Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
File:                     67EFB834694FDF326541D90AA7679322947189B3.mft (raw, json)
Hash identifier:          KgS7myTLgXtKLNT96eIxgplTtYq758Tt6YeFeC4SfGQ=
Subject key identifier:   E9:EF:BD:4A:6F:20:F5:87:65:86:4C:12:76:BB:B7:E9:2C:1A:27:EA
Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3
Certificate issuer:       /CN=67EFB834694FDF326541D90AA7679322947189B3
Certificate serial:       2E825588EC7367082C943D4114208A7BF127ACF5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 05:15:16 +0000
Manifest this update:     Sat 13 Jun 2026 05:10:16 +0000
Manifest next update:     Sun 14 Jun 2026 08:04:16 +0000
Files and hashes:         1: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: 6Vl16dNzoeRKzBu/UGaBeg+RN1aOl59gJEJPta3Z5U4=)
                          2: 67EFB834694FDF326541D90AA7679322947189B3.crl (hash: zqZgNTyshMkc+4dVl7Vce0zpgOCi2mMT7sYkh25XvlU=)
                          3: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: LzSAsxWA0fgKh1RMMG/YhgW6mMukUQNYLTHnbdaiIMo=)
                          4: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: 8eM6PpqxHfl3Geudaa3NUNuJ/PYw2ByWv6dsPSCRAGY=)
                          5: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: I6I2rds5tbrSTDfNGBJVoBNAVLa2CLtfgmH3plnMbkE=)
                          6: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: XTkmlIXCx+NIYx/yl8MiLKLX/AMPwncPF1lXc5QdA9I=)
                          7: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: HqJNR72y60tx+IHjixNLgxPcXZs1k5eDNNpIpPxwoc8=)
                          8: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: U9EOJ8bWyg53fTX5/xBwCB9D3URUJVmaYk+uSMcOkJM=)
                          9: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: 3yR2EetJw0/oTW9Jd2JlHIoWXFNaZZVAvLcOZ+/Wty4=)
                          10: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: fn1MOIBgE5Swma7HSUIWj3J3RiVdRP+qpN+Sqj1ov9M=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl
                          rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 08:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:82:55:88:ec:73:67:08:2c:94:3d:41:14:20:8a:7b:f1:27:ac:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3
        Validity
            Not Before: Jun 13 05:10:16 2026 GMT
            Not After : Jun 14 08:04:16 2026 GMT
        Subject: CN=E9EFBD4A6F20F58765864C1276BBB7E92C1A27EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:c7:e3:a2:b1:3e:cd:75:12:cf:c0:5d:26:
                    f5:a6:1f:64:3c:cf:6e:47:58:53:11:84:09:b3:1a:
                    a2:50:10:e6:94:ac:07:dd:10:28:3b:bd:8f:40:a0:
                    27:bc:8c:ff:95:0c:01:ba:62:3b:94:19:f1:f1:91:
                    75:62:47:41:3a:db:42:ab:f9:33:b3:05:39:d6:6c:
                    1c:ad:f6:5f:23:85:a9:ec:bd:48:97:d5:08:68:8f:
                    f7:37:5d:19:34:53:eb:6e:fa:67:a4:e0:3d:61:73:
                    67:6e:71:ac:78:38:89:8a:5c:7f:44:e7:b1:b5:2c:
                    5f:e2:33:cf:31:4e:e1:16:19:e5:de:6b:99:2e:5f:
                    c8:3f:d0:ac:67:ee:f6:89:1f:f1:eb:6b:ad:ae:2b:
                    8a:02:67:35:90:34:6b:83:f6:8c:7e:c5:16:ad:b1:
                    5d:6d:4d:6c:df:c9:8b:f3:86:e4:4b:85:27:bb:12:
                    3a:89:7f:75:c3:31:8c:d4:ff:68:17:05:69:49:46:
                    e3:8c:1e:fe:7d:59:60:5d:69:3e:0c:84:63:af:1b:
                    68:aa:cf:30:cd:c3:f8:6a:56:16:61:f9:44:f8:3b:
                    91:32:7f:d2:3a:aa:c2:03:34:06:48:c1:db:0b:d3:
                    27:7b:67:66:e7:26:d0:9c:a9:ed:a2:ee:80:3d:05:
                    52:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EF:BD:4A:6F:20:F5:87:65:86:4C:12:76:BB:B7:E9:2C:1A:27:EA
            X509v3 Authority Key Identifier:
                keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c8:28:17:2e:30:07:85:cb:c4:3d:de:e5:f0:5c:ce:97:33:
         4d:65:46:e6:87:4c:a6:9a:ac:03:da:9d:09:a2:9b:16:8d:87:
         e8:a8:31:44:2b:d8:ca:a2:ef:68:1d:30:de:29:69:50:70:3f:
         1e:52:4c:61:5f:f1:8f:7e:b8:21:88:8c:51:fc:35:c2:fa:b7:
         1c:2d:0f:40:e5:eb:e0:16:df:e4:98:30:72:2e:d6:3b:6c:7a:
         a5:a8:31:07:27:d3:cc:59:ac:34:95:fb:22:43:65:d7:22:59:
         6d:14:d9:74:97:bb:af:18:c9:0b:72:ca:87:18:81:15:0f:7b:
         bc:f0:70:52:af:d6:b9:88:4b:fa:db:5c:ed:ae:32:6c:d2:10:
         51:51:e4:56:4b:c5:35:c4:c5:6f:de:54:7a:9b:35:00:03:75:
         c0:ca:e8:8c:51:7c:c5:94:9f:f5:fc:32:71:61:8a:b2:79:18:
         c7:48:ef:b0:6b:56:89:99:13:c1:74:6b:39:af:d2:68:4a:03:
         2e:a4:2a:6d:ba:89:7d:f7:9e:81:bc:29:7e:0f:35:42:42:de:
         01:d3:f3:cb:1a:79:49:a9:64:d3:64:da:df:e5:61:8f:fe:70:
         5c:88:de:9f:43:f1:f6:1e:ed:a0:5d:89:88:9e:dd:3f:77:d8:
         fa:d6:f6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:05:23 2026 by rpki-client