Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
File:                     C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft (raw, json)
Hash identifier:          rrPUJc6d5v10UNznNbVNnBysj4p7Uo76los9GVfBSnw=
Subject key identifier:   CC:1E:5E:58:75:BC:81:C9:1E:56:D8:4A:D1:36:EF:95:C1:CA:A6:95
Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB
Certificate issuer:       /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
Certificate serial:       3149EB711757A0BBC3640252E4A8DB44448C567C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
Manifest number:          052B
Signing time:             Sat 25 Oct 2025 22:41:07 +0000
Manifest this update:     Sat 25 Oct 2025 22:36:07 +0000
Manifest next update:     Wed 29 Oct 2025 09:48:07 +0000
Files and hashes:         1: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: PZwOUUZx2EQHdYrYeYouuZVw5NeiiX9go4HwzvpQyZo=)
                          2: C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl (hash: 3SWRpLbpdCx43oGACu3oCZkIaC3mwqKP4mcLKpYR+3s=)
                          3: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: YQVR8UOeiYmY2kyG9i2CqFsAi/62Mch9mbYUm4aJz9o=)
                          4: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: b8zDNPy2xqVlrDOAlQUUDIWMMOfRTaQ0mid2lPIB3KA=)
                          5: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: 8RrRORobg42yyo6LFcje0JxeCKUFuSga1jy/CkFuTm4=)
                          6: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: N1MXVORdbt5FpdZaRMnKXk8HUDVu1M5FZBwZhaokx8M=)
                          7: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: LnfQWSkhBeT+G4FyLtKt+mDAFcmNfarKzOkWL9aGALQ=)
                          8: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: EGI9o7CM4WRok9jPW02rkd7C68LQY6lwOHLdbhuimwI=)
                          9: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: mSUh/L4o3WxZWaFk4Syf4IAQb9zhHbALhTc1/MotUbk=)
                          10: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: 5rg1EeqRUgeSLgMy7lGVLTMSo/SW/vkwy5TwRaBl/j8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl
                          rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 22:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:49:eb:71:17:57:a0:bb:c3:64:02:52:e4:a8:db:44:44:8c:56:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
        Validity
            Not Before: Oct 25 22:36:07 2025 GMT
            Not After : Oct 29 09:48:07 2025 GMT
        Subject: CN=CC1E5E5875BC81C91E56D84AD136EF95C1CAA695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:5d:93:79:ff:a0:1a:93:1c:8c:5c:50:88:
                    86:62:d4:c5:61:4d:03:10:ee:0a:bb:91:55:2a:8a:
                    3a:16:a3:96:59:cf:85:60:05:d3:25:6f:31:b5:0a:
                    2c:66:21:87:60:e6:cc:3d:8a:fe:5e:b4:aa:78:a1:
                    20:07:85:5d:99:ff:50:2a:f5:04:2a:51:8f:f1:e4:
                    c1:a5:22:5e:7a:ca:b9:9c:11:32:6d:7e:48:f3:68:
                    4a:c9:33:a6:68:a3:17:55:26:2a:6c:55:17:00:62:
                    b6:f2:11:41:e3:5c:33:6a:5b:35:b0:f0:22:eb:be:
                    18:97:a6:c4:c1:c0:a7:0a:a0:00:09:a1:71:61:75:
                    bb:8f:ee:47:b8:52:5c:fb:be:67:ff:f4:8c:32:bb:
                    8c:16:41:06:e2:e3:3c:cd:bf:0b:39:92:4e:76:99:
                    df:a1:b2:c7:54:64:32:df:da:7f:27:13:35:28:b9:
                    a9:8e:bf:0a:41:66:21:42:a9:b5:ac:21:a7:94:6c:
                    5e:f5:ac:b7:6c:88:c3:73:3e:b0:6a:cc:36:1e:60:
                    af:26:58:91:4f:b0:b3:43:50:ba:8f:d2:9b:9e:8e:
                    6c:6a:be:cc:e1:2b:d9:7c:86:8e:dd:e6:2a:25:ac:
                    ef:01:24:5e:a5:9d:0b:42:61:45:10:56:27:3f:a9:
                    89:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1E:5E:58:75:BC:81:C9:1E:56:D8:4A:D1:36:EF:95:C1:CA:A6:95
            X509v3 Authority Key Identifier:
                keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:f6:1d:5d:64:56:60:e6:cc:63:60:df:82:59:32:cc:37:
         8b:9f:1f:44:77:d8:79:e3:9d:6d:e9:1e:9a:40:61:b8:21:fd:
         2b:16:13:d7:dc:5f:bb:f1:a7:19:7f:c9:37:59:20:30:fd:15:
         58:37:56:6b:97:1e:15:6d:e3:a7:73:70:e2:8e:ea:0d:c0:d2:
         71:55:dd:6a:0f:ee:43:36:c1:52:15:7a:83:e9:f5:67:27:b9:
         0f:0b:e8:db:a8:bf:bc:08:e8:59:a0:8a:12:dd:ea:4c:31:ec:
         f7:d9:dc:ef:bb:88:29:8c:c2:c9:28:ae:52:c0:0f:22:c3:12:
         bf:32:50:5d:12:d0:4d:9a:fd:73:2d:f4:1a:6d:24:21:70:44:
         dd:1e:9f:b6:4d:8d:91:ed:71:2d:1f:ac:69:47:99:72:92:fc:
         71:2f:13:05:a1:86:7a:d7:93:75:ba:f9:67:42:d5:54:0c:80:
         e0:4e:63:b7:37:5f:ec:98:b3:7d:64:c9:12:c2:04:2b:95:fa:
         1f:ac:b1:72:90:1f:91:bd:c5:91:d4:9c:bd:31:4d:51:35:ff:
         6f:7a:29:ed:5a:2a:67:24:8a:e2:0b:4a:48:f6:da:04:6c:36:
         79:34:90:26:de:a7:51:7b:08:9f:ba:bc:61:33:a4:8c:81:df:
         ad:f8:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:33:25 2025 by rpki-client