Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
File:                     8B18B819BC010B4A4EC66777543486E34AF52ED4.mft (raw, json)
Hash identifier:          pAXU7yYwhsofdVR5RaoaiNEODOY07IIt/2cfWdTpPiU=
Subject key identifier:   F6:C5:C2:C9:3A:1C:AE:89:D4:77:A8:EF:35:54:0B:D8:D2:A5:B3:08
Authority key identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4
Certificate issuer:       /CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
Certificate serial:       1B622B9EF5462465BE3D0698EDFF504EA5E6F90E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
Manifest number:          B8
Signing time:             Wed 16 Sep 2026 23:48:19 +0000
Manifest this update:     Wed 16 Sep 2026 23:43:19 +0000
Manifest next update:     Fri 18 Sep 2026 03:18:19 +0000
Files and hashes:         1: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: 3fEh7FEkFoZkANDbmxn7uUTRJbfDqHdq2EELZjoFJiA=)
                          2: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: RnWj7aZjC6B4VrPGo8x16jqEQ5V8whLA8BJvLlw1vbg=)
                          3: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: h3y36nWPp14vw0klmr63vNHy0YgCfjJ+L67ACCmkzyQ=)
                          4: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: COlbyHboqjdr0Rxi+nWQW3DOPTwsTgMlnilTtD4HKm4=)
                          5: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: 5F2W8Z4P5PEheYcmRC6qYhg/elm2GoPMJ5sZG45K31I=)
                          6: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: AyZ67OXVVcRP+SaexkcDHK81T3la7ye6jL1yJZbUj4M=)
                          7: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: djWo0EMecCkqgPGbJNZ3i1Hzh/Gf4zrbm7OL5FtozEI=)
                          8: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: xAnrR5oDPaIS2eOvjAIZMGHwwrAtXCAYZrjZS6iBlJs=)
                          9: 8B18B819BC010B4A4EC66777543486E34AF52ED4.crl (hash: am+fQT0aADBI6JV3Zr/w6OLHT92rS7Z+F207cCogLtQ=)
                          10: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: zR5IozhEoErSJoyA48okITB8A0oyrUPSif4Fq0MXC9c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl
                          rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 03:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:62:2b:9e:f5:46:24:65:be:3d:06:98:ed:ff:50:4e:a5:e6:f9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B18B819BC010B4A4EC66777543486E34AF52ED4
        Validity
            Not Before: Sep 16 23:43:19 2026 GMT
            Not After : Sep 18 03:18:19 2026 GMT
        Subject: CN=F6C5C2C93A1CAE89D477A8EF35540BD8D2A5B308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3c:82:72:8c:d1:ab:1a:b0:2f:67:22:25:9a:
                    b6:96:e0:c0:10:cf:25:ef:bd:48:8d:eb:02:cd:41:
                    7d:62:45:5a:55:9d:35:57:e3:42:4b:c1:c9:78:80:
                    f4:48:03:7b:d4:c3:00:76:77:dc:a9:bd:c8:aa:4b:
                    70:13:11:08:91:ad:ba:c3:b8:3c:c0:8f:a3:61:fb:
                    2b:b7:42:7f:b9:37:4b:e5:2a:03:47:da:83:48:b0:
                    55:0b:40:b5:3e:bb:3a:0f:31:40:7e:80:33:57:a8:
                    32:8b:aa:46:ba:f7:5a:53:29:44:c6:7f:83:69:eb:
                    bc:c6:13:11:48:27:4b:cb:10:ff:08:e5:db:ed:de:
                    c8:59:57:bc:fb:f9:67:08:87:4a:1d:6d:28:6c:e2:
                    0b:31:92:b8:5d:85:6f:57:fb:fe:f4:bc:62:65:ab:
                    ba:c8:f7:7e:45:70:1f:fc:50:a0:d5:82:99:6d:a2:
                    e7:89:31:04:52:1f:b5:39:64:7f:45:1b:f3:46:49:
                    4c:25:d6:1a:6f:d5:0f:2e:b2:2d:bc:8b:19:b0:3d:
                    ab:30:ba:7d:2a:99:a2:a7:02:f1:72:36:0a:ce:8c:
                    0e:1d:96:cf:f4:01:a5:87:6c:2a:78:1e:b4:a7:3c:
                    57:8b:b0:74:69:80:92:f8:55:09:ba:2c:29:55:f3:
                    f8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C5:C2:C9:3A:1C:AE:89:D4:77:A8:EF:35:54:0B:D8:D2:A5:B3:08
            X509v3 Authority Key Identifier:
                keyid:8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:36:04:1d:35:a7:64:19:37:7b:72:cd:e8:41:ce:e8:2e:32:
         f8:03:ab:40:f7:4d:34:ae:1c:da:df:cc:a2:58:db:33:02:4d:
         c7:b3:47:b7:93:cc:d6:7a:23:41:a1:73:f7:6f:7d:94:3a:69:
         62:c8:05:d9:49:ae:07:1d:6d:dd:f5:db:db:d7:a2:0f:31:0f:
         7d:4a:e7:c4:66:f9:ce:22:e4:fc:28:da:60:3d:6a:34:ef:6d:
         2e:ea:14:c7:e7:85:1d:93:24:95:45:8f:c1:5d:96:7a:08:dd:
         4f:25:4b:e0:ec:37:1f:95:c3:b1:7b:47:b5:11:6f:05:1e:46:
         71:15:b7:bc:71:b5:83:2e:00:73:d4:6f:f5:b2:dd:18:2a:64:
         15:95:fc:17:dd:bc:32:43:5c:3c:d9:22:72:9e:4e:2a:0e:b3:
         4e:9c:17:b0:bd:05:dc:99:71:3a:ce:5f:61:74:83:46:95:a0:
         0c:af:0a:76:bb:63:d8:b7:b0:2e:35:93:48:62:3e:c3:cc:df:
         b1:f5:d7:64:1f:7c:bf:ed:0f:75:d2:d3:bf:08:13:c6:5e:96:
         2d:89:d8:31:76:0b:ea:97:46:48:70:14:31:82:f8:4e:89:92:
         b7:de:1d:5f:90:62:d4:5a:75:8a:45:cd:fd:3c:1b:35:59:18:
         50:45:3a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:46:25 2026 by rpki-client