Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
File:                     8B18B819BC010B4A4EC66777543486E34AF52ED4.mft (raw, json)
Hash identifier:          w59Y8X+D4zHrPGAeqwA2MBcNrK0khS7xGAovMjUftGE=
Subject key identifier:   92:10:49:0B:56:4A:7F:53:17:0B:9F:34:66:9D:D3:5F:2C:A8:22:CE
Authority key identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4
Certificate issuer:       /CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
Certificate serial:       6702D99DD00EF3586AC7C8161ECB67055F04F931
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 23:45:26 +0000
Manifest this update:     Mon 20 Jul 2026 23:40:26 +0000
Manifest next update:     Wed 22 Jul 2026 03:06:26 +0000
Files and hashes:         1: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: 3fEh7FEkFoZkANDbmxn7uUTRJbfDqHdq2EELZjoFJiA=)
                          2: 8B18B819BC010B4A4EC66777543486E34AF52ED4.crl (hash: +bemBuZsS1TCMbRk/znxxCSor9Dsm8MG53M/m5+TBOg=)
                          3: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: djWo0EMecCkqgPGbJNZ3i1Hzh/Gf4zrbm7OL5FtozEI=)
                          4: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: RnWj7aZjC6B4VrPGo8x16jqEQ5V8whLA8BJvLlw1vbg=)
                          5: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: h3y36nWPp14vw0klmr63vNHy0YgCfjJ+L67ACCmkzyQ=)
                          6: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: 5F2W8Z4P5PEheYcmRC6qYhg/elm2GoPMJ5sZG45K31I=)
                          7: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: AyZ67OXVVcRP+SaexkcDHK81T3la7ye6jL1yJZbUj4M=)
                          8: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: zR5IozhEoErSJoyA48okITB8A0oyrUPSif4Fq0MXC9c=)
                          9: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: xAnrR5oDPaIS2eOvjAIZMGHwwrAtXCAYZrjZS6iBlJs=)
                          10: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: COlbyHboqjdr0Rxi+nWQW3DOPTwsTgMlnilTtD4HKm4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl
                          rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:02:d9:9d:d0:0e:f3:58:6a:c7:c8:16:1e:cb:67:05:5f:04:f9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
        Validity
            Not Before: Jul 20 23:40:26 2026 GMT
            Not After : Jul 22 03:06:26 2026 GMT
        Subject: CN=9210490B564A7F53170B9F34669DD35F2CA822CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:c5:12:7e:60:43:ef:b4:37:79:79:18:e5:
                    ed:e9:c4:b5:d9:42:86:58:dd:9a:f6:2b:e0:ae:f2:
                    0d:33:e0:c4:d7:dc:bf:c1:0d:3a:11:cf:4c:b2:46:
                    12:a4:15:55:d4:45:53:1f:70:56:00:62:59:13:e8:
                    b6:83:45:e2:bc:37:f2:2a:61:07:f3:fb:b2:d6:89:
                    c3:64:8e:52:fe:4c:f2:47:fe:9c:44:ec:a3:dd:ec:
                    00:a4:81:2b:f4:cd:8a:62:34:c3:3f:59:43:af:0f:
                    71:be:7d:a7:0b:11:e0:23:83:2d:2a:59:08:72:38:
                    f8:1f:51:df:d4:62:80:77:d2:1f:76:b6:2f:ad:c5:
                    d1:36:f0:ab:3e:e8:76:16:a4:39:4d:89:d5:42:1a:
                    b4:93:7b:6a:09:4d:b6:4f:97:de:6a:a6:81:18:aa:
                    41:ec:1c:2f:7d:a3:af:89:1c:a3:ef:e4:68:e0:32:
                    c0:01:f2:8a:11:a2:03:40:69:75:67:ab:6e:cf:71:
                    28:3d:1e:dc:c3:02:3f:0c:5f:ea:0a:b6:b0:b5:6c:
                    ee:3e:be:67:7f:db:b9:76:2a:27:04:18:53:7a:98:
                    c3:83:37:51:87:a4:54:a0:86:c2:6e:3f:5e:6c:b7:
                    e7:eb:80:2c:22:16:0d:5f:8d:ea:ea:01:61:4d:d4:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:10:49:0B:56:4A:7F:53:17:0B:9F:34:66:9D:D3:5F:2C:A8:22:CE
            X509v3 Authority Key Identifier:
                keyid:8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5f:55:94:27:0f:36:e9:9f:e9:66:f6:b3:41:d5:da:6c:8a:
         7a:b1:4a:8d:96:e8:a8:db:f2:59:18:20:b7:fe:ee:d2:8c:e3:
         50:93:c6:b5:f3:9d:6c:99:73:b1:da:42:0d:3d:be:0c:fa:1d:
         74:e3:e7:01:76:41:40:da:87:b9:79:6d:a0:cd:e7:77:0f:4a:
         02:e0:43:73:ba:fb:13:4f:c6:44:c3:f9:b0:34:84:02:de:ed:
         4b:e1:80:04:dc:2e:e4:4f:2c:5b:4d:e6:d9:c5:99:cc:ec:d7:
         db:4a:ae:8b:b6:c8:19:a9:30:d7:a5:2d:0b:18:6d:79:a8:63:
         9e:d1:13:7a:46:66:01:f7:4a:e1:f8:e2:5d:a9:28:28:a3:b0:
         1d:d8:b8:e4:68:d6:26:04:38:0c:16:b4:35:77:4d:55:29:40:
         22:3a:9a:e5:02:00:f7:6a:a1:fe:72:31:28:a6:f5:49:1c:34:
         8c:81:1c:2d:d0:dd:7b:25:d7:ac:58:8d:21:00:ef:0e:3e:08:
         97:07:36:f6:ca:e3:02:47:ba:45:71:dd:e7:2d:e9:f9:e9:9a:
         61:4e:89:eb:39:48:c5:f1:fa:d0:47:40:55:53:c1:b2:b6:74:
         5d:e1:1d:1e:a8:d9:3d:45:84:a9:88:70:dc:48:f6:e0:c7:4c:
         d5:d5:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:44:10 2026 by rpki-client