Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft
File:                     04464393DEE86F9C4534E90FA657647430EE82F1.mft (raw, json)
Hash identifier:          Urxz1LuBeLFdg1dZwNyRUyL7PKueWGzqLL5YfVydb1g=
Subject key identifier:   86:E1:66:0B:08:4A:4B:5A:57:BF:AD:04:85:68:39:7F:21:2B:E8:A3
Authority key identifier: 04:46:43:93:DE:E8:6F:9C:45:34:E9:0F:A6:57:64:74:30:EE:82:F1
Certificate issuer:       /CN=04464393DEE86F9C4534E90FA657647430EE82F1
Certificate serial:       4655B0512363BF4685E19187702209113BBB02C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft
Manifest number:          C2
Signing time:             Wed 23 Sep 2026 15:40:30 +0000
Manifest this update:     Wed 23 Sep 2026 15:35:30 +0000
Manifest next update:     Thu 24 Sep 2026 16:21:30 +0000
Files and hashes:         1: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: OOk+m+baT6rSEoQr7jsbvANi5LghM8WtezCSjbbc3mM=)
                          2: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: 5N/+NKK+QKHMpVx1kO3hDw5i9CbZNo+IX8Ypb8V9rXI=)
                          3: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: yMvq469T5W+wgJnUE4TkrUjU3nQrgKOaqCtAI0sxxfU=)
                          4: 04464393DEE86F9C4534E90FA657647430EE82F1.crl (hash: qHMslq1ZS/s9MW/xe7YI0Rvo49ksgGjsJbTxcXf1Qo4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.crl
                          rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 16:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:55:b0:51:23:63:bf:46:85:e1:91:87:70:22:09:11:3b:bb:02:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04464393DEE86F9C4534E90FA657647430EE82F1
        Validity
            Not Before: Sep 23 15:35:30 2026 GMT
            Not After : Sep 24 16:21:30 2026 GMT
        Subject: CN=86E1660B084A4B5A57BFAD048568397F212BE8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:33:9d:81:e9:90:50:e8:e0:c0:fe:7b:a9:
                    15:85:74:80:b0:7c:dc:6f:19:fc:4f:73:65:23:2b:
                    f9:07:f6:97:be:ee:af:37:74:d8:84:e2:8e:3d:fc:
                    50:7b:58:1d:8b:54:b8:20:67:76:76:b8:e4:8c:3a:
                    92:32:a0:8c:12:48:34:ee:15:76:53:75:27:cf:5d:
                    04:f9:58:60:37:6f:e0:27:2a:b9:aa:ab:ba:42:b4:
                    61:ae:3f:5e:ac:c2:83:96:98:98:4c:96:1b:df:57:
                    04:86:75:55:3e:ac:08:0a:c4:06:ad:2a:0b:a2:74:
                    a2:cc:31:6e:ab:5b:36:08:bf:aa:3a:c4:37:10:e7:
                    f9:55:f9:3e:43:cd:8a:a7:c9:6b:d0:3c:3b:49:65:
                    4a:89:77:31:f7:1d:bd:bf:ef:0a:4d:e8:a6:97:6b:
                    3a:b7:a9:8e:62:77:7c:48:49:6d:bf:00:0b:19:33:
                    07:ae:c6:01:f3:78:1b:87:6c:1d:34:ba:1c:18:06:
                    6e:1e:34:18:ef:c4:74:e9:b2:74:fd:c2:40:2e:83:
                    6c:32:ad:0d:af:fa:16:82:ac:2f:9f:0f:08:39:8c:
                    f7:26:12:33:15:a3:f5:68:8e:22:c3:00:55:48:a9:
                    76:f4:cd:f1:e9:48:fd:cd:0c:4f:c7:e2:ad:4f:1c:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E1:66:0B:08:4A:4B:5A:57:BF:AD:04:85:68:39:7F:21:2B:E8:A3
            X509v3 Authority Key Identifier:
                keyid:04:46:43:93:DE:E8:6F:9C:45:34:E9:0F:A6:57:64:74:30:EE:82:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:66:1b:8f:6a:3e:14:0f:33:69:0a:11:ea:55:dc:23:c3:
         82:fb:e0:8b:51:02:64:02:2c:7f:ba:96:ce:02:be:97:fb:ac:
         d3:1a:7c:8a:df:88:7e:ff:03:a0:ea:d9:fa:d3:a6:ca:b3:e6:
         82:d5:52:d9:75:f2:d5:c8:68:f2:df:9b:80:32:33:ff:12:f0:
         63:ab:2c:c8:95:7a:50:6f:ad:6c:b9:c7:2a:42:53:18:d7:ef:
         77:2e:df:7a:7a:3d:a8:6c:97:54:a7:bf:cb:04:ba:ef:16:b6:
         ad:2b:2a:92:56:81:f4:75:16:4a:cc:2f:be:d2:1d:29:bf:1d:
         50:95:29:81:4c:56:b6:79:29:d7:83:27:dc:78:af:33:29:06:
         3b:8c:8d:c6:53:4a:d7:2b:9f:69:cb:7c:50:7b:a4:ce:c6:27:
         11:0a:dd:61:e5:bc:fe:34:71:c1:cd:a8:ea:e7:84:18:78:79:
         29:52:00:95:ce:cf:c0:5d:26:37:25:72:5f:a7:30:cb:92:5b:
         ba:fa:2c:f6:72:bf:4f:6d:9c:d7:d4:d6:54:07:18:2a:11:b2:
         ef:25:8d:06:e1:0b:d0:48:9d:31:7f:f3:09:c0:d1:5a:c7:84:
         f8:41:dd:2e:c2:36:d4:26:34:3c:15:b6:d3:4f:42:49:f7:41:
         3e:3f:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:35:41 2026 by rpki-client