Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft
File:                     96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft (raw, json)
Hash identifier:          ah7vIO4ccrzE0teKsynG/87pyPi1/fY5c8wiVKNdjuo=
Subject key identifier:   FC:32:11:64:BC:C3:88:59:7E:87:C2:C5:F6:D8:B1:87:94:33:10:4C
Authority key identifier: 96:B0:F0:7C:EC:87:D3:9F:E6:D6:CF:02:77:10:9E:0C:46:B5:0F:65
Certificate issuer:       /CN=96B0F07CEC87D39FE6D6CF0277109E0C46B50F65
Certificate serial:       3789DB3A7DA2A617D31276E4FDF37DCC9DF5D65E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft
Manifest number:          2C
Signing time:             Tue 02 Jun 2026 19:44:00 +0000
Manifest this update:     Tue 02 Jun 2026 19:39:00 +0000
Manifest next update:     Wed 03 Jun 2026 20:41:00 +0000
Files and hashes:         1: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: qwEnHxrWVyiK94N8U1nG/pG5hFflP0C0qwS5eIrzLng=)
                          2: 96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl (hash: vgxOgB+I1+W+oHx1FBfCxC5ER6c+hQuLBHe7/qbk0MA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl
                          rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 20:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:89:db:3a:7d:a2:a6:17:d3:12:76:e4:fd:f3:7d:cc:9d:f5:d6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B0F07CEC87D39FE6D6CF0277109E0C46B50F65
        Validity
            Not Before: Jun  2 19:39:00 2026 GMT
            Not After : Jun  3 20:41:00 2026 GMT
        Subject: CN=FC321164BCC388597E87C2C5F6D8B1879433104C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:a0:7a:5d:9a:e1:93:f4:5e:32:02:e0:da:
                    b9:dc:f1:51:0b:77:71:7f:89:de:55:2f:07:37:38:
                    82:93:a9:ba:3c:b9:91:3b:ee:e2:8c:5c:d8:52:43:
                    4c:13:88:3c:f3:15:92:3c:bb:0a:59:4b:c4:4d:f8:
                    e6:dc:c2:87:3f:b8:4b:78:1c:c7:99:b7:ae:1d:ad:
                    31:07:b7:95:b3:26:78:c7:c9:20:12:57:50:a4:ca:
                    6c:ef:16:9e:8f:4d:fa:12:c1:20:b9:b3:30:78:37:
                    65:03:53:e3:11:ad:92:07:f1:8c:3b:71:53:e1:b5:
                    01:57:5f:49:6d:62:16:bd:5a:e8:9e:d1:13:be:22:
                    bd:43:0d:e1:31:f8:e3:73:a5:03:63:e6:a4:f2:f0:
                    3c:84:ed:71:d1:b9:28:02:17:3c:a7:dd:e3:75:e4:
                    bb:86:b0:98:2f:7a:a6:76:8d:8f:cb:f7:2c:84:98:
                    25:5c:0a:bd:a2:56:6b:aa:29:21:44:ae:fc:69:2b:
                    af:57:0f:03:48:52:a6:b6:73:04:b4:ac:28:77:ca:
                    a0:d8:db:89:b5:e2:8c:aa:5c:29:6d:bd:a1:3b:80:
                    09:29:22:e3:f1:a2:0a:22:dd:34:f8:10:9b:8c:3d:
                    2d:68:6d:40:d5:40:d0:a5:8b:99:97:1f:98:9e:18:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:32:11:64:BC:C3:88:59:7E:87:C2:C5:F6:D8:B1:87:94:33:10:4C
            X509v3 Authority Key Identifier:
                keyid:96:B0:F0:7C:EC:87:D3:9F:E6:D6:CF:02:77:10:9E:0C:46:B5:0F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/96B0F07CEC87D39FE6D6CF0277109E0C46B50F65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6d:a5:29:96:a7:8b:a0:db:4c:97:7b:45:62:69:72:a2:a3:
         7a:c4:04:e9:d9:f6:38:68:04:49:33:7c:57:38:81:e0:7c:3d:
         35:e8:4e:23:2f:a9:dc:1f:78:b2:12:66:ea:f3:80:83:ed:32:
         8d:49:a0:24:9b:47:16:d7:fb:53:53:55:20:09:9b:6c:e1:cd:
         1d:17:f2:82:7b:0c:bf:b4:72:49:dd:8e:58:2f:0d:a2:d2:5c:
         a1:5b:66:db:1c:03:e6:fb:15:15:28:7e:a0:ea:c5:53:d3:28:
         b1:cc:ba:3d:9e:0f:77:09:b2:7c:54:07:7f:29:95:cb:07:55:
         b5:3d:0d:c0:08:22:ca:1a:4b:aa:ce:ff:e2:d2:b8:8b:2d:aa:
         b6:d9:ab:18:97:22:14:f6:03:a6:2e:92:da:d1:ac:1a:2a:ab:
         ad:7f:40:ca:2f:a7:7e:41:6f:da:f6:68:ea:53:5e:99:e2:14:
         9c:71:93:5d:ca:93:0e:5f:7b:63:aa:25:f5:ad:e5:65:3c:9c:
         ca:94:8a:b1:06:9b:a5:0b:52:81:2c:09:be:08:a9:a2:1b:07:
         d0:e2:ac:70:cb:80:58:c7:8c:26:ec:1f:93:a8:78:a0:b9:e3:
         65:d7:b5:e7:db:57:85:44:ef:c0:50:7a:ae:6e:0b:2b:5f:b4:
         0c:ee:5f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:12:17 2026 by rpki-client