Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft
File:                     DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft (raw, json)
Hash identifier:          wqizpie577YWI303WhmY+DBURXdnNen063UwZANYjIk=
Subject key identifier:   AD:58:ED:A1:61:20:86:80:F4:A2:A3:23:8C:AF:63:AE:BF:F2:C6:49
Authority key identifier: DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87
Certificate issuer:       /CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887
Certificate serial:       050AD0CE7F496EE2F4CA26CCC16913303153F7DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 20:53:03 +0000
Manifest this update:     Tue 12 May 2026 20:48:03 +0000
Manifest next update:     Wed 13 May 2026 21:46:03 +0000
Files and hashes:         1: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: ogZJ6AIvbYZ3rfPWkAwkD+wUu9pRc9HcU7kgCnHTVek=)
                          2: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: b9ucf82rqvNvVvSo4KylGCCzRBHVOTbyEMd9uIlhwkk=)
                          3: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl (hash: W0qD4h8RTq6EQ4zCRaBEwz83yved11M0gqzPjjOJFR4=)
                          4: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: swMIglkDWca6bTykcQAlBI8mPZmObmBmI7XJvNSgNmI=)
                          5: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: 7vL8y9qGcwGlBHTlp7W2DDNh7nh9ZG6pUOsZTFcC5m8=)
                          6: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: 2hrlUfalWGLJAAgURvT2UIB10iFx48ljh0wmwwAeiOQ=)
                          7: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: BbljfPMaDaoCXmfqlX766e2gOwStRy9KRMwBeVYrNRA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl
                          rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0a:d0:ce:7f:49:6e:e2:f4:ca:26:cc:c1:69:13:30:31:53:f7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887
        Validity
            Not Before: May 12 20:48:03 2026 GMT
            Not After : May 13 21:46:03 2026 GMT
        Subject: CN=AD58EDA161208680F4A2A3238CAF63AEBFF2C649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:ff:f4:c3:b8:75:81:4b:7a:ec:bc:c1:01:
                    1d:96:4a:ab:9a:9d:a7:ae:fb:fd:78:d6:3b:c2:f2:
                    f8:07:b5:b2:f3:b3:cd:8c:f6:36:f1:bf:fd:00:56:
                    09:7b:c1:08:80:af:8c:90:9e:d0:f9:21:3e:10:6c:
                    cf:28:f5:48:b1:65:1f:ff:92:b7:3b:fb:13:48:13:
                    ac:22:f4:c1:99:15:6c:c5:2d:f2:a3:4e:a2:fa:3e:
                    43:2d:48:31:1c:0d:7b:fa:bd:44:f4:5f:fc:e5:60:
                    43:21:48:49:0a:0e:02:47:23:ba:8f:58:59:eb:62:
                    de:ad:cb:73:d3:99:45:6d:ec:9f:87:c4:d0:05:a1:
                    b9:4b:21:9e:10:4a:af:e3:f4:f4:d1:42:7b:ab:76:
                    02:00:19:ed:6b:3c:85:fc:61:20:1f:7c:36:c8:a5:
                    61:7a:78:aa:e7:65:e0:a3:88:9c:e5:22:d5:05:a8:
                    02:ad:50:d9:65:c2:60:b3:65:45:96:13:e9:fb:73:
                    d3:8d:9c:4e:08:d5:bc:fc:99:69:58:33:83:ef:03:
                    ec:e8:ae:d7:b2:fc:10:8d:88:a4:56:d7:48:9a:0c:
                    c0:17:b6:db:4b:d7:18:7b:d1:9f:e7:f6:d1:51:2f:
                    5d:69:e7:1e:12:aa:ef:ee:a0:18:da:b1:dc:e2:06:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:58:ED:A1:61:20:86:80:F4:A2:A3:23:8C:AF:63:AE:BF:F2:C6:49
            X509v3 Authority Key Identifier:
                keyid:DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e0:dc:36:f3:69:3f:b0:d8:a6:09:20:3d:7e:51:52:3e:08:
         4e:45:ef:a0:43:bb:54:09:6f:63:fe:82:8c:2f:40:c8:d1:8d:
         a3:5b:9e:43:37:ad:28:48:41:ed:75:c5:82:76:98:a2:ec:e1:
         87:a0:a5:14:92:60:d4:88:07:d4:01:89:d4:ce:82:34:09:db:
         6f:4b:f4:97:7c:10:43:5b:ec:2f:91:02:f0:82:00:4f:38:65:
         57:8b:c0:fc:88:18:2d:f3:bc:13:da:25:80:39:ad:7f:6d:5d:
         95:97:e4:d5:e9:a5:c4:85:29:fa:fa:89:4c:be:db:24:e4:5a:
         5f:70:ce:46:3e:3e:92:0e:49:47:2b:42:92:9e:22:97:34:76:
         a7:f7:a2:4b:5c:cc:6b:f7:8a:4d:c1:1f:87:33:e9:16:39:42:
         4e:8b:f3:87:c7:c2:78:c3:d8:a4:0e:8c:2f:9c:7f:96:56:01:
         aa:e7:13:3b:be:a6:21:5c:8c:d6:5b:8f:30:ed:0b:e9:8c:7e:
         d7:d4:4b:8a:22:b9:22:25:4a:3b:e7:36:fe:f3:f0:af:d5:e3:
         b4:0d:52:99:de:ba:ed:e5:b9:9f:3a:da:5a:26:e3:a3:46:b6:
         8c:73:88:ec:84:1c:48:9f:4c:c3:87:c6:0c:71:79:3b:0b:e3:
         24:31:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:09 2026 by rpki-client