Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
File:                     3E08DEC2AE0EB41653597023376671331769A43E.mft (raw, json)
Hash identifier:          waCbRrfkdaqU9ZADFXuObjaTZ0qm4xpQkMdSD6iG8t8=
Subject key identifier:   55:93:68:75:FA:ED:AA:7B:4D:F8:12:7D:FA:1A:2E:A7:19:67:1D:31
Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E
Certificate issuer:       /CN=3E08DEC2AE0EB41653597023376671331769A43E
Certificate serial:       2C839E90796273A2C4A13AE212FF93A4251096D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
Manifest number:          E2
Signing time:             Mon 20 Apr 2026 07:51:46 +0000
Manifest this update:     Mon 20 Apr 2026 07:46:46 +0000
Manifest next update:     Thu 23 Apr 2026 14:32:46 +0000
Files and hashes:         1: 3E08DEC2AE0EB41653597023376671331769A43E.crl (hash: qQ3FexC84VzgFC7YMc/krun2DqEpjqWDduKHQMCaZt8=)
                          2: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: 3hoDD7ig6gcP/Yzm1bfTsMAVOt7p/pOGosEJ4Wxm3M0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl
                          rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:83:9e:90:79:62:73:a2:c4:a1:3a:e2:12:ff:93:a4:25:10:96:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E
        Validity
            Not Before: Apr 20 07:46:46 2026 GMT
            Not After : Apr 23 14:32:46 2026 GMT
        Subject: CN=55936875FAEDAA7B4DF8127DFA1A2EA719671D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1c:b6:53:d5:93:67:33:0b:ce:c8:dd:34:a5:
                    33:b9:47:61:f1:bf:e5:b3:63:ab:cf:5f:d6:a5:b1:
                    69:81:ac:1f:94:3f:e6:eb:dd:3c:f1:9e:73:2d:cd:
                    d2:47:68:88:aa:8c:f3:25:54:36:93:dc:55:ac:0a:
                    7c:e3:a6:04:dd:8d:ad:f6:da:ff:4f:0a:4b:58:02:
                    37:bd:30:c5:d2:5f:9a:ee:0b:0b:90:f3:a5:0d:76:
                    9e:19:d7:c7:f8:7c:9a:9a:49:3e:98:c9:3f:ba:d3:
                    f9:6e:8a:76:dd:ac:9f:86:52:72:42:e7:22:53:fd:
                    ad:30:5d:d3:08:a9:d7:bc:f1:37:0f:e0:79:33:f2:
                    0a:7b:a3:57:de:6a:11:58:08:9b:cf:ee:27:ca:f1:
                    85:35:9e:ec:10:97:32:a7:e8:41:37:81:ec:57:a0:
                    33:72:67:05:df:e2:87:8d:17:49:d2:42:df:ec:97:
                    89:8a:b8:60:ef:2f:e4:ec:b6:f1:ea:93:a6:13:89:
                    16:d1:ed:cb:76:1c:8a:3b:3d:75:94:59:1c:ac:73:
                    7b:dc:ed:68:fc:97:4d:ba:87:e5:09:5c:76:95:d4:
                    22:f5:b2:31:59:4a:a1:3e:15:7e:c4:21:38:9d:76:
                    ff:35:c5:45:bd:0e:d1:8a:ae:3d:c4:d4:fe:40:f0:
                    96:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:93:68:75:FA:ED:AA:7B:4D:F8:12:7D:FA:1A:2E:A7:19:67:1D:31
            X509v3 Authority Key Identifier:
                keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b4:b3:f8:b1:16:0a:1f:c9:c9:d2:38:3a:5d:c9:9f:f4:35:
         67:a4:23:e5:79:17:83:87:02:b6:c7:85:a7:10:96:b9:b5:53:
         fd:b6:7d:c8:03:2a:e2:2d:53:8a:af:12:c0:26:87:ab:20:0a:
         f8:c4:33:ae:f9:26:d0:14:6d:55:83:8f:dd:76:9a:ab:ae:26:
         f4:6d:3f:5d:30:03:66:1f:35:2a:b8:9f:27:53:f0:1f:11:f7:
         81:59:a1:39:d0:19:e5:7b:ca:3c:5e:db:08:47:2a:b0:9b:96:
         28:4b:24:d0:5b:3a:67:88:42:27:86:81:a0:fb:54:d3:3f:82:
         32:94:4c:35:b7:94:82:08:83:a9:0f:02:ae:d1:f4:52:92:37:
         2a:2f:9f:fa:7f:65:2c:8f:7c:49:b3:d7:f2:06:58:63:54:01:
         b5:26:da:89:15:21:84:7b:61:5d:1e:9a:73:91:d6:e9:53:9f:
         00:80:3b:91:62:f3:d2:b8:70:d9:ba:9f:19:dc:27:53:0f:bc:
         f0:bb:dc:0b:9d:1a:6e:0d:d2:d2:73:3e:2d:48:70:bd:c6:e8:
         13:2f:31:9e:86:07:2b:e7:30:4d:56:89:7a:b9:f3:87:6a:a3:
         7d:5d:44:17:90:19:93:ea:0c:d6:b1:85:e4:4d:72:9e:fd:71:
         07:89:a6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:54:17 2026 by rpki-client