Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
File:                     18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft (raw, json)
Hash identifier:          TidW4ms2sSbgnDEOqZWLndkdJSJEUYyBp3xiv+esPJw=
Subject key identifier:   DC:98:69:80:0E:27:A0:89:94:E5:B5:73:E5:E0:23:C4:AF:A3:CF:70
Authority key identifier: 18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9
Certificate issuer:       /CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
Certificate serial:       5B324E36126AB8D8EEB2763705F941F13A1F0127
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
Manifest number:          C3
Signing time:             Thu 24 Sep 2026 13:07:04 +0000
Manifest this update:     Thu 24 Sep 2026 13:02:04 +0000
Manifest next update:     Fri 25 Sep 2026 14:08:04 +0000
Files and hashes:         1: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: ictls1d8fDHoUd3C28juE/v5HQdxwfMf3GiA749+DqU=)
                          2: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: gFD5ZtfkV8WLuWBlQkaPkrNIjj5Z4cE3YofpumoYjys=)
                          3: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl (hash: f580Lj0Qsr3U9gzysleYlw92LaTidu/dfajSD0w0KM8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl
                          rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 14:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:32:4e:36:12:6a:b8:d8:ee:b2:76:37:05:f9:41:f1:3a:1f:01:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
        Validity
            Not Before: Sep 24 13:02:04 2026 GMT
            Not After : Sep 25 14:08:04 2026 GMT
        Subject: CN=DC9869800E27A08994E5B573E5E023C4AFA3CF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:44:b6:dc:44:d7:c9:97:15:38:04:ae:b5:c3:
                    bd:5e:99:52:3e:40:42:c9:da:50:04:69:3b:c8:2a:
                    02:53:85:b6:de:27:bb:7d:d8:f1:66:a8:ce:7e:e8:
                    48:14:58:1f:d6:e1:b1:73:aa:34:39:86:99:22:84:
                    5a:49:1c:39:94:db:3e:86:03:b4:8f:35:e4:1f:59:
                    6b:50:17:69:16:b3:c4:14:6e:eb:69:74:e4:00:85:
                    ab:08:3a:1f:de:57:33:ab:38:b5:87:5e:1c:67:c6:
                    37:0e:57:9b:88:3c:fc:2a:24:95:82:e5:99:84:56:
                    85:2e:ff:76:dc:22:13:1d:ce:69:d2:e0:61:31:e8:
                    e4:e0:15:17:1d:45:a8:ce:9f:01:7d:ec:a3:9d:64:
                    88:15:ee:cc:6f:7a:da:5a:71:24:6b:ab:c4:e7:e6:
                    36:78:90:15:15:16:bc:f7:fa:43:21:80:69:82:01:
                    60:fd:68:bd:db:b8:08:ea:d7:69:0e:2a:8d:2a:f6:
                    06:55:3a:1d:5e:dd:b8:8c:93:c0:dd:dc:eb:64:41:
                    71:af:c5:e9:1c:3d:2f:26:7e:7b:39:8c:04:3a:74:
                    78:f4:e9:22:c8:b7:c7:01:97:dc:6e:90:7a:91:64:
                    49:6d:bf:1b:86:d6:f3:f5:dc:e6:52:05:9d:a4:5b:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:98:69:80:0E:27:A0:89:94:E5:B5:73:E5:E0:23:C4:AF:A3:CF:70
            X509v3 Authority Key Identifier:
                keyid:18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ac:e6:d9:8d:63:04:66:e7:e9:0a:f4:42:9c:5f:05:6a:df:
         c7:d1:4b:dd:5a:73:6e:16:49:b0:a1:25:48:9a:52:ef:f8:bd:
         39:82:78:c2:03:a1:87:94:8e:56:1c:d0:db:65:4f:0e:57:69:
         af:d7:98:da:5c:02:53:3a:ef:9d:b4:91:af:15:d6:ca:55:ca:
         35:97:9b:76:6c:ac:9e:af:9c:c7:de:b6:9e:f5:27:c7:ea:a3:
         9a:dd:b9:ff:e8:5d:ae:9e:da:d8:1d:a5:b9:56:5e:a4:33:e6:
         70:00:82:76:ca:19:d4:96:bc:81:44:87:8d:40:19:50:e5:5e:
         d9:f2:f4:90:26:db:30:3f:97:43:26:43:5d:80:ff:fc:39:47:
         1c:f1:7b:15:1c:ef:55:82:d5:e9:d0:d0:5c:aa:03:a9:a6:27:
         48:21:84:8a:2a:04:1f:22:b9:d4:68:5d:ec:09:31:95:68:bb:
         46:08:2a:98:df:a8:ca:36:22:f0:ab:25:c1:14:2f:36:b3:36:
         b8:d6:0e:29:63:50:5b:65:07:aa:62:6d:e6:77:b8:b5:76:97:
         6d:57:86:42:3d:6c:f7:a1:b0:22:f0:aa:ed:de:13:d9:4a:56:
         3f:f6:f4:83:de:6f:5f:03:2c:bd:7b:f6:82:12:62:d6:12:21:
         b1:e8:58:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:45:44 2026 by rpki-client