Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
File:                     468662DE4789E1663881A25708CA5FBF0EC39637.mft (raw, json)
Hash identifier:          ysdtyvWyFJ3cQzFbnT7MwDlsOKK8WyxfOsm1FxVyvXQ=
Subject key identifier:   36:6D:F7:7C:3A:BF:66:1F:21:61:88:01:80:17:60:E5:B3:6B:F3:B7
Authority key identifier: 46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
Certificate issuer:       /CN=468662DE4789E1663881A25708CA5FBF0EC39637
Certificate serial:       15B24E87DF361AB0DCAC97BC180DAEDBF051838B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 02:19:36 +0000
Manifest this update:     Thu 18 Jun 2026 02:14:36 +0000
Manifest next update:     Fri 19 Jun 2026 02:52:36 +0000
Files and hashes:         1: 468662DE4789E1663881A25708CA5FBF0EC39637.crl (hash: 7ly/tA2avv0XlLHDuk14pnxdSJ363QkcGGbzZP3T83Q=)
                          2: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: TDJxU3359vrwAFB04SP7SYHre1Ki2hvpSBCNPL07USs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
                          rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 02:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b2:4e:87:df:36:1a:b0:dc:ac:97:bc:18:0d:ae:db:f0:51:83:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468662DE4789E1663881A25708CA5FBF0EC39637
        Validity
            Not Before: Jun 18 02:14:36 2026 GMT
            Not After : Jun 19 02:52:36 2026 GMT
        Subject: CN=366DF77C3ABF661F21618801801760E5B36BF3B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:49:19:4a:08:cd:28:e4:00:a6:73:02:46:
                    bc:fd:c6:da:85:e4:f5:f1:02:ef:48:9c:6d:10:03:
                    9f:d1:ef:4d:55:f3:7c:58:96:14:b6:79:1e:c2:0a:
                    3f:a2:f5:10:10:c7:ca:dc:49:c2:2d:cf:fd:68:9a:
                    4b:be:15:1a:c4:3d:bf:94:3d:da:5d:36:1a:29:7c:
                    fd:af:e9:ad:cd:dc:52:c2:13:18:27:d1:f4:0b:6c:
                    b8:23:67:fd:4c:4e:4e:c6:c6:e5:0e:bb:fd:4c:32:
                    43:13:fd:c6:e2:36:b6:70:03:1e:38:11:d6:6c:9b:
                    27:41:10:fa:3e:c1:73:76:d5:a8:be:b2:75:93:f0:
                    a9:0f:b2:ed:90:b2:c6:88:72:7a:45:9c:25:09:50:
                    2b:f1:bc:60:ca:8a:d9:09:ca:fd:6b:00:41:d4:1b:
                    ff:a7:2e:c4:f6:ea:03:39:0a:c0:7a:80:c9:55:2e:
                    41:69:d9:c7:97:43:74:9d:db:e7:ea:6a:44:1a:b9:
                    95:f8:d9:5c:bb:7f:e0:ef:44:8e:03:59:76:8f:61:
                    0d:7c:dc:86:e0:2e:08:71:1e:62:02:97:99:2b:5c:
                    de:7f:88:e8:5f:3c:25:e4:f2:4f:34:13:90:8b:25:
                    14:a6:d0:73:da:04:17:46:73:fa:be:f4:5f:89:ea:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6D:F7:7C:3A:BF:66:1F:21:61:88:01:80:17:60:E5:B3:6B:F3:B7
            X509v3 Authority Key Identifier:
                keyid:46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:05:d0:0d:58:97:44:a4:f1:29:46:24:ef:90:67:26:a4:0d:
         ae:bc:7e:e4:af:c2:d3:04:f3:c5:4a:ad:95:7e:21:3e:bc:3b:
         12:9a:bb:1e:e7:92:46:6c:f8:0f:11:66:14:8e:25:47:ee:7f:
         c4:e7:5d:f3:00:33:78:bd:a4:16:e0:13:de:ad:d7:4c:0b:ec:
         1a:75:00:ec:44:fb:90:d7:7d:b2:a7:49:74:28:13:21:08:5a:
         d5:03:e9:a2:7f:67:b7:b1:23:1b:2b:24:d9:21:f3:22:0f:80:
         8c:74:a5:db:25:13:d3:3a:be:de:fc:bf:c7:db:d2:48:18:d1:
         29:83:5a:40:e9:81:46:71:ed:c5:46:80:8f:bd:6e:06:49:4a:
         aa:2f:c4:c2:f5:40:e0:63:bf:95:bc:35:09:1d:02:e0:39:63:
         01:e9:92:a7:df:56:24:4f:f4:5a:71:6c:95:72:26:d1:00:11:
         5b:e8:29:85:ad:4f:f7:c6:ab:2d:0c:ab:54:a4:54:ce:c1:10:
         3f:ed:55:47:a5:64:7e:4c:41:37:d9:72:0b:b4:fe:7d:96:79:
         a2:66:11:b3:f9:b0:a6:4e:9b:17:f5:20:0a:31:e6:a3:0c:49:
         95:4e:d3:a9:9f:2b:5e:a5:ec:7c:5e:e8:24:b9:48:0c:a8:cb:
         8e:83:d9:d3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFbJOh982GrDcrJe8GA2u2/BRg4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY4NjYyREU0Nzg5RTE2NjM4ODFBMjU3MDhDQTVGQkYw
RUMzOTYzNzAeFw0yNjA2MTgwMjE0MzZaFw0yNjA2MTkwMjUyMzZaMDMxMTAvBgNV
BAMTKDM2NkRGNzdDM0FCRjY2MUYyMTYxODgwMTgwMTc2MEU1QjM2QkYzQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODkkZSgjNKOQApnMCRrz9xtqF
5PXxAu9InG0QA5/R701V83xYlhS2eR7CCj+i9RAQx8rcScItz/1omku+FRrEPb+U
PdpdNhopfP2v6a3N3FLCExgn0fQLbLgjZ/1MTk7GxuUOu/1MMkMT/cbiNrZwAx44
EdZsmydBEPo+wXN21ai+snWT8KkPsu2QssaIcnpFnCUJUCvxvGDKitkJyv1rAEHU
G/+nLsT26gM5CsB6gMlVLkFp2ceXQ3Sd2+fqakQauZX42Vy7f+DvRI4DWXaPYQ18
3IbgLghxHmICl5krXN5/iOhfPCXk8k80E5CLJRSm0HPaBBdGc/q+9F+J6kDpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNm33fDq/Zh8hYYgBgBdg5bNr87cwHwYDVR0j
BBgwFoAURoZi3keJ4WY4gaJXCMpfvw7DljcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2VjZjVkOTQtN2YxZi00M2JmLWI3YWEtMjIwZjBjMTU2ZWMwLzAvNDY4NjYyREU0
Nzg5RTE2NjM4ODFBMjU3MDhDQTVGQkYwRUMzOTYzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC80Njg2NjJERTQ3ODlFMTY2Mzg4MUEyNTcwOENBNUZCRjBFQzM5
NjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3
YWEtMjIwZjBjMTU2ZWMwLzAvNDY4NjYyREU0Nzg5RTE2NjM4ODFBMjU3MDhDQTVG
QkYwRUMzOTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACsF0A1Yl0Sk8SlGJO+QZyakDa68fuSvwtME
88VKrZV+IT68OxKaux7nkkZs+A8RZhSOJUfuf8TnXfMAM3i9pBbgE96t10wL7Bp1
AOxE+5DXfbKnSXQoEyEIWtUD6aJ/Z7exIxsrJNkh8yIPgIx0pdslE9M6vt78v8fb
0kgY0SmDWkDpgUZx7cVGgI+9bgZJSqovxML1QOBjv5W8NQkdAuA5YwHpkqffViRP
9FpxbJVyJtEAEVvoKYWtT/fGqy0Mq1SkVM7BED/tVUelZH5MQTfZcgu0/n2WeaJm
EbP5sKZOmxf1IAox5qMMSZVO06mfK16l7Hxe6CS5SAyoy46D2dM=
-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:16 2026 by rpki-client