Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
File:                     67869B177D646DD081563D36E6E9775C31473EE2.mft (raw, json)
Hash identifier:          5s8rx0fnTbfZDPB9ofanJGz7dwB+4in+tNrA+ordb84=
Subject key identifier:   EB:39:B9:27:4D:4E:1E:1E:F5:00:BF:E9:49:DE:DB:87:EB:2D:57:C1
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Certificate issuer:       /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial:       186A65924D95B3740722117CB5033181BE4ED4FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 08:29:56 +0000
Manifest this update:     Tue 12 May 2026 08:24:56 +0000
Manifest next update:     Wed 13 May 2026 11:58:56 +0000
Files and hashes:         1: 323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa (hash: OzZH/D6AOeSKi/B68s/JsfZKJ8q2Nf0IMX0MHCxOzJU=)
                          2: 323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa (hash: T1nc91DmBxWyircdZzFzbDxGxyovVe7DPHahSvPllcY=)
                          3: 323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa (hash: 5J1J4PqLlG84JUqFzehXqUJSzaizav7T3dZxgUAafu4=)
                          4: 3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (hash: tDbsfjEDMxa62P8bXV7786EDY10m/l1Hfbr/3+kciqg=)
                          5: 3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (hash: X/sAxsDuRah8IJiZ2MNAigntLPHYMOLgC4Qd/BLMdRg=)
                          6: 3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (hash: e8KVnvyYSXyFNwKbKojy/FuBAC2iwrcpmK/bEobVoLw=)
                          7: 323430323a3630303a62313a3a2f34382d3438203d3e203338353135.roa (hash: mPehBT00jiY/mvxElgCv+CTGd1K6RVVC/AiDtpNS60E=)
                          8: 323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa (hash: SLO7crG5MN2DlhdgBiaeLi1vELhQiu/y4Xricr0iQIY=)
                          9: 3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (hash: N3QuzEKlcEB5QVB6ktu4ie90f+FhLLN7QYnW5ppb+do=)
                          10: 3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (hash: psHY4jaTgzI0faEzcQs4jj9v5F7KEDrhP0uTR9a6JIs=)
                          11: 3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (hash: H0lx6yfwXvuzVHo723AYAPX0NqfIefM1dqjJRJpPua8=)
                          12: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (hash: Y8970f4i5rHjVl4BWleFzqBrlQQgV35ntejpqxdnCiA=)
                          13: 3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa (hash: iuzg6GYGTaoy7fsEDAMwMxJJMU0InpEIJz/bfq0GG+k=)
                          14: 323430323a3630303a3a2f33322d3438203d3e203338353135.roa (hash: JOiAp3jXH49RWqx0RzZF/vQ7edFQ7lAl/c/n0M0GXRM=)
                          15: 3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (hash: qGWjnJJ/GYC6/UdMykV4yUNqj/n0gbris8Cxoim6J/s=)
                          16: 3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (hash: o2BW4KEu9QhR/ZgqGMngSixWkrbWulUWHKOK41U7NC0=)
                          17: 3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (hash: BbQ0kxGG4V/DoukSVVKvwhEMQ8SUJ9uiLxVWlPkIeKs=)
                          18: 323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa (hash: pbLRqvIGcFyn/7m6CqlnX9OGnnf//u2PTw4LD4ws3V0=)
                          19: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (hash: tMvUI+KURvhbQu+c9c8RrqZg9hF/ImzlW6ITnNdYAy4=)
                          20: 3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (hash: cUKFA5F04PCCOl3p+R/RfwT0fJqfxISh9qfKau7cspg=)
                          21: 67869B177D646DD081563D36E6E9775C31473EE2.crl (hash: T7QApHnpBg6op4TjCDg6gGZHJ2spPf8wwJf9BH3CRYE=)
                          22: 323430323a3630303a313a3a2f34382d3438203d3e203338353135.roa (hash: UoQ5wwYQR1W0CdGwm3CbzAGtC1zCCxi3okzihU8MCho=)
                          23: 3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (hash: tykJF6DboR5k4q21U5Qq+5eJiiEi7rWGoBUT5R2EI3I=)
                          24: 323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa (hash: ge328E5DHquhOrpztjYQoFR5EnAYSz6fiEvoUGs2cng=)
                          25: 323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa (hash: fyhAAUX0oYHo/blO6bCLTKGITAX4/ek1/9c40JSPCMw=)
                          26: 3131372e37342e3132302e302f32312d3231203d3e203338353135.roa (hash: BaQmZEH9tW06GWie+v+l91ALirtn7nIilUv54Li2/vw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6a:65:92:4d:95:b3:74:07:22:11:7c:b5:03:31:81:be:4e:d4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
        Validity
            Not Before: May 12 08:24:56 2026 GMT
            Not After : May 13 11:58:56 2026 GMT
        Subject: CN=EB39B9274D4E1E1EF500BFE949DEDB87EB2D57C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d3:52:fe:a7:03:21:f6:1e:60:f1:a1:82:ac:
                    68:d4:77:fb:f9:82:de:9e:35:f1:39:a2:d6:41:5d:
                    65:22:93:fc:41:1b:db:4d:3c:45:06:5d:14:b7:12:
                    1b:11:7a:77:e9:eb:13:46:b8:35:7a:30:d1:b8:19:
                    ba:56:af:ab:2c:6c:f3:8f:6c:a5:1e:8f:a3:e2:03:
                    fc:d3:66:55:98:31:cd:a5:d7:3c:b2:7f:bd:b4:0e:
                    31:49:fa:9b:d5:b7:18:d1:35:a8:65:24:ed:4e:ef:
                    99:a3:b0:3d:a8:11:94:cf:ab:72:f2:a0:94:02:37:
                    8b:b6:c8:b7:5c:80:4a:c2:33:01:1a:d7:ad:9a:0f:
                    58:e5:b9:bc:95:30:83:b9:e8:f3:0b:e3:13:22:cd:
                    8c:ae:6a:19:c4:c5:2c:4c:0b:96:af:8c:ad:60:f7:
                    11:fd:32:56:4c:d9:1f:f8:b1:ac:21:d2:17:d3:67:
                    44:bd:af:84:0b:45:88:12:59:06:18:08:df:13:86:
                    b9:46:e7:59:a7:49:e9:3d:9c:88:ab:a8:e2:43:24:
                    ff:29:98:c1:71:ae:2e:06:2b:2b:7b:c0:98:60:80:
                    1d:79:99:3b:cf:b6:04:1f:64:13:c1:36:80:92:5e:
                    93:e0:ae:ef:08:7d:11:22:3a:28:85:e3:ef:1e:b3:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:39:B9:27:4D:4E:1E:1E:F5:00:BF:E9:49:DE:DB:87:EB:2D:57:C1
            X509v3 Authority Key Identifier:
                keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2a:b6:c2:5e:c6:de:68:fc:32:d5:fd:cf:3f:bb:90:8c:4c:
         c5:3c:a8:58:bf:0e:b1:8b:62:c5:11:cd:ac:35:27:e1:52:e1:
         2a:7c:d3:1f:7e:a0:57:95:a1:dd:45:68:ee:90:9e:79:c9:42:
         05:9c:5f:b0:e7:11:9a:f6:bd:81:09:4e:80:6a:de:d2:50:ba:
         59:25:3e:be:30:76:a9:2a:1f:40:4c:28:ec:df:19:0e:99:d4:
         d8:4a:d8:59:c3:b8:17:29:f7:39:15:fb:d2:10:4a:a8:24:4a:
         57:62:88:86:6a:65:63:78:e1:b0:a4:ed:d0:22:e4:62:25:6b:
         93:fb:48:c1:2f:bc:d4:81:e1:f2:e3:f0:a6:45:0f:91:04:23:
         2e:a8:a0:27:09:00:7f:ea:d1:69:ac:f7:56:14:de:55:4f:2d:
         fd:db:26:d3:ac:65:33:a0:a8:c5:6d:4f:ed:05:03:50:77:b1:
         00:5d:8b:65:6f:e2:e5:86:ef:b1:8a:8f:93:df:a6:22:ae:f3:
         19:40:84:6e:f9:15:3a:c2:78:da:f0:e5:8d:c2:e8:ca:b2:57:
         c4:fc:26:37:d7:be:bc:c2:e1:af:ab:8a:59:b4:de:56:81:50:
         03:6e:7f:2a:09:d1:a5:1d:d8:17:69:79:38:3b:35:45:7d:2e:
         1a:c4:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:49 2026 by rpki-client