Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft
File:                     96348B9579D234769BDF15F375368D3C0BDE1860.mft (raw, json)
Hash identifier:          HIT1a1tC6laVFmHu05FLUfmDp5DuqQidfBiXwNv49sQ=
Subject key identifier:   D9:52:0D:A2:29:0C:94:B7:57:F0:FD:91:A2:6C:C6:F7:FC:5A:DE:A7
Authority key identifier: 96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60
Certificate issuer:       /CN=96348B9579D234769BDF15F375368D3C0BDE1860
Certificate serial:       179B88A5265A89D31F6F1B3B33F769DCFE05BA5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 10:54:08 +0000
Manifest this update:     Thu 24 Sep 2026 10:49:08 +0000
Manifest next update:     Fri 25 Sep 2026 14:40:08 +0000
Files and hashes:         1: 96348B9579D234769BDF15F375368D3C0BDE1860.crl (hash: YDwHYXjETgkuhzyZet+uFxslrayWXkesELfo+RXK4hI=)
                          2: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: NRcKgzAD1aXFV9xSYN/NAX4+lhq8SGmZ0ijJnrN5qYY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl
                          rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9b:88:a5:26:5a:89:d3:1f:6f:1b:3b:33:f7:69:dc:fe:05:ba:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96348B9579D234769BDF15F375368D3C0BDE1860
        Validity
            Not Before: Sep 24 10:49:08 2026 GMT
            Not After : Sep 25 14:40:08 2026 GMT
        Subject: CN=D9520DA2290C94B757F0FD91A26CC6F7FC5ADEA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:05:1e:aa:4c:c5:81:c6:38:11:92:19:77:
                    68:14:6a:b6:c3:d0:2c:f5:cd:f7:61:5f:57:d6:8b:
                    20:ff:71:ad:cf:64:a7:ae:7d:f8:94:7b:7f:4e:42:
                    ca:08:80:e4:05:ba:ba:93:53:de:22:a1:04:ac:a4:
                    db:d9:7e:ed:97:82:f7:73:8d:17:40:45:fb:21:ed:
                    62:99:93:b0:37:e7:15:75:3e:0a:eb:e2:f3:c7:3e:
                    95:62:40:ec:b1:c4:d2:d1:15:31:5b:d3:71:6f:91:
                    e7:b7:75:01:dd:b6:56:07:ad:ef:df:a3:67:ca:0b:
                    4b:f4:f8:82:a4:49:d7:52:40:5c:7f:40:79:fd:91:
                    d4:02:4b:9a:1c:a5:82:cf:26:46:d8:ce:88:68:0f:
                    50:94:7a:3b:ea:9a:53:1b:7d:61:13:4c:f8:51:e7:
                    9f:dd:8d:cd:c2:b9:e3:67:28:d6:56:51:6a:88:49:
                    46:12:96:50:93:12:40:c8:53:04:a8:4c:f3:53:97:
                    e8:97:b9:c8:a3:2d:d0:74:03:c9:e3:f8:a9:ab:5c:
                    f2:78:d7:e0:bc:35:73:77:d3:31:f4:72:46:5c:84:
                    f7:79:2d:cc:25:45:b0:fa:42:9a:ae:b7:0a:36:1f:
                    50:92:57:a5:c6:ec:3d:a2:5e:7d:17:9f:9e:4a:52:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:52:0D:A2:29:0C:94:B7:57:F0:FD:91:A2:6C:C6:F7:FC:5A:DE:A7
            X509v3 Authority Key Identifier:
                keyid:96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:35:85:05:9b:5b:1e:78:44:74:82:6e:a5:b9:31:ea:99:97:
         9b:99:7c:c2:d7:00:05:69:5e:fb:08:d0:63:a0:89:52:6b:11:
         cf:9b:25:ed:cf:2d:94:81:31:c7:9e:98:bd:f9:86:fd:e8:5f:
         78:f2:7c:46:6e:b5:9a:bb:67:d0:25:55:7a:08:8a:0d:00:e8:
         c4:95:ed:f0:ec:1f:65:64:d6:b7:54:68:49:a3:86:99:00:3e:
         99:f1:61:38:24:61:8d:6e:29:60:94:fc:8e:1c:49:36:01:be:
         c5:cc:8a:48:36:ec:a3:b3:02:cc:d8:1e:68:44:7e:69:6d:ca:
         fc:29:1b:19:bf:b8:0e:8d:19:04:27:22:b4:4c:a4:42:3b:8a:
         f7:d6:12:cb:41:52:78:49:fd:fd:21:cc:7e:5c:9b:91:d4:37:
         6d:b1:aa:28:dd:d2:f0:69:49:ca:e0:80:aa:a4:c2:51:ce:7c:
         74:b6:e6:ff:85:36:45:bd:bb:15:52:cb:2e:51:78:e2:8b:00:
         eb:58:f4:da:37:fb:29:1e:c8:64:db:b2:c5:54:1b:44:7c:e5:
         95:7f:4d:83:74:6a:8f:e3:1d:8b:3b:cb:03:69:36:26:57:7c:
         3d:1e:a4:d2:a1:ed:af:15:2b:d2:65:c0:b6:ac:5d:92:d6:76:
         6c:61:40:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:39:08 2026 by rpki-client