Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
File:                     46932859C0D86F27F517A125185AE45763AEA7D7.mft (raw, json)
Hash identifier:          ReYNQBYqGZ9DdSWBJwR93dYR3+0PidKoZe/E5b4JukU=
Subject key identifier:   06:96:48:E2:B4:DA:9C:26:8B:61:49:44:E8:A9:A4:29:C2:0D:3A:40
Authority key identifier: 46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7
Certificate issuer:       /CN=46932859C0D86F27F517A125185AE45763AEA7D7
Certificate serial:       1463141F91D0D217444958EA326513AB5E610290
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 14:06:23 +0000
Manifest this update:     Tue 16 Jun 2026 14:01:23 +0000
Manifest next update:     Wed 17 Jun 2026 17:11:23 +0000
Files and hashes:         1: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: JlLJ7++ECgOuHqdNFhp6s2bGWg+2iwYDZNhy26Z53Oo=)
                          2: 46932859C0D86F27F517A125185AE45763AEA7D7.crl (hash: VZtcPurWPjDy+H3BY5AzsCshvCS6jnnJcXWVQ7f7zdM=)
                          3: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: Trw+y/sXFJtkefRvcCLMU2FAEepNpbCrLf/kUCXfHQE=)
                          4: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: 26c5fhilGEyh6ibLUJuFc5ukaLSiZO65uEMgb+eN6Nk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl
                          rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:63:14:1f:91:d0:d2:17:44:49:58:ea:32:65:13:ab:5e:61:02:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46932859C0D86F27F517A125185AE45763AEA7D7
        Validity
            Not Before: Jun 16 14:01:23 2026 GMT
            Not After : Jun 17 17:11:23 2026 GMT
        Subject: CN=069648E2B4DA9C268B614944E8A9A429C20D3A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:4b:22:a9:f1:25:e2:8c:62:e6:17:e9:6b:
                    ac:9f:af:2b:9f:12:88:01:90:c1:47:13:a9:c8:c8:
                    e0:b9:03:8f:36:dc:f7:c5:41:10:29:65:ba:f8:f2:
                    eb:74:32:90:19:38:f0:8a:d6:71:0f:62:20:2e:5d:
                    55:d4:67:83:c7:54:5e:df:db:93:12:ac:af:d8:28:
                    17:06:ec:7b:55:15:e7:fe:61:b8:d4:db:02:20:80:
                    4d:c0:98:ec:47:f9:21:c3:a7:aa:d4:09:09:ff:3a:
                    db:f7:f3:03:82:7b:0b:41:3c:4c:5c:d6:c8:5b:d4:
                    77:7e:d9:84:70:6d:07:dc:f3:2f:b4:2f:75:37:80:
                    e7:81:39:47:31:fe:2f:f3:0f:fd:cd:96:fe:a4:7c:
                    d2:ba:8e:cc:dc:72:07:e2:17:f1:25:d7:85:40:3c:
                    77:cb:62:ab:fb:a9:68:f3:77:6a:ad:d4:e5:78:63:
                    47:2b:4a:e6:2a:52:e0:f3:56:f0:a5:43:8d:19:d1:
                    af:34:d8:72:26:f5:49:85:85:23:9c:c2:3d:5b:be:
                    48:6d:b1:91:30:96:36:53:f9:11:51:89:f5:31:66:
                    1b:f4:57:ae:47:ac:cb:a9:61:d2:b5:ef:15:e4:29:
                    5f:29:f4:81:80:e8:b7:60:ab:08:15:4a:3e:d3:96:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:96:48:E2:B4:DA:9C:26:8B:61:49:44:E8:A9:A4:29:C2:0D:3A:40
            X509v3 Authority Key Identifier:
                keyid:46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d5:ee:55:c6:7d:86:eb:c7:dc:17:b8:c9:10:89:e4:73:08:
         ee:aa:da:8f:0f:fb:81:19:15:4e:1d:da:5c:83:f9:a5:0e:49:
         79:03:7f:0c:d9:39:6a:18:55:c4:40:01:f3:6f:74:dd:11:6a:
         a7:6d:f2:0d:37:ce:3e:e1:d3:d0:b5:e7:63:9c:f2:40:7f:af:
         fa:98:76:2a:7d:1e:d1:34:a2:dd:15:94:bc:31:7c:ca:7c:e0:
         64:e4:67:4d:72:c6:32:ea:8c:2c:05:55:ff:3f:b0:40:89:bd:
         fa:92:a2:78:38:25:34:65:4e:86:8c:97:ca:43:0f:cb:8a:b8:
         9c:04:9b:b0:cd:ec:e0:21:4f:b4:10:0b:c6:8b:1d:56:62:14:
         db:98:4a:14:97:da:aa:3f:91:2b:e6:75:d6:82:d9:7a:2d:57:
         7b:db:2f:1c:8f:d3:3c:28:0a:91:57:dd:db:8d:61:02:51:38:
         1c:f5:c0:dd:c3:7d:ee:bb:dc:b9:07:25:68:df:06:e8:0a:d2:
         6b:d1:ae:86:76:47:ff:c7:92:d9:ff:bc:e7:c1:e4:49:6e:16:
         b1:3b:0d:ed:83:51:39:0d:14:fd:8a:b3:83:32:a3:1c:11:1f:
         c0:cd:1f:02:11:b2:36:0f:28:5e:6c:57:f6:40:fd:aa:61:38:
         f2:b0:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:43 2026 by rpki-client