Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
File:                     06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft (raw, json)
Hash identifier:          DGISGQro554pBv/Mk1qsZN/Q2rngPIYv72PlnHJ2kdo=
Subject key identifier:   D0:BD:97:02:82:0C:A8:A8:47:01:47:07:06:9C:A9:B7:38:86:89:5F
Authority key identifier: 06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB
Certificate issuer:       /CN=A91862140000/serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
Certificate serial:       325A596974FF2B855D3DE04CD22FF7DA38E8C28A
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
Manifest number:          14FE
Signing time:             Sun 25 Oct 2026 12:57:47 +0000
Manifest this update:     Sun 25 Oct 2026 12:52:47 +0000
Manifest next update:     Mon 26 Oct 2026 14:31:47 +0000
Files and hashes:         1: 06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl (hash: Yhr/jQ5dRpLeCP0CGPQdefdRwfWTj/B09jAG1rbEJzs=)
                          2: 3137392e36352e3139322e302f31382d3234203d3e203435373030.roa (hash: vQ5Ek57nvyv8QSxJkPzmegP9NNy53tUJ+4K3JUiqzFY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 14:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5a:59:69:74:ff:2b:85:5d:3d:e0:4c:d2:2f:f7:da:38:e8:c2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
        Validity
            Not Before: Oct 25 12:52:47 2026 GMT
            Not After : Oct 26 14:31:47 2026 GMT
        Subject: CN=D0BD9702820CA8A847014707069CA9B73886895F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:c0:16:f2:b4:92:d3:96:dd:57:35:7f:4e:
                    70:ba:c1:c4:a7:61:87:12:37:24:94:83:7a:78:e6:
                    69:b9:4a:ad:d1:02:35:c9:24:81:9d:79:a6:55:55:
                    7e:76:0f:b4:1a:52:86:3b:2f:f5:41:08:df:65:1a:
                    ec:91:53:02:3e:ce:52:da:5f:0d:d7:a0:27:b5:14:
                    10:28:c5:41:08:8d:b6:c5:8e:4a:98:e5:08:30:1a:
                    7f:8e:6a:3d:f6:5e:c8:f6:55:3b:02:41:7e:e3:68:
                    15:68:dd:9c:fe:52:9a:17:59:70:87:93:08:2a:ea:
                    c1:37:1f:8f:c0:c0:a1:df:87:de:b7:ff:9f:3d:75:
                    40:13:d9:78:e4:57:3c:e7:9b:26:cd:3d:af:45:45:
                    fb:58:c5:49:7c:28:04:b1:b6:81:a9:75:3f:60:b9:
                    31:70:c7:9a:83:23:f9:b2:71:bc:5c:6c:a0:a8:0b:
                    a6:af:0a:9a:af:2c:0f:94:42:55:25:c8:ad:ee:1c:
                    51:b4:2e:ff:37:83:af:70:d8:81:e8:df:24:d5:f9:
                    96:f2:74:67:05:38:3f:56:5c:5f:7e:73:1a:2e:f7:
                    7b:6e:ef:fc:04:63:d2:23:8f:0c:d1:9e:e6:4d:6b:
                    b7:2b:02:cf:da:00:eb:98:58:a2:8d:ad:12:b1:f8:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BD:97:02:82:0C:A8:A8:47:01:47:07:06:9C:A9:B7:38:86:89:5F
            X509v3 Authority Key Identifier:
                keyid:06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:37:d3:57:63:35:87:a0:5b:5c:f8:62:2f:29:4e:fb:aa:d3:
         ed:c6:49:f0:ec:af:31:88:12:34:b4:07:6d:7b:b3:0a:e6:cf:
         0d:d0:c9:c5:28:06:ef:aa:1a:2d:d6:ce:7c:f0:f9:d7:95:08:
         18:d8:de:6b:48:05:a4:07:90:7e:20:df:dd:ea:97:9f:14:4d:
         dc:f6:5b:64:1a:e6:25:60:19:d6:3a:8a:68:4c:4e:2c:f2:a4:
         95:7a:a0:5a:7b:e6:1c:e2:09:7b:40:e9:89:6b:1a:09:db:0b:
         24:40:49:4a:ce:d9:cc:6a:3c:3d:43:e5:1c:4e:be:af:d1:3f:
         91:71:f2:b2:5d:6e:cf:a4:96:88:ee:7f:ed:84:e4:01:eb:d3:
         63:f4:b2:97:8b:99:93:47:77:5e:0f:9b:ec:4a:c3:48:89:c4:
         7e:df:a9:d8:c1:d1:bd:8e:59:9e:b2:ee:55:11:dc:56:7d:d1:
         11:e1:29:43:21:7e:cb:2e:8e:13:95:23:56:79:08:19:66:70:
         12:cc:7b:fa:20:3a:c6:78:8f:f2:35:5b:a2:03:f6:a9:67:a7:
         09:15:42:f0:7e:4a:62:15:77:d6:9c:c4:33:a9:9e:bf:08:7b:
         ca:88:e4:86:70:dd:01:24:05:57:90:9d:4a:c7:5f:2b:65:18:
         02:52:99:6e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUMlpZaXT/K4VdPeBM0i/32jjowoowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygwNkY0QjJEQjg0
QjM4NzAyQjVGM0E5MkE3ODkyNTVEOUNGRUYzRUVCMB4XDTI2MTAyNTEyNTI0N1oX
DTI2MTAyNjE0MzE0N1owMzExMC8GA1UEAxMoRDBCRDk3MDI4MjBDQThBODQ3MDE0
NzA3MDY5Q0E5QjczODg2ODk1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALbDwBbytJLTlt1XNX9OcLrBxKdhhxI3JJSDenjmablKrdECNckkgZ15plVV
fnYPtBpShjsv9UEI32Ua7JFTAj7OUtpfDdegJ7UUECjFQQiNtsWOSpjlCDAaf45q
PfZeyPZVOwJBfuNoFWjdnP5SmhdZcIeTCCrqwTcfj8DAod+H3rf/nz11QBPZeORX
POebJs09r0VF+1jFSXwoBLG2gal1P2C5MXDHmoMj+bJxvFxsoKgLpq8Kmq8sD5RC
VSXIre4cUbQu/zeDr3DYgejfJNX5lvJ0ZwU4P1ZcX35zGi73e27v/ARj0iOPDNGe
5k1rtysCz9oA65hYoo2tErH4uw0CAwEAAaOCAgUwggIBMB0GA1UdDgQWBBTQvZcC
ggyoqEcBRwcGnKm3OIaJXzAfBgNVHSMEGDAWgBQG9LLbhLOHArXzqSp4klXZz+8+
6zAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzIvMDZGNEIyREI4NEIzODcwMkI1
RjNBOTJBNzg5MjU1RDlDRkVGM0VFQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJF
QTYxRDY2MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvQnZTeTI0U3pod0sxODZrcWVKSlYy
Y192UHVzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8yLzA2RjRCMkRCODRCMzg3
MDJCNUYzQTkyQTc4OTI1NUQ5Q0ZFRjNFRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCN9NXYzWHoFtc
+GIvKU77qtPtxknw7K8xiBI0tAdte7MK5s8N0MnFKAbvqhot1s588PnXlQgY2N5r
SAWkB5B+IN/d6pefFE3c9ltkGuYlYBnWOopoTE4s8qSVeqBae+Yc4gl7QOmJaxoJ
2wskQElKztnMajw9Q+UcTr6v0T+RcfKyXW7PpJaI7n/thOQB69Nj9LKXi5mTR3de
D5vsSsNIicR+36nYwdG9jlmesu5VEdxWfdER4SlDIX7LLo4TlSNWeQgZZnASzHv6
IDrGeI/yNVuiA/apZ6cJFULwfkpiFXfWnMQzqZ6/CHvKiOSGcN0BJAVXkJ1Kx18r
ZRgCUplu
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:37:58 2026 by rpki-client