Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
File:                     32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft (raw, json)
Hash identifier:          bssb1wjiqs/ZSeNF+nWV2BpH1qT1nb+Vx6Of74xBsq0=
Subject key identifier:   DD:71:E8:23:F6:34:47:86:CB:ED:87:EC:51:2B:E2:00:6D:6E:81:5F
Authority key identifier: 32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3
Certificate issuer:       /CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3
Certificate serial:       69E63668C14D1E91A4D82B8432B7E42EF507DD45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 04:38:30 +0000
Manifest this update:     Wed 17 Jun 2026 04:33:30 +0000
Manifest next update:     Thu 18 Jun 2026 06:57:30 +0000
Files and hashes:         1: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl (hash: JAqxFTPZmmWk0ETjhA76uhbqW9oa/F9CogHRQhVRWwk=)
                          2: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: AerViwEwX6M35LdYkw1W6Rm917nFOVWmFQ/wALZRWuI=)
                          3: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: IlwLW0g7keiKYblC08y+Cdk30ZDG31NiX8oDu4ZTBVM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl
                          rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e6:36:68:c1:4d:1e:91:a4:d8:2b:84:32:b7:e4:2e:f5:07:dd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3
        Validity
            Not Before: Jun 17 04:33:30 2026 GMT
            Not After : Jun 18 06:57:30 2026 GMT
        Subject: CN=DD71E823F6344786CBED87EC512BE2006D6E815F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:92:e8:59:f9:17:92:cb:55:35:fb:2d:b2:
                    dd:9f:8f:51:1d:53:99:0a:3f:66:b0:ae:1f:82:2e:
                    12:50:e1:a4:d0:84:79:96:fb:52:85:80:c8:30:f7:
                    62:6b:96:ef:9e:26:6b:52:23:5b:3a:ef:a8:b6:bd:
                    cf:0e:06:b2:23:12:59:4e:51:fd:18:45:a8:4e:51:
                    22:b7:e4:44:22:27:24:72:ad:ef:ca:d8:8a:46:1c:
                    eb:12:39:c9:23:6a:82:2c:94:fc:7f:af:f4:8e:a6:
                    ef:25:e1:8f:17:10:3a:5d:45:5d:5a:41:58:f5:be:
                    a4:ac:8f:5d:01:a5:f4:a7:16:4b:6f:ee:fc:97:7d:
                    7b:da:06:d7:8d:68:95:f3:1c:fa:40:21:9a:5e:76:
                    3c:55:ba:d8:3a:5b:76:62:a4:88:0c:06:bc:28:ab:
                    45:bf:86:5d:8b:ad:1a:5b:e2:53:4d:86:d2:97:04:
                    21:a5:a1:d3:17:c2:b1:b7:01:31:11:58:9d:0a:92:
                    da:77:27:72:5a:bb:70:77:1e:43:b7:ab:e8:7f:7c:
                    82:77:a7:19:05:ab:db:04:16:ef:4e:5f:1a:1a:ca:
                    a1:da:3f:7c:81:6b:ac:ab:b7:f2:be:1b:19:01:2e:
                    71:f5:6d:4b:29:32:dd:30:5f:98:54:90:c2:a1:e6:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:71:E8:23:F6:34:47:86:CB:ED:87:EC:51:2B:E2:00:6D:6E:81:5F
            X509v3 Authority Key Identifier:
                keyid:32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e6:f7:35:49:0d:37:62:5e:38:92:0d:0d:bb:99:aa:b3:87:
         41:68:63:89:d3:96:f7:8e:7c:3a:be:e3:f6:91:2e:17:60:36:
         e2:af:18:e3:d1:77:b4:ac:98:ef:3e:00:26:ca:43:47:c3:34:
         00:35:06:bf:fa:74:0f:ed:93:86:60:84:09:94:46:4c:50:58:
         59:ea:c9:92:e6:2f:dd:49:5d:43:30:77:a7:42:18:4c:1e:ee:
         f4:ca:bc:c1:0e:4d:f6:4b:1d:b4:68:8f:3a:4f:e7:d0:04:95:
         db:b0:86:f0:2e:92:1c:8a:62:92:ba:94:bf:dc:d2:3c:9f:46:
         34:00:30:eb:5d:99:06:76:9e:46:9c:36:b4:45:26:28:c4:d6:
         e8:15:a8:1c:30:09:d0:9b:ee:7a:56:9e:a7:7d:23:c0:64:28:
         b2:e5:cf:f9:98:2c:5c:26:21:58:e1:7c:fe:81:47:0d:19:b2:
         9d:d6:ac:d8:14:1d:15:ef:04:3c:51:42:3f:bb:2b:94:6f:dc:
         cb:9c:f2:6b:ce:7e:94:81:63:b8:d2:9e:47:34:22:9b:87:83:
         8b:2e:d6:df:82:19:15:27:4a:31:15:49:fb:50:99:b8:61:ec:
         4f:14:01:d2:78:26:d5:5a:c2:82:ba:39:ea:e2:21:ae:38:d1:
         40:78:06:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:16:41 2026 by rpki-client