Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
File:                     1B06933632B5A267F98A1716F3CB78EA840D6E65.mft (raw, json)
Hash identifier:          DAkgEp92VigXVA247ol3QH4BLuJlM0qEDpuo4etxVdY=
Subject key identifier:   06:C0:0C:D2:40:29:EA:EB:AA:0D:18:09:11:74:54:30:39:51:09:3F
Authority key identifier: 1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65
Certificate issuer:       /CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
Certificate serial:       246B0CC0CA39498A779F93D2DCC548F6E41A9BF3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
Manifest number:          D7
Signing time:             Sat 10 Oct 2026 11:31:31 +0000
Manifest this update:     Sat 10 Oct 2026 11:26:31 +0000
Manifest next update:     Sun 11 Oct 2026 13:57:31 +0000
Files and hashes:         1: 1B06933632B5A267F98A1716F3CB78EA840D6E65.crl (hash: ijhHn8EdwahqLtI0ZMrVJodTEU76Y6nNyUSNfO2gZ4w=)
                          2: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (hash: 0VVs/sIJ5MrPj5d4PmHdMp47XW+kiXnvAYhD29LsMwA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl
                          rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 04:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6b:0c:c0:ca:39:49:8a:77:9f:93:d2:dc:c5:48:f6:e4:1a:9b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
        Validity
            Not Before: Oct 10 11:26:31 2026 GMT
            Not After : Oct 11 13:57:31 2026 GMT
        Subject: CN=06C00CD24029EAEBAA0D1809117454303951093F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:1f:cd:da:5e:c6:5b:c7:d3:16:e8:4a:83:
                    5f:4e:76:ed:8c:c7:f5:ee:ee:95:14:39:ef:f6:86:
                    e3:46:04:14:8a:09:4e:2e:c5:e1:a2:1c:f4:48:90:
                    fe:47:33:94:7a:9a:87:3c:9c:7c:18:ce:4d:cc:a4:
                    0a:7e:ca:4a:b9:5f:a2:07:a1:f4:0a:80:e6:af:3d:
                    55:fa:42:9f:b3:6d:b0:ae:23:4c:be:45:d0:1d:14:
                    57:74:ce:d6:48:83:c0:22:d0:81:29:e3:7c:9a:a5:
                    59:3c:ce:65:4c:72:c6:71:06:f6:e9:29:59:ff:7b:
                    e8:aa:e3:91:7c:6f:7c:33:6b:f3:45:65:13:4b:ae:
                    c2:4e:26:46:3d:90:f3:a2:8b:aa:0f:21:b0:b3:51:
                    1a:8f:48:63:d9:be:50:eb:99:3c:6c:6a:a1:54:b8:
                    e9:6f:83:5b:28:35:17:27:b6:b3:64:e3:1f:86:49:
                    a2:9a:dd:f0:66:13:9f:5e:01:ed:ef:b7:41:79:e0:
                    9b:59:ab:ad:e6:c5:2d:ad:40:3b:01:b6:0f:42:d6:
                    38:a1:0f:2e:84:66:5c:37:e4:27:76:df:b0:5a:42:
                    04:3d:c6:e6:8a:9e:0f:d9:55:4e:2d:89:54:f1:f2:
                    76:d3:b8:69:22:3a:86:02:ab:c2:e1:e9:44:9d:a4:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C0:0C:D2:40:29:EA:EB:AA:0D:18:09:11:74:54:30:39:51:09:3F
            X509v3 Authority Key Identifier:
                keyid:1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:da:d3:f1:00:33:fe:aa:a0:c5:13:12:52:77:75:c3:10:27:
         a7:0d:28:38:53:21:de:72:b6:bc:89:eb:51:42:05:99:30:ce:
         4b:7b:8e:96:a6:a9:bd:cc:bb:90:eb:61:81:1d:96:b7:18:f1:
         a3:d7:8a:d0:31:43:15:f6:34:01:94:83:7d:76:dc:7c:7b:a1:
         ad:37:4d:15:1d:21:d2:e1:f4:49:73:8d:a4:4d:0e:b3:48:dd:
         8b:d3:69:93:17:81:b6:e3:8a:b0:f2:95:ff:b6:eb:89:60:57:
         30:37:9e:14:ce:d7:6f:d1:fe:1b:82:98:0e:82:77:12:8b:c9:
         b4:cb:01:a1:2a:b8:d0:3d:e2:2a:43:09:17:eb:bf:84:86:54:
         d8:fd:d7:3c:19:4b:98:10:d4:d6:d2:87:94:f8:c3:1f:c4:ef:
         2c:e6:13:77:43:6a:43:e5:80:37:ad:9a:18:64:58:1b:9a:a2:
         c8:91:a4:f6:f5:63:d6:5c:29:a7:75:7e:3a:4b:0b:84:66:87:
         aa:d8:7b:a7:fb:73:3a:20:73:2c:cd:1c:58:b6:1b:4d:7a:6e:
         48:44:d4:5b:50:36:6c:cc:f2:ea:7f:97:de:9a:8c:30:85:36:
         83:d0:0c:bf:9c:ef:f1:07:18:bb:49:c3:90:39:cc:b9:58:16:
         27:ce:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:53:09 2026 by rpki-client