Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
File:                     18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft (raw, json)
Hash identifier:          ryoq9EePbu9kkla8bM+LYt98ITGzhQiduwSwkxiWtk0=
Subject key identifier:   5B:D0:69:56:7D:9C:EC:DF:C3:F6:CA:4B:16:0B:EF:4E:58:E7:07:3B
Authority key identifier: 18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9
Certificate issuer:       /CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
Certificate serial:       148883EFEF29BFC14D5CFF15136216E37D760A40
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
Manifest number:          3A
Signing time:             Sun 14 Jun 2026 00:23:23 +0000
Manifest this update:     Sun 14 Jun 2026 00:18:23 +0000
Manifest next update:     Mon 15 Jun 2026 03:18:23 +0000
Files and hashes:         1: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: gFD5ZtfkV8WLuWBlQkaPkrNIjj5Z4cE3YofpumoYjys=)
                          2: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: ictls1d8fDHoUd3C28juE/v5HQdxwfMf3GiA749+DqU=)
                          3: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl (hash: CjR+ALgY2W37kwSHfoeJwKMIbNd2QJ8q2EsZIKNMQz8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl
                          rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:88:83:ef:ef:29:bf:c1:4d:5c:ff:15:13:62:16:e3:7d:76:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
        Validity
            Not Before: Jun 14 00:18:23 2026 GMT
            Not After : Jun 15 03:18:23 2026 GMT
        Subject: CN=5BD069567D9CECDFC3F6CA4B160BEF4E58E7073B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:ca:70:12:57:43:ac:b2:b0:e2:29:b2:2d:
                    a5:98:25:17:1d:ae:7b:d9:2f:d8:41:fb:eb:8b:fc:
                    63:89:1e:e1:da:57:62:8b:d6:33:3b:bb:81:5e:56:
                    55:83:71:4f:ce:af:a7:be:ad:d3:c7:7c:79:f5:8b:
                    86:e8:9a:33:19:a3:cb:11:30:11:9f:8a:71:aa:ba:
                    ed:99:df:b5:61:43:ba:20:fd:2b:f1:87:ed:b9:da:
                    de:e5:ac:e4:e3:e3:43:82:18:2a:11:54:5c:b9:63:
                    94:6a:d0:a7:01:ab:33:4c:4e:7e:27:43:03:c9:20:
                    05:5b:8c:4d:86:67:5d:32:6f:42:a6:06:02:dc:6a:
                    3d:e0:0f:96:02:9e:e7:46:d1:02:e2:76:98:23:e8:
                    ba:0b:b8:51:75:90:c8:f0:9c:25:ad:6b:c6:52:a2:
                    d0:a0:77:39:2b:56:8d:d3:18:0f:8c:a0:4a:f0:e5:
                    da:51:88:1e:e1:90:3d:fd:38:9a:79:a8:fa:16:86:
                    e4:9a:a5:28:6f:0f:ee:b8:14:a9:35:40:21:c1:11:
                    64:56:9f:95:04:ae:5d:93:c6:d1:10:44:16:27:b2:
                    47:28:af:39:18:15:7d:b0:43:9a:ad:fc:67:4e:1a:
                    93:79:3b:e1:47:fd:f1:aa:1e:84:00:28:4e:24:d4:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D0:69:56:7D:9C:EC:DF:C3:F6:CA:4B:16:0B:EF:4E:58:E7:07:3B
            X509v3 Authority Key Identifier:
                keyid:18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:da:9b:5a:78:bf:fc:35:87:c2:3a:55:19:5f:0c:70:f9:d8:
         f0:40:80:ae:8b:ed:ac:d7:64:66:0d:17:24:3c:24:99:22:64:
         44:13:3d:ac:f9:4c:8b:30:50:95:d2:24:1c:fb:f7:2d:04:c7:
         f8:65:39:64:7b:06:0e:87:83:76:6d:7c:db:8c:11:ed:8e:f0:
         09:30:5f:01:5b:2c:4a:4a:d3:f9:70:f6:d9:19:14:24:ac:0f:
         9f:21:91:9c:e6:a3:e1:4c:1b:16:2c:f9:3c:41:7c:8d:9d:29:
         e3:70:96:b7:94:0b:bd:1d:30:f2:fc:77:bd:9e:ac:79:98:78:
         d3:f7:27:af:a1:ce:be:8e:2f:0c:ef:09:3f:7b:b8:4c:dc:77:
         25:9d:a7:ab:29:04:6e:86:99:52:9c:8f:4f:a2:9b:ce:9c:5d:
         36:b5:bd:0d:5e:45:52:85:04:dd:97:e2:c6:c6:9f:52:37:df:
         8e:4e:f0:20:c4:a0:a3:9e:cb:45:e1:65:1a:fe:a6:8d:5a:25:
         28:7d:13:26:39:58:80:5f:a9:c8:78:cd:26:ef:f0:9f:b1:7f:
         6c:1b:4f:fe:c9:3b:21:7d:21:ab:54:99:cd:89:c0:9f:a4:78:
         47:2a:8b:f1:91:42:d7:a0:0b:08:87:af:41:6b:24:86:4d:fc:
         d1:97:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:43:56 2026 by rpki-client