Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
File:                     218F42D6775F39C04AD2042E61C557053D4A69FE.mft (raw, json)
Hash identifier:          CEjCbrCod0nxSjfSK5Jws2cNwY9pZJwWcSQeclc905U=
Subject key identifier:   04:C5:78:E1:36:36:5D:58:BA:14:9F:54:D0:9C:82:2C:94:56:3C:D3
Authority key identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE
Certificate issuer:       /CN=218F42D6775F39C04AD2042E61C557053D4A69FE
Certificate serial:       75047ACE0D0626B1B633A6161351E344AFDE83D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 04:54:59 +0000
Manifest this update:     Tue 12 May 2026 04:49:59 +0000
Manifest next update:     Wed 13 May 2026 07:26:59 +0000
Files and hashes:         1: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: umbo3UO1surjjSvNZv8AZicuTRNi2hpCJFPh1PPiOEw=)
                          2: 218F42D6775F39C04AD2042E61C557053D4A69FE.crl (hash: pQVH0IXkMPNpyN6Z9pOMZMDH8DlEoweEbQ0RQpgGvrA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl
                          rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:04:7a:ce:0d:06:26:b1:b6:33:a6:16:13:51:e3:44:af:de:83:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218F42D6775F39C04AD2042E61C557053D4A69FE
        Validity
            Not Before: May 12 04:49:59 2026 GMT
            Not After : May 13 07:26:59 2026 GMT
        Subject: CN=04C578E136365D58BA149F54D09C822C94563CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:b9:13:fe:7b:12:83:b4:0d:b6:43:e0:e1:
                    6d:ab:d4:c4:9e:c0:5e:e8:b9:9b:e5:e6:b9:a4:4f:
                    63:1a:18:5e:c5:75:90:fd:20:73:6a:e7:f5:92:f9:
                    04:9b:3f:64:2e:eb:c9:59:bc:53:be:2a:a5:7b:53:
                    9a:1e:0b:1b:63:63:2a:dd:42:f3:f0:27:31:31:08:
                    02:7b:03:26:a7:c6:04:20:e5:f9:c4:23:6e:1a:cd:
                    2f:4e:a8:07:eb:38:0f:e6:43:47:fc:0b:36:d4:ac:
                    ca:0e:5a:12:13:b6:ee:15:a4:99:45:30:89:02:d2:
                    6e:a7:d3:6c:a2:65:75:93:63:16:2f:f3:a5:27:cc:
                    bd:ec:9e:6e:35:bb:b2:97:aa:2e:5f:de:44:15:3b:
                    a1:5d:36:bf:b5:f0:d8:d5:da:b8:41:34:f0:e0:e7:
                    9c:11:62:06:3c:cd:c8:63:2d:74:16:b7:a1:c8:1c:
                    ed:b1:81:d3:86:7a:07:58:fb:33:d1:ef:cb:61:b6:
                    88:94:f8:18:8a:c9:80:ad:ac:c1:1c:d7:39:80:77:
                    0d:ea:ff:21:ee:c0:68:38:87:a6:a4:59:05:22:3f:
                    50:ed:7e:64:b7:b4:4c:62:df:49:59:19:d1:d0:9c:
                    d4:13:e2:a1:ac:19:5f:51:b1:b3:65:9d:a2:e5:1e:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C5:78:E1:36:36:5D:58:BA:14:9F:54:D0:9C:82:2C:94:56:3C:D3
            X509v3 Authority Key Identifier:
                keyid:21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:68:cc:e7:c8:bf:23:1e:e5:f7:c7:2d:7a:f7:bc:20:0b:
         62:7d:f4:c2:1a:cb:27:b0:85:82:72:cb:90:cd:a8:41:17:ef:
         59:e7:6a:ea:9a:ba:ef:d7:88:be:f1:c6:f5:b9:9f:e5:93:d0:
         94:61:de:b8:02:d7:15:4f:e2:67:a2:f6:74:61:61:d1:33:04:
         cc:74:20:23:ab:4e:f4:07:98:04:24:a7:ff:6b:8d:16:74:f0:
         82:56:2a:03:03:5c:c1:a1:8a:eb:b2:75:4b:48:8c:be:56:a2:
         b2:e7:f2:f8:87:7c:1f:91:ef:96:89:50:9f:96:20:1d:e6:6c:
         12:61:13:10:11:0c:f5:ac:18:d6:1b:41:f9:6c:53:9c:45:43:
         a3:65:9d:45:3f:15:1f:48:d1:f6:63:b0:d6:3b:29:09:df:3b:
         f0:87:c2:85:92:84:0e:a1:ba:13:68:33:de:7c:e8:0c:55:63:
         28:61:68:a0:a6:47:1a:69:ca:75:f7:88:84:d1:bf:20:2c:37:
         d4:3d:b7:54:c6:37:0b:7c:2c:6f:a5:04:ab:86:bc:59:98:99:
         e6:43:d7:4b:c8:a7:fe:0a:ed:55:54:bd:06:7f:93:3c:ab:07:
         39:2e:f5:ff:54:c3:3f:a2:9d:98:e1:2f:ec:b6:22:7a:8c:8e:
         cd:0e:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:20:21 2026 by rpki-client