Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
File:                     96FDA607CDE580764664CCDAA75B9ECDACB44700.mft (raw, json)
Hash identifier:          9zS7gWuTIM0GBHcR443pSk8PwlNdCzEO0QZ3+67UoZY=
Subject key identifier:   D3:A6:98:51:F9:2D:05:16:9E:E1:2D:62:2D:92:41:F5:84:11:57:A5
Authority key identifier: 96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00
Certificate issuer:       /CN=96FDA607CDE580764664CCDAA75B9ECDACB44700
Certificate serial:       5103A6339DA1025696832FD644BC860D27F5A0AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 02:51:13 +0000
Manifest this update:     Wed 17 Jun 2026 02:46:13 +0000
Manifest next update:     Thu 18 Jun 2026 04:01:13 +0000
Files and hashes:         1: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: Xmk4AKXAk65syZMNokwtsrkCl9OG2CFthVNLs1MeEBs=)
                          2: 96FDA607CDE580764664CCDAA75B9ECDACB44700.crl (hash: 6vALl8qH1w0vUqhA+dWnaH0MxBw4fCes7xV4k3UF+0w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl
                          rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:03:a6:33:9d:a1:02:56:96:83:2f:d6:44:bc:86:0d:27:f5:a0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96FDA607CDE580764664CCDAA75B9ECDACB44700
        Validity
            Not Before: Jun 17 02:46:13 2026 GMT
            Not After : Jun 18 04:01:13 2026 GMT
        Subject: CN=D3A69851F92D05169EE12D622D9241F5841157A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:b5:cd:f6:15:80:72:9c:a2:3c:12:ae:a7:
                    e3:a7:b2:78:dc:78:c5:c8:0f:e9:67:fe:60:68:68:
                    c3:60:ba:cd:88:a9:3e:c9:a4:4a:6a:db:03:75:72:
                    77:a1:87:64:97:81:5c:15:ab:3f:9a:95:07:c9:be:
                    f0:a1:ce:bc:eb:dd:5d:d9:f6:38:fb:6d:f4:ef:dc:
                    3b:ad:81:a2:76:77:bd:60:ed:17:fc:55:a3:b1:c3:
                    d8:92:bb:51:ae:81:d7:ae:14:83:b8:cf:16:ef:c7:
                    a3:3f:e0:5f:e1:e3:20:eb:e4:a4:15:66:97:41:51:
                    c5:b6:68:67:93:d1:89:54:86:eb:67:65:f9:d6:bf:
                    24:7b:19:ba:35:87:72:e0:dd:20:5d:ba:74:a9:8a:
                    be:e7:3c:4e:4c:69:27:ac:bd:25:cf:79:06:74:c2:
                    b5:b3:2a:9d:31:fc:a2:e2:08:a7:c8:6f:99:b5:32:
                    67:65:95:c7:6f:ba:0f:4d:07:97:4b:4f:8c:ec:ca:
                    20:b0:47:17:de:3e:71:08:61:36:c0:9c:24:4b:0e:
                    76:53:20:99:7f:fd:7f:18:b8:e8:b0:19:37:c4:7d:
                    a9:e9:64:66:09:1a:f5:1f:de:03:c8:9c:5c:df:7f:
                    e7:87:97:d0:ec:be:93:6e:18:a6:55:04:15:ee:bc:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A6:98:51:F9:2D:05:16:9E:E1:2D:62:2D:92:41:F5:84:11:57:A5
            X509v3 Authority Key Identifier:
                keyid:96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:64:87:a4:b5:92:7d:8a:ed:2c:08:3b:7c:56:bd:3d:0d:75:
         7a:16:83:a8:72:f3:e4:31:da:23:33:5b:0d:91:8f:e3:f3:22:
         72:9e:f6:46:98:66:6d:2a:8e:5a:cd:87:f5:e1:0d:35:03:df:
         32:b1:f3:15:ac:6d:0c:80:68:fe:d1:3e:cf:3b:ad:76:01:ec:
         a4:21:da:7b:bf:1f:51:ad:e7:f7:38:77:2a:59:9a:3b:51:1b:
         22:10:24:57:ad:03:1f:65:4a:38:73:74:18:2b:46:6a:41:87:
         18:a7:17:1d:02:27:67:33:bb:7f:2e:7c:0b:0e:2b:7e:b6:c2:
         d2:c1:46:2a:50:e3:b7:8f:34:08:a9:8e:80:cc:eb:58:52:06:
         1a:f2:8b:ee:63:63:1b:b2:27:4e:b3:f9:4c:05:90:ec:f5:90:
         9d:03:93:0c:0c:ea:6a:cf:30:46:4c:86:de:2f:69:7e:68:47:
         36:21:23:35:e7:c1:ff:95:de:a9:e5:59:5d:08:39:53:03:f3:
         d2:f3:38:94:f1:64:4a:85:f9:9c:14:ff:7a:ca:d9:82:77:31:
         fa:d2:76:54:70:15:77:3b:56:55:b2:3b:dd:fc:27:6b:d9:38:
         72:5d:d4:3e:6e:b1:1c:36:86:22:8b:ae:90:d5:f8:ad:21:11:
         3d:61:51:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:44:43 2026 by rpki-client