Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
File:                     832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft (raw, json)
Hash identifier:          JaZT3O1x7aaKZXnPbMFNFJ6Bjetnau9hV1DW5bzVZVM=
Subject key identifier:   F5:25:FF:6C:33:AD:AC:D1:B0:18:60:31:77:7D:C3:A6:06:4D:63:4F
Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1
Certificate issuer:       /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1
Certificate serial:       58B8033D37CB90AE0CEE2D4DE691FCDB70536280
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 20:03:33 +0000
Manifest this update:     Sat 13 Jun 2026 19:58:33 +0000
Manifest next update:     Sun 14 Jun 2026 21:11:33 +0000
Files and hashes:         1: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl (hash: AqwIqC+hIGYJShfporlcsSoZZBUGNcYo4vSMV20ADE8=)
                          2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl
                          rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b8:03:3d:37:cb:90:ae:0c:ee:2d:4d:e6:91:fc:db:70:53:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1
        Validity
            Not Before: Jun 13 19:58:33 2026 GMT
            Not After : Jun 14 21:11:33 2026 GMT
        Subject: CN=F525FF6C33ADACD1B0186031777DC3A6064D634F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:84:e4:a1:2f:df:d9:75:30:b3:03:8d:a1:
                    0a:c1:f9:9e:3a:bf:88:00:20:b2:c3:87:d3:97:4d:
                    b9:7a:cf:9f:38:79:88:96:73:ab:b5:22:83:4a:12:
                    7b:b7:52:99:e9:0a:33:de:04:d0:0b:55:4b:c7:1d:
                    69:2a:82:4a:2c:e0:7e:89:41:f7:e4:cf:9e:d0:05:
                    b2:cc:b3:fe:a6:ee:67:44:ca:ed:ef:a7:1c:79:b4:
                    b1:bc:9e:87:39:af:d3:1d:be:60:b9:61:10:8f:97:
                    bf:d0:3f:58:24:c1:80:d1:e2:c3:1e:2b:0b:58:ce:
                    ae:27:90:8c:81:ac:66:7c:be:e9:17:b8:46:f5:b1:
                    8d:e4:07:f1:1f:f6:26:a3:6e:9b:ff:32:97:84:a1:
                    6b:10:60:7e:11:7e:82:ce:8d:39:af:db:f2:59:d9:
                    52:0a:c3:64:23:5d:58:2a:08:d1:a5:34:1c:e4:4d:
                    9e:3b:e9:eb:b7:e1:c3:a8:71:da:44:d6:20:fe:ec:
                    4f:53:68:37:e3:a1:95:d9:7e:58:25:d4:6d:2e:33:
                    f6:4c:a1:c4:f2:2f:de:4a:f3:74:89:54:90:d6:cc:
                    d1:87:c0:2c:c1:09:e9:0b:bf:a5:01:5c:52:68:f2:
                    39:3c:6f:fe:72:d3:fd:7f:98:31:47:34:9a:9f:fd:
                    d7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:25:FF:6C:33:AD:AC:D1:B0:18:60:31:77:7D:C3:A6:06:4D:63:4F
            X509v3 Authority Key Identifier:
                keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:54:ae:9c:6c:75:22:07:33:29:4a:e9:9e:97:0e:ec:3b:fb:
         b5:55:55:65:e5:5b:4c:f2:f9:82:0a:bb:f8:54:42:2b:66:3e:
         84:52:08:53:0a:3e:e1:ea:18:f2:d6:45:f0:d6:62:73:da:06:
         67:d4:b5:6c:54:8d:24:5d:04:65:20:a7:3f:ac:a4:06:1c:a6:
         cb:89:b8:1f:96:fe:87:d4:1f:5b:62:12:c5:29:49:88:2a:28:
         9b:78:6a:29:6f:24:ef:17:26:62:3e:30:7a:f3:08:c9:89:ab:
         d2:61:63:1c:a3:68:f2:21:77:e9:eb:54:ae:8f:c3:52:f6:1a:
         37:f9:ed:3d:49:85:63:8c:18:c5:c6:0f:74:28:8b:15:0e:4c:
         3c:55:3c:68:64:6e:49:e8:48:a5:de:26:17:36:dc:b7:0f:f5:
         80:3c:2a:e2:b4:e7:0b:2a:d4:b9:d8:2a:ad:5d:12:45:3b:85:
         c7:45:36:12:d7:fb:9b:ad:f2:16:8d:e9:a3:e7:f2:df:de:34:
         74:9a:58:4d:db:3e:d5:4e:a2:88:b6:bd:cc:94:b0:be:f1:b5:
         73:0f:7e:2d:1d:3a:96:5a:a8:38:70:74:d8:7c:fe:90:d5:e9:
         70:17:b0:0f:af:ff:33:ed:40:fc:dc:0a:98:73:ce:5e:2a:5e:
         08:86:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:30 2026 by rpki-client