Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
File:                     96FDA607CDE580764664CCDAA75B9ECDACB44700.mft (raw, json)
Hash identifier:          gsW28m12ycOUwVPmlHVtsrN/yUZ3zMOcrxt4/PPiRCM=
Subject key identifier:   31:72:8B:A2:11:B1:FF:AF:FB:BD:52:08:41:0E:10:21:E9:15:13:D8
Authority key identifier: 96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00
Certificate issuer:       /CN=96FDA607CDE580764664CCDAA75B9ECDACB44700
Certificate serial:       37D03D9539677B4113F777180A8EC046180CAE2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 11:38:43 +0000
Manifest this update:     Fri 24 Jul 2026 11:33:43 +0000
Manifest next update:     Sat 25 Jul 2026 15:30:43 +0000
Files and hashes:         1: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: Xmk4AKXAk65syZMNokwtsrkCl9OG2CFthVNLs1MeEBs=)
                          2: 96FDA607CDE580764664CCDAA75B9ECDACB44700.crl (hash: AmqsXQAB+IPlt/xJWSN+CgD9wWpGweLQhfmD8fn56n0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl
                          rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d0:3d:95:39:67:7b:41:13:f7:77:18:0a:8e:c0:46:18:0c:ae:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96FDA607CDE580764664CCDAA75B9ECDACB44700
        Validity
            Not Before: Jul 24 11:33:43 2026 GMT
            Not After : Jul 25 15:30:43 2026 GMT
        Subject: CN=31728BA211B1FFAFFBBD5208410E1021E91513D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:0f:67:18:2a:7a:64:30:4d:30:34:04:01:
                    04:88:8f:11:9c:13:bb:35:87:d1:a8:ab:f4:3a:49:
                    e6:c2:21:7b:3c:6f:b3:95:e0:40:6e:86:f2:b4:8b:
                    06:76:04:d9:13:8c:83:66:51:7b:e9:61:f3:79:8b:
                    30:89:5e:c2:ba:c9:be:20:1f:dc:d1:54:7a:13:4c:
                    25:cc:7f:c7:1d:4d:fc:00:4e:1d:62:66:0f:7c:23:
                    8d:30:2b:5d:17:0b:01:c9:bb:2f:f5:16:a0:f2:9a:
                    1f:ac:68:a8:f6:ba:64:a9:82:16:3a:20:ed:aa:df:
                    01:27:74:cf:31:f1:cb:ff:91:89:92:9a:df:68:9a:
                    55:2c:9c:7e:73:db:ac:9a:9d:13:07:a8:3b:2e:8b:
                    24:08:08:2e:2d:b5:95:54:2d:df:60:98:0b:2d:c5:
                    52:a5:0e:04:e2:47:2b:6c:e0:7a:5b:23:6c:86:d6:
                    9b:53:2d:27:1a:8a:be:a9:67:ec:94:d2:94:78:d9:
                    19:6d:07:c4:44:95:1b:02:4c:98:0b:7a:24:07:aa:
                    fa:1c:c9:61:21:00:1d:1f:87:dd:ea:66:ef:40:42:
                    6a:38:38:d8:87:eb:8a:0d:46:65:f3:53:ef:c2:b3:
                    7d:59:87:b3:15:95:f2:1c:2c:a7:f4:77:7b:15:2c:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:72:8B:A2:11:B1:FF:AF:FB:BD:52:08:41:0E:10:21:E9:15:13:D8
            X509v3 Authority Key Identifier:
                keyid:96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:fa:36:1a:33:23:6d:2b:84:ca:bf:6c:e3:65:c8:d6:bd:
         67:3d:ef:41:6c:1b:90:61:36:a4:2c:40:21:d9:96:5d:ea:d0:
         ed:d8:b5:85:ac:94:7f:97:a7:59:6c:c7:3a:f4:f4:11:9b:4e:
         43:be:e6:d2:08:1c:44:0e:77:41:31:54:cb:0a:13:d8:da:57:
         43:66:d2:2e:e6:18:62:f5:78:52:e6:b9:36:13:03:bc:a4:5f:
         4f:7c:d5:94:82:b7:45:c3:27:0b:8e:6c:53:63:bd:f3:e2:7f:
         75:da:eb:73:3a:34:fb:59:fa:2c:d4:9e:3c:a5:a4:3b:28:91:
         5c:20:bf:b1:e8:42:55:67:dd:77:b8:ab:86:49:09:19:70:4e:
         51:17:32:15:76:de:2a:68:4c:37:db:75:23:cb:cf:e0:85:e3:
         0e:74:d9:49:23:a4:8b:28:3b:3e:f2:fa:aa:15:5a:a1:75:0d:
         3c:1d:db:0e:a3:e7:f2:66:a2:b5:08:6d:56:5e:b4:80:24:57:
         5a:23:95:4e:3f:dc:e2:c9:e5:a9:b2:2d:cf:99:57:5d:a6:9a:
         4d:88:97:7e:6c:15:19:c3:b8:ad:cc:f9:9c:ec:86:36:fa:36:
         ee:2c:bc:35:ff:e6:1e:13:89:dd:f1:d7:1d:eb:c3:eb:a0:77:
         9e:f4:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:11:24 2026 by rpki-client