Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
File:                     96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json)
Hash identifier:          bVO+aaqrVzqiYpWR80MA80BpukGvqZslGwQSDsDWHxQ=
Subject key identifier:   2F:C7:23:B9:41:05:F7:42:0F:3B:2B:C0:32:36:21:D2:D1:F9:38:A7
Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9
Certificate issuer:       /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9
Certificate serial:       48860C07FC272F571D7A6D3CD6AC82B288D5D94C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
Manifest number:          0205
Signing time:             Thu 16 Apr 2026 14:51:31 +0000
Manifest this update:     Thu 16 Apr 2026 14:46:31 +0000
Manifest next update:     Sun 19 Apr 2026 21:29:31 +0000
Files and hashes:         1: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: wlFQ0Mhp/1XnwwUvAj+JZIZYp8c/czLKraMQXNmD1R0=)
                          2: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: IcwSV1+ysXFFRPLvvbLmgJZdnaDv3MbwibJNTgfkyW4=)
                          3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d/oqyDi4sv5f7bgdGzOv2LunD1qLNy94sxilYJ9cVe0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl
                          rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 21:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:86:0c:07:fc:27:2f:57:1d:7a:6d:3c:d6:ac:82:b2:88:d5:d9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9
        Validity
            Not Before: Apr 16 14:46:31 2026 GMT
            Not After : Apr 19 21:29:31 2026 GMT
        Subject: CN=2FC723B94105F7420F3B2BC0323621D2D1F938A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:6d:b0:70:d5:4f:2c:43:fe:ce:0b:ab:8e:
                    6f:f3:9a:6b:05:15:08:bc:c5:8a:1a:4f:f0:13:d4:
                    3d:18:84:78:28:ca:f3:7c:39:5b:6a:ce:86:36:71:
                    31:99:70:fb:00:a6:fc:74:ac:7a:03:78:b4:34:aa:
                    19:8f:fd:cf:54:3b:64:f6:76:b4:c8:19:dc:72:1e:
                    2d:97:51:0f:d9:91:29:f8:7b:4e:e5:74:22:80:5d:
                    22:b7:76:de:ac:3c:60:d7:b6:e8:ed:6d:2f:6f:06:
                    4e:a0:66:f9:3c:08:33:fe:a3:5a:e0:84:8c:7e:1f:
                    96:6b:76:20:e8:68:c0:23:1a:0e:93:89:d2:67:fb:
                    1f:9b:2d:a8:59:78:d5:e6:e0:7c:9f:87:38:5c:bf:
                    4a:2b:db:d2:ca:d3:7a:cf:ee:25:3b:e2:8d:a1:ce:
                    a7:98:da:e9:13:e3:60:35:3d:4f:d9:76:e5:40:c4:
                    86:03:a3:25:c5:b4:77:ba:e7:d5:0c:a4:9c:b3:91:
                    f4:b3:a8:8a:5c:30:f9:93:8d:14:84:61:3e:27:e3:
                    52:81:ae:4c:cf:e2:d6:57:c8:d6:9c:68:0e:b3:b8:
                    b5:a2:f8:e9:cc:1c:c2:41:72:d0:db:49:bf:bc:31:
                    cf:81:ff:0f:c5:e2:ff:af:2f:1f:14:ca:a4:be:87:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C7:23:B9:41:05:F7:42:0F:3B:2B:C0:32:36:21:D2:D1:F9:38:A7
            X509v3 Authority Key Identifier:
                keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5e:21:30:17:2f:5d:53:12:7d:45:9f:9e:03:c3:af:62:49:
         63:98:37:cd:84:fb:46:5e:b9:e1:bb:6f:ac:5e:4e:08:b9:ad:
         9e:98:9f:f8:da:37:9a:9b:a3:a1:bd:95:7c:e3:68:2a:fe:68:
         7f:35:9a:d5:7c:23:c2:da:fb:6e:2b:bd:13:a8:f4:4d:4e:96:
         6f:40:2b:8b:1e:a1:03:f2:d2:cd:16:89:b3:96:44:b4:d6:a3:
         50:60:72:bf:ff:8f:12:3e:8f:13:91:65:07:ec:28:a9:a1:2e:
         1f:c5:65:a0:97:cf:24:43:b1:81:15:32:89:ea:4b:75:0b:10:
         da:7c:5a:4b:17:a3:e2:31:1c:64:0b:18:c2:20:81:b4:24:bf:
         ca:60:ca:e9:23:2c:da:5f:ea:30:5c:24:6d:9e:2a:e2:c5:4b:
         93:de:83:df:07:0d:5b:a9:a6:65:3c:7e:b5:e0:e1:8f:78:c7:
         02:a8:ff:4f:d1:97:a4:49:46:08:af:11:49:a0:b9:3f:92:9b:
         ab:0f:b0:34:7b:e4:3d:e5:e9:2c:77:47:f0:20:16:0d:5a:04:
         fb:3f:c2:9b:b6:ed:a1:98:b9:bb:16:9c:af:0d:c1:a5:42:58:
         8c:cb:c6:0b:76:48:75:e7:0a:5e:da:be:1d:12:fa:e6:d9:1d:
         94:bd:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:09:13 2026 by rpki-client