Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
File:                     468662DE4789E1663881A25708CA5FBF0EC39637.mft (raw, json)
Hash identifier:          DjGp/CUcm1R0xxki2UUGIoxevjTc9hkqS1gMNWMkCT8=
Subject key identifier:   9D:41:B9:38:B8:9F:73:FE:40:4F:62:16:46:6D:15:1F:44:28:5B:B6
Authority key identifier: 46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
Certificate issuer:       /CN=468662DE4789E1663881A25708CA5FBF0EC39637
Certificate serial:       24C6697DBF54AF0BE37CE10BC86CCF09DE7C9501
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
Manifest number:          0106
Signing time:             Sat 14 Nov 2026 22:27:18 +0000
Manifest this update:     Sat 14 Nov 2026 22:22:18 +0000
Manifest next update:     Sun 15 Nov 2026 22:56:18 +0000
Files and hashes:         1: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: TDJxU3359vrwAFB04SP7SYHre1Ki2hvpSBCNPL07USs=)
                          2: 468662DE4789E1663881A25708CA5FBF0EC39637.crl (hash: /a2gqlmw+TXVbLjvHeWMD8Dg6FQAPwRp8ycad9XFMRk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
                          rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 22:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c6:69:7d:bf:54:af:0b:e3:7c:e1:0b:c8:6c:cf:09:de:7c:95:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468662DE4789E1663881A25708CA5FBF0EC39637
        Validity
            Not Before: Nov 14 22:22:18 2026 GMT
            Not After : Nov 15 22:56:18 2026 GMT
        Subject: CN=9D41B938B89F73FE404F6216466D151F44285BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:c6:b9:5d:85:f3:5a:24:b4:82:2b:20:57:
                    1d:dc:76:29:97:72:c5:a3:83:dc:0d:a2:b3:1a:82:
                    d2:6d:4a:50:cf:77:90:dc:33:cf:8e:7b:e4:fc:d1:
                    ec:a5:6a:6a:dd:a6:db:7c:b7:f7:6f:01:3c:5a:6d:
                    de:6a:5e:2a:b6:cb:43:bb:d2:20:09:50:dc:8a:5c:
                    4e:46:c6:8b:5d:c1:cd:c9:c9:28:88:b9:9b:58:58:
                    21:73:6c:8f:97:4e:ee:4b:66:da:05:f9:03:39:7a:
                    4e:72:84:5c:4d:75:c2:d5:eb:d4:7f:5e:e6:dc:c5:
                    bb:35:3f:98:e8:95:82:5d:f7:8c:12:b0:91:6f:34:
                    a4:9f:09:d9:51:fb:4c:e1:a0:71:50:58:31:ae:11:
                    43:d7:f6:4b:d1:a4:d7:b9:f5:ca:52:13:e5:f1:83:
                    df:e3:5e:38:17:dd:12:9c:53:0e:9c:b7:89:0d:0f:
                    c4:39:51:14:41:da:13:0f:c7:71:67:9b:b6:81:7a:
                    b9:4f:18:f3:a0:ae:67:d9:8e:2f:14:b5:a8:00:ad:
                    16:56:64:00:0c:8a:9d:5e:d2:18:61:36:67:5f:c2:
                    b4:d9:46:30:e6:0a:b9:99:5b:95:37:dd:1c:9a:24:
                    ce:23:f5:42:22:f1:e2:fe:1a:60:1c:19:69:5c:bd:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:41:B9:38:B8:9F:73:FE:40:4F:62:16:46:6D:15:1F:44:28:5B:B6
            X509v3 Authority Key Identifier:
                keyid:46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:29:fa:dd:59:e5:be:75:33:eb:e6:19:85:d9:08:da:a6:82:
         62:16:41:59:b9:bb:38:7f:cf:ca:9e:38:f0:29:de:ab:1e:22:
         6e:f9:9a:37:2f:f1:6d:95:71:ca:a0:c5:96:cb:0e:67:e3:bf:
         52:b8:cc:9d:47:85:ee:73:f1:bf:b3:ab:b6:af:19:51:91:b6:
         ec:f5:96:f2:19:49:00:d6:dc:b9:0a:a7:95:ff:f7:e8:58:2e:
         28:ee:04:8e:ac:1b:cc:86:d1:52:ca:41:da:ec:6f:c1:7d:16:
         bc:77:4f:67:10:47:30:04:3d:95:f0:b7:1c:1f:e2:cc:af:46:
         f0:fb:ab:10:44:1a:80:2c:7c:80:f2:25:15:11:6b:c7:0a:f4:
         b4:48:b6:56:9b:e6:03:28:7a:5e:10:81:bb:94:14:08:84:c4:
         62:16:a4:37:4b:05:34:f2:48:34:d8:c2:65:a0:2e:f6:23:9e:
         ee:fc:9d:2f:aa:ca:85:7d:78:d0:de:5d:bf:da:ff:1c:f9:bb:
         4e:39:a7:9f:9d:54:54:eb:06:3b:c2:43:10:75:8f:78:64:d1:
         88:5b:cf:91:46:1a:a9:ca:b7:77:2c:39:fa:21:ed:b2:5f:cc:
         49:98:00:c3:4c:42:0d:4e:96:c0:51:92:da:23:83:f8:3a:5e:
         e6:d0:4b:20
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJMZpfb9UrwvjfOELyGzPCd58lQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY4NjYyREU0Nzg5RTE2NjM4ODFBMjU3MDhDQTVGQkYw
RUMzOTYzNzAeFw0yNjExMTQyMjIyMThaFw0yNjExMTUyMjU2MThaMDMxMTAvBgNV
BAMTKDlENDFCOTM4Qjg5RjczRkU0MDRGNjIxNjQ2NkQxNTFGNDQyODVCQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0ca5XYXzWiS0gisgVx3cdimX
csWjg9wNorMagtJtSlDPd5DcM8+Oe+T80eylamrdptt8t/dvATxabd5qXiq2y0O7
0iAJUNyKXE5Gxotdwc3JySiIuZtYWCFzbI+XTu5LZtoF+QM5ek5yhFxNdcLV69R/
Xubcxbs1P5jolYJd94wSsJFvNKSfCdlR+0zhoHFQWDGuEUPX9kvRpNe59cpSE+Xx
g9/jXjgX3RKcUw6ct4kND8Q5URRB2hMPx3Fnm7aBerlPGPOgrmfZji8UtagArRZW
ZAAMip1e0hhhNmdfwrTZRjDmCrmZW5U33RyaJM4j9UIi8eL+GmAcGWlcvYZLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnUG5OLifc/5AT2IWRm0VH0QoW7YwHwYDVR0j
BBgwFoAURoZi3keJ4WY4gaJXCMpfvw7DljcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2VjZjVkOTQtN2YxZi00M2JmLWI3YWEtMjIwZjBjMTU2ZWMwLzAvNDY4NjYyREU0
Nzg5RTE2NjM4ODFBMjU3MDhDQTVGQkYwRUMzOTYzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC80Njg2NjJERTQ3ODlFMTY2Mzg4MUEyNTcwOENBNUZCRjBFQzM5
NjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3
YWEtMjIwZjBjMTU2ZWMwLzAvNDY4NjYyREU0Nzg5RTE2NjM4ODFBMjU3MDhDQTVG
QkYwRUMzOTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABsp+t1Z5b51M+vmGYXZCNqmgmIWQVm5uzh/
z8qeOPAp3qseIm75mjcv8W2VccqgxZbLDmfjv1K4zJ1Hhe5z8b+zq7avGVGRtuz1
lvIZSQDW3LkKp5X/9+hYLijuBI6sG8yG0VLKQdrsb8F9Frx3T2cQRzAEPZXwtxwf
4syvRvD7qxBEGoAsfIDyJRURa8cK9LRItlab5gMoel4QgbuUFAiExGIWpDdLBTTy
SDTYwmWgLvYjnu78nS+qyoV9eNDeXb/a/xz5u045p5+dVFTrBjvCQxB1j3hk0Yhb
z5FGGqnKt3csOfoh7bJfzEmYAMNMQg1OlsBRktojg/g6XubQSyA=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:23:09 2026 by rpki-client