Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
File:                     06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft (raw, json)
Hash identifier:          nT2A9OdPE08nDuWEvB9BHKqyJVy2cc9w2+zfE3qTwP8=
Subject key identifier:   DE:3C:C7:1F:F0:AA:D1:B6:5F:66:7C:11:3A:E3:B2:6F:29:F9:12:0E
Authority key identifier: 06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB
Certificate issuer:       /CN=A91862140000/serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
Certificate serial:       78B3888238E22F6137B5BCBE1B8E5F75B0106F03
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
Manifest number:          110D
Signing time:             Wed 13 May 2026 00:34:13 +0000
Manifest this update:     Wed 13 May 2026 00:29:13 +0000
Manifest next update:     Thu 14 May 2026 01:28:13 +0000
Files and hashes:         1: 06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl (hash: +3eFYTvKn7SbqsHa+w6plNNgf61zdUZ3MLSvYTp8hkg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b3:88:82:38:e2:2f:61:37:b5:bc:be:1b:8e:5f:75:b0:10:6f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
        Validity
            Not Before: May 13 00:29:13 2026 GMT
            Not After : May 14 01:28:13 2026 GMT
        Subject: CN=DE3CC71FF0AAD1B65F667C113AE3B26F29F9120E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:d1:f3:44:19:f6:a0:36:ea:73:b4:fa:ae:
                    eb:02:39:40:08:3b:05:7f:66:43:2f:41:f0:25:b5:
                    07:c0:60:ff:3e:73:df:74:d4:24:97:d5:96:86:e6:
                    d7:5e:e7:3c:3f:22:09:14:e6:ba:7d:1a:26:84:9a:
                    17:c1:ab:8d:66:39:78:89:33:3f:1f:81:8a:8b:ee:
                    fe:ee:35:42:d4:ac:61:d4:e6:fa:21:01:e3:a9:9d:
                    e8:0a:0d:36:eb:cd:96:ce:5c:90:e8:62:c3:83:0c:
                    22:6b:1f:8e:1b:0c:d1:5c:17:c7:6c:12:8f:12:79:
                    7b:e7:74:f9:31:42:25:61:61:b6:01:66:c5:36:52:
                    f3:a6:1d:f1:cf:76:c2:93:0c:86:91:76:e3:c3:de:
                    36:5a:ad:62:cc:8a:9e:20:81:4e:9c:74:4c:23:1a:
                    cb:52:54:4b:66:2d:e6:f7:c1:61:d3:10:a0:76:a8:
                    32:37:10:8e:da:25:a9:0c:09:89:4d:88:20:fe:67:
                    48:3a:e3:ef:05:70:18:16:ba:b9:50:85:a2:3c:5d:
                    64:21:f9:20:08:14:7e:87:10:e0:2e:c8:1b:d7:a8:
                    e4:52:2e:d2:a9:27:69:c3:f4:3a:ec:e7:ce:ce:09:
                    5c:9f:0f:89:69:ab:cb:ed:89:58:11:48:5f:6e:b7:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:C7:1F:F0:AA:D1:B6:5F:66:7C:11:3A:E3:B2:6F:29:F9:12:0E
            X509v3 Authority Key Identifier:
                keyid:06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2f:3f:93:d9:79:c3:4f:79:3f:da:c7:d2:12:fd:0e:b1:5b:
         b6:15:41:21:da:94:96:ca:87:e8:fa:fc:42:2a:f6:5b:63:24:
         2b:9a:90:e5:a7:1c:59:e2:9a:52:f4:cb:a1:7b:8e:14:c5:46:
         78:bd:f0:27:eb:d8:a9:2a:0d:a5:c5:10:90:d2:1c:63:e7:a2:
         27:dd:82:28:96:bf:e1:07:6e:7f:04:56:6d:77:31:d6:aa:78:
         5d:ff:fe:f4:35:cf:ab:19:52:b1:93:85:31:4f:32:95:28:81:
         76:eb:13:cd:3b:f2:60:f3:30:a3:47:b1:01:fd:60:64:04:37:
         11:12:89:08:e6:97:92:d7:5d:ff:ee:37:1d:50:7a:7d:8e:c7:
         f7:86:40:c3:2b:14:6a:f0:aa:e4:a3:41:a4:42:63:c1:55:bf:
         e9:83:95:3e:65:26:38:2a:b4:4b:ce:11:8e:a7:c7:45:5f:0f:
         55:a8:fa:4b:f2:e4:58:2f:c8:ce:38:dc:df:d8:85:ec:81:e7:
         18:3a:39:5b:75:c6:31:f9:96:f8:ca:e9:f1:64:00:76:f2:19:
         ea:3e:80:54:c4:e9:88:56:1f:9f:b3:a8:52:d4:3a:f2:a1:27:
         80:4a:14:4e:19:d0:af:b1:3a:90:d6:c3:34:c0:cf:11:a4:e3:
         46:b9:cf:ed
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUeLOIgjjiL2E3tby+G45fdbAQbwMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygwNkY0QjJEQjg0
QjM4NzAyQjVGM0E5MkE3ODkyNTVEOUNGRUYzRUVCMB4XDTI2MDUxMzAwMjkxM1oX
DTI2MDUxNDAxMjgxM1owMzExMC8GA1UEAxMoREUzQ0M3MUZGMEFBRDFCNjVGNjY3
QzExM0FFM0IyNkYyOUY5MTIwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKtR0fNEGfagNupztPqu6wI5QAg7BX9mQy9B8CW1B8Bg/z5z33TUJJfVlobm
117nPD8iCRTmun0aJoSaF8GrjWY5eIkzPx+Biovu/u41QtSsYdTm+iEB46md6AoN
NuvNls5ckOhiw4MMImsfjhsM0VwXx2wSjxJ5e+d0+TFCJWFhtgFmxTZS86Yd8c92
wpMMhpF248PeNlqtYsyKniCBTpx0TCMay1JUS2Yt5vfBYdMQoHaoMjcQjtolqQwJ
iU2IIP5nSDrj7wVwGBa6uVCFojxdZCH5IAgUfocQ4C7IG9eo5FIu0qknacP0Ouzn
zs4JXJ8PiWmry+2JWBFIX263mvMCAwEAAaOCAgUwggIBMB0GA1UdDgQWBBTePMcf
8KrRtl9mfBE647JvKfkSDjAfBgNVHSMEGDAWgBQG9LLbhLOHArXzqSp4klXZz+8+
6zAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzIvMDZGNEIyREI4NEIzODcwMkI1
RjNBOTJBNzg5MjU1RDlDRkVGM0VFQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJF
QTYxRDY2MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvQnZTeTI0U3pod0sxODZrcWVKSlYy
Y192UHVzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8yLzA2RjRCMkRCODRCMzg3
MDJCNUYzQTkyQTc4OTI1NUQ5Q0ZFRjNFRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJLz+T2XnDT3k/
2sfSEv0OsVu2FUEh2pSWyofo+vxCKvZbYyQrmpDlpxxZ4ppS9Muhe44UxUZ4vfAn
69ipKg2lxRCQ0hxj56In3YIolr/hB25/BFZtdzHWqnhd//70Nc+rGVKxk4UxTzKV
KIF26xPNO/Jg8zCjR7EB/WBkBDcREokI5peS113/7jcdUHp9jsf3hkDDKxRq8Krk
o0GkQmPBVb/pg5U+ZSY4KrRLzhGOp8dFXw9VqPpL8uRYL8jOONzf2IXsgecYOjlb
dcYx+Zb4yunxZAB28hnqPoBUxOmIVh+fs6hS1DryoSeAShROGdCvsTqQ1sM0wM8R
pONGuc/t
-----END CERTIFICATE-----
Generated at Wed May 13 04:27:21 2026 by rpki-client