Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
File:                     6A18E24186A3D3ED8D5089777A2464365FF00A27.mft (raw, json)
Hash identifier:          bHvqjaTkB/3YmMjaxHfOA375nVOxqJOBUbzwowiU+/s=
Subject key identifier:   20:85:17:42:32:5D:89:AF:F9:AA:DD:29:FB:7E:AC:97:FD:C9:BD:E2
Authority key identifier: 6A:18:E2:41:86:A3:D3:ED:8D:50:89:77:7A:24:64:36:5F:F0:0A:27
Certificate issuer:       /CN=6A18E24186A3D3ED8D5089777A2464365FF00A27
Certificate serial:       3654C03F1AE4B2F168AEEB3B0314A830B40E5FBB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 19:35:39 +0000
Manifest this update:     Tue 12 May 2026 19:30:39 +0000
Manifest next update:     Wed 13 May 2026 21:27:39 +0000
Files and hashes:         1: 6A18E24186A3D3ED8D5089777A2464365FF00A27.crl (hash: Db9fPWx7xeqCZ2DVni08GWbFZnY/m4RFzPqPwcpokFE=)
                          2: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: h3C8yms9g4R1YiVLRu6ZS9/9U4FvJR5pkKQb8FutKck=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.crl
                          rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:54:c0:3f:1a:e4:b2:f1:68:ae:eb:3b:03:14:a8:30:b4:0e:5f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A18E24186A3D3ED8D5089777A2464365FF00A27
        Validity
            Not Before: May 12 19:30:39 2026 GMT
            Not After : May 13 21:27:39 2026 GMT
        Subject: CN=20851742325D89AFF9AADD29FB7EAC97FDC9BDE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:aa:57:53:3d:b4:41:e0:6c:3f:06:5f:37:
                    76:a7:9f:52:83:21:92:83:6a:d3:63:f0:58:db:bb:
                    60:49:88:cf:28:a7:84:e8:4f:78:ee:53:30:b6:75:
                    0a:3b:4c:29:e8:a8:bc:ff:bb:66:53:f9:b0:a3:14:
                    30:07:a4:50:76:f2:96:aa:8c:35:b8:a3:c6:20:e7:
                    e6:40:07:85:62:b0:0f:4e:09:a5:b1:f1:66:a0:4a:
                    8e:b0:eb:4f:04:c1:64:bc:96:75:61:0b:43:a2:a6:
                    7d:91:1d:e1:5a:71:17:89:fc:16:d3:57:7e:01:c8:
                    48:83:63:37:4e:da:ec:41:40:de:29:07:87:65:ff:
                    68:16:29:48:89:9e:8a:b4:73:80:fd:c8:bd:2d:f6:
                    83:9b:0c:c0:86:95:04:c4:d0:fe:ce:01:e1:be:0a:
                    ed:a5:3f:34:dc:a7:b5:c9:d3:26:cb:a8:b3:38:9b:
                    03:7b:d8:65:40:91:32:b5:cc:55:08:b5:32:26:8c:
                    0b:e4:48:a5:72:d1:ea:07:87:66:46:06:88:8d:ff:
                    45:fe:24:09:e7:cb:c8:09:ac:a5:f6:c1:ce:c7:52:
                    60:d9:e8:59:ae:f0:b6:d5:ec:65:ca:c8:db:37:97:
                    32:20:43:93:9d:4c:99:9f:f1:12:ec:e6:8b:00:4b:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:85:17:42:32:5D:89:AF:F9:AA:DD:29:FB:7E:AC:97:FD:C9:BD:E2
            X509v3 Authority Key Identifier:
                keyid:6A:18:E2:41:86:A3:D3:ED:8D:50:89:77:7A:24:64:36:5F:F0:0A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f9:a8:fd:82:e6:1c:5f:e5:09:f5:a1:f4:10:d9:eb:14:e4:
         46:ab:94:89:ba:8e:99:71:6d:04:96:a0:16:2c:2c:d6:e1:c6:
         5d:7f:f6:7d:80:16:af:fe:b3:4f:1f:74:d8:38:0a:36:89:b6:
         d4:e3:d8:b7:94:00:2c:2f:dc:23:51:c5:78:3d:ec:5e:2e:19:
         06:48:2f:aa:69:dc:64:c2:d9:01:7b:1d:5a:84:10:5a:c7:95:
         50:d8:ea:2f:c6:e9:79:46:28:ef:f5:d0:b0:42:93:51:f7:4f:
         87:fd:fa:4b:ad:96:ca:88:0e:8b:d1:5c:12:e6:dd:f9:d4:7b:
         51:4c:de:85:59:2a:0a:07:da:01:8f:97:e3:6c:3a:96:1c:d5:
         5c:6d:3f:9c:80:b2:65:28:64:a3:d0:0d:7e:fe:84:3a:af:69:
         5b:65:1b:e8:63:ac:2c:c4:c5:13:e3:02:2f:01:15:54:11:01:
         98:ee:99:5d:4b:c7:a3:c6:44:43:ba:00:db:59:6a:9b:4b:e7:
         7e:5b:0d:f5:46:c8:59:95:80:de:65:5e:df:ad:be:ea:2d:4c:
         2f:33:5e:e9:d4:c2:41:80:4e:db:c3:2c:3c:b4:47:57:65:56:
         5b:81:16:b9:4c:33:58:83:72:29:70:79:33:b7:cb:cf:a4:33:
         43:46:5d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:44 2026 by rpki-client