Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
File:                     B46886DF13C95D5C834BD72CDC1742C463272A72.mft (raw, json)
Hash identifier:          Fnb1zzNmLStFcMGSwTfevYEe5QCyz9JvXF3UEq2AWWs=
Subject key identifier:   C3:A7:61:00:D8:76:8D:17:6C:91:8B:19:32:E4:AB:3B:55:67:A8:AD
Authority key identifier: B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72
Certificate issuer:       /CN=B46886DF13C95D5C834BD72CDC1742C463272A72
Certificate serial:       21F3640136AA6C265EA534066DA049FB3CB5A0DA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 16:39:38 +0000
Manifest this update:     Sat 13 Jun 2026 16:34:38 +0000
Manifest next update:     Sun 14 Jun 2026 17:12:38 +0000
Files and hashes:         1: B46886DF13C95D5C834BD72CDC1742C463272A72.crl (hash: Db6CoKek/Qp5j3oCBhQIvlLE6lynZgf1mwda/f4ViZA=)
                          2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: q5l3eOYPeemq7qIazHMV6kibSs/1KaEDRsni+YgaV1w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl
                          rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 15:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f3:64:01:36:aa:6c:26:5e:a5:34:06:6d:a0:49:fb:3c:b5:a0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B46886DF13C95D5C834BD72CDC1742C463272A72
        Validity
            Not Before: Jun 13 16:34:38 2026 GMT
            Not After : Jun 14 17:12:38 2026 GMT
        Subject: CN=C3A76100D8768D176C918B1932E4AB3B5567A8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:f8:a1:b9:c1:f6:fc:d6:0c:fe:57:4c:11:
                    18:00:44:be:d4:51:01:ad:bc:66:c0:6e:3b:a7:b8:
                    2a:98:d9:5b:52:a2:c5:8d:2b:0e:cc:8e:25:ba:cb:
                    5f:90:f5:c9:a8:9f:09:b2:8b:18:6e:e0:b2:35:8c:
                    00:b4:3f:30:80:51:c6:22:ae:14:f1:82:e3:ad:da:
                    e0:d9:73:7c:88:d0:59:8d:a4:a0:a0:7d:57:fa:4d:
                    6f:0d:e7:cf:ee:73:ad:81:80:ad:7c:5c:30:b2:60:
                    90:4b:35:93:21:c2:fb:06:0c:12:7d:54:7e:d3:57:
                    78:95:f9:97:69:78:b2:da:59:ca:9f:4d:ec:4e:a9:
                    a0:5d:b3:80:06:3b:57:ae:60:51:0f:8e:6f:0a:2c:
                    19:5a:16:db:44:b5:06:1c:28:e5:3b:7d:68:a4:a3:
                    90:23:b7:35:45:5f:d4:7c:ac:77:b2:bf:78:7a:33:
                    5f:25:5b:74:ca:56:56:2b:38:43:17:54:2f:14:d3:
                    27:94:90:c1:89:81:37:d0:4e:a1:b8:19:05:ec:25:
                    7e:10:93:03:24:f5:e7:10:46:c3:a6:3f:c2:73:76:
                    a2:4b:2e:29:84:e8:fc:9b:f2:ab:36:49:72:4e:d1:
                    ba:26:35:7b:4e:22:95:7c:33:62:51:b7:7d:ea:8a:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A7:61:00:D8:76:8D:17:6C:91:8B:19:32:E4:AB:3B:55:67:A8:AD
            X509v3 Authority Key Identifier:
                keyid:B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:99:02:4b:1b:b9:47:6b:e5:b9:32:e8:f8:b3:c2:ac:63:26:
         9c:cf:15:19:1a:15:85:bd:27:ae:1e:b2:28:2e:00:fe:6e:09:
         7b:96:b3:6e:5b:b3:6e:f5:a2:5b:9e:81:54:d2:01:cc:79:4e:
         7c:ff:0f:2f:39:59:1a:55:fc:20:79:92:3e:00:35:3a:ce:15:
         9a:7f:51:60:9c:cd:88:b1:e5:6e:09:61:d5:f9:fa:4d:fe:f6:
         7d:3b:24:26:41:ee:e1:c2:74:0a:2a:b8:e6:55:fd:27:7b:d6:
         ae:e5:67:a9:1c:54:b6:1a:e1:64:b7:a5:74:b4:25:5f:51:b4:
         8f:2d:b7:d0:41:93:bb:1d:8a:89:1a:4e:b0:b3:29:9a:6e:40:
         39:2f:97:36:3e:3c:ab:ac:a7:bb:03:95:26:1b:3e:da:2c:e1:
         45:d4:82:bd:cf:60:20:88:82:c5:bd:18:17:d8:c6:bc:15:da:
         c8:44:a0:0e:c8:a9:f7:9b:d2:68:b2:b6:2f:ff:d1:a6:28:4b:
         9e:a0:97:4f:e3:8a:75:1d:f6:0d:b4:1e:77:66:d3:f3:42:bc:
         ee:ed:2f:66:b2:5c:e6:f4:8a:70:ae:f6:db:9e:d5:bd:72:fb:
         26:e7:03:f8:b5:50:8c:83:3b:40:39:66:8c:a8:0e:8f:92:07:
         3f:c1:ab:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:48 2026 by rpki-client