Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
File:                     8B18B819BC010B4A4EC66777543486E34AF52ED4.mft (raw, json)
Hash identifier:          UxEjW7wvjQHphymwbE0DJUb6B8t/6B0opo6RjEQJP9c=
Subject key identifier:   63:2F:88:4F:29:9C:7B:97:AD:DE:4A:37:DB:25:63:CD:CC:2E:1C:BA
Authority key identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4
Certificate issuer:       /CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
Certificate serial:       5F8F62D3D4C2602815D96791070F8CDE030E7DB6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 22:30:54 +0000
Manifest this update:     Tue 12 May 2026 22:25:54 +0000
Manifest next update:     Wed 13 May 2026 23:39:54 +0000
Files and hashes:         1: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: zR5IozhEoErSJoyA48okITB8A0oyrUPSif4Fq0MXC9c=)
                          2: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: h3y36nWPp14vw0klmr63vNHy0YgCfjJ+L67ACCmkzyQ=)
                          3: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: 5F2W8Z4P5PEheYcmRC6qYhg/elm2GoPMJ5sZG45K31I=)
                          4: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: xAnrR5oDPaIS2eOvjAIZMGHwwrAtXCAYZrjZS6iBlJs=)
                          5: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: AyZ67OXVVcRP+SaexkcDHK81T3la7ye6jL1yJZbUj4M=)
                          6: 8B18B819BC010B4A4EC66777543486E34AF52ED4.crl (hash: bxsixb4MjuW169pwzPqH9JoAHBVHjExDFOJk2cLCOmE=)
                          7: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: RnWj7aZjC6B4VrPGo8x16jqEQ5V8whLA8BJvLlw1vbg=)
                          8: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: COlbyHboqjdr0Rxi+nWQW3DOPTwsTgMlnilTtD4HKm4=)
                          9: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: djWo0EMecCkqgPGbJNZ3i1Hzh/Gf4zrbm7OL5FtozEI=)
                          10: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: 3fEh7FEkFoZkANDbmxn7uUTRJbfDqHdq2EELZjoFJiA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl
                          rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8f:62:d3:d4:c2:60:28:15:d9:67:91:07:0f:8c:de:03:0e:7d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
        Validity
            Not Before: May 12 22:25:54 2026 GMT
            Not After : May 13 23:39:54 2026 GMT
        Subject: CN=632F884F299C7B97ADDE4A37DB2563CDCC2E1CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:da:28:88:ce:84:c8:d9:94:41:75:f5:44:
                    5b:a8:44:ee:96:e0:b8:99:fd:60:a1:79:16:7c:63:
                    06:08:31:27:0b:89:7b:46:dc:8f:86:71:98:e6:73:
                    a9:9a:d4:17:c4:5a:cd:24:2c:00:cb:c6:2a:4c:7c:
                    30:2f:5e:30:6a:cd:f4:00:72:dd:97:41:80:2b:32:
                    10:f8:4c:d4:2a:dc:5a:a1:2c:fb:be:fe:f1:be:f6:
                    4d:9d:3b:52:3a:8d:9f:24:89:ac:f4:c2:bf:3c:d5:
                    c0:13:25:2e:cf:32:65:83:8e:f9:fd:f5:e9:f3:6a:
                    1f:5c:39:f1:30:a8:c8:0d:f7:55:cd:12:1e:3a:95:
                    c9:a5:8d:12:ad:d5:42:cd:ee:12:84:8a:e6:c5:6b:
                    e2:2c:a6:32:c8:5f:c1:b4:b7:2c:d8:96:84:28:36:
                    62:24:2e:31:04:ed:d1:c3:35:ac:7f:8a:05:27:23:
                    65:61:4f:1a:63:da:57:4e:57:1f:82:70:58:61:43:
                    e5:28:9e:ce:52:4e:5f:b8:f5:9e:71:1f:63:5d:88:
                    29:a9:0a:5d:9a:48:4b:a5:da:a6:aa:e5:e1:fa:bc:
                    a2:a2:f1:12:61:63:03:7b:17:bb:da:2e:5e:9c:0e:
                    08:c2:af:e2:c1:a2:94:61:69:a3:64:5e:1f:a8:5f:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2F:88:4F:29:9C:7B:97:AD:DE:4A:37:DB:25:63:CD:CC:2E:1C:BA
            X509v3 Authority Key Identifier:
                keyid:8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:26:dc:a5:65:48:d8:85:11:2d:e1:b5:df:43:7d:4e:09:ea:
         c7:7d:1b:af:58:0d:82:10:b2:c0:e5:92:9d:47:47:8f:49:f2:
         f1:0c:86:fe:87:69:67:e6:d7:f0:a3:31:00:63:f4:c1:38:b4:
         11:09:62:45:32:19:db:d3:03:b2:86:bd:7f:2e:1c:29:40:6c:
         38:40:be:80:0d:40:24:6d:ca:e5:7c:cc:28:cf:d4:69:ed:28:
         7a:83:b3:97:cb:25:7e:5e:dc:b2:eb:62:26:ab:55:5b:73:ac:
         98:be:62:88:a7:44:87:7d:9f:b1:be:21:5b:db:71:d9:12:ac:
         71:2f:17:24:c6:4d:d9:80:49:91:f7:bb:4e:b8:4b:99:62:78:
         22:13:f5:be:e6:54:bf:28:62:38:63:9f:90:98:3b:88:98:e9:
         dd:1b:96:86:c9:73:f9:23:0d:fa:ba:ed:0a:cd:a8:7d:e3:84:
         3a:65:ff:08:6a:b0:19:be:5c:5e:63:54:33:a5:33:f8:39:12:
         83:d9:37:35:6e:b0:57:e8:05:6c:58:c3:aa:f2:c4:61:fa:74:
         0b:b8:07:7b:3c:23:e7:d2:59:f1:94:a0:8b:f5:46:a0:5d:5b:
         0a:c4:df:5c:bd:fe:2d:04:ae:98:1f:4d:e2:18:83:5a:80:35:
         82:5f:39:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:49 2026 by rpki-client