Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
File:                     218F42D6775F39C04AD2042E61C557053D4A69FE.mft (raw, json)
Hash identifier:          4vWFQNfXZaDXJCdH60FfpW9U5lEcEBQo2luQzTIbZWY=
Subject key identifier:   08:83:63:5F:32:6D:1C:B9:C7:36:F1:A9:8C:64:56:69:0B:CB:3E:41
Authority key identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE
Certificate issuer:       /CN=218F42D6775F39C04AD2042E61C557053D4A69FE
Certificate serial:       1CA1F5F03F162B5E09CD239BD9087432EC3D4E8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 17:36:42 +0000
Manifest this update:     Thu 23 Jul 2026 17:31:42 +0000
Manifest next update:     Fri 24 Jul 2026 19:27:42 +0000
Files and hashes:         1: 218F42D6775F39C04AD2042E61C557053D4A69FE.crl (hash: re1eIPlhFTCtEePU8lCekQAhZloYvXZspCrupvvYL3Y=)
                          2: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: umbo3UO1surjjSvNZv8AZicuTRNi2hpCJFPh1PPiOEw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl
                          rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a1:f5:f0:3f:16:2b:5e:09:cd:23:9b:d9:08:74:32:ec:3d:4e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218F42D6775F39C04AD2042E61C557053D4A69FE
        Validity
            Not Before: Jul 23 17:31:42 2026 GMT
            Not After : Jul 24 19:27:42 2026 GMT
        Subject: CN=0883635F326D1CB9C736F1A98C6456690BCB3E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:8a:1f:f7:cc:86:6a:0d:4b:c4:25:8e:4c:
                    c6:8d:83:f4:d0:27:ea:3f:cd:8a:f9:66:0c:e4:2b:
                    15:f4:37:27:b8:58:31:ec:a6:da:5f:b3:84:9b:96:
                    cd:cd:f6:f1:dd:24:92:93:64:c8:06:a5:f3:b5:d0:
                    2a:8b:ba:f9:ba:3a:2f:1d:46:5f:85:13:cc:fb:e1:
                    37:36:ee:84:57:1f:dd:ef:86:cb:df:e0:b5:ad:99:
                    0b:a3:d1:7f:c2:93:73:bc:1c:b3:7e:0f:27:25:6a:
                    94:cf:04:2d:e5:cc:20:6a:a7:e0:9c:7a:32:8a:00:
                    09:f0:b0:d2:75:23:4c:73:9c:dc:1f:1e:24:3d:8c:
                    f3:ce:d8:9b:21:b7:c4:8e:bf:5e:48:ca:3a:a0:b7:
                    e3:15:ad:0b:ff:cb:f9:8c:f3:83:0c:1b:28:9f:7d:
                    bb:3e:ce:1f:2d:9b:c1:1f:e5:4d:c8:60:36:c6:5b:
                    af:32:b2:05:5a:36:1c:da:cd:82:fb:67:1c:50:f7:
                    19:ed:07:e3:63:41:36:b7:73:6f:b2:8d:ac:56:56:
                    1d:6c:d9:d3:93:4f:0c:c9:02:fe:cd:4d:c2:e7:14:
                    8b:1e:11:54:80:36:dd:0f:a3:ce:4e:e8:fa:c9:c4:
                    0a:b5:7b:7f:5e:92:59:a7:65:bf:cc:db:f6:2b:07:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:83:63:5F:32:6D:1C:B9:C7:36:F1:A9:8C:64:56:69:0B:CB:3E:41
            X509v3 Authority Key Identifier:
                keyid:21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:25:14:8e:3d:b5:24:cc:0c:32:1c:fc:99:57:0b:03:4e:3f:
         1d:63:cd:81:da:91:a2:04:88:fd:7a:d9:4a:0d:ef:cf:96:f9:
         e8:f5:fe:32:dd:13:1b:05:28:39:56:69:4d:69:d6:44:a6:47:
         4b:f4:a2:01:4a:87:70:ba:4d:d6:21:6d:10:66:41:59:34:0b:
         25:45:10:53:14:53:cb:b6:f4:47:d3:86:eb:d6:c2:60:d2:30:
         78:d4:02:31:fa:15:b2:72:bb:f6:ce:7f:9e:6b:90:c6:41:40:
         50:f0:a7:59:a7:50:94:e7:61:13:d7:e8:76:0d:39:f9:be:f2:
         78:10:a4:da:5e:99:bb:e0:a6:39:da:4b:8b:3e:fc:b4:eb:cb:
         6c:b5:00:3d:68:49:1a:01:6c:9a:b0:01:45:25:62:9a:33:b3:
         09:bd:f8:10:46:10:91:c7:14:aa:77:8c:10:61:c5:9c:90:a3:
         59:61:ba:36:fa:90:ea:9c:c2:5b:b8:31:0f:9c:46:80:86:32:
         91:87:04:a7:6d:48:50:3e:29:0b:f4:76:59:25:b8:eb:c1:9f:
         22:f6:b7:8b:be:38:07:47:d3:e1:98:20:ea:4c:fc:3b:5e:52:
         83:01:13:44:78:06:34:40:b8:3a:3c:51:8c:5f:ab:e6:b8:30:
         29:bb:4b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:14 2026 by rpki-client