Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
File:                     32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft (raw, json)
Hash identifier:          ZefqweLT40cjBl329l+IjM6UHSMI8tnFKaMQLd6BwPA=
Subject key identifier:   7C:F8:27:D5:AF:AB:42:90:58:70:8C:82:43:92:B9:8E:4E:BF:7D:78
Authority key identifier: 32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3
Certificate issuer:       /CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3
Certificate serial:       1B5C6293A286DDD038A54F63B599FCDC4C501275
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 17:47:48 +0000
Manifest this update:     Tue 12 May 2026 17:42:48 +0000
Manifest next update:     Wed 13 May 2026 18:43:48 +0000
Files and hashes:         1: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: IlwLW0g7keiKYblC08y+Cdk30ZDG31NiX8oDu4ZTBVM=)
                          2: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: AerViwEwX6M35LdYkw1W6Rm917nFOVWmFQ/wALZRWuI=)
                          3: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl (hash: baUJK9g2Iopahn037Ag67PzCmEBby47VepKh3teq+Vc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl
                          rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5c:62:93:a2:86:dd:d0:38:a5:4f:63:b5:99:fc:dc:4c:50:12:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3
        Validity
            Not Before: May 12 17:42:48 2026 GMT
            Not After : May 13 18:43:48 2026 GMT
        Subject: CN=7CF827D5AFAB429058708C824392B98E4EBF7D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:19:eb:93:8c:02:c5:15:55:d8:bd:7f:8f:
                    d6:78:29:25:4d:6d:27:74:ac:7a:ee:75:dd:0d:24:
                    fe:6e:0d:07:69:da:03:6a:9c:f6:6b:f8:6d:e8:d5:
                    ce:90:d0:0d:da:f0:73:de:8e:03:49:3e:bd:92:83:
                    4b:7b:3d:5a:cd:fb:a3:88:2b:b6:25:e8:eb:5e:be:
                    44:34:74:78:b7:31:ce:8d:1a:c5:08:cf:df:eb:3a:
                    9d:49:5d:2e:03:38:42:5e:6d:3d:39:d2:04:71:c0:
                    b6:70:7d:4f:58:26:ef:7a:83:c3:77:1e:c7:c0:52:
                    41:0b:30:f4:8a:24:dc:eb:c4:76:b1:43:cd:4e:06:
                    b9:f5:6e:9b:a0:88:5a:8c:76:72:d6:ef:c5:53:5e:
                    2f:d0:b9:89:6a:d7:e1:4e:aa:6c:52:8d:01:17:3b:
                    62:a6:6f:d3:c4:52:b8:1e:27:2b:95:82:4c:2b:fe:
                    f2:d4:bb:eb:96:7d:8c:26:c9:9d:88:3d:e9:26:7a:
                    c4:b4:f5:3c:09:8d:85:66:63:35:48:7d:f2:eb:91:
                    8d:9c:4f:2b:3d:98:5a:1e:ff:49:3d:a0:cb:f3:b8:
                    d3:b0:a7:9c:a5:dd:18:c8:99:84:72:e1:1a:d4:9f:
                    16:d2:12:bf:bd:b2:30:dc:1f:1a:5f:39:dc:87:cf:
                    2b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F8:27:D5:AF:AB:42:90:58:70:8C:82:43:92:B9:8E:4E:BF:7D:78
            X509v3 Authority Key Identifier:
                keyid:32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:da:9b:bf:72:4d:28:b7:b4:1d:b2:fe:4c:65:d7:d1:bc:b3:
         83:f5:3b:b4:35:8b:73:9f:20:4c:74:00:55:44:c4:59:56:17:
         a9:77:10:9b:5e:81:03:b3:dd:d7:0f:4a:fc:13:2e:82:8e:8f:
         fd:37:97:d6:0b:c6:81:51:4f:2a:b6:53:f0:e3:74:f0:3e:b0:
         d9:e0:62:3a:fc:12:fa:58:cb:a9:23:fb:66:d7:38:85:f4:87:
         da:b3:42:f9:af:97:e7:64:09:b8:9f:0a:9a:93:e2:0c:7c:4a:
         3f:de:51:83:11:3e:2c:c5:ef:80:ce:37:17:61:3b:57:b7:66:
         12:03:78:72:05:20:c7:34:6b:6c:35:c7:d0:36:a3:20:4b:d8:
         fc:f0:a2:1f:3a:fc:49:07:4c:7f:fe:44:44:89:fe:fe:43:25:
         44:d3:5e:e0:77:44:5b:e0:63:ca:df:b8:88:4d:9e:5f:98:bc:
         d4:56:36:f0:f4:f2:83:ab:8b:bb:15:40:e6:e0:27:e0:5d:88:
         0f:b5:ec:3a:f8:0c:de:23:32:d8:b2:d3:48:dc:50:0c:8a:3d:
         68:a9:86:eb:c1:45:d4:d9:fc:8a:52:4a:f2:51:56:9c:fe:cb:
         2e:e7:2e:2a:29:70:0e:eb:6b:7f:d9:bb:01:10:68:57:07:85:
         e3:c3:cb:ed
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUG1xik6KG3dA4pU9jtZn83ExQEnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRC
Q0M3RUVGMzAeFw0yNjA1MTIxNzQyNDhaFw0yNjA1MTMxODQzNDhaMDMxMTAvBgNV
BAMTKDdDRjgyN0Q1QUZBQjQyOTA1ODcwOEM4MjQzOTJCOThFNEVCRjdENzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCezRnrk4wCxRVV2L1/j9Z4KSVN
bSd0rHrudd0NJP5uDQdp2gNqnPZr+G3o1c6Q0A3a8HPejgNJPr2Sg0t7PVrN+6OI
K7Yl6OtevkQ0dHi3Mc6NGsUIz9/rOp1JXS4DOEJebT050gRxwLZwfU9YJu96g8N3
HsfAUkELMPSKJNzrxHaxQ81OBrn1bpugiFqMdnLW78VTXi/QuYlq1+FOqmxSjQEX
O2Kmb9PEUrgeJyuVgkwr/vLUu+uWfYwmyZ2IPekmesS09TwJjYVmYzVIffLrkY2c
Tys9mFoe/0k9oMvzuNOwp5yl3RjImYRy4RrUnxbSEr+9sjDcHxpfOdyHzysBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfPgn1a+rQpBYcIyCQ5K5jk6/fXgwHwYDVR0j
BBgwFoAUMsQIaSUM6WBuBcFbabIP9LzH7vMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjI2MDU4NmQtYjAyNy00NjU2LWI2MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4Njky
NTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRCQ0M3RUVGMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zMkM0MDg2OTI1MENFOTYwNkUwNUMxNUI2OUIyMEZGNEJDQzdF
RUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI2MDU4NmQtYjAyNy00NjU2LWI2
MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBG
RjRCQ0M3RUVGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAPam79yTSi3tB2y/kxl19G8s4P1O7Q1i3Of
IEx0AFVExFlWF6l3EJtegQOz3dcPSvwTLoKOj/03l9YLxoFRTyq2U/DjdPA+sNng
Yjr8EvpYy6kj+2bXOIX0h9qzQvmvl+dkCbifCpqT4gx8Sj/eUYMRPizF74DONxdh
O1e3ZhIDeHIFIMc0a2w1x9A2oyBL2Pzwoh86/EkHTH/+RESJ/v5DJUTTXuB3RFvg
Y8rfuIhNnl+YvNRWNvD08oOri7sVQObgJ+BdiA+17Dr4DN4jMtiy00jcUAyKPWip
huvBRdTZ/IpSSvJRVpz+yy7nLiopcA7ra3/ZuwEQaFcHhePDy+0=
-----END CERTIFICATE-----
Generated at Wed May 13 02:59:38 2026 by rpki-client