Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft
File:                     96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft (raw, json)
Hash identifier:          NQ+LoEerovehgHTS5Zm+Po+IDyNQl9xi3zt7XFF/LUs=
Subject key identifier:   36:BC:05:0B:0B:DE:6A:05:91:80:8D:7B:0E:39:B4:3F:93:8D:E2:1A
Authority key identifier: 96:B1:BF:67:FA:7B:CA:2D:9A:78:22:6A:A8:97:C7:60:C9:E4:5B:8A
Certificate issuer:       /CN=96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A
Certificate serial:       0DCFA16A59A3753D7D835A8C3F02D8057FD93FEF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft
Manifest number:          FA
Signing time:             Wed 04 Nov 2026 06:31:16 +0000
Manifest this update:     Wed 04 Nov 2026 06:26:16 +0000
Manifest next update:     Thu 05 Nov 2026 07:52:16 +0000
Files and hashes:         1: 96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl (hash: /qBwGwJRhpzMVTgd4XbIKN0tsN9bkyLilKYr6ZyS00I=)
                          2: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: /hb9w6eiZKH4CNjyXoKoeSUik7C0W1MiXzGBdpGuKK8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl
                          rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 05:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:cf:a1:6a:59:a3:75:3d:7d:83:5a:8c:3f:02:d8:05:7f:d9:3f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A
        Validity
            Not Before: Nov  4 06:26:16 2026 GMT
            Not After : Nov  5 07:52:16 2026 GMT
        Subject: CN=36BC050B0BDE6A0591808D7B0E39B43F938DE21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f4:4a:38:9c:71:7c:e7:4f:b9:b9:4d:33:93:
                    a8:87:2e:f0:e1:6f:db:01:8f:06:d7:be:f8:92:94:
                    0b:a8:4e:8c:b2:6f:5a:c1:46:64:7b:e4:14:08:42:
                    6c:bd:d0:97:88:11:67:bc:8a:ff:b7:fa:8d:97:25:
                    63:50:ad:b3:fa:8e:40:b6:5f:29:9a:20:73:14:df:
                    f3:82:04:4d:10:6f:ca:7e:a7:bc:ae:c4:09:79:61:
                    be:11:ae:f1:f6:fe:e2:e1:11:2d:cb:51:36:fe:2c:
                    1a:68:bb:7d:c2:ee:f6:f7:fe:7c:5b:f7:29:a5:80:
                    de:c6:d4:11:94:83:5f:b4:95:e1:98:10:ce:90:a7:
                    bd:7e:01:bf:80:4f:3e:08:9b:36:db:21:d3:e7:d7:
                    21:4a:16:12:2d:35:49:73:82:8c:b1:d9:2f:64:d9:
                    1f:bc:c7:07:56:1c:93:bd:85:18:73:92:b1:73:20:
                    b6:1f:7a:b5:d1:70:c9:f5:55:85:8c:3b:42:d4:20:
                    bf:b2:53:1d:6c:33:1c:08:78:a6:2c:2a:1c:46:94:
                    3e:a5:6a:82:9a:20:55:e2:29:c5:d9:e5:9d:6b:7d:
                    cd:87:33:03:fa:7d:e6:61:1a:60:12:13:a9:44:af:
                    fb:13:79:c0:96:65:08:4c:bf:76:2f:f3:07:79:86:
                    06:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BC:05:0B:0B:DE:6A:05:91:80:8D:7B:0E:39:B4:3F:93:8D:E2:1A
            X509v3 Authority Key Identifier:
                keyid:96:B1:BF:67:FA:7B:CA:2D:9A:78:22:6A:A8:97:C7:60:C9:E4:5B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/96B1BF67FA7BCA2D9A78226AA897C760C9E45B8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:77:d0:f1:97:91:9c:8d:5d:f6:80:fa:19:7e:59:6a:1e:fb:
         09:92:7d:77:cf:28:53:45:b3:92:92:fa:df:df:a6:f1:23:b4:
         0a:c2:24:56:e9:55:44:a2:b8:35:c0:69:d4:b2:94:d2:a8:d9:
         d2:cb:c5:1a:94:cb:50:02:9a:4e:da:78:6a:78:3f:cf:f2:d3:
         9f:8f:2b:ce:bf:46:a4:96:e6:9f:63:b5:b7:c3:d2:66:4c:6e:
         05:ce:5b:a7:53:b1:68:fa:f3:01:39:08:e3:24:4a:51:68:95:
         54:62:63:5b:7d:6f:1b:bf:e2:17:07:73:21:5b:45:84:da:b9:
         8b:c7:f4:7f:fe:8f:b1:03:7c:0d:b4:1c:54:20:42:58:41:72:
         ec:d1:c0:32:0e:cf:c9:e0:99:8d:db:1d:2c:2f:db:f5:d5:65:
         cf:a6:17:71:39:fd:e3:bb:d3:6b:91:6c:65:4a:52:fc:d8:36:
         62:a2:82:d9:51:5e:b8:ba:38:32:2d:14:c6:9e:07:33:09:f7:
         a0:bb:29:c0:29:30:21:c2:0e:ee:e1:2e:9e:74:e1:41:61:61:
         c6:dd:89:2c:86:68:ab:f9:82:3d:7d:95:d4:61:1b:59:f2:8a:
         c1:2d:e0:78:f8:fc:30:74:76:43:cd:eb:2e:f7:64:2a:1d:58:
         f4:97:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 09:33:18 2026 by rpki-client