Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
File:                     1B06933632B5A267F98A1716F3CB78EA840D6E65.mft (raw, json)
Hash identifier:          ka0x2YcV/cPvZxqC+y3cryQKiAgY7XBRzmtwCZdNymc=
Subject key identifier:   D9:99:24:76:AD:6D:B8:07:3E:CC:6B:3C:07:FD:6A:75:86:2B:9A:BB
Authority key identifier: 1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65
Certificate issuer:       /CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
Certificate serial:       30FB860DA0573C4613EF89757A546747EA248533
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
Manifest number:          A2
Signing time:             Mon 31 Aug 2026 13:30:41 +0000
Manifest this update:     Mon 31 Aug 2026 13:25:41 +0000
Manifest next update:     Tue 01 Sep 2026 16:39:41 +0000
Files and hashes:         1: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (hash: 0VVs/sIJ5MrPj5d4PmHdMp47XW+kiXnvAYhD29LsMwA=)
                          2: 1B06933632B5A267F98A1716F3CB78EA840D6E65.crl (hash: 732lg96K4mPdDF2pQg8m1eyevifTzQ4Ww9RoRb7zp7w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl
                          rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 16:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fb:86:0d:a0:57:3c:46:13:ef:89:75:7a:54:67:47:ea:24:85:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
        Validity
            Not Before: Aug 31 13:25:41 2026 GMT
            Not After : Sep  1 16:39:41 2026 GMT
        Subject: CN=D9992476AD6DB8073ECC6B3C07FD6A75862B9ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:f1:7e:76:51:ea:d6:15:e0:ca:cd:fc:49:
                    ec:3b:4a:85:96:3d:21:97:e8:9b:30:f3:d9:87:58:
                    b3:2c:ec:11:4e:f7:17:1c:57:ba:20:78:6c:79:a2:
                    65:15:16:03:22:61:70:1a:5b:c0:15:c4:26:db:ae:
                    08:55:a6:c6:08:5f:1a:ba:23:3c:f2:fb:47:69:36:
                    8b:1c:6c:74:eb:ca:ff:ea:44:83:b9:c4:7a:45:16:
                    14:c0:70:db:75:88:1c:5f:8b:f9:d0:3a:c0:01:16:
                    4d:c4:0c:ee:84:3a:dc:7e:8c:b3:88:37:a8:18:b2:
                    f4:28:46:98:ad:f6:1a:9c:13:47:bb:38:54:8d:6b:
                    4e:1b:5e:99:88:00:70:c1:e2:93:88:c2:f0:eb:9c:
                    ef:53:ef:6a:86:39:3d:b5:1b:08:ad:ea:80:9b:21:
                    c6:e3:bd:f4:c4:f6:39:f3:4d:3a:f4:cb:b6:00:8c:
                    da:52:49:57:9f:62:e5:34:be:15:71:82:da:05:91:
                    34:da:b9:7a:20:8e:8b:b0:d1:b7:31:2c:3f:dc:10:
                    fc:89:e3:f9:28:15:c8:f3:d2:a5:07:d7:fa:31:04:
                    5d:4b:7d:3a:cb:45:2a:11:6b:fe:ea:61:4a:5e:fe:
                    69:65:83:92:9c:4d:c9:cf:e4:a5:da:fc:4a:ca:c7:
                    b7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:99:24:76:AD:6D:B8:07:3E:CC:6B:3C:07:FD:6A:75:86:2B:9A:BB
            X509v3 Authority Key Identifier:
                keyid:1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:35:ab:be:d3:1f:25:f2:ed:c9:ed:7f:44:6a:d6:db:a4:4f:
         9e:b0:28:d5:3b:34:06:d5:a1:47:13:57:17:20:64:01:65:13:
         de:84:d2:90:bd:fb:bc:61:ee:28:c7:61:3f:e4:e5:39:f6:30:
         b3:e8:11:10:9d:56:a6:5b:b1:95:2e:67:3b:32:5d:f5:7e:cb:
         f7:bc:f0:33:be:a4:74:91:34:66:fc:46:1f:74:9c:87:7f:35:
         bc:a4:8d:b5:d3:c1:68:4e:1b:8a:53:9c:6b:7a:8c:66:9f:9c:
         e9:80:9b:6e:cf:45:fc:67:b6:0c:a2:4c:67:36:2e:4f:a0:05:
         00:19:e6:aa:d5:ee:e1:31:af:7f:48:ca:b9:02:e6:91:52:c7:
         68:5c:05:7f:68:f7:51:1b:87:cc:d6:64:53:b1:98:2f:83:ed:
         ba:f0:36:aa:77:20:d4:ec:ff:0f:6a:07:30:31:53:7e:84:45:
         51:37:13:eb:80:9d:13:1d:bf:7d:dc:a2:26:d2:5a:5c:4c:97:
         57:3e:48:98:1d:19:e6:c1:a3:55:f9:db:16:a3:7b:cd:a6:45:
         cc:92:1c:50:c3:20:3d:e4:32:04:eb:d9:61:3c:8e:c7:a2:e0:
         21:1f:31:ab:45:28:99:a4:e0:3a:1e:a3:c1:c5:07:0c:b4:30:
         1d:a4:ef:0e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMPuGDaBXPEYT74l1elRnR+okhTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIwNjkzMzYzMkI1QTI2N0Y5OEExNzE2RjNDQjc4RUE4
NDBENkU2NTAeFw0yNjA4MzExMzI1NDFaFw0yNjA5MDExNjM5NDFaMDMxMTAvBgNV
BAMTKEQ5OTkyNDc2QUQ2REI4MDczRUNDNkIzQzA3RkQ2QTc1ODYyQjlBQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHPF+dlHq1hXgys38Sew7SoWW
PSGX6Jsw89mHWLMs7BFO9xccV7ogeGx5omUVFgMiYXAaW8AVxCbbrghVpsYIXxq6
Izzy+0dpNoscbHTryv/qRIO5xHpFFhTAcNt1iBxfi/nQOsABFk3EDO6EOtx+jLOI
N6gYsvQoRpit9hqcE0e7OFSNa04bXpmIAHDB4pOIwvDrnO9T72qGOT21Gwit6oCb
IcbjvfTE9jnzTTr0y7YAjNpSSVefYuU0vhVxgtoFkTTauXogjouw0bcxLD/cEPyJ
4/koFcjz0qUH1/oxBF1LfTrLRSoRa/7qYUpe/mllg5KcTcnP5KXa/ErKx7eFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2Zkkdq1tuAc+zGs8B/1qdYYrmrswHwYDVR0j
BBgwFoAUGwaTNjK1omf5ihcW88t46oQNbmUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWNlNmFjMDEtOGVhYy00NmM1LTk0NjktMzVlZmEzNjA5OWZkLzAvMUIwNjkzMzYz
MkI1QTI2N0Y5OEExNzE2RjNDQjc4RUE4NDBENkU2NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xQjA2OTMzNjMyQjVBMjY3Rjk4QTE3MTZGM0NCNzhFQTg0MEQ2
RTY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNlNmFjMDEtOGVhYy00NmM1LTk0
NjktMzVlZmEzNjA5OWZkLzAvMUIwNjkzMzYzMkI1QTI2N0Y5OEExNzE2RjNDQjc4
RUE4NDBENkU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGk1q77THyXy7cntf0Rq1tukT56wKNU7NAbV
oUcTVxcgZAFlE96E0pC9+7xh7ijHYT/k5Tn2MLPoERCdVqZbsZUuZzsyXfV+y/e8
8DO+pHSRNGb8Rh90nId/NbykjbXTwWhOG4pTnGt6jGafnOmAm27PRfxntgyiTGc2
Lk+gBQAZ5qrV7uExr39IyrkC5pFSx2hcBX9o91Ebh8zWZFOxmC+D7brwNqp3INTs
/w9qBzAxU36ERVE3E+uAnRMdv33coibSWlxMl1c+SJgdGebBo1X52xaje82mRcyS
HFDDID3kMgTr2WE8jsei4CEfMatFKJmk4Doeo8HFBwy0MB2k7w4=
-----END CERTIFICATE-----
Generated at Tue Sep 1 06:22:13 2026 by rpki-client