Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft
File:                     DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft (raw, json)
Hash identifier:          09LKlO5JOFm2k39npdtu50uILwfsWeJHjvs619QMzx4=
Subject key identifier:   7F:04:A1:10:0A:1F:98:73:2F:F9:1D:54:FC:A6:15:85:5E:B7:89:6F
Authority key identifier: DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76
Certificate issuer:       /CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76
Certificate serial:       5DCBB1C0C6448F9851246908268124322F9EBA0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 05:05:15 +0000
Manifest this update:     Tue 12 May 2026 05:00:15 +0000
Manifest next update:     Wed 13 May 2026 08:25:15 +0000
Files and hashes:         1: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: hgyoReewnJKW4nr6+Jg49Hdij/Yxck5vrTJyyAU/fpU=)
                          2: DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl (hash: qCO0KQEOZ3ASEcla6Dc1MRstIDj+Z3YT+EwUxx5ZoHI=)
                          3: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: CdzPgARwHWVAiNVpWfYHHcwq4khjb1oCYEqwBbuFJZI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl
                          rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cb:b1:c0:c6:44:8f:98:51:24:69:08:26:81:24:32:2f:9e:ba:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76
        Validity
            Not Before: May 12 05:00:15 2026 GMT
            Not After : May 13 08:25:15 2026 GMT
        Subject: CN=7F04A1100A1F98732FF91D54FCA615855EB7896F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:4c:68:94:a0:89:47:46:c0:34:92:aa:d5:
                    6c:ee:61:ad:18:eb:28:e3:34:97:04:ed:db:b4:e4:
                    33:ba:e8:23:5c:07:d4:06:bd:83:71:66:e2:47:d0:
                    72:21:78:21:09:01:f7:77:05:37:f8:20:8c:fe:2a:
                    db:2c:12:d2:fc:a8:2f:92:1a:6e:c6:86:fe:8a:d0:
                    b1:8c:6b:2b:a2:fa:e2:b1:48:2b:ef:7c:cd:a6:1d:
                    b3:b3:c0:80:a0:cb:7a:85:93:d9:7e:ce:84:30:63:
                    5e:49:7c:1c:dc:12:e8:6d:37:96:63:62:42:1d:e6:
                    f8:90:8b:10:00:3f:c7:94:d9:cb:25:f8:22:f0:08:
                    ff:cb:9b:08:b2:95:3d:7a:3b:5f:1f:5c:b9:89:62:
                    73:0f:f8:5f:a5:f0:ee:17:05:80:0d:3a:38:16:7a:
                    f2:63:d8:76:87:69:ca:84:be:7a:63:63:cb:87:78:
                    7a:33:17:b9:4b:21:30:c2:e4:1a:88:eb:bf:48:d1:
                    79:78:82:7f:73:af:d7:8b:36:c0:80:ce:80:6a:ba:
                    c9:59:bf:e2:c3:d1:db:cc:31:cc:3d:12:11:3e:d6:
                    ac:1c:80:d6:47:de:33:0c:2c:dd:b8:de:bf:4f:97:
                    2e:c5:7a:88:06:83:d3:61:e8:92:8b:01:76:9f:88:
                    f5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:04:A1:10:0A:1F:98:73:2F:F9:1D:54:FC:A6:15:85:5E:B7:89:6F
            X509v3 Authority Key Identifier:
                keyid:DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:50:99:66:0e:2b:fe:bc:29:ee:4e:51:fe:7c:71:50:2a:4d:
         f3:c9:0b:9a:fe:bc:38:e9:6f:02:7c:be:ac:c3:f1:67:ca:ad:
         d7:ed:06:a1:42:fe:ec:65:54:9d:05:7e:d0:26:5c:92:ee:db:
         51:65:f4:12:ce:b5:3d:4f:d2:42:96:02:2e:45:52:d8:e9:ea:
         b1:93:ec:d1:7d:2c:cf:51:1a:1b:d1:c8:de:52:0b:f8:be:01:
         04:6e:d8:75:25:9e:de:cf:04:67:25:65:2b:28:4e:39:1f:07:
         84:7a:68:57:10:38:39:89:47:7e:28:a8:fd:43:52:54:89:99:
         53:86:1d:11:2f:7d:77:51:33:42:a4:51:b8:cd:ee:74:da:bf:
         d5:d9:f9:91:22:2c:6e:db:45:6b:1f:26:7b:74:bf:8e:c1:e4:
         14:2d:a1:31:64:20:3f:b8:47:06:74:0d:81:1c:f9:7f:49:4c:
         00:3c:ae:d1:e6:1c:96:bd:50:58:a3:bd:27:8c:70:4e:bd:2e:
         6a:5e:92:a0:36:06:bc:95:f0:05:30:30:7e:0e:2c:e0:09:8a:
         bd:3c:33:04:50:e4:0f:01:65:b5:69:73:9a:c1:e4:59:ef:2c:
         e6:9a:8c:9b:c4:d1:1b:aa:d1:75:c2:f2:d5:56:11:59:a5:01:
         be:6f:b0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:21:07 2026 by rpki-client