Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
File:                     18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft (raw, json)
Hash identifier:          o0rM50jS5lDPpCGRfYtcpmrNZHSx5bQhdximEpWKO3Y=
Subject key identifier:   39:C6:A9:6B:85:0B:F6:A0:82:63:04:EA:8F:08:78:A9:DE:69:A7:E5
Authority key identifier: 18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9
Certificate issuer:       /CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
Certificate serial:       726EAB236983A0577C2F90694E40809C2D3EAF1C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
Manifest number:          76
Signing time:             Tue 28 Jul 2026 20:21:39 +0000
Manifest this update:     Tue 28 Jul 2026 20:16:39 +0000
Manifest next update:     Wed 29 Jul 2026 23:51:39 +0000
Files and hashes:         1: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: gFD5ZtfkV8WLuWBlQkaPkrNIjj5Z4cE3YofpumoYjys=)
                          2: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: ictls1d8fDHoUd3C28juE/v5HQdxwfMf3GiA749+DqU=)
                          3: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl (hash: vP8gnRpSRPC9bM9Uq1qNLF9Y5EH+UFVOsh5nnSRp57Q=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl
                          rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6e:ab:23:69:83:a0:57:7c:2f:90:69:4e:40:80:9c:2d:3e:af:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
        Validity
            Not Before: Jul 28 20:16:39 2026 GMT
            Not After : Jul 29 23:51:39 2026 GMT
        Subject: CN=39C6A96B850BF6A0826304EA8F0878A9DE69A7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:79:64:ac:7f:61:d3:84:70:e7:77:d7:d7:82:
                    01:2e:d1:c3:02:78:dc:72:54:d6:eb:0e:46:50:5c:
                    99:4f:b7:df:43:82:fd:b3:cf:2a:35:a4:15:aa:b0:
                    d5:01:4b:c9:79:73:55:6f:1d:41:88:70:b9:18:09:
                    14:52:71:0b:19:31:0f:93:13:89:14:17:f2:76:93:
                    de:c1:8a:8a:57:8c:54:18:0a:c9:5f:b3:d6:69:d7:
                    a0:73:e1:a8:a1:e3:93:27:f0:42:6c:06:d6:21:a0:
                    80:bd:19:64:35:7b:e5:0a:e9:a3:e3:0f:43:6b:dc:
                    57:fe:79:ad:2b:13:a5:48:a5:48:7c:98:15:31:ac:
                    39:85:e7:70:df:e2:c6:72:0f:9b:57:df:32:c6:83:
                    61:4a:72:64:74:7e:fe:c0:f0:cb:1a:cf:7a:cc:3a:
                    9a:ff:c4:b2:11:2e:ca:28:f7:50:5e:56:b4:e9:89:
                    58:a0:9f:94:b7:b0:89:89:22:2c:02:d5:fc:31:a4:
                    55:31:25:16:69:ba:a0:6f:2e:14:b1:55:2e:bd:b9:
                    2e:9c:af:5f:16:46:88:59:ea:af:07:e8:88:40:c9:
                    27:0f:a8:bc:c2:17:22:81:0c:1e:05:b1:86:e1:18:
                    36:81:04:d8:9a:78:f6:4f:35:40:59:86:42:0f:4a:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C6:A9:6B:85:0B:F6:A0:82:63:04:EA:8F:08:78:A9:DE:69:A7:E5
            X509v3 Authority Key Identifier:
                keyid:18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:65:f1:84:0c:0c:06:00:77:d0:c5:ee:63:4e:d9:5d:96:73:
         f6:75:2b:ad:d8:3f:ff:be:96:c2:4d:ef:f6:50:bd:c9:41:b5:
         53:e1:7e:72:d9:3d:62:1a:d3:8b:b1:35:dd:55:8c:46:9e:0a:
         cb:e9:e2:05:02:45:6c:9e:7a:5f:cd:cb:91:fc:73:08:4a:82:
         5c:f5:2c:cd:3c:74:b9:20:c4:fb:af:17:36:5c:11:6b:8d:ae:
         9a:47:e7:48:a3:db:17:80:da:5f:12:7b:22:33:26:a2:18:8c:
         80:f2:01:7d:ec:ed:3c:cd:9e:b1:fe:8c:15:93:d4:55:de:68:
         71:78:66:8d:3c:93:c0:04:e6:39:7d:70:7c:d2:46:00:d4:c2:
         bb:ac:fd:50:17:1d:c8:b1:28:e6:14:8f:2e:2a:97:9e:0b:de:
         2d:0c:20:a4:29:ec:27:d3:08:e6:4d:29:70:e4:e2:54:59:72:
         f7:f0:42:5e:7b:9b:7d:6e:53:71:e1:0c:ae:7d:92:0d:c0:9a:
         80:b6:45:d4:98:b7:c3:6b:b1:66:28:09:cf:34:30:76:08:55:
         dd:63:37:f9:85:ee:d0:1a:21:8f:d3:42:ca:26:7c:af:66:cc:
         f1:57:32:2d:4a:71:5d:50:8e:49:63:73:b3:3d:cb:38:45:a0:
         48:fc:b3:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcm6rI2mDoFd8L5BpTkCAnC0+rxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5
MjJENkFCOTAeFw0yNjA3MjgyMDE2MzlaFw0yNjA3MjkyMzUxMzlaMDMxMTAvBgNV
BAMTKDM5QzZBOTZCODUwQkY2QTA4MjYzMDRFQThGMDg3OEE5REU2OUE3RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBeWSsf2HThHDnd9fXggEu0cMC
eNxyVNbrDkZQXJlPt99Dgv2zzyo1pBWqsNUBS8l5c1VvHUGIcLkYCRRScQsZMQ+T
E4kUF/J2k97BiopXjFQYCslfs9Zp16Bz4aih45Mn8EJsBtYhoIC9GWQ1e+UK6aPj
D0Nr3Ff+ea0rE6VIpUh8mBUxrDmF53Df4sZyD5tX3zLGg2FKcmR0fv7A8Msaz3rM
Opr/xLIRLsoo91BeVrTpiVign5S3sImJIiwC1fwxpFUxJRZpuqBvLhSxVS69uS6c
r18WRohZ6q8H6IhAyScPqLzCFyKBDB4FsYbhGDaBBNiaePZPNUBZhkIPSsD7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOcapa4UL9qCCYwTqjwh4qd5pp+UwHwYDVR0j
BBgwFoAUGMIAf+Vs7YOHm5VcuNqJ4JItarkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWM3MDAzNTAtNjYzMi00OWUyLWI3ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZF
NTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5MjJENkFCOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xOEMyMDA3RkU1NkNFRDgzODc5Qjk1NUNCOERBODlFMDkyMkQ2
QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3
ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5
RTA5MjJENkFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHhl8YQMDAYAd9DF7mNO2V2Wc/Z1K63YP/++
lsJN7/ZQvclBtVPhfnLZPWIa04uxNd1VjEaeCsvp4gUCRWyeel/Ny5H8cwhKglz1
LM08dLkgxPuvFzZcEWuNrppH50ij2xeA2l8SeyIzJqIYjIDyAX3s7TzNnrH+jBWT
1FXeaHF4Zo08k8AE5jl9cHzSRgDUwrus/VAXHcixKOYUjy4ql54L3i0MIKQp7CfT
COZNKXDk4lRZcvfwQl57m31uU3HhDK59kg3AmoC2RdSYt8NrsWYoCc80MHYIVd1j
N/mF7tAaIY/TQsomfK9mzPFXMi1KcV1Qjkljc7M9yzhFoEj8s5g=
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:23 2026 by rpki-client