Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
File:                     96A5BEF01619313B13000152FF7D9849B080E6AD.mft (raw, json)
Hash identifier:          ag8zgjJuJdZq0j7cpJOOPM5Rezi8b/FLazUIHnByUbU=
Subject key identifier:   B5:D5:44:97:7E:98:98:1D:EC:78:35:31:E7:9A:43:7C:AE:79:A5:6A
Authority key identifier: 96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD
Certificate issuer:       /CN=96A5BEF01619313B13000152FF7D9849B080E6AD
Certificate serial:       1B316C71C3862DAB55D3B3B83D4C835A187F0A1D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
Manifest number:          76
Signing time:             Wed 29 Jul 2026 09:32:15 +0000
Manifest this update:     Wed 29 Jul 2026 09:27:15 +0000
Manifest next update:     Thu 30 Jul 2026 11:30:15 +0000
Files and hashes:         1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: RDa+Zhnigfqo7biWFi13W+chpPOznuVZnbRPHv7vJrE=)
                          2: 96A5BEF01619313B13000152FF7D9849B080E6AD.crl (hash: cr2/c3V/P0za8/Y5CW6KK2gC9+NVEVdJa2hf9w+p/Dk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl
                          rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:31:6c:71:c3:86:2d:ab:55:d3:b3:b8:3d:4c:83:5a:18:7f:0a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A5BEF01619313B13000152FF7D9849B080E6AD
        Validity
            Not Before: Jul 29 09:27:15 2026 GMT
            Not After : Jul 30 11:30:15 2026 GMT
        Subject: CN=B5D544977E98981DEC783531E79A437CAE79A56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:5c:9a:cc:1d:90:80:71:65:dd:e3:f0:1b:
                    86:2a:48:6d:7d:9c:e9:63:de:10:17:87:53:fe:3e:
                    be:c8:0b:74:cc:6d:7e:68:06:df:ca:a9:a3:d4:d9:
                    95:f7:5a:5e:dd:00:0f:f1:92:45:eb:ce:69:4c:e7:
                    f7:ae:cf:5d:20:a8:8c:bd:3b:95:62:ba:4f:e0:47:
                    0d:c0:c2:96:64:81:a7:80:33:18:f9:f4:59:f4:84:
                    b7:d1:40:05:fa:38:e2:81:c5:bc:f3:27:00:ae:e1:
                    68:35:36:53:60:53:19:86:7d:81:2f:20:ba:bf:de:
                    c5:95:b6:db:54:66:4b:e1:19:a5:28:b8:c6:78:15:
                    3d:89:88:78:d2:87:22:e4:38:75:f2:d9:68:68:da:
                    cb:77:52:c1:ba:ec:ee:fb:31:93:81:35:33:4c:6b:
                    e1:25:f6:6f:2b:5f:e2:e8:81:80:38:f7:81:44:e6:
                    cb:7e:0f:ad:d5:23:8d:25:67:90:b5:4f:ee:e8:82:
                    73:6c:f3:52:da:68:ab:4f:d5:cf:f8:52:2c:c3:6a:
                    44:41:f1:14:ba:e4:85:55:c9:21:51:38:6b:83:7b:
                    c1:c4:b7:25:b9:bd:28:af:33:dc:55:aa:d6:b6:28:
                    f2:fc:04:92:d7:9d:10:8c:27:54:5d:1a:96:12:0c:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D5:44:97:7E:98:98:1D:EC:78:35:31:E7:9A:43:7C:AE:79:A5:6A
            X509v3 Authority Key Identifier:
                keyid:96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d7:de:40:b4:3e:96:ac:9f:f0:91:91:45:40:f4:ab:b7:f4:
         4f:b3:42:2e:15:03:7e:e7:5a:e1:3e:00:14:ec:6e:e5:a6:86:
         21:4a:b2:49:e9:0f:21:8f:36:38:b4:32:1b:c3:81:26:f0:d3:
         7e:de:28:3d:cf:a1:2a:5e:3c:a6:de:e7:c2:3f:4b:1f:db:a5:
         a7:fb:ca:fc:d7:0a:60:51:0b:30:ce:d4:26:35:bf:40:08:c4:
         ad:16:17:bd:f6:6b:d8:96:a5:3f:11:5f:d4:46:29:71:44:85:
         ab:c4:38:00:55:18:6e:97:6c:fc:2c:8f:21:c6:d4:83:b0:5f:
         3e:c0:0a:c4:43:27:03:d2:6d:9b:b1:89:5d:42:80:85:87:61:
         af:68:92:3c:32:d0:98:ed:3f:27:e4:81:9b:f1:06:70:20:69:
         94:f9:c4:5a:20:a8:e5:e7:f2:ae:c8:3a:e6:a3:2c:4f:8f:8a:
         21:9e:2a:f3:e7:06:b2:c6:dc:fc:19:58:90:b9:f8:76:f1:4e:
         08:78:f3:f9:43:41:ff:9d:01:07:9e:b3:44:6b:db:a5:b8:c5:
         d3:2d:2e:bb:22:55:60:bb:33:b9:ae:da:ac:ed:1e:db:7c:fc:
         83:05:78:a8:26:61:bf:4c:24:91:0b:c9:56:25:39:da:59:b0:
         c8:b5:32:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:05 2026 by rpki-client