Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
File:                     46932859C0D86F27F517A125185AE45763AEA7D7.mft (raw, json)
Hash identifier:          XRLaYgSriVjGVqOIaJRwkfS2Ek/TxTd+C1Py54vKDGk=
Subject key identifier:   D2:52:91:EF:02:D4:89:0B:AA:40:0A:43:60:16:E4:DE:5E:89:32:58
Authority key identifier: 46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7
Certificate issuer:       /CN=46932859C0D86F27F517A125185AE45763AEA7D7
Certificate serial:       47DA60793DA8676C74F4755670CC33E2361A7121
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 17:11:03 +0000
Manifest this update:     Thu 23 Jul 2026 17:06:03 +0000
Manifest next update:     Fri 24 Jul 2026 18:27:03 +0000
Files and hashes:         1: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: JlLJ7++ECgOuHqdNFhp6s2bGWg+2iwYDZNhy26Z53Oo=)
                          2: 46932859C0D86F27F517A125185AE45763AEA7D7.crl (hash: TXC7cY3oUb5fuPl1+8njPIWqfzG8ftzfNsd5ovnS6cg=)
                          3: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: Trw+y/sXFJtkefRvcCLMU2FAEepNpbCrLf/kUCXfHQE=)
                          4: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: 26c5fhilGEyh6ibLUJuFc5ukaLSiZO65uEMgb+eN6Nk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl
                          rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:da:60:79:3d:a8:67:6c:74:f4:75:56:70:cc:33:e2:36:1a:71:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46932859C0D86F27F517A125185AE45763AEA7D7
        Validity
            Not Before: Jul 23 17:06:03 2026 GMT
            Not After : Jul 24 18:27:03 2026 GMT
        Subject: CN=D25291EF02D4890BAA400A436016E4DE5E893258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:a0:89:b5:66:93:4d:d2:85:26:83:24:a9:
                    3e:f5:1b:f5:09:c7:78:c6:32:ab:73:e0:d9:76:4c:
                    ef:0f:e7:ac:ab:69:3f:b1:de:42:e4:f9:33:3c:be:
                    2f:ae:a1:ad:12:f3:33:d6:64:3a:bc:2e:0b:a9:16:
                    7e:7c:cd:0f:5f:2a:ee:3b:a3:1b:86:2d:1d:3b:62:
                    14:fb:a1:30:38:6c:77:5d:01:4e:ab:b0:98:26:6a:
                    9e:3b:03:b4:76:10:6b:70:25:a8:15:5d:a8:bb:dd:
                    b1:d6:67:72:5a:25:2b:88:fd:a1:24:93:72:ef:f6:
                    98:76:37:bd:50:cb:b0:d2:34:31:41:18:da:5d:65:
                    97:e1:d3:a5:63:c6:1c:c1:b2:9e:ef:34:d3:22:68:
                    1c:65:00:e6:a2:4f:cb:57:be:5a:36:9b:90:c1:ce:
                    bb:5b:19:21:aa:48:99:8f:e0:ac:d3:74:d8:10:e6:
                    03:ad:f4:4c:54:ac:aa:78:b6:2c:42:05:8b:2e:b7:
                    bc:34:69:be:fd:76:24:da:01:0a:43:cc:ec:1d:8e:
                    85:b5:85:0c:6d:e5:be:de:3b:cd:20:a1:c3:fa:ee:
                    22:17:1a:dc:42:53:67:98:eb:61:21:99:13:1a:e1:
                    e7:f7:14:90:d3:03:26:ea:b2:95:00:0e:32:1c:33:
                    c0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:52:91:EF:02:D4:89:0B:AA:40:0A:43:60:16:E4:DE:5E:89:32:58
            X509v3 Authority Key Identifier:
                keyid:46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:41:71:3b:da:7b:9f:95:fb:b8:94:84:20:11:e7:00:59:ce:
         de:7b:f0:05:ac:f8:9c:12:a2:a0:28:62:4a:ba:2a:1a:e5:24:
         a1:fd:dc:b7:7a:74:29:a3:bb:65:28:65:5a:17:9d:49:71:92:
         06:14:e3:ed:84:ef:f3:14:3e:60:0a:ce:4b:8f:2c:78:79:ed:
         a0:ce:74:a6:92:a7:32:e9:59:d1:d1:40:dd:5f:f4:7d:bb:fa:
         8a:de:90:ff:dc:82:63:08:96:fe:d8:d2:08:15:fa:77:88:3e:
         47:0a:ff:34:88:05:9f:71:d5:0e:6e:2b:60:2b:28:4f:a8:7d:
         92:d0:77:51:85:7a:49:77:48:22:2a:51:3b:be:c8:33:a5:41:
         15:80:50:5a:14:2f:d7:4e:43:72:ee:00:da:ab:a9:59:5f:6c:
         e8:57:4c:a6:b7:66:ac:0a:ba:d3:cb:90:57:e5:7f:3d:5c:1f:
         69:21:21:e2:7d:14:d6:f8:ee:e0:29:4a:a2:87:20:1d:eb:83:
         e0:35:39:83:e0:4c:f3:90:d2:3b:48:2f:e2:53:7b:86:bd:73:
         f4:6a:b9:2d:f8:88:3c:e8:95:11:03:f8:08:b4:e1:c4:49:ba:
         19:01:25:e0:92:37:c7:1b:6c:fb:31:0b:ca:1b:5c:41:74:8f:
         97:2e:0d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:22:15 2026 by rpki-client