Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
File:                     67EFB834694FDF326541D90AA7679322947189B3.mft (raw, json)
Hash identifier:          CdFcMPkMRcmLLFRao7IO746hcAtmVDQjK4XTSOTFZSU=
Subject key identifier:   7B:44:52:60:74:83:FE:CB:64:28:98:C3:FA:DE:9E:71:2D:85:C6:27
Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3
Certificate issuer:       /CN=67EFB834694FDF326541D90AA7679322947189B3
Certificate serial:       77FE05B0BC06177D86296EDE9BC5047EB76B33CC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 15:35:08 +0000
Manifest this update:     Tue 12 May 2026 15:30:08 +0000
Manifest next update:     Wed 13 May 2026 18:26:08 +0000
Files and hashes:         1: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: fn1MOIBgE5Swma7HSUIWj3J3RiVdRP+qpN+Sqj1ov9M=)
                          2: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: 3yR2EetJw0/oTW9Jd2JlHIoWXFNaZZVAvLcOZ+/Wty4=)
                          3: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: HqJNR72y60tx+IHjixNLgxPcXZs1k5eDNNpIpPxwoc8=)
                          4: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: LzSAsxWA0fgKh1RMMG/YhgW6mMukUQNYLTHnbdaiIMo=)
                          5: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: 8eM6PpqxHfl3Geudaa3NUNuJ/PYw2ByWv6dsPSCRAGY=)
                          6: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: 6Vl16dNzoeRKzBu/UGaBeg+RN1aOl59gJEJPta3Z5U4=)
                          7: 67EFB834694FDF326541D90AA7679322947189B3.crl (hash: uhBO/Dqkn0RUUUfEeOPkeBzZi7ycakiIXEfSihkSYOs=)
                          8: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: XTkmlIXCx+NIYx/yl8MiLKLX/AMPwncPF1lXc5QdA9I=)
                          9: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: I6I2rds5tbrSTDfNGBJVoBNAVLa2CLtfgmH3plnMbkE=)
                          10: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: U9EOJ8bWyg53fTX5/xBwCB9D3URUJVmaYk+uSMcOkJM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl
                          rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fe:05:b0:bc:06:17:7d:86:29:6e:de:9b:c5:04:7e:b7:6b:33:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3
        Validity
            Not Before: May 12 15:30:08 2026 GMT
            Not After : May 13 18:26:08 2026 GMT
        Subject: CN=7B4452607483FECB642898C3FADE9E712D85C627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:a1:00:2a:63:4e:53:b3:0b:ab:54:32:54:
                    74:31:e6:b7:11:62:06:be:04:5c:35:0c:2b:30:f6:
                    8c:14:4f:6b:b6:4f:73:56:b4:27:5a:56:2a:f6:bf:
                    22:57:41:ce:02:38:8b:0a:3f:68:6e:b5:d8:74:4c:
                    58:ce:7c:52:fb:c8:40:32:a4:15:b3:f2:0d:a0:68:
                    1b:18:6f:79:62:fa:9a:af:fe:e8:c8:01:23:32:70:
                    51:db:7a:e1:19:d9:42:e0:17:4b:cf:8d:f6:aa:d0:
                    fd:13:11:b5:98:ef:06:4f:9e:d9:11:b1:06:04:80:
                    80:71:36:6c:bf:e1:27:ac:36:c1:fd:ae:c2:d1:64:
                    21:b2:0e:66:4a:7e:e2:90:bc:23:32:1c:58:97:45:
                    cb:75:8d:17:65:89:e5:92:63:dc:90:7a:87:82:c9:
                    06:dd:43:5b:e4:1d:cb:c2:4c:e4:ca:0b:db:a9:ec:
                    b8:d2:bd:9c:46:29:76:84:ff:10:12:a7:fe:aa:ad:
                    72:25:32:1d:7e:e1:c1:52:f4:55:0c:da:9c:57:65:
                    4a:10:51:e1:29:ec:34:32:cc:df:1b:0e:04:08:7b:
                    d1:09:36:bc:91:3d:fe:b7:76:d1:f6:49:1c:9f:d0:
                    71:9a:26:3f:38:48:13:b6:2e:d7:19:cb:75:ee:91:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:44:52:60:74:83:FE:CB:64:28:98:C3:FA:DE:9E:71:2D:85:C6:27
            X509v3 Authority Key Identifier:
                keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:14:04:c2:87:d2:dc:2b:bf:f9:fd:a8:31:b0:f9:df:89:21:
         0a:85:fa:b0:9f:d9:0b:4e:0b:ec:0d:f0:5c:79:8d:9f:a5:7c:
         8c:45:01:a9:5d:c6:80:9a:4e:e3:73:1b:6c:92:db:4e:f9:f1:
         9f:48:5a:0d:10:af:66:a6:7f:dd:60:5d:43:2e:b4:e7:25:fb:
         5d:59:c6:39:93:13:45:29:88:7f:03:03:f9:f4:47:1a:7a:e7:
         96:2c:3d:66:72:75:be:12:c1:1c:6c:a9:02:35:9f:8d:a2:b8:
         8a:f9:19:0f:cf:7a:e9:2e:ff:c6:aa:16:6b:7f:1d:a5:14:4c:
         2d:ad:53:93:6d:43:97:2f:1b:36:a8:9e:50:d7:06:92:fc:d9:
         d4:99:6c:a5:fb:46:62:df:e5:48:be:0f:8c:9b:68:b3:98:08:
         1a:ad:37:f9:34:d8:22:3b:f2:6a:87:8d:c6:be:e9:32:91:d9:
         d6:93:28:a4:00:6e:60:48:94:b2:8b:96:87:3a:c6:f9:f9:5e:
         86:88:35:38:c8:ce:78:f4:99:3b:19:dd:d8:d4:de:12:34:b6:
         9f:5e:f3:a0:f6:c5:a5:41:e7:de:cc:c1:2a:9c:c0:81:94:f4:
         af:f0:35:83:ba:d0:4e:fa:95:fd:71:85:c8:84:d3:5b:f0:94:
         31:23:61:dd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUd/4FsLwGF32GKW7em8UEfrdrM8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5
NDcxODlCMzAeFw0yNjA1MTIxNTMwMDhaFw0yNjA1MTMxODI2MDhaMDMxMTAvBgNV
BAMTKDdCNDQ1MjYwNzQ4M0ZFQ0I2NDI4OThDM0ZBREU5RTcxMkQ4NUM2MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCluaEAKmNOU7MLq1QyVHQx5rcR
Yga+BFw1DCsw9owUT2u2T3NWtCdaVir2vyJXQc4COIsKP2hutdh0TFjOfFL7yEAy
pBWz8g2gaBsYb3li+pqv/ujIASMycFHbeuEZ2ULgF0vPjfaq0P0TEbWY7wZPntkR
sQYEgIBxNmy/4SesNsH9rsLRZCGyDmZKfuKQvCMyHFiXRct1jRdlieWSY9yQeoeC
yQbdQ1vkHcvCTOTKC9up7LjSvZxGKXaE/xASp/6qrXIlMh1+4cFS9FUM2pxXZUoQ
UeEp7DQyzN8bDgQIe9EJNryRPf63dtH2SRyf0HGaJj84SBO2LtcZy3XukZUXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUe0RSYHSD/stkKJjD+t6ecS2FxicwHwYDVR0j
BBgwFoAUZ++4NGlP3zJlQdkKp2eTIpRxibMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzhkMGU2NDAtMjJlOS00NDFjLTg2MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2
OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5NDcxODlCMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82N0VGQjgzNDY5NEZERjMyNjU0MUQ5MEFBNzY3OTMyMjk0NzE4
OUIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2
MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2Nzkz
MjI5NDcxODlCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGAUBMKH0twrv/n9qDGw+d+JIQqF+rCf2QtO
C+wN8Fx5jZ+lfIxFAaldxoCaTuNzG2yS20758Z9IWg0Qr2amf91gXUMutOcl+11Z
xjmTE0UpiH8DA/n0Rxp655YsPWZydb4SwRxsqQI1n42iuIr5GQ/Peuku/8aqFmt/
HaUUTC2tU5NtQ5cvGzaonlDXBpL82dSZbKX7RmLf5Ui+D4ybaLOYCBqtN/k02CI7
8mqHjca+6TKR2daTKKQAbmBIlLKLloc6xvn5XoaINTjIznj0mTsZ3djU3hI0tp9e
86D2xaVB597MwSqcwIGU9K/wNYO60E76lf1xhciE01vwlDEjYd0=
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:49 2026 by rpki-client