Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
File:                     B46886DF13C95D5C834BD72CDC1742C463272A72.mft (raw, json)
Hash identifier:          vJRE2sToU0wTnA0NPDLmlVt6E8ZJ7W5vp70cwaAjplM=
Subject key identifier:   F6:B5:34:B4:C2:F6:EF:66:F2:99:67:8B:0A:3D:A4:C5:51:25:FE:7A
Authority key identifier: B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72
Certificate issuer:       /CN=B46886DF13C95D5C834BD72CDC1742C463272A72
Certificate serial:       704E846B6E8C24A12697B70C3C22231D14A4A7F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
Manifest number:          DA
Signing time:             Sun 11 Oct 2026 03:25:50 +0000
Manifest this update:     Sun 11 Oct 2026 03:20:50 +0000
Manifest next update:     Mon 12 Oct 2026 07:09:50 +0000
Files and hashes:         1: B46886DF13C95D5C834BD72CDC1742C463272A72.crl (hash: +Q9JYbBiYJjSjsrE5FYJivlXBi1UCr9GDA5QV6X5oeM=)
                          2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: q5l3eOYPeemq7qIazHMV6kibSs/1KaEDRsni+YgaV1w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl
                          rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4e:84:6b:6e:8c:24:a1:26:97:b7:0c:3c:22:23:1d:14:a4:a7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B46886DF13C95D5C834BD72CDC1742C463272A72
        Validity
            Not Before: Oct 11 03:20:50 2026 GMT
            Not After : Oct 12 07:09:50 2026 GMT
        Subject: CN=F6B534B4C2F6EF66F299678B0A3DA4C55125FE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:f8:a8:b1:c8:8e:f3:01:59:e9:20:9c:98:
                    99:8b:f7:c5:91:1b:61:93:5c:ca:df:51:5f:ed:a6:
                    a9:07:28:a0:d6:9e:b8:b9:08:c3:82:4b:86:96:b6:
                    ad:1e:ab:f2:5d:2c:d6:eb:7d:eb:01:05:eb:21:54:
                    b1:25:9b:ff:84:53:5e:e6:92:90:02:38:d6:f9:07:
                    50:ab:75:56:70:77:89:d4:2e:26:4f:96:2f:ee:53:
                    96:8f:63:22:1c:76:11:9b:aa:15:6e:05:ac:62:91:
                    7c:f4:69:7d:8f:49:6e:33:f7:72:c2:f0:9d:8d:62:
                    a3:cf:97:8f:b5:77:ad:d9:06:89:2e:05:e2:61:38:
                    5b:24:1a:92:39:8a:64:b6:36:44:42:e7:f7:99:d1:
                    c9:41:27:f8:8a:42:80:6c:5c:e4:40:7d:1f:a3:24:
                    58:91:3d:02:3b:3c:d5:e8:81:e7:43:b8:f5:97:07:
                    aa:fc:3f:73:e5:80:72:2b:0a:99:24:6c:b3:2e:16:
                    98:30:98:d1:de:4c:04:a2:79:e8:c8:f0:62:80:79:
                    c4:bd:f8:cb:99:e6:6d:a1:ee:13:f0:ac:d5:22:bd:
                    0b:8a:d0:64:56:5a:11:0e:d6:25:3c:2d:35:b2:d0:
                    6d:bd:bc:98:f3:48:7a:29:f0:de:52:a1:85:f8:c7:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B5:34:B4:C2:F6:EF:66:F2:99:67:8B:0A:3D:A4:C5:51:25:FE:7A
            X509v3 Authority Key Identifier:
                keyid:B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:85:16:23:56:bf:45:ea:63:f1:d4:0c:b3:15:60:c8:7c:69:
         72:80:e1:d9:c7:ae:8d:bb:d6:2d:88:03:8b:ee:ab:8d:7a:74:
         a3:27:42:bd:1b:9b:4d:e0:91:e8:a9:ca:47:de:5c:8f:55:b1:
         13:bd:ad:0d:f7:02:76:c1:ea:7e:c9:97:af:01:09:00:70:f9:
         9c:78:a0:f1:08:b7:de:42:4b:04:fd:e0:77:0a:19:02:ea:a7:
         2b:07:96:ac:a1:29:ab:7d:79:d8:3d:19:09:62:52:79:e4:d8:
         d7:21:79:0d:a4:e6:4c:08:d7:20:5a:2a:07:94:34:cd:6f:aa:
         c3:29:5d:5f:0c:55:14:ac:22:d2:50:b1:10:2e:77:4c:95:e2:
         c8:bb:70:82:f3:6d:b7:3c:f9:3a:ce:12:38:78:ad:ae:95:0f:
         9a:c6:9f:1c:bc:eb:ff:51:f8:73:e5:21:cc:c8:ec:3b:00:5a:
         51:97:b8:12:25:a7:e6:f6:cd:5b:7d:ae:a7:00:3b:25:4c:8b:
         da:39:79:2d:e7:c8:fd:e8:5f:c6:9f:1a:da:58:25:77:e3:a5:
         7e:d1:c8:5d:b5:12:71:8a:8a:a6:41:51:79:d2:db:06:92:fc:
         9a:0d:8d:ab:fa:7d:20:56:b9:40:2a:b5:fd:bb:c6:58:5f:af:
         39:93:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:28:12 2026 by rpki-client