Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
File:                     3262903B69AE7339AAB9320A98EA5D1800FEC705.mft (raw, json)
Hash identifier:          R+S0+x2Vkxuaw1bi0aIDDkRN6WOrOkfOH9LucHzWHFE=
Subject key identifier:   E4:0F:4C:BF:25:59:A0:CF:21:02:06:93:2F:BE:F1:6C:5D:EA:74:00
Authority key identifier: 32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05
Certificate issuer:       /CN=3262903B69AE7339AAB9320A98EA5D1800FEC705
Certificate serial:       60957F469AB91D9B8323E5BAFA4B5764F34EF29F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
Manifest number:          EC
Signing time:             Sun 25 Oct 2026 09:43:37 +0000
Manifest this update:     Sun 25 Oct 2026 09:38:37 +0000
Manifest next update:     Mon 26 Oct 2026 09:47:37 +0000
Files and hashes:         1: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: mvp2yuPOBwuKJ3KSamrBGxDk5I0RR5jAQfoIbHtIVlo=)
                          2: 3262903B69AE7339AAB9320A98EA5D1800FEC705.crl (hash: PCIvmhtzh9XBMBbteJHpVxlMqpKYFOokWnWPMEeEPLc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl
                          rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 09:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:95:7f:46:9a:b9:1d:9b:83:23:e5:ba:fa:4b:57:64:f3:4e:f2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3262903B69AE7339AAB9320A98EA5D1800FEC705
        Validity
            Not Before: Oct 25 09:38:37 2026 GMT
            Not After : Oct 26 09:47:37 2026 GMT
        Subject: CN=E40F4CBF2559A0CF210206932FBEF16C5DEA7400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:2d:04:a1:30:37:48:62:1c:8d:7c:38:4a:
                    84:64:0e:cd:bc:25:43:52:eb:f5:fb:6b:6b:0a:ef:
                    26:90:1f:2e:38:44:d2:f1:d8:c1:25:83:ae:48:5e:
                    26:68:9f:74:72:77:b2:76:c0:ec:fb:fd:3d:f1:83:
                    c1:90:85:d6:95:76:2b:16:c4:7f:19:43:b0:b4:ff:
                    71:19:e5:2d:76:3f:8f:fc:4a:1a:46:da:a6:ae:02:
                    64:3e:ba:92:b1:6f:80:64:22:f1:91:57:65:31:3f:
                    31:40:c9:dd:0c:57:26:87:d2:41:41:62:50:25:d8:
                    e6:05:d0:9b:d9:0e:9e:62:ea:a6:4e:c2:bc:ee:76:
                    36:81:79:ba:40:c8:fa:5a:0a:59:8e:a2:6d:b7:58:
                    b8:46:27:fd:d2:f0:0a:a8:68:07:a3:ef:73:f0:f2:
                    99:d0:e6:35:e8:32:6c:e0:aa:4a:e8:92:ef:77:f2:
                    13:bf:1d:5e:4f:ba:08:43:d2:80:8b:df:30:7d:6c:
                    0f:69:ac:78:78:76:82:9e:e7:98:f0:13:da:b2:d5:
                    fa:e6:6d:c4:60:44:8f:ed:dc:3d:9b:e3:1c:a9:91:
                    c1:f3:27:d5:9a:1d:c4:ac:e0:81:ce:9c:dc:e3:1a:
                    ae:77:36:8a:1f:14:17:ae:81:8a:f4:7f:01:e7:54:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0F:4C:BF:25:59:A0:CF:21:02:06:93:2F:BE:F1:6C:5D:EA:74:00
            X509v3 Authority Key Identifier:
                keyid:32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3d:b4:ec:f3:a0:de:27:0c:f2:41:8d:3b:27:1b:1b:d8:c5:
         10:c9:0d:76:07:c3:f1:72:d3:f4:36:46:99:f1:6b:4a:25:8e:
         4e:c4:9a:a2:c7:50:10:26:b2:fc:dc:3c:1f:cd:77:6a:5c:e4:
         03:7e:65:89:cf:7d:83:4a:7c:0a:a1:19:b9:a8:16:18:46:a8:
         a8:33:f0:0a:b5:22:0a:9d:2e:ae:a5:80:32:ca:f0:e5:f7:7c:
         18:ef:6a:fa:cf:8d:78:2e:da:37:eb:cd:b9:01:b5:3f:8e:dd:
         2c:87:0b:25:8a:42:a7:b9:20:a2:b9:fa:82:17:3e:dc:e8:6c:
         0c:94:e4:86:be:89:5b:9f:8a:d1:01:92:b8:b5:90:c6:b6:29:
         15:88:c2:9d:31:56:7b:be:fe:4a:e4:29:e4:47:a7:77:6f:80:
         e6:7a:60:53:07:7e:eb:dd:06:db:82:ae:ce:28:5a:f9:5f:23:
         00:63:49:5b:00:23:92:0d:c5:d1:f5:b4:e8:cd:40:16:4d:b8:
         63:b2:d9:dc:f8:af:53:db:26:e4:4f:39:f3:01:7d:a9:24:30:
         34:7a:48:8b:cc:b7:11:5c:81:fe:c5:b2:41:75:b2:14:a3:97:
         11:90:3c:40:66:85:e3:eb:14:b1:3a:38:88:38:5f:00:2d:8a:
         50:92:b2:1a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYJV/Rpq5HZuDI+W6+ktXZPNO8p8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI2MjkwM0I2OUFFNzMzOUFBQjkzMjBBOThFQTVEMTgw
MEZFQzcwNTAeFw0yNjEwMjUwOTM4MzdaFw0yNjEwMjYwOTQ3MzdaMDMxMTAvBgNV
BAMTKEU0MEY0Q0JGMjU1OUEwQ0YyMTAyMDY5MzJGQkVGMTZDNURFQTc0MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWy0EoTA3SGIcjXw4SoRkDs28
JUNS6/X7a2sK7yaQHy44RNLx2MElg65IXiZon3Ryd7J2wOz7/T3xg8GQhdaVdisW
xH8ZQ7C0/3EZ5S12P4/8ShpG2qauAmQ+upKxb4BkIvGRV2UxPzFAyd0MVyaH0kFB
YlAl2OYF0JvZDp5i6qZOwrzudjaBebpAyPpaClmOom23WLhGJ/3S8AqoaAej73Pw
8pnQ5jXoMmzgqkroku938hO/HV5PughD0oCL3zB9bA9prHh4doKe55jwE9qy1frm
bcRgRI/t3D2b4xypkcHzJ9WaHcSs4IHOnNzjGq53NoofFBeugYr0fwHnVK0bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5A9MvyVZoM8hAgaTL77xbF3qdAAwHwYDVR0j
BBgwFoAUMmKQO2muczmquTIKmOpdGAD+xwUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTYwZmUyYWMtMjlmNi00M2EyLWJlNjQtMDZhM2FlOWQ4ZDIwLzAvMzI2MjkwM0I2
OUFFNzMzOUFBQjkzMjBBOThFQTVEMTgwMEZFQzcwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zMjYyOTAzQjY5QUU3MzM5QUFCOTMyMEE5OEVBNUQxODAwRkVD
NzA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl
NjQtMDZhM2FlOWQ4ZDIwLzAvMzI2MjkwM0I2OUFFNzMzOUFBQjkzMjBBOThFQTVE
MTgwMEZFQzcwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHc9tOzzoN4nDPJBjTsnGxvYxRDJDXYHw/Fy
0/Q2Rpnxa0oljk7EmqLHUBAmsvzcPB/Nd2pc5AN+ZYnPfYNKfAqhGbmoFhhGqKgz
8Aq1IgqdLq6lgDLK8OX3fBjvavrPjXgu2jfrzbkBtT+O3SyHCyWKQqe5IKK5+oIX
PtzobAyU5Ia+iVufitEBkri1kMa2KRWIwp0xVnu+/krkKeRHp3dvgOZ6YFMHfuvd
BtuCrs4oWvlfIwBjSVsAI5INxdH1tOjNQBZNuGOy2dz4r1PbJuRPOfMBfakkMDR6
SIvMtxFcgf7FskF1shSjlxGQPEBmhePrFLE6OIg4XwAtilCSsho=
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:54:44 2026 by rpki-client