Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
File:                     667078BDA093F84040F3016D179CABA67F68A647.mft (raw, json)
Hash identifier:          /lMk9MgTjeILEseKWaWpD9+JVInFWSkWyG2APipLFR4=
Subject key identifier:   A1:BB:1B:A4:67:BD:2D:BA:CC:42:17:53:2D:51:70:38:7F:B7:F8:F8
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       538FEB3A7D322425C17DEF991A833E1A7BB61592
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
Manifest number:          0314
Signing time:             Sun 19 Apr 2026 07:11:35 +0000
Manifest this update:     Sun 19 Apr 2026 07:06:35 +0000
Manifest next update:     Wed 22 Apr 2026 11:14:35 +0000
Files and hashes:         1: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: OsKe0Kd5H+cGfVTzKHXPxDzQtoqEpS1qzPCWtVfHK8o=)
                          2: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: CFm8UxOFUNv/+ECnjHOC47sfC3C4NJroGuyfEm+9/Ds=)
                          3: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: 2pAFw4pCfgppnXNzn4U9fVaUZRHA5FxGk6QsaeCqBJY=)
                          4: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: Ix+R/yfCu9YeIQiklNVMKU4ccTsIM4M8qCqs+sb4ZL0=)
                          5: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: Rpp4YpehQ1M+h6emtzM5wkYph2BpAIpQDGT9zp1ts2M=)
                          6: 667078BDA093F84040F3016D179CABA67F68A647.crl (hash: 0vqQHHasmGaQvBdqQGo4mBmmDoiRJ4EFaoF9QnWwFaM=)
                          7: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: yr0MNMuQ/IlUxBG9BJkWSvncA4WzNuZMrgeTlRsfQrw=)
                          8: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: 4EhIBVtTUnA2NsufqUE56qVJQ8W9fy5ksrwQzL7c16E=)
                          9: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: p1IlE+POO9hCFBImJs4SWaLDjBIhdLsxh8yaBGtXhAg=)
                          10: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: HbKwsuQgYC8kyv50M23w4h1WaGyYUtMgukyV/PzUlcs=)
                          11: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: IHCCAgl8I2RtthVlx/101ymvDPNvq6bpd64iBZCpSWQ=)
                          12: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: W5Ot0BBUNk5NFwRYk7ap1jPaT+1meSB0kfyCkhd5n7I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 20:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8f:eb:3a:7d:32:24:25:c1:7d:ef:99:1a:83:3e:1a:7b:b6:15:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Apr 19 07:06:35 2026 GMT
            Not After : Apr 22 11:14:35 2026 GMT
        Subject: CN=A1BB1BA467BD2DBACC4217532D5170387FB7F8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b2:2e:6f:d2:f6:00:f7:75:df:50:5f:da:9a:
                    f9:54:01:52:88:c3:ad:f0:b0:cb:57:7a:fb:4c:4a:
                    29:33:ad:8e:ee:db:40:cc:4e:dd:27:d8:84:87:80:
                    46:f7:9d:be:bb:b7:66:12:7b:f1:bf:35:9d:bc:a6:
                    0b:a2:73:3d:61:5b:d3:98:c8:e8:1f:c9:e3:aa:06:
                    6f:e6:bf:b9:16:25:68:ca:99:67:4f:8c:72:f3:90:
                    68:29:77:a1:ff:a6:30:35:b3:4c:8b:70:1e:fd:d2:
                    b9:68:5a:61:49:78:82:0b:65:7d:49:a8:8b:71:f9:
                    cd:2d:f1:1b:7f:1e:59:00:7a:50:f9:03:a1:30:48:
                    6d:9e:52:1d:24:66:fd:90:4f:e1:fa:d8:ff:10:01:
                    6a:7c:1c:c8:f3:c1:3d:dd:e1:ae:c2:2f:58:d8:a3:
                    6d:d0:ba:b8:ce:17:f8:19:f3:ed:8f:dd:ce:cf:4c:
                    fe:5b:6a:e1:cb:64:c7:9d:53:23:fb:6b:e6:2f:ee:
                    b3:0d:dd:68:30:f1:d5:4b:dc:d9:b4:bf:fa:80:69:
                    d0:03:35:86:74:11:03:ab:2f:46:4a:71:9a:0e:85:
                    35:68:d9:78:0c:3d:44:60:05:6e:f9:8a:d6:da:06:
                    e5:61:74:b1:31:a1:00:df:5e:5a:60:25:49:9c:2a:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BB:1B:A4:67:BD:2D:BA:CC:42:17:53:2D:51:70:38:7F:B7:F8:F8
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:40:a4:cd:3c:78:46:18:38:5e:04:73:29:1a:f1:77:f2:
         95:75:3a:a1:95:9e:b4:87:8c:c0:41:68:9d:cc:f7:72:e3:86:
         a7:27:f4:c9:58:93:8b:e8:41:e4:9f:93:66:6d:7b:3f:b0:3c:
         77:29:40:47:20:1e:86:05:2e:ad:22:44:35:d9:97:fc:ff:eb:
         c0:67:ce:c1:eb:ef:7a:0e:cb:1d:6a:ee:f9:a0:93:51:ce:36:
         b5:6f:a7:dd:b0:97:93:98:cc:e2:f7:de:21:f7:10:3f:ab:1b:
         fb:ca:d7:64:68:d1:01:f6:1b:b2:30:78:8b:81:58:7f:4d:32:
         4c:df:96:8a:b5:26:fe:04:31:fa:23:2f:b8:dd:cf:28:fe:fb:
         21:95:d4:72:1f:5f:a2:b8:b2:17:7f:c6:56:6b:a1:d8:13:7b:
         4b:ad:78:b4:9d:4e:06:92:9a:f9:7f:2d:8d:6b:62:9d:d4:0c:
         66:d5:f2:1c:5a:95:9e:04:85:6e:99:66:c5:c6:81:c9:bb:3c:
         5a:28:4d:d0:2f:97:0c:99:3a:17:a4:5d:c1:a6:ee:20:61:bc:
         44:03:c6:1b:50:b5:e0:e8:2b:4c:57:7b:f4:f3:39:61:af:77:
         e9:4a:63:17:62:5d:07:5d:5a:6e:c7:9b:c2:2b:86:9c:50:4b:
         ff:06:16:1d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUU4/rOn0yJCXBfe+ZGoM+Gnu2FZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3
RjY4QTY0NzAeFw0yNjA0MTkwNzA2MzVaFw0yNjA0MjIxMTE0MzVaMDMxMTAvBgNV
BAMTKEExQkIxQkE0NjdCRDJEQkFDQzQyMTc1MzJENTE3MDM4N0ZCN0Y4RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChsi5v0vYA93XfUF/amvlUAVKI
w63wsMtXevtMSikzrY7u20DMTt0n2ISHgEb3nb67t2YSe/G/NZ28pguicz1hW9OY
yOgfyeOqBm/mv7kWJWjKmWdPjHLzkGgpd6H/pjA1s0yLcB790rloWmFJeIILZX1J
qItx+c0t8Rt/HlkAelD5A6EwSG2eUh0kZv2QT+H62P8QAWp8HMjzwT3d4a7CL1jY
o23QurjOF/gZ8+2P3c7PTP5bauHLZMedUyP7a+Yv7rMN3Wgw8dVL3Nm0v/qAadAD
NYZ0EQOrL0ZKcZoOhTVo2XgMPURgBW75itbaBuVhdLExoQDfXlpgJUmcKlg3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUobsbpGe9LbrMQhdTLVFwOH+3+PgwHwYDVR0j
BBgwFoAUZnB4vaCT+EBA8wFtF5yrpn9opkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YzMyNmY0ZS02NjA1LTQ5NmEtYjlmOC1kNmU3N2IyOWJjYzYvMC82NjcwNzhCREEw
OTNGODQwNDBGMzAxNkQxNzlDQUJBNjdGNjhBNjQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3RjY4
QTY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzMjZmNGUtNjYwNS00OTZhLWI5
ZjgtZDZlNzdiMjliY2M2LzAvNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FC
QTY3RjY4QTY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD+nQKTNPHhGGDheBHMpGvF38pV1OqGVnrSH
jMBBaJ3M93Ljhqcn9MlYk4voQeSfk2Ztez+wPHcpQEcgHoYFLq0iRDXZl/z/68Bn
zsHr73oOyx1q7vmgk1HONrVvp92wl5OYzOL33iH3ED+rG/vK12Ro0QH2G7IweIuB
WH9NMkzfloq1Jv4EMfojL7jdzyj++yGV1HIfX6K4shd/xlZrodgTe0uteLSdTgaS
mvl/LY1rYp3UDGbV8hxalZ4EhW6ZZsXGgcm7PFooTdAvlwyZOhekXcGm7iBhvEQD
xhtQteDoK0xXe/TzOWGvd+lKYxdiXQddWm7Hm8IrhpxQS/8GFh0=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:21:00 2026 by rpki-client