Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
File:                     67EFB834694FDF326541D90AA7679322947189B3.mft (raw, json)
Hash identifier:          IjVV2jGS4MoNaefPqontohEBcCX0rcbBNZHPwOQ4+S8=
Subject key identifier:   F3:36:E9:64:22:24:35:36:34:C4:E2:B8:76:68:DC:54:31:ED:F4:55
Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3
Certificate issuer:       /CN=67EFB834694FDF326541D90AA7679322947189B3
Certificate serial:       05A695802447BC85F367F6ED186F1F7A74A4B24C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
Manifest number:          68
Signing time:             Fri 17 Jul 2026 23:01:08 +0000
Manifest this update:     Fri 17 Jul 2026 22:56:08 +0000
Manifest next update:     Sun 19 Jul 2026 00:38:08 +0000
Files and hashes:         1: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: U9EOJ8bWyg53fTX5/xBwCB9D3URUJVmaYk+uSMcOkJM=)
                          2: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: XTkmlIXCx+NIYx/yl8MiLKLX/AMPwncPF1lXc5QdA9I=)
                          3: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: LzSAsxWA0fgKh1RMMG/YhgW6mMukUQNYLTHnbdaiIMo=)
                          4: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: HqJNR72y60tx+IHjixNLgxPcXZs1k5eDNNpIpPxwoc8=)
                          5: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: 8eM6PpqxHfl3Geudaa3NUNuJ/PYw2ByWv6dsPSCRAGY=)
                          6: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: 3yR2EetJw0/oTW9Jd2JlHIoWXFNaZZVAvLcOZ+/Wty4=)
                          7: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: I6I2rds5tbrSTDfNGBJVoBNAVLa2CLtfgmH3plnMbkE=)
                          8: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: 6Vl16dNzoeRKzBu/UGaBeg+RN1aOl59gJEJPta3Z5U4=)
                          9: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: fn1MOIBgE5Swma7HSUIWj3J3RiVdRP+qpN+Sqj1ov9M=)
                          10: 67EFB834694FDF326541D90AA7679322947189B3.crl (hash: ycFfHplvCdKL0sNdz/zlMUlS/2nJ2L/1CA5/RHx+BL8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl
                          rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 20:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a6:95:80:24:47:bc:85:f3:67:f6:ed:18:6f:1f:7a:74:a4:b2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3
        Validity
            Not Before: Jul 17 22:56:08 2026 GMT
            Not After : Jul 19 00:38:08 2026 GMT
        Subject: CN=F336E9642224353634C4E2B87668DC5431EDF455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:a0:8d:cf:a6:25:b4:60:18:10:a7:d6:d7:
                    0c:3d:1b:2f:64:eb:73:95:b6:93:b1:9d:24:a0:a7:
                    6c:8c:27:42:69:85:2e:bd:5f:c2:6b:50:be:ce:69:
                    41:5e:f1:31:dd:02:96:a6:6c:b5:63:85:51:04:9e:
                    76:2d:4e:e7:cc:46:07:5a:cb:e0:dd:8f:23:45:20:
                    f4:f6:12:9b:45:1e:9a:ec:06:85:ff:3c:8b:4d:e3:
                    f8:d6:44:4f:22:5f:a8:64:63:9a:1a:ba:52:bb:65:
                    60:ea:25:ee:1c:5a:c6:92:57:b1:47:f2:70:9f:1e:
                    15:e2:8c:88:96:68:1a:4f:e0:c5:10:e1:cd:e3:0e:
                    74:7c:24:7e:95:8f:45:d8:01:75:f8:6c:1f:57:4f:
                    53:fd:7c:6c:ab:3d:ed:2b:eb:bc:09:1e:7d:8a:a2:
                    c1:e6:07:5d:27:44:70:79:df:2e:27:86:46:b3:6e:
                    14:fc:a0:44:ce:b7:a0:b1:95:14:bf:68:24:9d:80:
                    27:df:ce:81:af:be:33:04:ac:57:ee:7d:1b:73:5b:
                    68:09:6f:9f:7d:96:d3:20:5f:31:27:7f:ba:cb:f7:
                    9a:0c:f2:1f:96:2b:7d:9c:2c:dd:c9:72:54:43:93:
                    7f:f7:e3:40:50:ad:52:6f:b2:4a:53:5e:fd:31:e9:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:36:E9:64:22:24:35:36:34:C4:E2:B8:76:68:DC:54:31:ED:F4:55
            X509v3 Authority Key Identifier:
                keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a8:e9:a0:ec:8c:ce:46:5f:bb:1c:0d:1a:b0:6e:b7:b4:bb:
         c1:fe:e6:e4:31:59:c8:ee:0e:9b:25:38:84:d8:6b:88:b8:4f:
         ef:66:a9:a6:65:7e:c9:dd:be:cc:16:aa:57:77:1d:13:68:74:
         c6:e9:5d:c5:14:57:40:09:24:d1:c7:ba:00:1d:de:3e:4e:0f:
         0f:9f:de:cd:41:1c:e7:9d:dc:de:98:a7:99:5f:71:28:f7:11:
         97:55:62:2f:35:8a:14:81:06:3e:7f:57:fb:9f:18:db:56:b0:
         a4:63:f6:16:a5:2f:73:20:2a:15:2d:7c:20:d8:b4:3e:f8:3b:
         22:17:fe:a2:65:74:33:5c:63:a0:40:67:09:3d:92:a5:6a:56:
         59:86:aa:b1:90:cb:c9:d6:51:be:be:3f:fe:f9:ae:d5:4e:0c:
         10:43:29:f8:ac:72:4c:ed:6d:46:c2:e3:76:43:ab:8f:03:84:
         bc:15:60:d7:e8:b0:c0:77:35:ee:15:b8:45:00:bb:2e:e5:70:
         f6:63:f6:75:f2:4c:30:42:1c:cc:a9:4b:07:d3:83:48:92:5c:
         6c:c1:9c:ed:c1:75:79:c2:f3:f7:47:2b:e8:05:17:50:4a:46:
         f2:50:07:06:31:dc:a6:fa:d4:5a:86:95:46:9f:e2:3a:38:91:
         84:a9:77:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 12:21:40 2026 by rpki-client