Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
File:                     4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json)
Hash identifier:          KurdQeXiLnm5VnZ/jWQPVthQ3V5RCSbiEn8uogOGznc=
Subject key identifier:   45:C3:67:FA:A4:C7:36:4D:73:E5:51:9E:BC:17:A5:23:87:2D:DE:84
Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85
Certificate issuer:       /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585
Certificate serial:       24ACED929DD467890DE20C5A88BA46D778C41BE4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
Manifest number:          0217
Signing time:             Thu 12 Mar 2026 11:01:49 +0000
Manifest this update:     Thu 12 Mar 2026 10:56:49 +0000
Manifest next update:     Sun 15 Mar 2026 20:46:49 +0000
Files and hashes:         1: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: nDliXxAdWeXgM2VZEMxrz8ilfKivzxbmnjyWygjX7oM=)
                          2: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: n1vxqT01MHNJQCue1F/8LHi9S+iotjvGE4Enfb7Gpo0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl
                          rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Mar 2026 20:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ac:ed:92:9d:d4:67:89:0d:e2:0c:5a:88:ba:46:d7:78:c4:1b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585
        Validity
            Not Before: Mar 12 10:56:49 2026 GMT
            Not After : Mar 15 20:46:49 2026 GMT
        Subject: CN=45C367FAA4C7364D73E5519EBC17A523872DDE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:c4:cc:e6:44:0b:40:76:81:f1:2b:5b:ff:
                    65:3d:9f:be:dc:73:44:4f:bb:e0:06:32:dd:fa:4f:
                    ea:85:14:c2:3b:22:34:07:50:89:0f:97:b2:49:cc:
                    ff:07:f9:45:56:65:c1:0f:40:31:8b:af:46:0e:d2:
                    3e:2f:76:42:ea:be:21:8e:cc:23:2d:72:82:1e:ab:
                    b5:86:e8:3b:7f:67:4d:70:e5:3e:4c:38:f9:6e:ba:
                    fe:43:34:49:f9:d0:32:7a:39:86:58:cf:2c:70:9c:
                    32:ba:df:a9:4b:3c:9f:34:11:21:b3:c9:35:cb:93:
                    de:39:80:b4:53:b6:54:7b:fd:2d:ac:df:ea:ad:c1:
                    35:ba:03:0c:3f:55:a7:33:9e:cb:bb:dd:63:25:68:
                    78:d1:f8:8e:73:da:36:af:07:ab:ee:97:93:1c:f4:
                    9a:52:68:4a:93:c4:3e:b8:7f:ec:d3:c9:39:80:c0:
                    b0:e0:b0:4d:9e:1d:8e:a8:f9:71:bd:b4:df:0a:57:
                    be:b4:98:2a:f4:e2:bf:61:5f:95:a7:bc:fa:d8:e5:
                    0f:03:e2:bb:bd:b8:ca:c2:7e:56:b1:1a:43:1a:2e:
                    0e:a6:f5:d4:d8:9d:41:33:b8:69:1f:ab:62:50:6d:
                    2f:20:e1:c5:75:a2:6e:6a:38:44:2b:24:7e:67:7c:
                    63:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C3:67:FA:A4:C7:36:4D:73:E5:51:9E:BC:17:A5:23:87:2D:DE:84
            X509v3 Authority Key Identifier:
                keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:55:44:ab:dd:1c:b4:9d:4a:60:43:86:31:5e:de:ce:e7:cb:
         3a:a0:25:78:ac:b4:c2:1d:82:6e:81:42:4d:85:85:ef:93:01:
         ab:54:0f:b3:ff:9b:6d:f5:0f:fc:c7:fe:01:31:60:ef:c8:e3:
         0d:43:29:51:b6:07:63:b8:96:e6:51:36:70:ac:2f:19:7c:de:
         52:29:51:1a:c9:2b:d3:27:09:0b:de:9d:64:bf:83:8e:fc:23:
         9d:b8:01:e3:08:a8:97:9c:9c:41:c8:dd:90:f0:a3:67:8c:fe:
         9d:ef:ff:18:95:53:1c:82:4c:b9:71:0a:ce:e9:75:9f:57:89:
         13:da:82:ab:b6:55:1f:c2:8b:75:6c:b1:b7:d2:42:ef:17:b1:
         7d:e1:5a:87:19:22:9e:5b:91:67:a3:55:ed:eb:fb:a2:ad:18:
         d6:46:28:bb:b0:11:30:74:04:c7:1d:81:79:41:d8:b5:98:fd:
         7b:5a:f2:4b:46:b5:5a:41:ee:de:62:f7:f2:f2:b7:a5:07:8b:
         5e:ff:f6:80:44:a1:25:40:7f:ff:00:96:0a:b9:3b:43:04:b8:
         79:4a:ae:24:cb:4c:2e:53:21:88:e9:9e:25:26:16:f7:c1:8c:
         94:74:e0:64:da:a4:f2:81:db:63:97:f2:9c:e3:9a:d4:32:cc:
         12:a6:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 00:31:53 2026 by rpki-client