Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
File:                     67EFB834694FDF326541D90AA7679322947189B3.mft (raw, json)
Hash identifier:          t0P86iDLG8Q3B2vmxC2EUNGRv+m06IaqDXyxYoZz+wU=
Subject key identifier:   37:7E:59:FD:FD:4D:46:45:B5:89:20:16:01:D6:2F:23:48:90:7A:B7
Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3
Certificate issuer:       /CN=67EFB834694FDF326541D90AA7679322947189B3
Certificate serial:       45F867B3E0F204F885881EF0C7E5F327D27CBBF4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
Manifest number:          A7
Signing time:             Thu 03 Sep 2026 07:01:15 +0000
Manifest this update:     Thu 03 Sep 2026 06:56:15 +0000
Manifest next update:     Fri 04 Sep 2026 10:18:15 +0000
Files and hashes:         1: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: HqJNR72y60tx+IHjixNLgxPcXZs1k5eDNNpIpPxwoc8=)
                          2: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: 6Vl16dNzoeRKzBu/UGaBeg+RN1aOl59gJEJPta3Z5U4=)
                          3: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: fn1MOIBgE5Swma7HSUIWj3J3RiVdRP+qpN+Sqj1ov9M=)
                          4: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: 8eM6PpqxHfl3Geudaa3NUNuJ/PYw2ByWv6dsPSCRAGY=)
                          5: 67EFB834694FDF326541D90AA7679322947189B3.crl (hash: wqD0YQC1g71cmsMLg5q8U/H0uJVsxjrMy99vhOUm5vk=)
                          6: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: XTkmlIXCx+NIYx/yl8MiLKLX/AMPwncPF1lXc5QdA9I=)
                          7: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: U9EOJ8bWyg53fTX5/xBwCB9D3URUJVmaYk+uSMcOkJM=)
                          8: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: 3yR2EetJw0/oTW9Jd2JlHIoWXFNaZZVAvLcOZ+/Wty4=)
                          9: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: I6I2rds5tbrSTDfNGBJVoBNAVLa2CLtfgmH3plnMbkE=)
                          10: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: LzSAsxWA0fgKh1RMMG/YhgW6mMukUQNYLTHnbdaiIMo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl
                          rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 10:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f8:67:b3:e0:f2:04:f8:85:88:1e:f0:c7:e5:f3:27:d2:7c:bb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3
        Validity
            Not Before: Sep  3 06:56:15 2026 GMT
            Not After : Sep  4 10:18:15 2026 GMT
        Subject: CN=377E59FDFD4D4645B589201601D62F2348907AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:e1:92:04:3b:48:04:55:3d:cc:02:15:b6:
                    60:96:91:4f:93:73:6d:70:7e:78:2f:9c:1b:a2:9a:
                    26:19:5f:64:98:67:96:25:37:36:a3:43:f2:49:8a:
                    c7:79:06:ab:ca:10:35:6b:56:ce:22:ca:f9:9c:27:
                    c1:52:9d:e6:76:48:e7:d9:27:3f:4b:c0:f4:e0:f3:
                    1c:d0:b9:7c:f2:9c:ca:a4:f4:81:d8:bb:6a:4f:eb:
                    cd:ae:fd:fa:63:6a:d9:9a:7d:f2:68:f3:4d:d4:8d:
                    2f:a6:66:16:98:98:ad:3a:b2:77:ec:c7:92:20:e6:
                    9c:97:bf:35:4d:f8:08:1d:16:3e:7b:51:46:93:ed:
                    06:fa:28:eb:d4:4b:32:29:81:f5:01:e7:f2:a8:dc:
                    01:4a:7d:c6:52:b6:7d:ae:c4:d3:38:22:31:55:fd:
                    ad:7b:f8:0e:eb:0a:56:58:5e:b6:81:cf:25:52:96:
                    89:32:3b:02:5f:da:57:10:2c:ff:ad:fb:16:16:87:
                    bc:05:23:f3:20:18:7e:2a:52:e1:84:08:9c:93:54:
                    41:0f:f8:e9:bc:ab:ec:41:43:9f:86:94:a3:dd:f1:
                    fd:1b:4a:0f:2c:37:30:7a:58:5c:52:4c:05:7a:27:
                    ca:c1:ba:0d:a7:50:5d:83:0e:ef:b3:b7:a6:19:e7:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7E:59:FD:FD:4D:46:45:B5:89:20:16:01:D6:2F:23:48:90:7A:B7
            X509v3 Authority Key Identifier:
                keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:8e:ed:ad:80:03:26:91:20:59:5b:00:e0:dc:bc:fd:17:72:
         ab:75:2e:9a:6c:53:bd:c3:01:5f:32:47:3c:b2:37:38:06:2c:
         4f:d4:8d:e1:02:29:2a:51:14:42:8f:d2:46:8e:d8:12:de:6b:
         e1:1d:fe:4f:9b:a9:b8:24:4e:21:29:70:02:4d:05:35:1f:3f:
         15:ac:b3:f2:d3:19:d6:96:ab:f5:6d:74:3b:b3:b4:51:59:b3:
         1b:96:66:9d:9e:61:9a:16:0f:69:7c:b6:40:3b:29:14:2a:99:
         3e:d5:71:5d:19:8e:a8:eb:ba:1a:0f:cd:1c:d5:95:6a:eb:95:
         ad:ad:8b:37:a5:a0:bc:1d:89:d0:3c:4b:7f:8d:16:cc:26:ed:
         10:c0:fd:60:3f:88:c2:0f:d0:55:b8:5f:c2:3a:a3:24:81:64:
         87:d4:08:bf:fb:5a:50:c4:ce:6f:19:74:29:c3:6c:77:12:6e:
         59:63:f7:fd:02:42:96:b9:ec:00:f8:51:5a:93:ce:9a:d5:27:
         cb:1f:52:8c:e7:7d:36:8a:ff:fa:ad:a6:c3:54:49:4e:7c:6c:
         1d:1d:c7:50:67:4a:f6:12:1d:5c:64:5a:c9:94:bf:52:f8:a4:
         50:9a:4d:a5:5f:44:8a:8f:db:aa:81:ff:cc:36:bb:3c:91:04:
         ad:4f:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:07:35 2026 by rpki-client