Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
File:                     832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft (raw, json)
Hash identifier:          SUx4CcEOS+rpKJMSjlnXXTEhtDHQeKRp6O87Q/VrdE8=
Subject key identifier:   F0:1C:88:6B:52:EC:01:37:25:F5:01:92:FF:02:9D:52:FE:EB:03:46
Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1
Certificate issuer:       /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1
Certificate serial:       368F4A6FC85B11301296587E83DFFBD75A4FEFDA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 11:18:54 +0000
Manifest this update:     Thu 23 Jul 2026 11:13:54 +0000
Manifest next update:     Fri 24 Jul 2026 14:56:54 +0000
Files and hashes:         1: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0=)
                          2: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl (hash: ykVtdzWOvyc2dDYt0WTLIw6DC8P0ryMNXPLNjMHNqUc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl
                          rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 14:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8f:4a:6f:c8:5b:11:30:12:96:58:7e:83:df:fb:d7:5a:4f:ef:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1
        Validity
            Not Before: Jul 23 11:13:54 2026 GMT
            Not After : Jul 24 14:56:54 2026 GMT
        Subject: CN=F01C886B52EC013725F50192FF029D52FEEB0346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:86:55:8b:fe:72:40:5c:53:bb:df:15:43:
                    7a:f3:dd:cf:9f:73:ba:ca:de:55:75:bd:80:aa:e2:
                    ef:9d:87:19:72:74:3d:30:ca:ad:86:0b:0d:ea:57:
                    56:b3:8f:a5:b2:aa:96:18:4c:c9:3a:87:44:bf:69:
                    e8:69:7b:b0:77:5b:4b:67:7e:23:10:44:b1:97:53:
                    af:e2:bb:d2:b0:6f:ed:b3:ed:7c:e4:a7:84:9e:e7:
                    bb:81:dc:fc:65:ee:d5:20:a0:c1:49:86:8a:f4:d0:
                    18:3e:72:d9:c3:21:ed:02:d7:1d:0f:c6:e9:b9:62:
                    ed:8a:c3:8c:ef:5b:44:ce:ae:c7:f4:62:93:6d:78:
                    dc:3c:38:a8:6a:5e:ba:84:cb:b1:5c:85:36:63:9d:
                    b8:cb:0d:33:15:9f:a8:fc:a8:93:c0:c6:c8:a4:f0:
                    50:1a:07:a8:ae:bd:34:f9:da:d3:ea:a0:d3:7c:79:
                    d9:05:1d:56:30:8a:02:fc:c6:59:c0:3d:4a:db:fe:
                    9f:38:04:60:74:ae:dd:af:b2:4b:f4:f3:65:c4:4e:
                    2b:6c:0b:f2:02:1b:2b:32:9b:1c:34:da:1d:71:c8:
                    dd:4d:8a:0b:18:f2:d1:3f:73:78:07:c0:ae:3c:fb:
                    74:a1:28:20:55:ee:dc:a7:47:c2:2d:d5:db:58:fd:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:88:6B:52:EC:01:37:25:F5:01:92:FF:02:9D:52:FE:EB:03:46
            X509v3 Authority Key Identifier:
                keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c2:ec:18:9c:95:a6:38:04:0f:35:90:4b:4e:5f:cf:18:ca:
         c3:28:6c:b4:11:2a:a9:d5:10:44:5e:d4:de:78:72:0a:12:96:
         4d:f4:02:e6:fb:3e:c6:ea:89:92:80:b2:0a:ba:3d:89:c9:12:
         cc:4a:0c:c5:68:92:f7:ce:82:c7:0b:95:6d:72:12:24:f0:83:
         a9:be:41:10:85:16:47:27:df:c8:ec:10:ff:a6:26:1f:e4:41:
         37:86:56:5d:a4:8a:a4:7e:34:f6:66:02:da:80:19:2d:86:e8:
         c1:af:3b:eb:e3:1c:22:8d:f9:ed:7a:fc:f4:09:f1:00:37:16:
         e1:4b:15:e9:1f:7c:f2:4c:98:50:05:64:25:92:a0:c7:f0:b3:
         f5:42:58:67:ac:cc:28:b1:2d:ed:f7:19:32:9e:26:11:97:42:
         24:ae:ee:82:1a:51:c6:08:45:fa:cc:b7:1b:7b:7f:b5:89:6a:
         1a:0e:7b:0b:41:df:08:1a:1b:c1:9b:20:08:1f:12:5b:60:04:
         6b:60:63:c3:1b:bd:44:66:ad:3b:88:84:38:34:4b:43:fb:66:
         34:0a:a1:77:52:e5:22:8d:13:ec:f4:1c:8f:69:64:6c:c3:86:
         ce:9a:81:2a:80:ac:ae:a0:9a:2a:75:2d:4b:8d:93:8d:68:ae:
         01:c1:80:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:04 2026 by rpki-client