Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
File:                     C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft (raw, json)
Hash identifier:          qwDSYhcUNIthRnFm9Gr3DT3RG9x2GmNuFbSU1ujcyVQ=
Subject key identifier:   EC:50:BC:C5:DF:DD:D0:40:1B:AD:36:68:15:9C:9F:10:A6:F6:D3:B0
Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB
Certificate issuer:       /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
Certificate serial:       7C48E33A7A88F9A92EF1938D89AED8ED78747C94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
Manifest number:          0528
Signing time:             Sun 19 Oct 2025 07:41:07 +0000
Manifest this update:     Sun 19 Oct 2025 07:36:07 +0000
Manifest next update:     Wed 22 Oct 2025 11:35:07 +0000
Files and hashes:         1: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: b8zDNPy2xqVlrDOAlQUUDIWMMOfRTaQ0mid2lPIB3KA=)
                          2: C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl (hash: FntNeiqz8q/cPPDE+apfFM7kN7LCDfBHLM4IP7X68AA=)
                          3: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: YQVR8UOeiYmY2kyG9i2CqFsAi/62Mch9mbYUm4aJz9o=)
                          4: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: 5rg1EeqRUgeSLgMy7lGVLTMSo/SW/vkwy5TwRaBl/j8=)
                          5: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: N1MXVORdbt5FpdZaRMnKXk8HUDVu1M5FZBwZhaokx8M=)
                          6: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: PZwOUUZx2EQHdYrYeYouuZVw5NeiiX9go4HwzvpQyZo=)
                          7: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: mSUh/L4o3WxZWaFk4Syf4IAQb9zhHbALhTc1/MotUbk=)
                          8: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: EGI9o7CM4WRok9jPW02rkd7C68LQY6lwOHLdbhuimwI=)
                          9: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: 8RrRORobg42yyo6LFcje0JxeCKUFuSga1jy/CkFuTm4=)
                          10: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: LnfQWSkhBeT+G4FyLtKt+mDAFcmNfarKzOkWL9aGALQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl
                          rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 11:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:48:e3:3a:7a:88:f9:a9:2e:f1:93:8d:89:ae:d8:ed:78:74:7c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
        Validity
            Not Before: Oct 19 07:36:07 2025 GMT
            Not After : Oct 22 11:35:07 2025 GMT
        Subject: CN=EC50BCC5DFDDD0401BAD3668159C9F10A6F6D3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d2:64:71:ad:23:88:70:da:cf:e1:77:00:e4:
                    04:a3:c7:a7:b4:88:76:c9:12:be:1a:12:f3:92:7e:
                    b0:ca:50:05:00:55:21:b5:c1:d0:f0:b8:d8:5b:c6:
                    16:f7:29:aa:48:6b:59:9b:dd:72:71:17:57:dc:04:
                    b5:e6:70:47:dc:7b:34:50:7f:ae:85:84:7d:6d:9c:
                    43:ef:7f:19:65:31:ac:37:73:69:39:7c:ab:d8:43:
                    13:b6:49:2c:27:85:ab:54:3c:22:3f:d3:f5:39:4d:
                    cb:87:f6:1e:23:9c:a1:1e:9d:6e:b8:3a:22:22:7a:
                    8d:49:7a:b5:df:65:b4:0b:05:4d:b8:83:c7:43:45:
                    3b:15:c2:1d:ca:02:97:7e:c6:f3:55:d2:9b:e9:ae:
                    c6:0a:14:3e:fe:77:82:dc:c8:52:e1:99:d6:5b:0d:
                    39:2d:61:02:19:4f:eb:8c:4f:ff:15:69:73:32:23:
                    d1:06:99:18:93:e9:29:c6:98:5b:be:a6:24:35:4c:
                    58:f5:16:0b:33:19:44:29:1d:c4:26:d4:ef:01:25:
                    54:7b:ee:85:a9:19:02:13:02:9c:06:6b:67:be:a0:
                    6f:1d:f2:cb:4d:fc:40:f3:ea:b8:a1:a5:81:70:db:
                    1a:ba:25:57:ce:4c:7f:ad:c0:2b:7b:e5:30:ba:7b:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:50:BC:C5:DF:DD:D0:40:1B:AD:36:68:15:9C:9F:10:A6:F6:D3:B0
            X509v3 Authority Key Identifier:
                keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d5:7c:0d:59:1a:88:7d:bd:8f:03:0e:13:38:ba:e4:da:9c:
         a3:0b:20:7b:9e:69:b8:8d:dc:5d:de:c1:ac:bc:dc:3f:2a:ef:
         4b:8d:c8:cb:fe:bf:b5:67:cf:d6:d2:dc:c6:58:fe:3c:1b:b9:
         a0:7a:bc:67:e6:4b:2a:37:47:f6:c4:22:42:45:7f:dd:74:f2:
         b7:dc:15:59:55:30:90:2c:5f:02:89:4d:41:ab:96:45:72:ef:
         ba:ed:b8:b5:6f:12:c0:eb:2b:cc:82:25:5d:e6:b2:98:95:cb:
         61:e2:ec:6f:6e:d2:f4:7c:c7:3a:56:9e:8a:36:05:53:f2:5a:
         58:f2:f9:23:19:49:f5:47:b4:7c:62:b2:cc:c9:31:b5:0c:1e:
         47:61:ad:c6:9a:ee:43:ac:2e:d5:3e:18:59:0b:e8:e9:90:72:
         66:40:15:7a:ec:7c:b4:1e:42:10:5a:46:e9:d7:67:3a:a6:ec:
         00:8f:d9:89:f8:fb:2d:1f:76:a7:f9:a8:9e:04:56:2d:08:f2:
         f0:e8:43:5a:0d:11:8c:b6:61:37:2f:31:ba:0a:40:4a:b1:ca:
         b3:f0:46:f8:a9:bd:b3:5a:b6:0f:fb:ff:d6:ea:f0:60:f2:53:
         b3:4e:f6:00:3e:04:40:6f:41:dd:f8:91:59:72:48:42:57:7d:
         d4:2b:99:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:54 2025 by rpki-client