Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
File:                     67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json)
Hash identifier:          YM+HH3T8v74UTVh1WIjGcOiEUDUzPTsq4Vln3vTI8xI=
Subject key identifier:   F2:66:8B:DB:B5:46:0F:7E:92:7E:CB:08:2C:F9:E2:34:9E:F7:BC:0B
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Certificate issuer:       /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial:       1255F40B877F7911CEF682A64B6BEC4CD59EC6AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
Manifest number:          01D0
Signing time:             Fri 17 Apr 2026 15:11:21 +0000
Manifest this update:     Fri 17 Apr 2026 15:06:21 +0000
Manifest next update:     Mon 20 Apr 2026 21:03:21 +0000
Files and hashes:         1: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: cUEVfE37WxdT4kHnIzexzxRMipeP3G60x6uiLR24DxM=)
                          2: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: ykUl0EgucaeGBo8y5bh3sO9qVk7TgL7k+FGqs4dVA3Y=)
                          3: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: E0irVGESu7KDeCq0jiZnRBIori5M3Ejegufg1mVhq5I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
                          rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 21:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:55:f4:0b:87:7f:79:11:ce:f6:82:a6:4b:6b:ec:4c:d5:9e:c6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
        Validity
            Not Before: Apr 17 15:06:21 2026 GMT
            Not After : Apr 20 21:03:21 2026 GMT
        Subject: CN=F2668BDBB5460F7E927ECB082CF9E2349EF7BC0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:27:b3:65:70:08:3f:c8:12:57:c9:60:3d:
                    1f:a3:6a:10:68:14:f3:9f:da:be:e4:dc:be:04:b9:
                    b5:8c:27:9a:ec:ff:a4:95:47:ae:2a:96:fd:b8:09:
                    3f:08:96:f2:ff:e9:f3:bc:75:07:da:36:96:8b:93:
                    3e:66:c4:82:cd:05:19:6e:ce:72:5c:a1:c6:41:5a:
                    41:c9:12:41:62:f5:0c:99:6b:0f:d7:96:e5:82:50:
                    ea:7f:15:e0:36:7f:23:ae:7b:0a:38:7c:ae:23:4d:
                    16:6b:b8:e7:06:f8:b2:4f:46:86:59:07:40:8a:32:
                    72:63:f6:c0:63:8c:53:42:ec:48:56:d9:ba:40:01:
                    2b:3c:a2:d2:7f:e2:93:a2:b7:00:e2:93:7e:87:c5:
                    b7:41:e9:94:52:70:e8:72:06:ca:01:43:c3:37:08:
                    72:ea:66:7d:25:92:f3:3f:d1:7d:01:38:82:62:49:
                    ee:ee:ef:75:54:be:9e:3b:e9:4a:5d:58:ca:63:86:
                    7c:0e:5c:1f:32:48:92:57:04:60:0d:9c:28:b2:6f:
                    4d:d2:5b:77:f8:5f:d4:8f:93:4f:14:9b:d5:aa:dd:
                    8b:48:d7:b5:c3:c6:32:cc:3c:31:c8:60:82:69:a4:
                    bd:26:e3:fc:52:31:0f:5d:bd:fd:1a:19:87:5e:76:
                    74:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:66:8B:DB:B5:46:0F:7E:92:7E:CB:08:2C:F9:E2:34:9E:F7:BC:0B
            X509v3 Authority Key Identifier:
                keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:76:62:5a:a4:ae:c3:0d:27:a7:59:f3:85:65:60:8a:68:16:
         4a:26:8d:63:2f:77:a1:ad:81:a5:01:44:c8:02:6a:e1:55:b5:
         11:f5:4e:da:ab:9e:e1:0b:5a:84:e9:4f:f3:8f:72:c0:66:78:
         21:79:ce:92:f0:d5:f1:2e:72:3b:40:4f:95:ed:5e:28:be:de:
         e5:a4:22:43:80:4c:7a:1e:b7:0f:ae:07:a1:7b:8f:db:c8:de:
         88:72:f8:a3:ef:14:51:2b:a0:87:9b:fe:22:63:ca:c4:b3:bf:
         75:52:d7:be:57:ca:d2:f5:b3:ff:31:c5:00:c9:d5:be:e6:89:
         49:92:5a:32:4a:bb:89:13:4e:23:02:ed:31:88:74:53:46:a9:
         04:40:c9:d2:32:df:5c:bc:3a:4a:62:9e:e9:2f:46:87:10:0c:
         96:79:48:ef:21:90:3e:70:cb:59:9c:4e:85:e6:38:e9:8e:e5:
         bd:88:10:a2:10:1a:8b:2d:07:e5:a4:a7:50:28:5e:fa:d3:1b:
         1a:8f:20:b4:b7:f9:ee:6f:d4:cd:6b:25:a2:ce:85:58:65:ae:
         00:d0:25:9e:5f:9e:dc:ff:f0:d0:60:d5:30:21:56:0e:68:4e:
         8d:55:00:bf:f4:d2:ef:b0:fc:39:39:eb:b5:3c:2f:2f:14:0a:
         61:ae:06:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:27:48 2026 by rpki-client