Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
File:                     0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json)
Hash identifier:          fMZlT1ds168vdGM2bfaeb6yvgB2AJsx2+1qA9NfcdGc=
Subject key identifier:   5A:08:2B:DD:C1:F7:F8:87:EC:58:8B:FE:DE:4D:4A:0E:A9:0D:A7:FA
Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E
Certificate issuer:       /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
Certificate serial:       2BAFD52C32CB9844E70BC05260E3A336F58D1ABB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
Manifest number:          0562
Signing time:             Sun 05 Apr 2026 09:10:54 +0000
Manifest this update:     Sun 05 Apr 2026 09:05:54 +0000
Manifest next update:     Wed 08 Apr 2026 18:41:54 +0000
Files and hashes:         1: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: /0ivdWgJqnJaSVnUB+9OuvpQlcxcSIK1E90K9ZECaAA=)
                          2: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: Kw/2sJDovbqcLamhNn36qpz8RozjhJRdtUEEKJ4rTNg=)
                          3: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: 0dUYEAZtUqvAvteADp9ukxe3zVz3o/K+qgljWpbrVxU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl
                          rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Apr 2026 18:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:af:d5:2c:32:cb:98:44:e7:0b:c0:52:60:e3:a3:36:f5:8d:1a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
        Validity
            Not Before: Apr  5 09:05:54 2026 GMT
            Not After : Apr  8 18:41:54 2026 GMT
        Subject: CN=5A082BDDC1F7F887EC588BFEDE4D4A0EA90DA7FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:5e:06:3e:cd:c0:b3:b8:c3:ea:6e:c1:31:
                    2f:7b:0c:7d:d8:14:0e:6b:0d:a5:f3:bf:0f:e6:d7:
                    68:81:ca:2c:f0:ce:08:65:a0:79:83:b5:43:bb:f7:
                    74:68:df:8d:a9:b0:13:0d:62:e3:ba:f4:67:5c:13:
                    77:bb:00:ce:26:f1:3a:b9:df:4a:fa:c8:0d:4b:28:
                    79:99:2f:53:fa:3c:9a:58:42:31:1a:e5:be:6b:79:
                    53:83:cf:a8:69:a4:91:13:e2:f4:77:52:55:0e:ac:
                    13:28:78:b4:69:56:d5:20:06:4a:6c:00:bc:86:55:
                    d9:c7:47:6b:22:12:ad:ff:db:a8:2d:7d:58:dc:3b:
                    03:dc:be:37:05:7a:33:50:69:da:ba:90:2c:e1:1c:
                    7f:3e:e9:2f:ae:b5:89:e8:40:90:ca:d9:e2:3f:11:
                    88:d4:a6:86:16:f8:5f:ac:fa:f4:45:3d:29:dd:35:
                    dc:56:de:4b:4d:74:05:8b:50:e7:ba:53:35:43:96:
                    e9:e0:21:23:f3:7e:ca:03:b8:65:59:c7:ad:fb:92:
                    5f:62:86:02:71:3a:11:c1:72:d1:9d:69:4a:09:9a:
                    fb:57:84:60:bf:57:dc:0b:ef:8b:21:7a:ad:9d:3c:
                    17:ab:6c:32:6e:6d:5d:93:dc:22:cf:12:9b:76:dd:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:08:2B:DD:C1:F7:F8:87:EC:58:8B:FE:DE:4D:4A:0E:A9:0D:A7:FA
            X509v3 Authority Key Identifier:
                keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:1a:80:07:a6:5e:5a:d8:ff:35:f6:5d:8e:7e:e3:4f:c1:7f:
         2e:d4:da:ec:12:3d:2d:67:4d:19:b7:77:df:2f:62:8a:e7:09:
         ad:0f:9b:38:9b:f8:3c:1f:e5:66:e5:0a:b7:92:c4:e8:86:44:
         3d:cd:f3:44:f8:05:c0:6b:26:44:6d:6c:e0:5c:d6:82:a4:4c:
         cc:17:0b:f7:18:50:2a:cd:5b:40:b2:70:f4:ca:3b:bb:c6:1d:
         0f:dc:56:ae:1a:3e:40:b8:70:bd:d5:8c:04:f8:dc:5c:31:10:
         12:0a:d3:30:61:40:fa:24:fc:37:70:86:a0:92:d0:bc:b0:f5:
         9d:8d:94:87:38:81:9d:69:79:ea:b6:60:d7:72:26:9e:53:9f:
         cd:9d:e8:31:c1:c7:8c:5a:d5:96:f4:ac:01:ca:b1:1c:84:be:
         f1:59:61:1a:a5:c5:5d:29:39:1a:85:66:0b:1d:a8:b1:17:b7:
         ef:1f:d7:64:fc:3c:36:d2:67:48:09:c4:28:b9:0f:28:74:8d:
         6f:3a:d9:9c:ea:69:4b:0f:ca:a2:a1:5e:f0:5f:17:5f:43:87:
         89:c1:5c:e1:81:a2:c0:e9:fd:d9:74:0f:ce:6a:51:d3:e5:fa:
         f8:bb:68:e7:03:a7:4a:6d:60:9e:b8:82:fa:bd:0c:8b:fb:7f:
         ea:a2:ae:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 11:43:11 2026 by rpki-client