Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
File:                     218F42D6775F39C04AD2042E61C557053D4A69FE.mft (raw, json)
Hash identifier:          VFEOFlkcepJH9L7576E1HsGh8h6L2VctVOCx4syFSqM=
Subject key identifier:   90:E6:6F:EA:C4:DC:9A:F9:9A:8D:98:31:C4:57:97:7B:27:24:01:23
Authority key identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE
Certificate issuer:       /CN=218F42D6775F39C04AD2042E61C557053D4A69FE
Certificate serial:       281B2F4B81B9843926750F747182133E6669EE23
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
Manifest number:          3A
Signing time:             Sun 14 Jun 2026 02:36:01 +0000
Manifest this update:     Sun 14 Jun 2026 02:31:01 +0000
Manifest next update:     Mon 15 Jun 2026 06:19:01 +0000
Files and hashes:         1: 218F42D6775F39C04AD2042E61C557053D4A69FE.crl (hash: G67F39wvI7rEDUkwOlsjiuGb8kTPCJ/tA9G22VWmf5U=)
                          2: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: umbo3UO1surjjSvNZv8AZicuTRNi2hpCJFPh1PPiOEw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl
                          rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 06:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1b:2f:4b:81:b9:84:39:26:75:0f:74:71:82:13:3e:66:69:ee:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218F42D6775F39C04AD2042E61C557053D4A69FE
        Validity
            Not Before: Jun 14 02:31:01 2026 GMT
            Not After : Jun 15 06:19:01 2026 GMT
        Subject: CN=90E66FEAC4DC9AF99A8D9831C457977B27240123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:4e:a0:3b:80:e6:42:c9:fb:09:75:76:a8:
                    58:4f:1d:45:5b:63:cd:9e:68:a8:72:c0:0e:b9:fd:
                    01:8b:70:09:65:c0:6e:d7:57:21:09:92:b9:f5:9e:
                    51:c5:3e:03:6b:17:09:16:42:11:61:5f:49:a0:8d:
                    af:2c:fe:1c:1e:91:9b:f0:15:af:1f:8c:3c:e1:47:
                    bc:cf:c9:a3:58:35:0e:c6:5c:47:2f:77:78:b6:8c:
                    25:29:f2:e8:86:25:fa:a8:f5:e1:9d:1f:de:ed:4f:
                    52:3c:f0:3f:2c:08:fe:1c:6e:3e:50:d4:17:11:26:
                    49:b4:e7:dd:a9:73:fd:e9:d4:96:1f:87:a7:47:bc:
                    d9:b9:be:86:bc:dd:95:9b:92:d2:10:31:c2:8e:b1:
                    8f:8a:c6:1d:42:cd:82:fa:f8:ea:c2:23:37:71:bd:
                    cb:c3:e1:de:9e:fb:31:86:d7:df:99:34:a9:66:1f:
                    cd:14:0b:0c:c3:c8:66:5e:c1:16:a4:e8:44:00:cf:
                    eb:ca:c2:c7:fd:b4:33:e7:df:5d:e5:86:0e:82:67:
                    8b:43:a6:01:7b:39:e3:81:6b:c2:42:d1:35:fb:4f:
                    18:6a:c6:9b:fb:25:38:b0:3e:c4:2a:41:bf:f0:6b:
                    c6:12:3b:e1:0e:14:9e:6c:3d:dc:4b:f2:6d:b4:b2:
                    29:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E6:6F:EA:C4:DC:9A:F9:9A:8D:98:31:C4:57:97:7B:27:24:01:23
            X509v3 Authority Key Identifier:
                keyid:21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:be:d9:03:b8:22:09:0a:c3:5d:4f:20:9e:f8:89:77:e1:f1:
         25:09:9c:a8:fc:fd:9b:6e:e7:10:d6:c0:fb:6e:c9:cb:c7:49:
         75:5b:a9:80:f7:2c:81:0c:56:1a:a1:7e:44:96:34:1d:85:3e:
         60:8e:36:be:ed:2b:fc:f0:b8:ef:39:fb:bb:5e:90:be:41:75:
         c5:05:8f:f6:55:57:c3:8a:6a:f4:73:0b:7d:b2:4c:1c:cf:d9:
         c6:77:7a:ac:85:07:a8:a5:52:4f:28:7e:c1:43:1d:70:7e:3f:
         ca:78:55:8a:55:73:72:6a:a3:4b:41:95:78:55:f0:da:0b:13:
         f1:5f:74:63:f4:50:09:f2:a9:81:fa:0a:55:96:10:c2:77:1c:
         f7:fa:9e:69:54:c3:af:ed:19:b2:73:54:82:6b:e6:9f:cd:36:
         cb:94:d5:3e:6c:92:8b:c4:35:d4:da:4c:a7:7f:3e:de:a3:87:
         b8:eb:ce:59:cb:50:b1:b9:b8:84:12:63:8f:4d:3d:68:69:d6:
         8d:9f:6e:b9:30:7c:2b:16:7e:2e:a3:4f:03:9d:98:95:97:6d:
         cc:b8:23:96:69:9b:f5:65:9e:60:a2:f9:37:e7:0e:e9:ef:45:
         e5:e8:0a:aa:b4:da:32:ed:f8:7f:e1:5f:4a:bc:ca:1c:e9:18:
         2e:fc:b2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:03:33 2026 by rpki-client