Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
File:                     1B06933632B5A267F98A1716F3CB78EA840D6E65.mft (raw, json)
Hash identifier:          KSjULvlVTztX6y82ky0eKptVet0HnVsSTamaPBANp+g=
Subject key identifier:   52:BD:6D:8D:0B:D0:E4:3F:28:C6:48:0C:DC:D5:16:BB:58:2E:DE:16
Authority key identifier: 1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65
Certificate issuer:       /CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
Certificate serial:       7B6E6B016927166A788C33DA0B9DE089D2D71AE2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
Manifest number:          C1
Signing time:             Wed 23 Sep 2026 20:16:00 +0000
Manifest this update:     Wed 23 Sep 2026 20:11:00 +0000
Manifest next update:     Thu 24 Sep 2026 22:32:00 +0000
Files and hashes:         1: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (hash: 0VVs/sIJ5MrPj5d4PmHdMp47XW+kiXnvAYhD29LsMwA=)
                          2: 1B06933632B5A267F98A1716F3CB78EA840D6E65.crl (hash: kTufGXgocdUz1sKDlyfCP1bmPgjnbycmZNwryr82Htg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl
                          rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 22:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6e:6b:01:69:27:16:6a:78:8c:33:da:0b:9d:e0:89:d2:d7:1a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
        Validity
            Not Before: Sep 23 20:11:00 2026 GMT
            Not After : Sep 24 22:32:00 2026 GMT
        Subject: CN=52BD6D8D0BD0E43F28C6480CDCD516BB582EDE16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:4b:42:35:7c:79:64:ca:74:d0:f2:8f:62:
                    0e:42:57:77:cf:fb:95:27:4a:70:ef:e2:1e:4e:fc:
                    eb:96:b1:60:05:1a:30:cd:6f:4b:20:e6:4c:2a:70:
                    54:e1:38:02:ec:ee:bf:63:ef:92:92:4f:ad:e7:2f:
                    26:c1:5b:34:b1:34:9a:db:25:f5:ec:59:c1:9f:eb:
                    f3:df:62:1c:9f:60:7c:59:51:52:c1:eb:6c:5c:85:
                    1b:21:20:fa:e3:e3:00:8d:2d:2e:5e:39:7f:7c:f9:
                    08:5a:a7:9f:23:0d:c5:87:e8:73:2f:c3:21:1e:05:
                    20:80:89:b5:c6:60:9d:7d:85:37:01:09:64:da:7f:
                    5a:dd:02:f5:67:7c:9d:75:5a:5b:43:4c:5f:66:1e:
                    d1:82:8e:99:96:c7:e4:39:d6:ec:19:dc:64:b3:bd:
                    c6:e4:31:0d:66:46:f0:48:e1:b4:64:48:5c:ad:17:
                    4a:11:dd:eb:39:48:aa:d4:0d:8c:7e:13:2b:57:69:
                    ed:31:0c:26:06:68:75:fd:75:58:0a:26:f3:c5:16:
                    c0:aa:af:3f:56:cb:7b:94:d0:ad:3f:39:67:1d:f9:
                    7b:b4:73:35:59:f6:7c:8d:55:74:e7:aa:70:21:db:
                    96:29:e8:82:df:59:ae:7e:59:59:d0:e6:d1:55:62:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BD:6D:8D:0B:D0:E4:3F:28:C6:48:0C:DC:D5:16:BB:58:2E:DE:16
            X509v3 Authority Key Identifier:
                keyid:1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:dd:4e:57:6e:08:b5:d6:35:20:22:34:f2:73:4b:7e:29:21:
         a4:fc:d8:55:68:12:55:3e:ad:8e:cc:bf:f2:34:c6:3d:41:55:
         16:af:3a:d4:13:16:a5:ba:00:9a:55:af:59:9d:f2:a1:2e:f7:
         e0:06:76:d1:e1:02:94:09:d5:4e:68:9d:b2:17:f7:4a:a0:86:
         da:48:88:ff:e6:14:12:8d:2f:00:06:07:21:0c:e5:72:01:8f:
         ed:1d:b6:d0:8b:5e:02:1d:90:8d:91:9f:78:00:6c:66:9f:cb:
         69:ca:ba:ad:17:95:57:70:e1:78:86:d0:c5:5d:1e:40:ae:f6:
         2c:fd:a2:cf:de:a6:41:6a:90:cf:f3:59:0b:8c:ba:55:ac:25:
         55:56:1b:70:09:fb:f5:53:66:cf:76:94:a6:98:05:fc:91:01:
         ab:10:bf:60:80:70:69:73:15:0c:93:f8:52:b3:3d:70:f3:65:
         6b:32:20:ae:fa:d6:b8:ba:fc:be:83:7e:76:91:d4:2c:3f:5a:
         5a:41:8a:4f:c0:af:c5:2b:59:3e:ef:3a:0b:a7:ac:b9:8b:21:
         28:68:d4:19:e0:dd:da:9a:df:98:3f:8b:b6:98:c6:bd:c2:f7:
         2b:02:a3:52:e8:7c:ca:73:7a:32:66:28:a0:30:77:d3:72:de:
         d3:8f:ef:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:53:14 2026 by rpki-client