Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
File:                     DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft (raw, json)
Hash identifier:          Pf4s7CPAenOm2e9h6OvHJE3nGCf+oR3ZNYxMtj4vMuk=
Subject key identifier:   4E:49:DB:F7:AF:11:67:B6:F5:C4:E9:3F:9E:1A:AC:25:19:52:EC:28
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Certificate issuer:       /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial:       21FEB14E2219C452333CDE7DB9518B7D17EC0E61
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 08:14:40 +0000
Manifest this update:     Tue 12 May 2026 08:09:40 +0000
Manifest next update:     Wed 13 May 2026 10:14:40 +0000
Files and hashes:         1: 3130332e35342e39342e302f32332d3234203d3e20313333383233.roa (hash: 8k8GBdwmmLxxYbQl8hVSFJB11CCZhdmJeHDaxUryxLk=)
                          2: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (hash: rV3JW0a+XbuONn+Xn+83PSsiUiDGSvLcSPYENSKK998=)
                          3: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: +Eo6/X263G5Flhn1qAu9gyHoX0t17OxYpS6itJBlqnw=)
                          4: 3130332e3130342e3133342e302f32332d3234203d3e20313333383233.roa (hash: XiipUAxKhZpqExkZmaytbPwvFyOgqAUmnU1lD7TzPNc=)
                          5: 34352e3131362e3135382e302f32332d3234203d3e20313333383233.roa (hash: nQrRB76uG72Hh2LxuDnyKLwPlyh9HS7iYL8/pD1Mrfc=)
                          6: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: JMnD/FckAq7CGqxhM7d0QezPRZyfqhzkSaCB6jbBlL4=)
                          7: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (hash: 3HSpbhFt3jsyDHbIYos3Q0wv5WIPJhLhWYlxaO7VL98=)
                          8: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: XqdfOz80MkiP/2rgQCkxAmQyHWpujvHUwXiMakIJlMg=)
                          9: DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl (hash: /c8CIN/l3Y4mraC2PpuFCGZh7vg3ps1DdWq/h23fais=)
                          10: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: uaiodumf3rhT3ZNuFDvfCf7glzd9Pb2iPFH1iPXAwiE=)
                          11: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: ZItAPK09I34Sz0y4vN9sPudl3u7/pYoXuiySE0aWVzw=)
                          12: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: 7Wj0at79mxr4FCZ9Hpd3BT3x3HOvoiIhi2Pmm/6ArH0=)
                          13: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: Z28vh0NgnW+1aBrpmxYKdmq+pclBZTpS+9KNoM7trNc=)
                          14: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: L8m06v4lypbJFkBBcAeCl2HHpHbjPmRx4afU7zHtGbs=)
                          15: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: yk8SbJDjIgwpR1q5UUTthk+GnMv3YbsIc4PcYf72L0s=)
                          16: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: BUcB/wlQeYt875aEAFYXrzIUGveCpyEGOJqyrP1PQAg=)
                          17: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: CzpR2y4E7Zo1QOZpSNmtByz2jwVCHD2bth2Q1Yf3tqo=)
                          18: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: hMe+orbuTN2RzbgcWeM+BwpjsEbYn/EerG23yS+Aa0g=)
                          19: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: qduWQnePlEvJvVDz1+kCY3smvF204bP3VzAzFq1FCjU=)
                          20: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: QdU3eW1GRvmoS7DD//Q44me2q9Bc9Ncs1A4bKejDmys=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
                          rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fe:b1:4e:22:19:c4:52:33:3c:de:7d:b9:51:8b:7d:17:ec:0e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
        Validity
            Not Before: May 12 08:09:40 2026 GMT
            Not After : May 13 10:14:40 2026 GMT
        Subject: CN=4E49DBF7AF1167B6F5C4E93F9E1AAC251952EC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:db:fb:ce:5d:d1:2f:0b:30:2a:0e:fb:a6:
                    fe:5d:1e:8d:38:14:f9:bf:d0:78:12:30:62:d7:4f:
                    33:fa:97:fb:69:07:74:e1:66:99:01:92:16:e6:c6:
                    4b:e9:d6:73:6e:57:10:67:27:0e:d8:ca:18:3d:17:
                    8f:e0:75:f9:a0:9c:8c:39:78:63:dd:94:d6:fb:bb:
                    70:12:79:fc:e9:e8:27:65:25:c1:01:ff:e2:15:e9:
                    67:86:3d:7d:11:4a:8c:17:4f:2a:84:86:a8:66:d5:
                    03:c6:b5:2c:4a:4d:e4:85:da:ca:68:64:9d:da:d6:
                    24:5e:d7:34:1c:47:2e:05:90:02:45:03:bd:a5:3c:
                    ad:25:25:42:d9:91:c9:e1:16:52:4c:05:a7:54:97:
                    de:b2:bf:d3:e8:5b:24:50:e2:c4:87:f1:bb:07:8f:
                    ae:91:f6:f5:2a:62:93:d6:15:33:d2:5c:06:50:37:
                    a4:32:31:6b:c0:8d:0b:0c:92:1d:66:5a:9b:29:a5:
                    4d:b9:8c:9a:de:53:b8:6d:8d:ce:96:2f:f4:a5:70:
                    1f:36:b0:d6:76:13:68:b6:8c:fa:e6:87:3a:0f:b0:
                    38:ef:9c:53:9c:7c:74:b0:f1:20:93:be:f9:8e:1a:
                    aa:19:20:8f:05:6f:f9:ab:ac:58:aa:11:ba:99:7b:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:49:DB:F7:AF:11:67:B6:F5:C4:E9:3F:9E:1A:AC:25:19:52:EC:28
            X509v3 Authority Key Identifier:
                keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d7:b1:06:5a:a1:f6:85:7d:54:05:c9:8c:14:ff:00:24:4a:
         07:8a:84:dc:e8:96:24:6a:f7:a0:5f:b6:c4:3c:23:04:44:e1:
         7d:76:74:9c:8d:64:34:10:4c:12:19:69:f2:0d:d6:76:94:ac:
         a1:7f:cc:14:f6:e4:72:cb:9a:1e:14:ec:34:2c:26:23:8d:ef:
         21:c0:b9:f3:a9:79:5d:06:ec:e2:3a:d2:6b:cd:56:91:72:80:
         d2:54:d2:78:77:a5:3e:31:a6:ee:0f:d0:2a:40:3e:de:14:1d:
         67:b4:7a:a4:13:d6:4c:7e:5b:df:ea:ee:c6:1e:69:4a:33:0e:
         61:22:31:04:95:4a:2b:33:1e:27:f3:9c:5a:d8:81:9e:0a:f9:
         22:f2:1f:a7:99:f1:25:2a:e1:e3:1b:29:a1:36:cc:8f:52:d8:
         b7:ee:43:4a:35:fd:59:4a:4c:04:af:e3:e6:d6:db:47:60:b6:
         57:a6:ea:4d:17:ab:f8:2b:cd:48:30:e1:2c:cc:18:d5:97:a9:
         8d:91:37:5f:0d:76:e3:90:0e:d9:b5:3a:96:2a:df:39:ba:da:
         14:75:4c:1c:b3:de:34:32:80:21:7b:58:b0:9e:ac:90:57:d7:
         3e:ae:ab:cb:bf:95:de:1d:04:79:ed:e9:8f:00:ef:ae:25:f7:
         9a:c6:0e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:01 2026 by rpki-client