Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
File:                     18FC32F1670351EC283C40262E5055C462E12229.mft (raw, json)
Hash identifier:          Nn+At8zaQfWeM3m/r3Npstg9FzFG51+R0Z3GM9fPZtQ=
Subject key identifier:   D8:18:D6:D8:DF:A7:B9:E7:B6:E9:9E:CD:6D:7E:CB:50:58:79:D9:8E
Authority key identifier: 18:FC:32:F1:67:03:51:EC:28:3C:40:26:2E:50:55:C4:62:E1:22:29
Certificate issuer:       /CN=18FC32F1670351EC283C40262E5055C462E12229
Certificate serial:       22FD5F1D76F2D329F865A36828564E45A2B66D0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
Manifest number:          D4
Signing time:             Wed 07 Oct 2026 19:58:03 +0000
Manifest this update:     Wed 07 Oct 2026 19:53:03 +0000
Manifest next update:     Thu 08 Oct 2026 21:41:03 +0000
Files and hashes:         1: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: pkw1Y7i4f2xvVEY0Gh9GjhFjARpvJWCNngf9O/42y0o=)
                          2: 18FC32F1670351EC283C40262E5055C462E12229.crl (hash: 5eBJfag3Vl/go/7+XBYpS82HiIX/ueORTMFOBgVuWis=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.crl
                          rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 21:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fd:5f:1d:76:f2:d3:29:f8:65:a3:68:28:56:4e:45:a2:b6:6d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FC32F1670351EC283C40262E5055C462E12229
        Validity
            Not Before: Oct  7 19:53:03 2026 GMT
            Not After : Oct  8 21:41:03 2026 GMT
        Subject: CN=D818D6D8DFA7B9E7B6E99ECD6D7ECB505879D98E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:c2:5e:a4:d2:8f:53:de:44:b3:61:3c:cd:
                    91:fa:20:af:8b:ad:a6:28:8d:26:43:80:d5:b4:a2:
                    07:fc:4c:05:f6:95:f1:85:64:54:42:6e:83:70:64:
                    f1:54:2b:5d:8e:ab:94:7c:f8:ac:ab:bd:d8:a4:74:
                    c0:e7:0e:14:28:63:83:0a:08:3a:53:09:4a:5e:cc:
                    04:ff:ae:cc:e5:93:72:38:e1:23:9c:bb:18:4c:2a:
                    bc:0a:87:32:e2:c7:fe:b4:18:79:86:ef:87:8e:ca:
                    b9:4b:12:58:2b:5b:8b:5e:2e:df:df:d0:77:41:49:
                    21:69:af:88:fe:82:03:60:d5:00:6e:aa:9f:43:a3:
                    8e:13:38:17:e8:1e:a7:3a:ab:54:5b:75:a3:33:c4:
                    a6:d8:00:05:21:50:d3:3c:09:b3:15:f3:70:f9:5a:
                    0c:3d:f4:47:7b:0c:bf:3b:b3:e9:a8:6f:f2:0a:cd:
                    9d:7e:9d:05:c9:3d:ca:36:f0:23:fa:e2:6e:0a:ab:
                    6b:b7:02:42:31:57:0a:11:b1:92:f1:6b:73:30:82:
                    23:0a:41:90:b7:bd:54:e1:f4:9f:3d:34:73:cb:4c:
                    ce:10:61:39:63:dd:ab:78:a0:0c:bc:53:d6:2d:2b:
                    58:c2:c0:05:7b:d0:be:90:17:f2:0c:f9:ff:3f:5f:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:18:D6:D8:DF:A7:B9:E7:B6:E9:9E:CD:6D:7E:CB:50:58:79:D9:8E
            X509v3 Authority Key Identifier:
                keyid:18:FC:32:F1:67:03:51:EC:28:3C:40:26:2E:50:55:C4:62:E1:22:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1f:de:ef:24:c8:15:82:b4:29:60:7c:fb:e9:0a:93:f4:a0:
         11:9c:b5:1e:9e:64:52:eb:01:30:0c:74:4b:83:65:b2:00:88:
         e7:ff:21:7c:c1:b6:37:c6:6a:9f:28:fb:d2:28:63:1a:c9:7a:
         79:8b:98:98:cc:bc:fb:52:2e:0c:b5:7b:29:33:8f:34:1d:0c:
         e1:19:34:b8:0e:38:73:dd:8c:fa:ff:b3:ea:9f:48:ec:c7:d2:
         bc:d1:eb:d1:3b:c4:74:dd:82:53:58:00:e0:23:a9:e5:d1:71:
         22:22:0b:73:35:54:49:ed:e6:8b:f8:09:8b:b3:35:5b:d5:63:
         17:7d:d2:83:78:0d:d9:d1:ff:ae:3d:75:90:32:a6:99:2c:61:
         ff:8d:86:98:32:85:7c:3f:fe:b1:89:bd:b5:30:94:ac:de:4a:
         ea:9b:7e:6e:3d:64:4f:e3:2e:9d:1a:06:de:f2:92:94:b3:cb:
         ae:6d:e5:0b:ab:b8:91:2d:61:44:f9:e5:32:88:64:85:42:8c:
         6e:09:00:c7:f1:0c:d2:6d:0c:4f:c9:fb:ea:52:b4:e7:9b:00:
         71:75:8d:38:b1:ee:46:57:f5:a6:45:8f:3b:55:f0:7e:ff:da:
         6f:db:0d:db:ef:44:75:92:72:a4:49:09:e8:a0:ae:78:c0:93:
         5a:fd:15:e5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIv1fHXby0yn4ZaNoKFZORaK2bQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThGQzMyRjE2NzAzNTFFQzI4M0M0MDI2MkU1MDU1QzQ2
MkUxMjIyOTAeFw0yNjEwMDcxOTUzMDNaFw0yNjEwMDgyMTQxMDNaMDMxMTAvBgNV
BAMTKEQ4MThENkQ4REZBN0I5RTdCNkU5OUVDRDZEN0VDQjUwNTg3OUQ5OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZTsJepNKPU95Es2E8zZH6IK+L
raYojSZDgNW0ogf8TAX2lfGFZFRCboNwZPFUK12Oq5R8+KyrvdikdMDnDhQoY4MK
CDpTCUpezAT/rszlk3I44SOcuxhMKrwKhzLix/60GHmG74eOyrlLElgrW4teLt/f
0HdBSSFpr4j+ggNg1QBuqp9Do44TOBfoHqc6q1RbdaMzxKbYAAUhUNM8CbMV83D5
Wgw99Ed7DL87s+mob/IKzZ1+nQXJPco28CP64m4Kq2u3AkIxVwoRsZLxa3MwgiMK
QZC3vVTh9J89NHPLTM4QYTlj3at4oAy8U9YtK1jCwAV70L6QF/IM+f8/X7uDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2BjW2N+nuee26Z7NbX7LUFh52Y4wHwYDVR0j
BBgwFoAUGPwy8WcDUewoPEAmLlBVxGLhIikwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDQxZTRhYzktYzA2Yi00MzQzLTg1MjYtM2ExZjFiMWI1ZDgyLzAvMThGQzMyRjE2
NzAzNTFFQzI4M0M0MDI2MkU1MDU1QzQ2MkUxMjIyOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xOEZDMzJGMTY3MDM1MUVDMjgzQzQwMjYyRTUwNTVDNDYyRTEy
MjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1
MjYtM2ExZjFiMWI1ZDgyLzAvMThGQzMyRjE2NzAzNTFFQzI4M0M0MDI2MkU1MDU1
QzQ2MkUxMjIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIYf3u8kyBWCtClgfPvpCpP0oBGctR6eZFLr
ATAMdEuDZbIAiOf/IXzBtjfGap8o+9IoYxrJenmLmJjMvPtSLgy1eykzjzQdDOEZ
NLgOOHPdjPr/s+qfSOzH0rzR69E7xHTdglNYAOAjqeXRcSIiC3M1VEnt5ov4CYuz
NVvVYxd90oN4DdnR/649dZAyppksYf+NhpgyhXw//rGJvbUwlKzeSuqbfm49ZE/j
Lp0aBt7ykpSzy65t5QuruJEtYUT55TKIZIVCjG4JAMfxDNJtDE/J++pStOebAHF1
jTix7kZX9aZFjztV8H7/2m/bDdvvRHWScqRJCeigrnjAk1r9FeU=
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:17:03 2026 by rpki-client