Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft
File:                     DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft (raw, json)
Hash identifier:          +l4GjZPkQgXykCk0OUMrHLd1LT6xNaKj5JbjH5XnwG8=
Subject key identifier:   0F:13:A6:4A:F3:08:07:13:47:8D:F7:DA:61:C6:6A:61:96:FB:BD:92
Authority key identifier: DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA
Certificate issuer:       /CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA
Certificate serial:       05848FDDC9860D74FDD01C994280A08B0C951700
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 21:23:58 +0000
Manifest this update:     Tue 12 May 2026 21:18:58 +0000
Manifest next update:     Wed 13 May 2026 22:49:58 +0000
Files and hashes:         1: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: /I/1xW7rsK7gJcZw8w0G3A5/hDeO0oqDDXrZo6p7Qtc=)
                          2: DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl (hash: CrQpdMwfhWaf615O2mF6dtOLOjBi1bNbTE1ZqybrDgo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl
                          rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:84:8f:dd:c9:86:0d:74:fd:d0:1c:99:42:80:a0:8b:0c:95:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDEC072A927751DCC8B6944CA460F1D90792C4BA
        Validity
            Not Before: May 12 21:18:58 2026 GMT
            Not After : May 13 22:49:58 2026 GMT
        Subject: CN=0F13A64AF3080713478DF7DA61C66A6196FBBD92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:24:2a:14:46:63:7a:47:59:df:97:34:b0:
                    90:b1:0b:3a:54:cc:9a:d1:67:8b:d3:2b:6a:e5:47:
                    6a:f4:01:d8:57:61:bd:5e:78:87:5b:ab:a3:1b:e2:
                    6e:49:95:29:60:eb:e0:98:4b:0f:62:f9:a6:e8:f2:
                    9d:03:0a:b5:be:2b:39:d5:ce:f4:30:af:68:33:ce:
                    7b:25:e1:bb:c8:58:83:4d:01:ff:83:4d:61:49:27:
                    38:9c:af:36:19:80:cd:d6:9c:75:19:c2:7c:02:3a:
                    56:b5:9c:08:c7:cc:45:44:d3:a0:b1:96:fd:c3:32:
                    fe:2c:48:da:77:15:54:90:c9:d1:8f:f5:be:20:4e:
                    d7:c4:49:ce:87:98:83:bc:72:9b:a2:d6:81:1f:02:
                    62:be:98:e1:cb:e9:f6:bb:b4:0b:43:09:b6:99:4e:
                    de:3a:63:12:29:d4:15:ce:36:03:87:2a:1f:19:d2:
                    7d:d4:c5:80:26:3d:dc:8b:e4:5d:b1:95:82:8d:64:
                    22:9d:f8:28:67:12:0e:ea:58:10:1e:42:69:aa:c0:
                    c6:45:d4:57:fb:fe:f4:a2:47:2a:96:f8:6e:18:82:
                    03:98:71:a1:a2:e0:ac:48:4c:a7:1a:66:11:f6:2e:
                    22:a6:43:ee:63:4d:c8:d7:00:f6:53:be:34:39:a5:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:13:A6:4A:F3:08:07:13:47:8D:F7:DA:61:C6:6A:61:96:FB:BD:92
            X509v3 Authority Key Identifier:
                keyid:DD:EC:07:2A:92:77:51:DC:C8:B6:94:4C:A4:60:F1:D9:07:92:C4:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDEC072A927751DCC8B6944CA460F1D90792C4BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/DDEC072A927751DCC8B6944CA460F1D90792C4BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:95:ed:5a:61:39:38:e7:ce:de:d6:c8:c2:41:e2:6d:45:1b:
         a9:f2:a8:c9:52:0d:13:fd:52:79:63:59:87:73:8b:94:e4:d0:
         f0:24:b5:15:c6:7f:c9:f1:37:d6:9c:30:59:98:63:6e:83:5f:
         23:0d:4c:52:f4:69:fd:1a:36:71:96:5f:19:7c:11:93:c2:39:
         4e:e7:a0:c8:f8:b2:5c:c2:62:dd:95:60:e6:04:b8:31:c9:1a:
         43:75:28:a2:e4:1f:19:a9:1c:ce:8e:7a:cf:a2:9c:4f:7f:59:
         3c:a7:1b:35:1d:dd:fa:e8:92:cb:05:23:38:78:dc:4b:ca:10:
         bf:4d:93:3f:b3:cf:ea:b0:0e:14:ca:85:db:ba:31:51:b8:53:
         0d:f9:93:88:40:7e:c4:fc:96:32:dd:2f:ff:b7:d5:20:ce:20:
         38:11:9a:85:f6:c4:1a:79:a8:58:29:1c:2a:da:86:4a:c7:78:
         fb:db:1c:fa:ad:2e:23:e0:1a:f1:21:63:4a:2c:92:e2:94:5c:
         cf:8c:4e:89:a9:5c:00:97:59:cb:ef:c4:ac:0d:25:41:6d:e9:
         98:20:0b:36:7d:77:f6:88:51:2c:9f:05:15:99:f7:9f:0b:6b:
         64:4f:dc:f2:cd:7b:63:b7:d9:35:d6:9c:88:0e:d1:14:3f:77:
         68:c2:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:53 2026 by rpki-client