Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
File:                     8B18B819BC010B4A4EC66777543486E34AF52ED4.mft (raw, json)
Hash identifier:          rAQDy0A/JpI6I7LHXKmfnd3euZQKG4CF3mybg0vf8go=
Subject key identifier:   61:9C:A1:BC:3B:BB:FC:ED:78:2A:15:64:00:66:0A:F5:FF:C1:35:68
Authority key identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4
Certificate issuer:       /CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
Certificate serial:       6C6A6F701CA51E25D2BA23A64A663ED3A03D4989
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
Manifest number:          F7
Signing time:             Tue 03 Nov 2026 10:36:21 +0000
Manifest this update:     Tue 03 Nov 2026 10:31:21 +0000
Manifest next update:     Wed 04 Nov 2026 12:36:21 +0000
Files and hashes:         1: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: zR5IozhEoErSJoyA48okITB8A0oyrUPSif4Fq0MXC9c=)
                          2: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: COlbyHboqjdr0Rxi+nWQW3DOPTwsTgMlnilTtD4HKm4=)
                          3: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: 3fEh7FEkFoZkANDbmxn7uUTRJbfDqHdq2EELZjoFJiA=)
                          4: 8B18B819BC010B4A4EC66777543486E34AF52ED4.crl (hash: 9hcgE1MLpHj16jhVFHuYokQiPLeP5ZBIhovyyCBMhOY=)
                          5: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: h3y36nWPp14vw0klmr63vNHy0YgCfjJ+L67ACCmkzyQ=)
                          6: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: 5F2W8Z4P5PEheYcmRC6qYhg/elm2GoPMJ5sZG45K31I=)
                          7: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: djWo0EMecCkqgPGbJNZ3i1Hzh/Gf4zrbm7OL5FtozEI=)
                          8: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: RnWj7aZjC6B4VrPGo8x16jqEQ5V8whLA8BJvLlw1vbg=)
                          9: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: AyZ67OXVVcRP+SaexkcDHK81T3la7ye6jL1yJZbUj4M=)
                          10: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: xAnrR5oDPaIS2eOvjAIZMGHwwrAtXCAYZrjZS6iBlJs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl
                          rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 12:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6a:6f:70:1c:a5:1e:25:d2:ba:23:a6:4a:66:3e:d3:a0:3d:49:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
        Validity
            Not Before: Nov  3 10:31:21 2026 GMT
            Not After : Nov  4 12:36:21 2026 GMT
        Subject: CN=619CA1BC3BBBFCED782A156400660AF5FFC13568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:40:23:f6:0e:fa:dc:f4:50:33:09:9f:20:
                    82:a7:88:a0:e6:fd:f1:ad:35:ce:1d:f3:cf:8e:a9:
                    88:c5:12:c8:8e:4a:c2:6c:cb:52:f0:c9:b4:20:d6:
                    55:ec:59:cc:36:bd:db:30:6e:87:67:77:05:23:fd:
                    cf:72:d2:5a:f3:33:82:82:7f:06:c6:4f:25:4b:a1:
                    05:5e:da:50:23:e9:ef:ca:78:8d:c1:58:f9:4d:aa:
                    bf:bc:6c:b8:8f:54:1e:1d:b8:39:6f:db:ff:2a:a9:
                    bb:26:06:a4:78:35:d7:6d:fb:88:1c:8c:37:ea:ed:
                    9a:c4:86:6f:3d:31:88:1b:d1:15:7b:cc:ee:7b:fa:
                    7a:16:81:6d:27:2d:f9:5c:d1:e9:c8:09:ee:1e:b8:
                    a5:70:c7:2c:9e:10:73:09:5e:09:f3:e6:30:03:43:
                    ed:57:57:8b:c1:3b:a8:ea:5b:a3:46:eb:37:3d:d2:
                    73:5a:99:0f:66:19:7f:14:0a:6c:7c:5e:90:d7:77:
                    0e:da:0d:cb:4e:fa:b2:e3:dc:24:14:bf:2a:91:81:
                    67:d2:34:b5:74:4d:ee:e1:7a:ed:d4:48:bc:55:3c:
                    43:61:a8:1b:d4:01:f9:61:d9:3f:4d:b0:ef:b7:cd:
                    e8:81:63:ce:e1:bf:00:86:b9:d3:18:bc:67:32:80:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9C:A1:BC:3B:BB:FC:ED:78:2A:15:64:00:66:0A:F5:FF:C1:35:68
            X509v3 Authority Key Identifier:
                keyid:8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fb:9c:1e:c8:af:75:1d:76:b9:e5:ec:59:c9:76:88:49:4c:
         76:b1:23:ab:f1:b8:d7:27:14:cc:c9:f6:08:ab:2d:9a:d4:b4:
         9c:4f:5c:2c:99:7e:dc:19:cc:25:b4:3a:50:4c:6e:12:e0:da:
         10:9e:51:1c:06:f1:3c:d7:d5:fc:bd:e8:57:71:55:16:c0:b5:
         b6:94:73:2b:9f:7c:70:7d:4b:10:6a:e0:e0:f9:d8:a7:1c:c6:
         51:d1:60:50:f1:2e:24:00:88:0c:f7:c4:5e:6e:71:09:43:2f:
         5b:d3:b9:53:9c:e9:bd:f1:ac:04:f8:65:89:24:4b:1d:af:04:
         22:ee:ca:2c:ed:95:db:34:51:1d:35:69:80:70:94:d4:a1:40:
         75:49:84:fd:20:10:c8:e8:40:85:b9:5a:09:c6:3c:ab:31:cb:
         85:46:01:b5:29:fa:d5:c0:f9:24:0f:e8:80:62:aa:48:ab:06:
         ee:50:29:02:b2:77:ad:64:95:b3:ab:1e:6d:f6:54:15:d5:25:
         00:c8:eb:47:18:59:37:cb:6e:8c:5b:c7:2e:34:03:e5:a3:93:
         07:ef:df:b8:42:e1:9c:8f:f9:02:3f:6a:c6:a3:6b:56:81:03:
         4f:80:68:bc:af:ee:99:07:96:73:30:39:8f:ec:13:91:ba:44:
         67:30:64:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:38:59 2026 by rpki-client