Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
File:                     B46886DF13C95D5C834BD72CDC1742C463272A72.mft (raw, json)
Hash identifier:          y1nfHG04JIw1wxMYbDPZVDulYs7xT99vPHhtpFDRJkE=
Subject key identifier:   97:4F:44:41:AA:D0:FE:F5:3E:9B:48:70:21:34:00:12:78:66:49:7C
Authority key identifier: B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72
Certificate issuer:       /CN=B46886DF13C95D5C834BD72CDC1742C463272A72
Certificate serial:       1C2B2062133DFEA90406EF9EE0E4744A1A9DD985
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
Manifest number:          C7
Signing time:             Sat 26 Sep 2026 21:06:06 +0000
Manifest this update:     Sat 26 Sep 2026 21:01:06 +0000
Manifest next update:     Sun 27 Sep 2026 21:15:06 +0000
Files and hashes:         1: B46886DF13C95D5C834BD72CDC1742C463272A72.crl (hash: mlNV8WQkUtRBQ4MDNkTo8Tey0kgNdlQ88yNGhD0ISas=)
                          2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: q5l3eOYPeemq7qIazHMV6kibSs/1KaEDRsni+YgaV1w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl
                          rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2b:20:62:13:3d:fe:a9:04:06:ef:9e:e0:e4:74:4a:1a:9d:d9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B46886DF13C95D5C834BD72CDC1742C463272A72
        Validity
            Not Before: Sep 26 21:01:06 2026 GMT
            Not After : Sep 27 21:15:06 2026 GMT
        Subject: CN=974F4441AAD0FEF53E9B4870213400127866497C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:12:e3:7e:4f:ae:92:78:b8:09:b4:83:68:
                    cb:8b:29:b4:e4:63:10:6b:68:9f:25:55:28:de:b4:
                    d5:e8:5b:71:e3:aa:5e:bd:bf:8c:61:b0:d7:5c:42:
                    88:e3:1f:e2:8d:65:58:5d:f9:0d:14:46:a2:1b:f4:
                    70:1d:98:bb:d7:ec:80:6b:6f:c9:dd:30:d7:98:04:
                    74:6c:a5:36:16:c8:01:b5:12:77:fa:52:f5:fe:7e:
                    69:35:14:c1:6c:e9:b2:76:d3:df:59:6a:3f:17:9e:
                    c2:1a:f1:92:cc:64:01:05:e3:aa:78:d0:58:ff:aa:
                    4d:d5:a8:f1:7c:16:45:26:dd:68:2f:9a:20:f8:df:
                    88:c1:5c:e7:36:04:a9:81:87:75:25:76:7d:72:68:
                    58:7b:af:1c:7d:90:07:cf:c0:e9:55:15:0a:ca:ec:
                    4e:16:78:cf:9d:70:21:30:b8:57:d7:db:d7:a5:75:
                    ed:15:7c:5c:df:14:26:14:d8:b3:ba:c0:f7:0e:95:
                    ef:89:6a:8f:95:b2:01:52:9b:14:b5:df:fd:91:a1:
                    d1:ca:2f:cf:b6:ee:8d:5a:6d:1e:3c:eb:f7:6b:67:
                    6d:27:eb:c5:7f:8c:a4:12:e7:80:6a:6a:78:74:72:
                    0a:e5:33:b8:82:9f:cb:1a:3a:4a:f0:d8:f3:32:b8:
                    34:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4F:44:41:AA:D0:FE:F5:3E:9B:48:70:21:34:00:12:78:66:49:7C
            X509v3 Authority Key Identifier:
                keyid:B4:68:86:DF:13:C9:5D:5C:83:4B:D7:2C:DC:17:42:C4:63:27:2A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B46886DF13C95D5C834BD72CDC1742C463272A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/B46886DF13C95D5C834BD72CDC1742C463272A72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:13:7a:7b:36:2f:e5:d1:ee:0d:0f:4b:2c:9a:02:71:c5:
         30:d9:09:cb:11:31:2e:74:d5:b9:43:93:97:c6:b3:bb:03:00:
         d8:c5:70:e4:3d:0b:46:d3:7b:db:d8:f9:ec:c3:20:72:88:06:
         c7:a4:90:99:8f:40:81:5a:46:a9:83:58:9e:0e:89:a9:0d:ad:
         4b:b1:c6:d9:95:4a:fa:a5:04:94:ed:46:87:ee:b4:b3:37:31:
         85:a8:02:a8:65:9d:93:1d:54:ad:eb:54:b3:11:1e:6d:e6:f2:
         b8:bf:db:38:ae:09:b4:e9:af:0b:1d:ed:6f:23:0c:45:33:68:
         f7:46:3a:96:93:2d:a1:68:18:bf:71:97:d1:91:bf:a6:dc:8e:
         fc:3e:62:02:d8:f5:9a:93:81:6b:7e:2b:a9:5d:85:0f:e7:34:
         79:64:67:c5:6d:05:dd:b1:40:a5:1e:76:30:2a:79:da:71:a1:
         b3:de:95:66:da:9b:bd:66:83:55:d4:60:45:3c:58:27:fa:f9:
         d9:16:36:10:7c:d0:f1:5b:19:b0:44:6e:ba:f5:3e:e5:08:41:
         d1:2a:31:35:d5:d7:a5:b2:61:b6:6c:bd:75:b3:d2:f0:e8:8a:
         91:5c:7b:4d:66:4a:ae:4b:33:0d:b3:8e:58:53:66:a6:d4:d9:
         04:0f:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:03:40 2026 by rpki-client