Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
File:                     18FC32F1670351EC283C40262E5055C462E12229.mft (raw, json)
Hash identifier:          vRy4DPB3mWcQ82xMtLWsPQenKoA4Ajf+KxFW6sFSutg=
Subject key identifier:   5A:30:01:6C:1D:67:E6:B8:85:D2:D5:68:74:B1:7A:85:8E:1B:F4:E8
Authority key identifier: 18:FC:32:F1:67:03:51:EC:28:3C:40:26:2E:50:55:C4:62:E1:22:29
Certificate issuer:       /CN=18FC32F1670351EC283C40262E5055C462E12229
Certificate serial:       0D641B6795CBADC1CD45AD5842FCF612B627A0AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 08:11:44 +0000
Manifest this update:     Mon 21 Sep 2026 08:06:44 +0000
Manifest next update:     Tue 22 Sep 2026 11:58:44 +0000
Files and hashes:         1: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: pkw1Y7i4f2xvVEY0Gh9GjhFjARpvJWCNngf9O/42y0o=)
                          2: 18FC32F1670351EC283C40262E5055C462E12229.crl (hash: CO7+X9+BGbCWfShTJR19yqT1JLYG+1yVvWcZZ8P2Cn8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.crl
                          rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 11:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:64:1b:67:95:cb:ad:c1:cd:45:ad:58:42:fc:f6:12:b6:27:a0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FC32F1670351EC283C40262E5055C462E12229
        Validity
            Not Before: Sep 21 08:06:44 2026 GMT
            Not After : Sep 22 11:58:44 2026 GMT
        Subject: CN=5A30016C1D67E6B885D2D56874B17A858E1BF4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:53:40:a1:d8:ce:9d:20:34:ce:e2:44:3d:
                    ab:27:04:fa:70:78:73:41:68:df:0a:bf:7d:c0:4a:
                    d5:a5:00:6c:b5:05:86:d5:69:28:8c:52:3b:6a:0b:
                    f9:b8:e1:d4:04:ed:41:b3:81:e4:73:98:c2:09:d7:
                    99:90:b1:0a:60:1d:0d:96:94:ec:3e:68:da:eb:1a:
                    c3:5c:2a:50:97:b8:ae:98:67:79:56:ef:74:09:58:
                    50:c0:2a:d3:9f:b7:c6:7a:81:4b:67:92:d9:61:31:
                    74:65:f1:a9:95:86:8b:da:37:71:e6:d2:aa:15:45:
                    0d:1f:00:71:f3:89:db:1c:b6:a4:3f:ff:af:9f:a2:
                    9e:fd:95:35:c9:a4:22:17:a8:cf:e3:7f:df:af:fd:
                    38:c1:6c:2f:2b:ee:ad:f0:91:3a:02:d1:be:d5:84:
                    44:4e:9b:8b:f6:29:a0:7e:90:fd:ec:8e:ef:12:69:
                    25:62:70:7f:d0:81:2f:aa:7d:86:66:00:c9:c2:d6:
                    70:67:fd:da:c9:57:9f:16:95:c6:59:31:a3:df:a0:
                    8b:30:b6:0a:8b:63:04:7f:0e:8f:82:ee:3d:81:b4:
                    bb:2b:74:cc:00:49:18:d7:3b:c7:23:e6:a9:26:2a:
                    3c:c5:11:7b:ec:42:17:ea:dd:3e:bd:73:1f:1a:6b:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:30:01:6C:1D:67:E6:B8:85:D2:D5:68:74:B1:7A:85:8E:1B:F4:E8
            X509v3 Authority Key Identifier:
                keyid:18:FC:32:F1:67:03:51:EC:28:3C:40:26:2E:50:55:C4:62:E1:22:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:fc:65:91:56:9c:48:ca:b2:f5:d0:97:8e:e9:4c:54:b4:a8:
         aa:fc:1b:43:67:ae:0e:91:02:a7:8e:9c:ab:27:a5:75:2c:90:
         fc:c2:8f:14:17:c9:92:b0:88:f7:8f:d0:fb:c1:eb:96:cd:0f:
         87:3f:1e:99:47:c3:5b:24:6f:25:9d:f3:bf:e4:e8:24:5c:b9:
         58:91:e0:63:d8:96:b4:f7:e7:10:bd:4e:6d:c6:a6:be:6a:71:
         8f:b3:9d:7b:32:4e:e3:04:10:ba:18:7a:4d:e0:e3:3d:99:ac:
         5b:73:d0:ba:6b:f1:db:6f:3a:54:eb:c0:bc:9f:27:04:04:86:
         30:81:e9:d8:41:b3:72:95:25:2c:11:4d:ce:00:8f:cf:bd:ea:
         61:1e:53:a9:b2:d8:6f:59:1f:5a:f8:2a:1d:c9:38:f4:cb:63:
         52:9b:5d:56:90:10:e9:62:57:40:82:f8:84:ce:ad:61:cf:1c:
         5b:60:09:17:75:b3:a4:22:be:3b:b9:69:4f:49:7a:63:d7:78:
         5e:7c:7c:68:97:3a:4e:eb:e2:bf:64:dd:62:c1:bd:e1:6d:1f:
         ae:f0:34:fc:52:1f:90:ad:ff:b6:45:2d:4f:8c:9b:d1:88:5c:
         09:8f:6f:aa:25:c3:29:79:df:d1:49:19:25:f5:ad:d4:9a:13:
         3b:c1:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:46:30 2026 by rpki-client