Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
File:                     96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft (raw, json)
Hash identifier:          xXqKi5koUexjQy/E6Yfc3KYZtv7rwGj5KjV8LYRdQLU=
Subject key identifier:   24:3E:AC:C4:1E:63:5E:68:BA:01:60:04:3A:FB:6B:15:8E:44:40:E7
Authority key identifier: 96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C
Certificate issuer:       /CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C
Certificate serial:       52EBCCBB7144161F81BB6C708A6DD8572D364E95
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
Manifest number:          0107
Signing time:             Sat 14 Nov 2026 22:32:24 +0000
Manifest this update:     Sat 14 Nov 2026 22:27:24 +0000
Manifest next update:     Mon 16 Nov 2026 01:18:24 +0000
Files and hashes:         1: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: /BgEs0X95g+IDSnEOlX/MgvWY3v0qZzbss60jPNLBe0=)
                          2: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl (hash: qnGOgPUpSlwo6tbIA0Al+MAa3FnOBp4+6M85JAahSz4=)
                          3: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: 2NisVTWE+HRD9wRpvxBcr4vnaVycZuCJLBHWrwbnEQ8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl
                          rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 01:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:eb:cc:bb:71:44:16:1f:81:bb:6c:70:8a:6d:d8:57:2d:36:4e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C
        Validity
            Not Before: Nov 14 22:27:24 2026 GMT
            Not After : Nov 16 01:18:24 2026 GMT
        Subject: CN=243EACC41E635E68BA0160043AFB6B158E4440E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:be:1c:84:31:bd:6a:13:cb:0c:96:ed:8a:
                    ee:c9:2e:16:56:68:60:05:6a:ab:99:76:6a:69:13:
                    39:ea:84:5b:d6:65:b1:09:e3:3d:9c:e9:aa:46:5c:
                    1d:e0:d7:24:eb:a7:bc:9f:f5:5e:37:d8:09:9e:3b:
                    62:e9:24:92:f5:f6:36:ae:a0:15:74:31:92:64:4c:
                    f8:6e:85:3f:18:26:b0:aa:77:19:43:0f:ce:ea:7d:
                    ae:b4:0c:e4:3c:20:3e:2b:6b:81:a9:4d:50:1e:64:
                    22:87:8b:ca:91:44:64:30:83:41:f3:84:22:8c:a5:
                    78:19:24:f8:6e:09:5f:89:85:fc:48:ba:9f:04:e5:
                    03:5f:05:7b:91:78:47:0d:f1:c3:25:70:dc:e4:bb:
                    36:ae:48:6e:dd:46:34:0f:f2:23:81:29:21:8e:0d:
                    5c:93:80:a4:cb:9b:ea:db:a6:ad:e0:cf:3b:c8:83:
                    f8:94:a4:96:f5:94:f4:d9:a8:5c:fe:fa:72:aa:2b:
                    60:f4:2e:8b:a4:0f:60:98:1e:95:a0:57:4f:e8:fb:
                    ba:39:c1:c4:53:22:ed:09:b7:83:df:13:a4:1b:21:
                    25:5e:b7:f1:1b:e7:a5:38:6f:9e:f3:c4:9c:c5:9b:
                    2a:03:36:ab:29:b1:65:f4:d4:75:ba:79:ca:1b:60:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3E:AC:C4:1E:63:5E:68:BA:01:60:04:3A:FB:6B:15:8E:44:40:E7
            X509v3 Authority Key Identifier:
                keyid:96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fc:8f:9f:d3:56:2a:31:ec:04:51:53:90:63:15:10:4a:4c:
         89:8f:68:1c:86:06:44:9f:cc:f7:30:8d:82:6d:e3:c1:54:f4:
         8d:bd:b4:d8:12:47:c0:60:5a:c5:d2:54:a6:b4:74:01:bd:8f:
         88:26:20:4b:41:cd:e3:d6:3b:f7:1e:05:48:33:6b:65:71:5f:
         20:6a:d6:b7:51:5b:e6:a1:78:bc:f2:eb:1d:80:ea:49:0f:f8:
         0e:7d:c3:5f:d8:81:19:5b:73:e9:81:fa:74:dc:66:26:e1:30:
         dd:f7:cf:71:3a:70:0c:73:09:b6:7e:8a:c7:e4:1f:1c:81:08:
         72:85:15:89:27:88:04:a1:f4:40:2e:4c:dc:97:1f:7e:99:46:
         e4:6e:ab:9e:84:da:30:03:ae:36:3a:8b:a1:2a:f8:5a:47:15:
         02:14:85:fa:1f:18:63:3f:fd:10:b8:da:21:1d:a3:51:b9:72:
         1a:46:df:ad:b0:22:c9:63:7f:cd:0e:8d:76:1f:91:82:70:ce:
         52:98:6e:41:55:a5:e6:50:2f:45:aa:aa:60:58:12:e1:81:11:
         12:96:a7:d6:e1:41:66:aa:bf:b5:e1:58:62:28:41:61:56:6a:
         62:65:b7:ff:9b:58:b7:b9:a6:7c:6e:2d:02:f6:31:d4:3d:7d:
         2e:09:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:15:26 2026 by rpki-client