Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
File:                     96FDA607CDE580764664CCDAA75B9ECDACB44700.mft (raw, json)
Hash identifier:          Z0PuP0Sw7G1OfjkFLBCPGqdhOLTXPDlBTOC3G+B8sHg=
Subject key identifier:   8B:4A:ED:45:42:5D:68:CC:7A:BC:3E:92:91:7E:5D:7D:C1:B9:55:0B
Authority key identifier: 96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00
Certificate issuer:       /CN=96FDA607CDE580764664CCDAA75B9ECDACB44700
Certificate serial:       57051BC4BAF6B1BC8A94C8642F9E4AE94E221230
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 21:36:11 +0000
Manifest this update:     Tue 02 Jun 2026 21:31:11 +0000
Manifest next update:     Wed 03 Jun 2026 23:13:11 +0000
Files and hashes:         1: 96FDA607CDE580764664CCDAA75B9ECDACB44700.crl (hash: /awHnDxVY67SW/yjESE6uhUSFhYEN1GypnSSYVASs5w=)
                          2: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: Xmk4AKXAk65syZMNokwtsrkCl9OG2CFthVNLs1MeEBs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl
                          rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 23:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:05:1b:c4:ba:f6:b1:bc:8a:94:c8:64:2f:9e:4a:e9:4e:22:12:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96FDA607CDE580764664CCDAA75B9ECDACB44700
        Validity
            Not Before: Jun  2 21:31:11 2026 GMT
            Not After : Jun  3 23:13:11 2026 GMT
        Subject: CN=8B4AED45425D68CC7ABC3E92917E5D7DC1B9550B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:52:7c:7b:16:ee:f7:a8:d4:10:a2:1e:8c:
                    94:8e:88:c9:02:f7:6c:8b:4f:d7:17:e7:b7:f4:a0:
                    c3:32:9b:8f:25:2c:42:24:cd:49:43:92:88:5b:a5:
                    4d:c7:ce:e9:00:9e:29:31:a3:a5:aa:41:90:34:28:
                    64:2f:a3:b8:14:ca:2c:08:a5:31:21:cc:4b:dc:31:
                    16:9a:fa:29:c1:03:f2:70:f4:17:a3:46:62:3e:5a:
                    82:cf:f4:9e:4e:89:e4:3e:ab:be:e3:05:d7:95:17:
                    6a:c3:00:5d:36:af:5a:b1:15:20:42:fe:7b:06:be:
                    ba:03:59:e8:f4:5d:e2:59:0b:43:7b:9e:21:46:14:
                    73:8c:45:5a:fc:f6:f7:d3:b6:a3:4f:4f:26:b7:f2:
                    a0:d3:60:46:07:1c:9d:12:e3:81:16:b3:a6:25:18:
                    ac:26:fe:e6:b1:00:a5:d0:e0:04:12:b2:54:d4:26:
                    1a:0e:4c:b7:cf:23:2c:51:dc:cc:93:95:3c:4e:22:
                    61:b0:13:65:27:c5:9d:6b:85:02:29:4a:df:60:e7:
                    86:a3:b3:ba:d4:76:27:ef:56:e1:7b:c3:6e:da:43:
                    fe:9a:6f:b5:94:1a:25:d4:c9:91:fd:16:52:a8:8f:
                    0f:50:6a:4a:ed:c3:f6:0d:a3:84:f7:34:04:35:87:
                    b3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:ED:45:42:5D:68:CC:7A:BC:3E:92:91:7E:5D:7D:C1:B9:55:0B
            X509v3 Authority Key Identifier:
                keyid:96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:db:ee:6d:42:25:32:66:c8:b4:82:c5:0d:d7:91:b0:b3:b8:
         88:46:47:27:fb:16:12:99:d7:0a:61:7d:30:58:fc:19:9b:9e:
         a8:85:35:70:73:c7:e4:3b:32:8c:a7:56:e2:3d:e5:6c:f3:5d:
         ca:32:77:6b:ea:f3:ff:aa:23:e2:f4:6f:ba:10:d6:7f:f8:f2:
         5b:2b:0a:69:28:fc:5f:0f:d7:88:b4:b2:84:04:e6:29:8f:b8:
         69:37:a7:56:5c:7e:6d:ed:5f:d1:48:0e:ee:ec:e7:02:3b:3c:
         83:a0:eb:d4:87:68:82:74:11:cd:b7:79:26:09:1e:10:4f:0d:
         e4:aa:86:6e:c9:2d:9e:f9:1e:a9:39:10:bd:9d:25:e3:c0:7e:
         4b:e8:4c:14:86:87:65:cc:c6:c6:53:c4:04:04:ee:69:7d:31:
         cc:a4:21:1e:df:29:68:52:35:9c:85:70:2d:72:51:e6:4c:37:
         1f:5d:d5:d8:0f:b4:06:5b:60:de:78:50:29:96:b6:82:1a:14:
         ed:c3:61:48:5e:34:03:e5:d5:08:fd:37:c0:e8:38:b2:e7:f4:
         ee:7f:07:6b:cd:37:d8:5d:c4:fd:b1:f2:b0:c3:16:05:7a:42:
         65:5b:84:33:30:a8:ef:a3:ab:08:35:27:fb:e1:b0:92:b0:75:
         1b:d6:ac:c1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVwUbxLr2sbyKlMhkL55K6U4iEjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGREE2MDdDREU1ODA3NjQ2NjRDQ0RBQTc1QjlFQ0RB
Q0I0NDcwMDAeFw0yNjA2MDIyMTMxMTFaFw0yNjA2MDMyMzEzMTFaMDMxMTAvBgNV
BAMTKDhCNEFFRDQ1NDI1RDY4Q0M3QUJDM0U5MjkxN0U1RDdEQzFCOTU1MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LVJ8exbu96jUEKIejJSOiMkC
92yLT9cX57f0oMMym48lLEIkzUlDkohbpU3HzukAnikxo6WqQZA0KGQvo7gUyiwI
pTEhzEvcMRaa+inBA/Jw9BejRmI+WoLP9J5OieQ+q77jBdeVF2rDAF02r1qxFSBC
/nsGvroDWej0XeJZC0N7niFGFHOMRVr89vfTtqNPTya38qDTYEYHHJ0S44EWs6Yl
GKwm/uaxAKXQ4AQSslTUJhoOTLfPIyxR3MyTlTxOImGwE2UnxZ1rhQIpSt9g54aj
s7rUdifvVuF7w27aQ/6ab7WUGiXUyZH9FlKojw9Qakrtw/YNo4T3NAQ1h7OZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUi0rtRUJdaMx6vD6SkX5dfcG5VQswHwYDVR0j
BBgwFoAUlv2mB83lgHZGZMzap1uezay0RwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YThmMjg1ZWYtMzQ1My00MTc5LWE1NTMtZjE5NTk3ZGU5ZGVkLzAvOTZGREE2MDdD
REU1ODA3NjQ2NjRDQ0RBQTc1QjlFQ0RBQ0I0NDcwMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NkZEQTYwN0NERTU4MDc2NDY2NENDREFBNzVCOUVDREFDQjQ0
NzAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThmMjg1ZWYtMzQ1My00MTc5LWE1
NTMtZjE5NTk3ZGU5ZGVkLzAvOTZGREE2MDdDREU1ODA3NjQ2NjRDQ0RBQTc1QjlF
Q0RBQ0I0NDcwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADvb7m1CJTJmyLSCxQ3XkbCzuIhGRyf7FhKZ
1wphfTBY/BmbnqiFNXBzx+Q7MoynVuI95WzzXcoyd2vq8/+qI+L0b7oQ1n/48lsr
Cmko/F8P14i0soQE5imPuGk3p1Zcfm3tX9FIDu7s5wI7PIOg69SHaIJ0Ec23eSYJ
HhBPDeSqhm7JLZ75Hqk5EL2dJePAfkvoTBSGh2XMxsZTxAQE7ml9McykIR7fKWhS
NZyFcC1yUeZMNx9d1dgPtAZbYN54UCmWtoIaFO3DYUheNAPl1Qj9N8DoOLLn9O5/
B2vNN9hdxP2x8rDDFgV6QmVbhDMwqO+jqwg1J/vhsJKwdRvWrME=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:02:31 2026 by rpki-client