Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
File:                     18FC32F1670351EC283C40262E5055C462E12229.mft (raw, json)
Hash identifier:          lCFziCNnUrsP/tnQOWbwX7YWLU3QoMhNq7PQ13yobKM=
Subject key identifier:   61:BA:B8:34:7C:E0:66:CD:85:6F:EC:8C:8A:F6:83:5B:38:98:18:87
Authority key identifier: 18:FC:32:F1:67:03:51:EC:28:3C:40:26:2E:50:55:C4:62:E1:22:29
Certificate issuer:       /CN=18FC32F1670351EC283C40262E5055C462E12229
Certificate serial:       5E89395B734E61DA4EA858CE3796D0DC3EFA8F40
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
Manifest number:          08
Signing time:             Thu 07 May 2026 14:18:49 +0000
Manifest this update:     Thu 07 May 2026 14:13:49 +0000
Manifest next update:     Fri 08 May 2026 17:03:49 +0000
Files and hashes:         1: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: pkw1Y7i4f2xvVEY0Gh9GjhFjARpvJWCNngf9O/42y0o=)
                          2: 18FC32F1670351EC283C40262E5055C462E12229.crl (hash: 7uOJStnK/lIDgb5STxUgIJuLond4bvDHPndt2MTZA8Q=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.crl
                          rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 17:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:89:39:5b:73:4e:61:da:4e:a8:58:ce:37:96:d0:dc:3e:fa:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FC32F1670351EC283C40262E5055C462E12229
        Validity
            Not Before: May  7 14:13:49 2026 GMT
            Not After : May  8 17:03:49 2026 GMT
        Subject: CN=61BAB8347CE066CD856FEC8C8AF6835B38981887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:ec:8a:32:82:fe:39:85:77:86:06:eb:a9:
                    12:8b:40:5b:68:96:f3:27:b8:31:3e:aa:d5:b2:58:
                    50:e5:78:15:66:15:2e:00:ca:f1:f7:2f:8f:68:2c:
                    cc:e3:f2:95:34:cf:21:c8:a2:cd:69:58:1b:77:78:
                    92:1e:52:02:81:b2:cb:8f:7b:55:10:15:6c:ac:6a:
                    50:39:33:82:7b:4a:fb:12:7b:80:7e:7c:14:6f:c1:
                    19:7b:49:bd:3f:fa:72:dc:12:d9:69:79:5f:99:c4:
                    b7:9c:72:92:00:a8:9e:c8:f8:0e:15:d3:6a:0c:97:
                    dc:dd:9e:be:de:29:4e:a7:7e:31:9b:4d:56:96:ac:
                    8d:e2:79:3a:b6:7d:22:cb:54:91:ab:51:f7:69:79:
                    65:74:a4:01:4c:96:d3:bc:20:29:95:02:d4:c1:80:
                    1d:f6:18:23:2c:26:c9:40:55:56:b8:76:c0:c2:67:
                    f5:b6:4b:66:73:6d:74:c4:53:7d:02:fa:a1:59:71:
                    d5:a2:ed:19:3f:d5:f3:e0:e3:27:9b:b5:47:a4:fd:
                    63:18:15:df:49:ce:db:51:4d:cf:ac:70:81:53:d7:
                    8f:45:52:a5:79:68:94:5b:4d:1f:11:73:5d:f8:f3:
                    10:6c:1a:e4:7c:7b:10:9a:4b:c0:50:d0:dc:ac:66:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BA:B8:34:7C:E0:66:CD:85:6F:EC:8C:8A:F6:83:5B:38:98:18:87
            X509v3 Authority Key Identifier:
                keyid:18:FC:32:F1:67:03:51:EC:28:3C:40:26:2E:50:55:C4:62:E1:22:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:10:00:54:ff:b5:a0:d0:4f:37:3a:bf:ac:a8:83:a0:ee:9f:
         92:9a:93:c8:49:09:8b:2f:03:ce:1b:25:4a:49:7c:cc:83:a6:
         3d:93:b4:01:bc:0f:e0:a0:90:15:b8:05:9e:53:d1:4b:3d:7d:
         2d:6d:91:77:99:11:59:49:8e:2a:bf:52:57:28:66:11:00:a7:
         a6:bb:d8:f9:ba:53:b5:ca:b9:e7:5e:8d:44:04:b5:e5:d1:82:
         b5:67:e5:7a:1d:67:00:7a:19:6e:b0:c8:f6:4a:f2:0a:98:de:
         00:1a:81:b3:2f:fd:ef:39:88:23:24:2d:43:0c:71:4a:90:69:
         0c:7b:09:a7:53:55:bc:65:8e:f3:4b:30:2a:27:ac:9b:76:14:
         19:21:a0:17:55:28:c6:ec:df:8e:15:8a:66:56:0c:f0:a5:32:
         15:57:cf:28:10:39:d3:94:fb:47:3f:2d:bc:ac:90:a9:64:e3:
         38:b5:e0:5e:eb:48:75:65:c6:ab:76:c9:6e:d8:62:36:1e:04:
         43:d4:71:46:47:4a:4a:bf:fc:ec:da:f6:10:49:d8:5f:4d:c7:
         64:3b:91:82:71:6c:6e:46:16:96:56:58:0a:1d:eb:fc:18:28:
         0d:52:50:35:04:20:a4:f8:4d:23:30:6a:36:87:2e:cf:df:1b:
         df:0d:eb:2f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXok5W3NOYdpOqFjON5bQ3D76j0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThGQzMyRjE2NzAzNTFFQzI4M0M0MDI2MkU1MDU1QzQ2
MkUxMjIyOTAeFw0yNjA1MDcxNDEzNDlaFw0yNjA1MDgxNzAzNDlaMDMxMTAvBgNV
BAMTKDYxQkFCODM0N0NFMDY2Q0Q4NTZGRUM4QzhBRjY4MzVCMzg5ODE4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWuyKMoL+OYV3hgbrqRKLQFto
lvMnuDE+qtWyWFDleBVmFS4AyvH3L49oLMzj8pU0zyHIos1pWBt3eJIeUgKBssuP
e1UQFWysalA5M4J7SvsSe4B+fBRvwRl7Sb0/+nLcEtlpeV+ZxLeccpIAqJ7I+A4V
02oMl9zdnr7eKU6nfjGbTVaWrI3ieTq2fSLLVJGrUfdpeWV0pAFMltO8ICmVAtTB
gB32GCMsJslAVVa4dsDCZ/W2S2ZzbXTEU30C+qFZcdWi7Rk/1fPg4yebtUek/WMY
Fd9JzttRTc+scIFT149FUqV5aJRbTR8Rc1348xBsGuR8exCaS8BQ0NysZsTzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYbq4NHzgZs2Fb+yMivaDWziYGIcwHwYDVR0j
BBgwFoAUGPwy8WcDUewoPEAmLlBVxGLhIikwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDQxZTRhYzktYzA2Yi00MzQzLTg1MjYtM2ExZjFiMWI1ZDgyLzAvMThGQzMyRjE2
NzAzNTFFQzI4M0M0MDI2MkU1MDU1QzQ2MkUxMjIyOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xOEZDMzJGMTY3MDM1MUVDMjgzQzQwMjYyRTUwNTVDNDYyRTEy
MjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1
MjYtM2ExZjFiMWI1ZDgyLzAvMThGQzMyRjE2NzAzNTFFQzI4M0M0MDI2MkU1MDU1
QzQ2MkUxMjIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGUQAFT/taDQTzc6v6yog6Dun5Kak8hJCYsv
A84bJUpJfMyDpj2TtAG8D+CgkBW4BZ5T0Us9fS1tkXeZEVlJjiq/UlcoZhEAp6a7
2Pm6U7XKuedejUQEteXRgrVn5XodZwB6GW6wyPZK8gqY3gAagbMv/e85iCMkLUMM
cUqQaQx7CadTVbxljvNLMConrJt2FBkhoBdVKMbs344VimZWDPClMhVXzygQOdOU
+0c/LbyskKlk4zi14F7rSHVlxqt2yW7YYjYeBEPUcUZHSkq//Oza9hBJ2F9Nx2Q7
kYJxbG5GFpZWWAod6/wYKA1SUDUEIKT4TSMwajaHLs/fG98N6y8=
-----END CERTIFICATE-----
Generated at Fri May 8 07:30:12 2026 by rpki-client