Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
File:                     468662DE4789E1663881A25708CA5FBF0EC39637.mft (raw, json)
Hash identifier:          T6hF30u1Aj/ZRUzAj43ZjGqHG78ZL7SovGm6Dez8va0=
Subject key identifier:   7B:07:3A:CB:31:13:82:EB:A5:14:D5:1F:1A:67:B3:9E:84:A1:B7:7D
Authority key identifier: 46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
Certificate issuer:       /CN=468662DE4789E1663881A25708CA5FBF0EC39637
Certificate serial:       3A40B3562F068851A7E6397FA54D81FEF73EF574
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
Manifest number:          C3
Signing time:             Fri 25 Sep 2026 03:19:20 +0000
Manifest this update:     Fri 25 Sep 2026 03:14:20 +0000
Manifest next update:     Sat 26 Sep 2026 04:46:20 +0000
Files and hashes:         1: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: TDJxU3359vrwAFB04SP7SYHre1Ki2hvpSBCNPL07USs=)
                          2: 468662DE4789E1663881A25708CA5FBF0EC39637.crl (hash: KQmjwFjVwxQKq0Xywu+5+EFRGKDLawTVSdJGvNbspiU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
                          rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 04:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:40:b3:56:2f:06:88:51:a7:e6:39:7f:a5:4d:81:fe:f7:3e:f5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468662DE4789E1663881A25708CA5FBF0EC39637
        Validity
            Not Before: Sep 25 03:14:20 2026 GMT
            Not After : Sep 26 04:46:20 2026 GMT
        Subject: CN=7B073ACB311382EBA514D51F1A67B39E84A1B77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:29:e6:60:7f:93:2a:65:a7:7d:52:17:49:
                    6c:ad:64:9c:39:47:a7:b5:f2:ef:4b:9e:15:67:dd:
                    76:2b:d9:f3:95:42:db:4b:e4:7e:34:7e:c6:b2:bd:
                    51:5f:57:c8:e7:75:db:d9:fc:53:d5:79:8c:e8:00:
                    60:56:4c:cc:24:fe:7d:90:b7:a9:7f:f9:d0:a5:f4:
                    c1:46:62:2a:db:12:67:15:17:85:04:30:a3:1d:40:
                    6c:0c:31:27:50:9e:9a:2c:a3:dc:f0:45:04:75:d0:
                    7e:83:32:75:dd:0b:8d:3b:ee:56:3c:ca:9e:a8:3d:
                    f6:f8:d3:f4:20:6e:22:5a:78:5a:cf:45:51:16:da:
                    d7:bd:98:78:11:5e:8f:d5:fe:75:5c:52:a6:26:92:
                    46:2f:c3:ab:42:94:ca:df:8f:1b:6f:2d:91:26:1d:
                    aa:65:27:f2:d9:51:04:d5:4d:bb:4e:84:60:4b:10:
                    bd:56:b3:fe:8a:76:d2:f9:2e:ab:e7:87:aa:c5:80:
                    3c:ff:13:6f:e4:43:e7:41:d9:db:ae:aa:8d:8b:c7:
                    b3:e6:b4:de:30:13:ed:a6:b2:91:4f:91:c5:66:ec:
                    01:8b:fc:9b:13:69:35:7f:1b:1b:0c:85:11:d1:95:
                    4e:40:fe:be:3c:7f:4e:f3:13:f7:eb:03:75:0e:2c:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:07:3A:CB:31:13:82:EB:A5:14:D5:1F:1A:67:B3:9E:84:A1:B7:7D
            X509v3 Authority Key Identifier:
                keyid:46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7f:55:64:b3:e4:f4:50:67:88:81:1a:e1:6f:e1:78:43:e5:
         a8:fb:5e:d1:a8:34:12:73:34:c3:dd:5e:3a:07:e8:14:99:90:
         44:1d:c5:f0:b4:87:b6:f7:97:78:ec:23:ea:df:52:d1:ce:bc:
         2f:a2:28:54:2a:4b:70:a1:bd:07:54:2f:b7:8a:4c:8d:74:2e:
         ab:b5:31:0e:3d:4a:4d:a3:48:17:71:2e:98:0f:85:5a:bb:ae:
         c4:ee:89:7f:14:47:89:43:42:47:34:f7:eb:9a:f7:c2:b1:5d:
         6f:76:d1:0b:b3:91:de:40:cd:d1:1e:92:34:17:04:6e:47:bd:
         7b:f4:bf:aa:d6:93:eb:c2:31:3a:0c:bb:17:d0:16:95:d8:bb:
         47:3a:37:61:95:6d:bd:01:2c:a9:02:27:37:8b:01:42:d5:e3:
         b2:60:f5:6a:b2:40:71:fd:48:b4:20:0c:82:6e:c0:5f:84:2e:
         7d:c4:1f:7d:70:a6:f3:15:cb:82:38:22:22:fc:2c:2b:b6:d9:
         de:5a:ca:60:ab:d2:78:e2:24:f4:9f:49:37:40:ac:2b:46:b7:
         9f:94:57:58:4f:cb:4d:55:4b:58:73:08:c4:0c:5f:bf:c9:ff:
         98:77:9e:43:89:63:cb:e8:d9:bb:96:9f:2c:75:5d:45:c6:c4:
         0d:28:4d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:00:11 2026 by rpki-client