f:8f:e7:de:89:e5:4f:
                    58:6c:e3:7a:04:ff:7d:fe:fb:1e:c1:90:99:df:d5:
                    d1:86:96:51:31:76:01:bb:9d:c0:27:92:5d:43:76:
                    b2:9b:06:ae:3e:aa:8e:bd:7d:e3:bf:4e:7c:cd:de:
                    18:ba:fa:70:c3:82:b4:a8:4c:ab:da:3f:f4:2a:a4:
                    5a:6e:d3:bf:63:5e:ae:f2:07:07:c4:ca:07:5b:9f:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:E1:D6:DD:F6:8B:BD:68:9B:70:75:A0:7C:AC:BE:EF:47:EF:3A
            X509v3 Authority Key Identifier:
                keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:95:0e:78:f4:54:56:c6:67:46:1c:2d:81:7e:4a:12:97:f5:
         13:2c:86:48:88:87:95:af:b0:91:5f:0e:1f:b8:38:12:73:da:
         13:8b:0a:b9:e1:e7:6d:71:86:4d:54:77:58:39:50:2f:6f:22:
         1c:c2:b8:1b:b6:e2:ba:cf:28:a0:76:d3:51:74:1f:aa:e0:0e:
         1c:15:ab:dc:03:cf:59:ec:e0:7e:e5:27:44:0d:1f:2e:33:25:
         83:40:5d:be:b6:52:5b:58:ba:65:62:b2:22:1d:d1:9d:ee:5a:
         c0:e4:ce:d3:bb:08:67:4c:a6:a3:a0:8b:f1:03:7b:83:a4:8a:
         d1:43:f6:55:b3:db:04:b5:72:25:fd:6e:a0:42:e5:7b:4e:92:
         3b:d7:20:82:b5:89:db:33:99:e9:de:1e:fa:d0:f6:3a:1b:1c:
         b9:c5:bf:cc:10:1b:6e:88:06:bd:9c:cd:eb:61:e3:7f:56:c6:
         e5:ab:e3:cf:cf:63:13:10:c7:00:df:17:5f:ae:c1:bb:37:32:
         37:83:aa:00:32:3c:af:e3:88:5c:9e:81:bc:c0:5a:60:71:18:
         24:e5:b5:81:c8:38:57:cd:b2:66:b0:b1:84:18:d1:e7:62:3c:
         4a:b7:3e:3e:01:57:ab:cc:46:92:3c:bf:dd:ad:7f:ab:43:85:
         ec:e2:32:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:08 2026 by rpki-client