Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
File:                     3262903B69AE7339AAB9320A98EA5D1800FEC705.mft (raw, json)
Hash identifier:          HFs6K7JYjNss7WPR8uetE61dPAr6c+ctDKz/NktUQuY=
Subject key identifier:   3E:84:EE:85:72:0F:60:C4:EF:0F:E3:D5:15:2B:1F:70:E6:0A:02:99
Authority key identifier: 32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05
Certificate issuer:       /CN=3262903B69AE7339AAB9320A98EA5D1800FEC705
Certificate serial:       7EA34FD6CA1FE8F9ECE13B2570358D9AF26AF485
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 23:52:55 +0000
Manifest this update:     Tue 16 Jun 2026 23:47:55 +0000
Manifest next update:     Thu 18 Jun 2026 03:10:55 +0000
Files and hashes:         1: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: mvp2yuPOBwuKJ3KSamrBGxDk5I0RR5jAQfoIbHtIVlo=)
                          2: 3262903B69AE7339AAB9320A98EA5D1800FEC705.crl (hash: phnXOgXgla0TbUNhfUBrwhP89XZXCKrHqoK2rooVL6U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl
                          rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a3:4f:d6:ca:1f:e8:f9:ec:e1:3b:25:70:35:8d:9a:f2:6a:f4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3262903B69AE7339AAB9320A98EA5D1800FEC705
        Validity
            Not Before: Jun 16 23:47:55 2026 GMT
            Not After : Jun 18 03:10:55 2026 GMT
        Subject: CN=3E84EE85720F60C4EF0FE3D5152B1F70E60A0299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0c:d3:dd:9d:8f:94:e5:fd:a2:40:0f:61:48:
                    73:1a:14:bd:b2:60:12:58:5c:34:2a:ff:f2:b4:10:
                    56:a9:ca:88:b8:04:b4:d6:fa:41:85:84:49:a4:90:
                    ae:bd:e0:27:f4:c3:c1:f4:8a:b0:d8:59:6d:c8:cc:
                    0d:fe:9c:13:a9:ae:e9:b2:ef:ed:92:2d:c8:1e:ce:
                    72:c4:f5:77:55:a0:84:86:6e:8f:48:e6:9a:76:4b:
                    cd:f3:7c:66:f6:5c:3f:10:99:0b:4c:f4:58:6a:eb:
                    bd:a3:9f:9e:ba:2e:ec:3c:fe:2a:75:b2:80:72:9a:
                    eb:ff:89:cd:c9:e0:79:a4:01:fd:60:1a:95:be:18:
                    ec:66:29:af:09:81:8a:31:40:5b:7f:b7:52:a2:8a:
                    9d:44:8b:15:7f:7f:95:0b:9c:f6:d4:7e:1e:22:d6:
                    38:c5:af:ef:8c:82:6c:1d:88:e7:cf:71:8a:0c:6b:
                    8c:c3:ee:6f:2c:cb:8a:e1:70:5c:d0:17:1c:e3:5a:
                    cd:fb:70:09:ec:c1:53:79:bc:15:48:67:ea:f6:7e:
                    32:74:c2:36:cf:ce:d0:e1:e5:4a:42:71:88:fc:90:
                    e9:2d:57:e2:8c:3c:24:38:67:ec:70:89:4f:8f:45:
                    45:fc:1f:36:1b:7d:64:73:40:89:47:56:4e:0f:8b:
                    7e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:84:EE:85:72:0F:60:C4:EF:0F:E3:D5:15:2B:1F:70:E6:0A:02:99
            X509v3 Authority Key Identifier:
                keyid:32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:27:ef:aa:7f:d4:17:62:e3:b3:bb:50:85:09:f4:a8:66:70:
         7d:98:f1:b1:73:a8:f7:38:ca:7f:93:73:4d:21:7e:31:78:92:
         ce:58:60:eb:bb:43:bb:f2:e9:0f:73:0b:54:91:3e:c0:2a:35:
         99:22:b6:47:03:7c:38:09:12:5e:8c:a9:79:7f:64:0b:b2:1b:
         94:ab:8b:60:54:4e:f9:3a:46:f5:72:03:cb:70:78:23:45:9e:
         18:64:77:b7:ce:1c:4b:91:86:58:2b:63:97:a6:4c:7c:58:2b:
         54:37:54:df:69:fc:a6:71:45:40:a6:97:31:95:25:5b:ad:86:
         9c:37:d7:aa:1e:ce:7f:92:a3:97:0b:af:64:14:eb:95:96:c4:
         32:5e:51:0a:3f:af:2f:5a:1a:37:28:e6:a5:55:e2:b0:96:d7:
         29:01:d0:a9:33:04:b3:f8:90:54:9f:18:a5:78:80:05:ca:92:
         b3:70:7b:20:12:1c:2d:f8:77:3d:69:0c:70:e1:5a:c7:c7:08:
         cb:75:4f:33:24:a6:3c:56:38:c2:b0:c7:c3:d1:48:3c:cf:a4:
         7e:42:f9:7d:d6:3f:c7:2d:5c:51:da:74:b9:5e:5d:85:53:8e:
         ac:51:b7:5b:59:75:5a:1e:aa:3a:f7:13:d6:93:cc:c4:10:a3:
         72:a7:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:53:09 2026 by rpki-client