Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
File:                     06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft (raw, json)
Hash identifier:          CEIYEvvTLMBcbwZIUexQvVR3491P5EKtwdzzyF4fS+s=
Subject key identifier:   AB:9C:07:EE:44:17:FE:73:7E:A0:EF:97:0C:C5:2A:36:0C:56:E3:9E
Authority key identifier: 06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB
Certificate issuer:       /CN=A91862140000/serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
Certificate serial:       66157BD24F5FFFFC97591F786BBB344397B32B85
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
Manifest number:          13F7
Signing time:             Thu 24 Sep 2026 03:32:01 +0000
Manifest this update:     Thu 24 Sep 2026 03:27:01 +0000
Manifest next update:     Fri 25 Sep 2026 05:48:01 +0000
Files and hashes:         1: 06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl (hash: opa77aadptsra/P+DvdLsV22fA7VHlU5yutiLK00xzM=)
                          2: 3137392e36352e3139322e302f31382d3234203d3e203435373030.roa (hash: vQ5Ek57nvyv8QSxJkPzmegP9NNy53tUJ+4K3JUiqzFY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 05:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:15:7b:d2:4f:5f:ff:fc:97:59:1f:78:6b:bb:34:43:97:b3:2b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
        Validity
            Not Before: Sep 24 03:27:01 2026 GMT
            Not After : Sep 25 05:48:01 2026 GMT
        Subject: CN=AB9C07EE4417FE737EA0EF970CC52A360C56E39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:38:5b:8d:95:9e:10:c1:e3:4c:82:80:49:
                    f4:0e:00:bf:30:06:02:45:10:18:a0:46:c3:49:4e:
                    71:7f:0c:01:13:e5:17:71:62:6f:70:43:b0:1f:d5:
                    e5:a1:1e:b7:95:dd:8c:15:84:62:db:8a:27:3b:6b:
                    ea:99:74:5d:1e:d0:f4:7d:16:10:16:73:4e:98:6d:
                    21:f4:bd:d2:b8:12:b3:4d:8a:59:9e:93:5b:9f:84:
                    12:f8:c1:22:59:13:71:69:44:cb:30:d5:c1:8f:02:
                    5d:85:e3:bf:5c:15:02:5e:08:ae:50:64:28:e1:ef:
                    0e:44:af:6b:fa:81:2a:dd:26:8a:0a:cc:34:56:bd:
                    0d:a5:de:03:64:e7:dc:ca:66:0f:0c:1a:20:30:1e:
                    24:4d:86:3b:1e:e7:a1:fb:03:05:2a:07:6c:c6:94:
                    88:04:24:d2:b4:33:f3:31:84:31:09:97:89:48:ee:
                    6f:b5:35:ad:bc:4c:81:fb:72:3c:35:40:4c:9f:c3:
                    49:a9:91:b9:aa:f2:00:f6:74:3b:af:62:a1:16:13:
                    3d:31:66:a3:82:25:29:3e:82:df:26:c9:a8:ad:58:
                    e8:9b:a5:27:56:d9:33:09:0c:c8:51:c7:29:76:69:
                    92:47:cf:e8:cd:fc:d5:f2:9b:6c:58:68:b9:bd:9e:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9C:07:EE:44:17:FE:73:7E:A0:EF:97:0C:C5:2A:36:0C:56:E3:9E
            X509v3 Authority Key Identifier:
                keyid:06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:36:da:cc:cc:d4:91:e8:60:e8:e9:2a:4d:63:c2:4a:55:8f:
         9f:0d:dd:97:fc:cb:ff:0a:7c:4b:54:e2:23:12:41:32:ea:e6:
         ce:0b:19:7d:12:89:51:37:68:3d:de:69:cc:a6:a5:9e:ae:2f:
         92:3b:e7:29:95:f0:fa:0d:85:12:1e:94:1f:8d:74:37:3a:3e:
         2f:f8:32:75:42:98:ef:56:fe:4f:f5:5a:15:5c:1b:f0:f7:12:
         65:7b:d2:38:47:94:61:77:6c:74:46:b0:f7:0d:66:38:cf:4b:
         10:d8:fb:e6:61:36:b0:a2:fd:08:9c:68:d5:e3:0f:58:df:cd:
         7d:4f:e0:4d:6a:8a:8b:53:66:85:21:53:bd:dc:39:fd:41:c0:
         86:91:b5:05:eb:04:bc:9c:4d:c7:4f:c4:a9:0a:2e:e3:01:d0:
         57:1b:71:82:67:10:0f:da:84:3c:f3:2b:a2:b7:dd:96:b0:76:
         69:86:4f:ca:f4:5a:45:ee:9b:05:a9:e2:ad:40:78:ed:8c:20:
         f9:b5:31:0f:2c:a6:d4:7d:c8:0c:2d:fa:7e:c8:c0:aa:de:b5:
         8b:84:7b:a0:39:d3:12:73:9b:9d:cb:06:06:a5:0a:c8:6e:52:
         1e:c1:4f:39:21:ce:b2:da:fe:1b:ab:c0:71:c5:29:82:c4:ed:
         3e:93:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:22:56 2026 by rpki-client