Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
File:                     96A5BEF01619313B13000152FF7D9849B080E6AD.mft (raw, json)
Hash identifier:          6JnwuPVXTt8dKGcSzPjuqHx+JHgMMEVoRFUJOwdyaR8=
Subject key identifier:   70:96:4B:75:D7:B8:B7:DF:98:77:96:12:AD:F5:98:58:C4:47:23:DE
Authority key identifier: 96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD
Certificate issuer:       /CN=96A5BEF01619313B13000152FF7D9849B080E6AD
Certificate serial:       0C724241EE52379E4F6F7CFA348725E63F186E8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 06:19:51 +0000
Manifest this update:     Thu 18 Jun 2026 06:14:51 +0000
Manifest next update:     Fri 19 Jun 2026 06:52:51 +0000
Files and hashes:         1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: RDa+Zhnigfqo7biWFi13W+chpPOznuVZnbRPHv7vJrE=)
                          2: 96A5BEF01619313B13000152FF7D9849B080E6AD.crl (hash: KDyvr4ynMVpWy2jI8KU1/IuA66K1l7Fg0E7jd1vX+B8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl
                          rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 06:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:72:42:41:ee:52:37:9e:4f:6f:7c:fa:34:87:25:e6:3f:18:6e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A5BEF01619313B13000152FF7D9849B080E6AD
        Validity
            Not Before: Jun 18 06:14:51 2026 GMT
            Not After : Jun 19 06:52:51 2026 GMT
        Subject: CN=70964B75D7B8B7DF98779612ADF59858C44723DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:1f:37:92:cc:04:59:c5:84:ab:cf:9d:67:
                    99:f6:57:84:f1:6c:44:bb:d0:46:bf:21:7a:b9:21:
                    57:5c:26:15:13:00:29:94:a4:56:b0:c7:ad:35:50:
                    3c:c8:a7:57:ea:e7:64:66:c5:40:47:74:01:0f:f2:
                    6f:61:09:5a:30:da:8f:e6:c9:99:f5:19:f2:22:46:
                    a5:3a:ec:37:e0:01:1a:28:58:58:fa:46:b9:61:c8:
                    f2:87:b7:17:e5:99:b9:b7:11:7f:18:eb:69:d7:37:
                    a1:fe:79:9c:78:67:ce:b5:66:a6:36:f8:76:f5:c9:
                    03:15:f7:72:98:97:f8:87:c8:20:12:3c:e3:84:4f:
                    ec:92:bd:6d:d9:a2:02:32:03:ff:0d:d2:32:96:95:
                    9f:cb:22:79:24:51:12:b6:55:92:74:cd:9c:67:85:
                    da:53:e5:9f:21:95:33:a7:48:98:c8:d1:23:28:2a:
                    70:a9:7c:e0:21:1f:46:7f:09:19:7d:1d:36:df:b5:
                    dc:18:0c:d7:d1:7d:eb:d0:28:96:00:a3:80:38:f0:
                    8c:3d:d5:e2:d9:e6:27:0b:20:8f:99:95:47:46:aa:
                    6c:1e:e8:22:b2:17:ce:94:ea:52:9d:e9:2c:10:af:
                    63:f9:fb:ad:19:50:ac:c9:cf:02:a5:ca:5b:19:8c:
                    20:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:96:4B:75:D7:B8:B7:DF:98:77:96:12:AD:F5:98:58:C4:47:23:DE
            X509v3 Authority Key Identifier:
                keyid:96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:47:ee:7d:16:26:c2:82:5c:94:2e:11:f1:97:81:e9:32:55:
         57:cf:37:3e:c4:f9:3c:9f:a2:ef:7e:79:b8:16:05:f0:70:3f:
         12:d9:1c:7f:1b:c2:e1:35:e8:19:07:79:e7:e7:e6:42:09:70:
         ce:ea:7b:64:a3:bc:f7:d7:e0:72:14:59:aa:1d:4a:43:2f:51:
         35:36:a2:c6:c8:e7:9a:26:b9:9f:6d:64:9e:1e:36:38:ef:78:
         15:12:29:59:5c:6c:d1:19:5a:a4:1d:2e:4d:ae:aa:ca:d1:fa:
         49:c7:e0:df:df:f1:e8:9c:6d:f8:d6:f1:82:b5:ea:31:8f:83:
         2f:ea:bf:63:e8:41:08:2b:fe:37:11:6f:5c:9a:26:44:42:66:
         dd:57:49:b9:0b:b5:53:db:93:61:af:d7:97:2d:29:45:f4:a9:
         39:4b:52:98:98:83:d3:52:eb:42:99:0b:e3:a1:3f:5f:d1:79:
         5d:6d:38:3a:c5:27:d6:06:b9:6e:1a:e8:a4:3e:c8:d4:2d:6b:
         ab:b6:71:98:e0:54:40:f0:5e:1a:9a:22:09:28:5f:ff:27:8b:
         13:e1:87:df:04:e7:e6:27:2c:95:99:58:6e:66:43:35:68:21:
         b4:56:8b:9f:1a:66:fa:52:a9:de:7f:b7:ba:87:8d:88:53:9b:
         2b:e1:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 19:09:18 2026 by rpki-client