Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
File:                     124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft (raw, json)
Hash identifier:          JGpPRlHRPDfkOfCdOS+SLABKlBqJSTLwvwbBUN2RtQw=
Subject key identifier:   50:B2:2F:EA:45:56:27:57:83:18:88:30:19:2E:E6:C1:8D:01:7C:C5
Authority key identifier: 12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7
Certificate issuer:       /CN=A91862140000/serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7
Certificate serial:       05AA5488AE420058F07C4838C10783F70201BA81
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
Manifest number:          81
Signing time:             Tue 22 Sep 2026 10:34:21 +0000
Manifest this update:     Tue 22 Sep 2026 10:29:21 +0000
Manifest next update:     Wed 23 Sep 2026 11:47:21 +0000
Files and hashes:         1: 124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl (hash: rKrFpX14QA7zifadm79yoFxViDBQZY6E926iZDZb3Nw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 11:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:aa:54:88:ae:42:00:58:f0:7c:48:38:c1:07:83:f7:02:01:ba:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7
        Validity
            Not Before: Sep 22 10:29:21 2026 GMT
            Not After : Sep 23 11:47:21 2026 GMT
        Subject: CN=50B22FEA4556275783188830192EE6C18D017CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:b8:17:dc:0f:50:06:52:53:5a:e0:c2:56:
                    f8:a0:d3:93:84:4e:67:ac:01:12:83:9c:d1:6d:47:
                    0d:91:44:64:a2:8d:ab:dd:23:1b:3b:5b:27:5e:26:
                    3d:34:d6:f6:f8:d6:ba:06:94:d9:b0:a0:a8:61:45:
                    e9:b0:a7:21:36:43:6e:75:ab:05:a2:2c:de:f4:85:
                    95:21:49:e7:f7:bb:24:dd:e6:3e:8f:de:71:3f:1f:
                    78:57:2b:29:65:fe:4d:19:41:d3:a3:7b:b7:2f:eb:
                    56:66:b6:c5:0c:35:e9:1c:d5:c6:a8:18:2e:b3:96:
                    14:90:44:66:42:d1:ea:d7:6a:38:34:b4:65:2f:24:
                    fd:e1:7c:47:19:f9:c7:5d:6b:e3:a4:66:5b:17:5a:
                    e7:10:90:46:47:cc:c7:74:36:54:2f:50:b8:5d:bd:
                    8a:84:b9:c5:fd:99:8a:ac:69:92:28:22:e1:e3:0b:
                    17:a3:67:9d:ba:b5:f4:01:be:88:bb:81:83:36:bc:
                    6e:41:2e:7a:86:d6:dd:6c:88:8b:9b:ee:aa:38:4a:
                    7e:f8:de:75:2f:07:09:89:27:04:8d:3d:92:f6:4f:
                    70:ec:e3:d8:39:e0:8e:7c:25:0b:c6:ba:ac:e5:ea:
                    3b:49:62:15:75:a2:41:12:64:61:ab:3e:84:65:c9:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B2:2F:EA:45:56:27:57:83:18:88:30:19:2E:E6:C1:8D:01:7C:C5
            X509v3 Authority Key Identifier:
                keyid:12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:42:a9:0c:0d:8e:06:16:a3:4d:b0:ba:f3:8e:d8:26:99:03:
         18:bb:4d:17:0e:a9:bd:8f:f9:73:88:9f:30:19:31:7a:84:6f:
         b9:ca:95:c2:99:15:de:cf:2b:3f:37:d0:b8:fb:3f:f1:4d:e3:
         6f:e1:91:76:35:2b:f9:d5:c0:b4:e4:95:5f:1d:34:02:62:dc:
         73:54:aa:5a:54:f8:26:0d:7c:74:be:db:df:53:da:6c:06:a3:
         09:16:6e:60:53:e3:f4:c8:65:19:68:6c:8b:2b:6c:cd:3a:d7:
         7f:b2:18:0d:73:ee:31:9e:f3:65:16:ad:21:9e:f6:5a:b3:e5:
         9e:a6:79:04:f0:78:e0:2f:bf:18:d1:56:88:5b:38:35:bb:2b:
         80:21:6a:d9:03:8b:9c:f3:ef:a4:04:28:67:57:dd:9a:49:9b:
         b7:6e:70:3f:19:ad:28:7a:e5:b1:e7:07:99:34:25:1d:86:13:
         f6:c7:8b:74:6e:75:de:a3:90:ac:37:b8:38:69:98:cb:62:f1:
         73:51:6a:44:3b:02:ca:a9:59:30:f2:36:8f:e4:76:72:24:4f:
         87:23:11:fe:2f:68:22:83:d3:5b:5c:a8:ee:7f:10:2a:f3:1e:
         4a:9a:17:01:06:2a:b2:7c:d1:b9:09:09:a5:2e:97:51:02:7a:
         6a:20:9b:7b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUBapUiK5CAFjwfEg4wQeD9wIBuoEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjQyMDRCQTk1
ODJENUExM0ZEMjBGOUVEMDE3NEFGMkQ1MTc0N0U3MB4XDTI2MDkyMjEwMjkyMVoX
DTI2MDkyMzExNDcyMVowMzExMC8GA1UEAxMoNTBCMjJGRUE0NTU2Mjc1NzgzMTg4
ODMwMTkyRUU2QzE4RDAxN0NDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKIWuBfcD1AGUlNa4MJW+KDTk4ROZ6wBEoOc0W1HDZFEZKKNq90jGztbJ14m
PTTW9vjWugaU2bCgqGFF6bCnITZDbnWrBaIs3vSFlSFJ5/e7JN3mPo/ecT8feFcr
KWX+TRlB06N7ty/rVma2xQw16RzVxqgYLrOWFJBEZkLR6tdqODS0ZS8k/eF8Rxn5
x11r46RmWxda5xCQRkfMx3Q2VC9QuF29ioS5xf2Ziqxpkigi4eMLF6Nnnbq19AG+
iLuBgza8bkEueobW3WyIi5vuqjhKfvjedS8HCYknBI09kvZPcOzj2DngjnwlC8a6
rOXqO0liFXWiQRJkYas+hGXJJjECAwEAAaOCAgUwggIBMB0GA1UdDgQWBBRQsi/q
RVYnV4MYiDAZLubBjQF8xTAfBgNVHSMEGDAWgBQSQgS6lYLVoT/SD57QF0ry1RdH
5zAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzQvMTI0MjA0QkE5NTgyRDVBMTNG
RDIwRjlFRDAxNzRBRjJENTE3NDdFNy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2
MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvRWtJRXVwV0MxYUVfMGctZTBCZEs4
dFVYUi1jLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy80LzEyNDIwNEJBOTU4MkQ1
QTEzRkQyMEY5RUQwMTc0QUYyRDUxNzQ3RTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWQqkMDY4GFqNN
sLrzjtgmmQMYu00XDqm9j/lziJ8wGTF6hG+5ypXCmRXezys/N9C4+z/xTeNv4ZF2
NSv51cC05JVfHTQCYtxzVKpaVPgmDXx0vtvfU9psBqMJFm5gU+P0yGUZaGyLK2zN
Otd/shgNc+4xnvNlFq0hnvZas+WepnkE8HjgL78Y0VaIWzg1uyuAIWrZA4uc8++k
BChnV92aSZu3bnA/Ga0oeuWx5weZNCUdhhP2x4t0bnXeo5CsN7g4aZjLYvFzUWpE
OwLKqVkw8jaP5HZyJE+HIxH+L2gig9NbXKjufxAq8x5KmhcBBiqyfNG5CQmlLpdR
AnpqIJt7
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:12:28 2026 by rpki-client