Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
File:                     468662DE4789E1663881A25708CA5FBF0EC39637.mft (raw, json)
Hash identifier:          POfTdCgs8KVx6S3/olejqdTcTtJTyDLPSUrPUnvmlFs=
Subject key identifier:   11:8E:D5:BE:61:9B:5A:2E:FA:7A:52:BD:5B:53:CB:7C:AD:92:21:ED
Authority key identifier: 46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
Certificate issuer:       /CN=468662DE4789E1663881A25708CA5FBF0EC39637
Certificate serial:       3AF5841387773625B4C9B4F7EF2660B994193ECC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 07:52:18 +0000
Manifest this update:     Wed 17 Jun 2026 07:47:18 +0000
Manifest next update:     Thu 18 Jun 2026 10:18:18 +0000
Files and hashes:         1: 468662DE4789E1663881A25708CA5FBF0EC39637.crl (hash: KUbUUrVqn9q0qGbItGt/VybfD3k8sovu5EJPErTytr8=)
                          2: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: TDJxU3359vrwAFB04SP7SYHre1Ki2hvpSBCNPL07USs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
                          rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f5:84:13:87:77:36:25:b4:c9:b4:f7:ef:26:60:b9:94:19:3e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468662DE4789E1663881A25708CA5FBF0EC39637
        Validity
            Not Before: Jun 17 07:47:18 2026 GMT
            Not After : Jun 18 10:18:18 2026 GMT
        Subject: CN=118ED5BE619B5A2EFA7A52BD5B53CB7CAD9221ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:45:25:5c:49:f5:68:ed:aa:fd:6a:7e:b3:
                    1e:c1:89:91:a8:5c:14:ae:cd:88:8b:8c:79:c7:21:
                    ed:fd:84:09:16:3f:96:7b:79:ba:40:80:58:d4:ba:
                    4e:c2:c6:bd:18:a3:1b:57:f4:bb:09:76:b0:b3:ad:
                    c0:fa:7e:7d:f7:25:17:b0:a1:05:97:ee:f8:be:e0:
                    6c:03:71:84:93:34:07:c6:81:bc:4e:f8:83:25:ed:
                    b7:64:ff:e4:f7:4e:ad:96:55:ca:ed:4a:94:e1:88:
                    f4:64:fb:50:00:38:90:65:b6:72:a7:71:1e:57:19:
                    f1:2d:a3:e9:ed:2b:58:78:ff:a3:b5:90:b5:6d:06:
                    33:ee:2a:ba:55:da:cb:2a:ca:73:86:53:25:d2:81:
                    1e:cf:38:e1:53:ae:73:92:60:e0:fd:68:e0:5b:5e:
                    16:60:31:bb:12:86:ec:23:42:9a:c5:bf:aa:1b:cb:
                    9e:bc:dc:1f:cd:dc:72:70:54:52:df:a0:c9:89:20:
                    ee:27:e2:b8:41:4f:d0:ce:45:21:60:f3:09:6f:e4:
                    98:4d:89:c7:72:87:fc:eb:44:19:4f:5c:45:5d:6f:
                    63:e5:8f:ee:85:ba:90:b4:34:73:d8:0d:cb:08:25:
                    08:cc:d3:45:84:96:b6:d2:fc:7b:a1:45:ed:df:1a:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8E:D5:BE:61:9B:5A:2E:FA:7A:52:BD:5B:53:CB:7C:AD:92:21:ED
            X509v3 Authority Key Identifier:
                keyid:46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ea:00:8c:ad:03:11:ed:0e:9a:d8:75:c6:75:57:de:ac:92:
         da:ae:f7:1b:6b:30:e7:25:c6:f8:69:22:72:a2:f6:bd:38:3b:
         52:53:d0:b6:8a:cb:e0:9f:b3:d2:4e:58:66:d6:51:23:e2:c9:
         24:4b:1e:cb:16:b4:b1:a9:35:3f:12:1c:d6:77:dc:7d:0b:f3:
         38:1b:34:c3:5a:de:c7:59:34:99:94:89:4d:85:f4:fd:25:ba:
         8f:9f:bb:8e:bc:04:15:ac:41:7b:06:e4:88:f0:2f:0f:38:73:
         29:40:e6:6f:46:80:f1:ef:6f:5c:a9:b3:3b:0a:8f:d0:2f:c5:
         ba:f9:37:44:be:34:eb:62:4e:c6:09:ac:65:50:88:7c:5b:37:
         d8:ec:c7:27:37:87:97:27:07:a8:16:eb:69:c6:7a:c1:22:18:
         62:a0:1d:10:b6:c2:04:e6:2d:a9:fc:ec:f5:b0:a1:06:06:3c:
         11:a3:d5:17:43:3c:10:fb:11:4c:c9:da:0a:eb:c4:41:e2:03:
         7a:3c:56:fd:d0:fe:ff:eb:a5:9c:42:90:9d:2c:6d:0e:12:0a:
         ac:c7:81:ae:b0:6b:a8:fd:50:6b:0f:b0:6a:ba:65:95:a6:2e:
         3d:f9:83:95:bc:ac:ce:15:a6:8f:3e:03:e5:c1:eb:1e:84:f2:
         2c:bf:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:50:14 2026 by rpki-client