Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
File:                     518CB795450041B0537FB0312901D771579DCEC4.mft (raw, json)
Hash identifier:          e5CSaS1/k1UmLflKPgRtep8bo8grYA2ugEHFccpzgac=
Subject key identifier:   38:B2:97:78:BA:48:B0:EB:26:A4:C3:41:BE:9B:C6:8D:5D:29:AE:B6
Authority key identifier: 51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4
Certificate issuer:       /CN=518CB795450041B0537FB0312901D771579DCEC4
Certificate serial:       59EFCC6754629BCBE70F6D94CA91441870880094
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
Manifest number:          DC
Signing time:             Wed 14 Oct 2026 05:16:47 +0000
Manifest this update:     Wed 14 Oct 2026 05:11:47 +0000
Manifest next update:     Thu 15 Oct 2026 07:09:47 +0000
Files and hashes:         1: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: X+iPKuq3a//oKJcRH7RCMyPd3wqSs+gr09rlg8og0vI=)
                          2: 518CB795450041B0537FB0312901D771579DCEC4.crl (hash: EZlMYGUIptaN8uyqX2KAdI8Ac/scOUZdBldBOaPw5CM=)
                          3: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: GypeOWXaZk/hIkKcj8p9VzDp/KvisMSO2917iwkOduU=)
                          4: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: iCJ8MTvJq5y1PpIDZMP2NlWvXH8yCPvTkvBM8kuoTNA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl
                          rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 07:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ef:cc:67:54:62:9b:cb:e7:0f:6d:94:ca:91:44:18:70:88:00:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=518CB795450041B0537FB0312901D771579DCEC4
        Validity
            Not Before: Oct 14 05:11:47 2026 GMT
            Not After : Oct 15 07:09:47 2026 GMT
        Subject: CN=38B29778BA48B0EB26A4C341BE9BC68D5D29AEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:4a:e0:4c:62:d0:3a:d1:0f:b2:ce:98:bf:
                    3d:3f:b7:c8:d8:a7:fd:b8:4b:7e:d9:87:d8:c1:37:
                    69:2c:e9:57:89:6e:19:dd:4a:a4:26:19:f9:57:f3:
                    ce:c4:0b:56:87:52:91:96:0e:9f:69:8d:c6:5c:81:
                    21:41:88:7f:ac:14:37:55:1e:56:e1:4e:aa:eb:d1:
                    09:bd:4e:d6:e0:c5:14:aa:c7:10:d4:ea:76:3f:1e:
                    ea:a7:d3:64:46:22:d8:b1:df:d0:20:da:80:4e:18:
                    f8:43:02:6f:0b:16:10:34:11:45:0f:c0:de:ad:df:
                    6e:e0:b8:ba:18:f1:4c:65:8a:9d:14:f5:86:20:72:
                    51:84:11:02:31:07:bb:5b:e3:4f:44:cb:f5:99:60:
                    7c:2f:0d:c9:0b:fa:d8:76:7c:92:07:da:f8:ed:e1:
                    42:83:ec:62:a3:c6:8b:a9:3a:5d:91:03:25:cd:30:
                    9b:5f:21:b7:f4:bf:1f:23:52:d1:22:6d:b9:6e:f2:
                    72:bc:0d:4f:d9:14:14:32:d3:19:7f:73:6c:09:31:
                    61:22:e3:ae:13:f4:69:fb:c8:38:74:0b:47:d7:14:
                    85:fd:53:7e:d9:bb:0e:f7:e7:69:18:10:c7:71:d8:
                    76:11:35:b6:2f:d1:7e:ca:87:66:7e:84:cb:1b:8c:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B2:97:78:BA:48:B0:EB:26:A4:C3:41:BE:9B:C6:8D:5D:29:AE:B6
            X509v3 Authority Key Identifier:
                keyid:51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ab:ad:6e:e0:40:35:ab:b7:5d:7b:b5:36:a5:46:46:c1:9d:
         32:04:db:07:2f:85:3e:52:bf:61:8c:22:ca:73:cf:a8:fd:2b:
         97:56:3e:0c:f2:95:9c:80:ce:b6:3d:71:dc:eb:77:4d:96:3d:
         00:d6:80:37:d1:7a:cd:a4:37:a4:de:2f:85:9d:be:35:c2:f4:
         88:63:9a:b5:bf:08:34:df:70:84:39:4e:a2:b2:59:ed:df:bb:
         96:e7:a7:0c:b3:96:bc:4f:0e:fd:82:16:66:c0:56:10:15:2f:
         79:82:a2:e3:cd:80:8d:48:59:e7:3b:09:85:c3:3f:eb:30:b8:
         da:72:9d:92:4c:2c:f1:0c:71:4c:0e:f6:8d:07:79:8c:f7:38:
         b1:b8:02:4f:5d:ec:d6:15:2e:28:43:dc:1f:7e:f3:f9:83:ba:
         45:96:57:39:70:55:13:86:ad:90:ec:05:46:6a:cf:b3:9b:e1:
         32:55:ae:d3:93:19:ed:e1:21:11:55:ee:02:b6:a2:89:5b:a2:
         d4:4c:4a:fe:f3:35:e7:65:84:dd:f3:bf:9e:1f:b1:12:b6:c9:
         5d:dd:92:91:26:03:5b:2f:0d:b6:1c:09:68:8f:56:4d:85:99:
         cc:4a:d0:a8:05:64:0f:1a:6e:6d:58:3a:25:4d:ca:36:a1:c9:
         fc:df:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:26:56 2026 by rpki-client