Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
File:                     B46886DF13C95D5C834BD72CDC1742C463272A72.mft (raw, json)
Hash identifier:          DFedmp2F1mukPPl5rl3xc5dsASLeR6Q2G9r74/k8yy8=
Subject key identifier:   42:27:8A:BE:7A:E4:A4:86:FA:A7:C2:F0:A9:66:73:AD:9B:6A:57:4D
Authority key identifier: B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72
Certificate issuer:       /CN=B46886DF13C95D5C834BD72CDC1742C463272A72
Certificate serial:       7EE708914027C29B71424720BA3D7615C03F1CD2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
Manifest number:          77
Signing time:             Wed 29 Jul 2026 01:58:30 +0000
Manifest this update:     Wed 29 Jul 2026 01:53:30 +0000
Manifest next update:     Thu 30 Jul 2026 04:05:30 +0000
Files and hashes:         1: B46886DF13C95D5C834BD72CDC1742C463272A72.crl (hash: NR5tydSBlSU+Eb4+e0j/MZ/hi2DRekggj+NtSpmnArA=)
                          2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: q5l3eOYPeemq7qIazHMV6kibSs/1KaEDRsni+YgaV1w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl
                          rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e7:08:91:40:27:c2:9b:71:42:47:20:ba:3d:76:15:c0:3f:1c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B46886DF13C95D5C834BD72CDC1742C463272A72
        Validity
            Not Before: Jul 29 01:53:30 2026 GMT
            Not After : Jul 30 04:05:30 2026 GMT
        Subject: CN=42278ABE7AE4A486FAA7C2F0A96673AD9B6A574D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:bb:07:a5:09:e0:af:5e:6d:a2:84:d4:5a:
                    4d:40:c1:f8:8a:12:d3:bf:40:e4:68:c0:d1:da:cd:
                    bb:66:a6:02:0d:20:33:91:d6:ba:aa:7f:69:31:a7:
                    9f:42:6a:8e:ad:43:fa:f3:c0:17:39:62:ea:53:51:
                    ca:11:09:7b:ba:54:ed:07:9b:89:1c:d6:c8:07:02:
                    a1:f6:7e:49:2c:db:9a:9a:26:87:cc:f3:2c:31:b4:
                    83:75:f7:b8:6b:50:74:df:0d:e3:b2:3f:ba:2d:b3:
                    2d:57:0d:f0:eb:64:db:ee:2a:c1:03:14:e9:34:d7:
                    14:8d:1a:ff:f9:86:25:5f:06:77:44:62:82:6d:ac:
                    f3:ca:9b:6f:2b:5b:4e:e0:0e:a7:74:bc:ac:8d:9e:
                    67:e9:89:bd:f9:5f:4c:83:ad:be:00:ac:4f:00:ae:
                    3d:60:70:00:8a:e8:d7:85:de:3b:85:02:ef:2c:e5:
                    a8:23:4c:9e:e4:47:7f:de:a2:98:b3:5e:87:e5:99:
                    e2:17:2b:cf:c1:41:6f:8a:8b:c6:08:68:88:71:cd:
                    7f:6b:4b:fd:fd:11:81:d6:7e:30:48:a2:5a:8a:7a:
                    b2:41:89:e4:e4:8a:b9:d0:d8:1f:88:3b:d2:01:fa:
                    6c:9e:41:72:c3:8d:76:59:fb:aa:96:17:44:9a:a5:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:27:8A:BE:7A:E4:A4:86:FA:A7:C2:F0:A9:66:73:AD:9B:6A:57:4D
            X509v3 Authority Key Identifier:
                keyid:B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:82:bb:0d:fc:e4:2f:74:c1:0e:34:00:82:13:03:98:e4:27:
         49:b7:66:0c:1f:5d:cd:3d:ae:3b:cd:8e:2b:cc:45:64:24:51:
         9d:27:a1:60:c0:be:d1:fe:bc:35:3b:92:f5:77:3b:44:0a:37:
         8d:d0:ae:8c:91:f9:25:77:2f:f1:07:88:84:91:1b:48:7a:6f:
         da:0b:99:72:c2:d2:50:ec:91:9f:8d:13:02:2a:74:08:e8:a2:
         52:df:f1:3c:d4:97:64:18:a1:64:94:40:01:df:7a:ae:c8:ed:
         43:7b:29:63:cc:1e:78:86:2c:79:5f:f5:eb:10:db:a9:47:de:
         c4:72:93:3c:6e:d2:22:d9:21:d4:2c:84:63:eb:eb:b2:35:a0:
         4d:c8:2b:48:19:b9:e5:78:d3:fa:9c:0a:59:7e:b8:22:04:33:
         a2:57:bf:a4:27:70:4a:0f:ca:af:71:ea:26:6b:ab:d4:d3:7c:
         da:4e:c1:00:11:4d:b5:d6:1c:0d:27:64:4f:54:d5:19:ae:0a:
         e6:8f:1d:57:08:9b:bd:36:db:64:db:c2:ec:26:59:d6:4e:8f:
         1d:43:c8:71:c7:84:cb:d4:1b:c1:52:74:8f:8b:77:d9:68:e8:
         5f:40:a6:e0:e1:a5:b9:70:a4:24:1f:a0:e7:14:c5:f5:5c:5e:
         30:94:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:59:19 2026 by rpki-client