Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft
File:                     832F3BA2D4A4666720A04785F7440BA744E9066D.mft (raw, json)
Hash identifier:          y30m8+Eunh9lZg6echvjnuCaMC2va7Q9VqhPInOVp2Y=
Subject key identifier:   25:A2:E9:14:F0:57:44:A3:15:2E:70:E2:0C:7B:16:5A:79:E5:4A:6E
Authority key identifier: 83:2F:3B:A2:D4:A4:66:67:20:A0:47:85:F7:44:0B:A7:44:E9:06:6D
Certificate issuer:       /CN=832F3BA2D4A4666720A04785F7440BA744E9066D
Certificate serial:       1B778BC116B989A9053FAB3B114CA12792F9C56F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft
Manifest number:          BA
Signing time:             Thu 17 Sep 2026 09:30:28 +0000
Manifest this update:     Thu 17 Sep 2026 09:25:28 +0000
Manifest next update:     Fri 18 Sep 2026 13:25:28 +0000
Files and hashes:         1: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: rj50c78OZE7EyiE8pv//nMMfuevJo1Qwb9zz5bieBoU=)
                          2: 832F3BA2D4A4666720A04785F7440BA744E9066D.crl (hash: 7PKBJ2YEmtK/pPBe+Sz978VmN56PiMJ4tVlvykc6tHU=)
                          3: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: LSsyk3LQXyf/xjsLYb7f1ejhi/raliKL2ndVhfqssnE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.crl
                          rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:77:8b:c1:16:b9:89:a9:05:3f:ab:3b:11:4c:a1:27:92:f9:c5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832F3BA2D4A4666720A04785F7440BA744E9066D
        Validity
            Not Before: Sep 17 09:25:28 2026 GMT
            Not After : Sep 18 13:25:28 2026 GMT
        Subject: CN=25A2E914F05744A3152E70E20C7B165A79E54A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a7:26:5f:47:49:8f:bb:0a:8d:08:fe:ea:de:
                    1c:d7:ce:2e:01:15:ac:a8:23:c0:4b:53:f2:af:99:
                    e4:4a:e3:4b:a0:af:f5:a8:18:c5:3b:cf:38:9d:ad:
                    95:da:e1:56:ea:40:e1:fb:21:90:5f:40:0a:e7:da:
                    6a:5a:e0:f6:f6:ed:dd:30:68:a3:25:e2:1a:4c:b2:
                    e1:8c:82:e0:e2:7e:c6:6b:e5:0d:54:0a:c3:08:4e:
                    c1:c2:9a:84:bd:fe:78:b9:1f:0d:1a:a9:c6:ae:d1:
                    02:b0:f4:2d:86:68:3e:f7:50:9b:76:de:41:eb:82:
                    93:55:5a:45:59:3d:8d:e7:63:98:c5:01:ae:2f:13:
                    d1:1f:c2:5d:81:20:90:be:63:f4:91:4e:01:77:c7:
                    c6:cb:2a:e1:2a:ac:25:bd:30:a2:33:2d:03:11:c1:
                    c4:e7:cb:7a:63:77:d6:17:cc:8c:da:c2:32:d5:b3:
                    b7:e9:ee:c8:ea:f5:0a:17:10:68:32:ea:69:c8:4a:
                    fd:53:0f:58:a5:de:cb:d7:1b:5c:08:68:f2:d7:27:
                    88:15:67:1c:55:e3:d6:25:a7:c8:68:8c:7b:8c:13:
                    19:7d:12:fe:82:d7:e8:87:61:95:03:bd:d5:f7:bd:
                    ad:aa:3f:5f:c8:69:1f:33:90:1e:4e:22:4b:ba:08:
                    fa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A2:E9:14:F0:57:44:A3:15:2E:70:E2:0C:7B:16:5A:79:E5:4A:6E
            X509v3 Authority Key Identifier:
                keyid:83:2F:3B:A2:D4:A4:66:67:20:A0:47:85:F7:44:0B:A7:44:E9:06:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ab:33:ef:ad:4a:49:7c:30:cb:49:f9:4f:07:3a:92:b0:04:
         ab:19:13:2b:80:34:e2:5a:d4:a8:79:b7:00:37:ec:ba:45:c9:
         a6:eb:01:89:d1:9a:cf:25:5a:e7:50:5c:0d:60:6c:1d:01:4f:
         2d:89:1d:55:6e:ec:b2:08:a4:9d:c2:d1:ec:41:a4:22:06:2f:
         8f:eb:1a:1d:e6:93:5c:51:0c:50:2f:44:1e:2f:0b:4c:d9:27:
         61:80:b4:5d:d0:ff:59:b2:6f:57:3c:bc:3f:a9:1b:c1:12:ac:
         ac:20:02:9b:63:64:40:af:c2:5c:58:d5:dc:d4:55:3d:77:68:
         32:36:c7:40:71:72:3d:74:26:78:a6:92:3a:93:1c:14:f2:b9:
         31:2f:b6:06:24:f5:4d:8c:a6:6f:ac:51:b6:7f:07:32:12:33:
         98:0c:8a:29:16:e7:70:f3:ed:ca:5d:61:83:e6:ad:13:d9:f8:
         37:8d:98:7a:4e:54:e7:08:a3:7a:8c:9a:45:ad:c2:80:be:aa:
         21:b7:cc:5d:ad:6b:e9:33:23:60:df:2a:37:c0:b0:01:8e:9e:
         d2:70:09:77:24:01:ec:82:17:00:17:f3:f3:ca:44:33:88:cb:
         d1:19:f5:c3:ec:a8:d8:25:b5:5a:f0:a5:40:54:1f:26:d1:54:
         e1:71:11:3e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUG3eLwRa5iakFP6s7EUyhJ5L5xW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMyRjNCQTJENEE0NjY2NzIwQTA0Nzg1Rjc0NDBCQTc0
NEU5MDY2RDAeFw0yNjA5MTcwOTI1MjhaFw0yNjA5MTgxMzI1MjhaMDMxMTAvBgNV
BAMTKDI1QTJFOTE0RjA1NzQ0QTMxNTJFNzBFMjBDN0IxNjVBNzlFNTRBNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKpyZfR0mPuwqNCP7q3hzXzi4B
FayoI8BLU/KvmeRK40ugr/WoGMU7zzidrZXa4VbqQOH7IZBfQArn2mpa4Pb27d0w
aKMl4hpMsuGMguDifsZr5Q1UCsMITsHCmoS9/ni5Hw0aqcau0QKw9C2GaD73UJt2
3kHrgpNVWkVZPY3nY5jFAa4vE9Efwl2BIJC+Y/SRTgF3x8bLKuEqrCW9MKIzLQMR
wcTny3pjd9YXzIzawjLVs7fp7sjq9QoXEGgy6mnISv1TD1il3svXG1wIaPLXJ4gV
ZxxV49Ylp8hojHuMExl9Ev6C1+iHYZUDvdX3va2qP1/IaR8zkB5OIku6CPo5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJaLpFPBXRKMVLnDiDHsWWnnlSm4wHwYDVR0j
BBgwFoAUgy87otSkZmcgoEeF90QLp0TpBm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjBlNGNhNTQtODU3Yi00ZjY4LWFiNWYtMGQ4YzQ3MmU2YzkyLzAvODMyRjNCQTJE
NEE0NjY2NzIwQTA0Nzg1Rjc0NDBCQTc0NEU5MDY2RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MzJGM0JBMkQ0QTQ2NjY3MjBBMDQ3ODVGNzQ0MEJBNzQ0RTkw
NjZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBlNGNhNTQtODU3Yi00ZjY4LWFi
NWYtMGQ4YzQ3MmU2YzkyLzAvODMyRjNCQTJENEE0NjY2NzIwQTA0Nzg1Rjc0NDBC
QTc0NEU5MDY2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADWrM++tSkl8MMtJ+U8HOpKwBKsZEyuANOJa
1Kh5twA37LpFyabrAYnRms8lWudQXA1gbB0BTy2JHVVu7LIIpJ3C0exBpCIGL4/r
Gh3mk1xRDFAvRB4vC0zZJ2GAtF3Q/1myb1c8vD+pG8ESrKwgAptjZECvwlxY1dzU
VT13aDI2x0Bxcj10JnimkjqTHBTyuTEvtgYk9U2Mpm+sUbZ/BzISM5gMiikW53Dz
7cpdYYPmrRPZ+DeNmHpOVOcIo3qMmkWtwoC+qiG3zF2ta+kzI2DfKjfAsAGOntJw
CXckAeyCFwAX8/PKRDOIy9EZ9cPsqNgltVrwpUBUHybRVOFxET4=
-----END CERTIFICATE-----
Generated at Thu Sep 17 14:40:15 2026 by rpki-client