Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
File:                     DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft (raw, json)
Hash identifier:          XUB43McfikUwDYb91FP//x+2CS5UOyGweqNPj9Qb7W8=
Subject key identifier:   C9:A7:97:DD:90:65:F6:42:AC:67:F2:50:20:FB:D9:0F:EC:FA:76:F3
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Certificate issuer:       /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial:       38B366F2E1E1CCD5339D02632104515DEAF8981A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
Manifest number:          C3
Signing time:             Fri 25 Sep 2026 00:35:49 +0000
Manifest this update:     Fri 25 Sep 2026 00:30:49 +0000
Manifest next update:     Sat 26 Sep 2026 01:31:49 +0000
Files and hashes:         1: 3130332e35342e39342e302f32332d3234203d3e20313333383233.roa (hash: 8k8GBdwmmLxxYbQl8hVSFJB11CCZhdmJeHDaxUryxLk=)
                          2: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: qduWQnePlEvJvVDz1+kCY3smvF204bP3VzAzFq1FCjU=)
                          3: DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl (hash: 9vPATzqHyw5G3jcWZVoeW2MFp6GfXkIcHj/OX5l0ggU=)
                          4: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: Z28vh0NgnW+1aBrpmxYKdmq+pclBZTpS+9KNoM7trNc=)
                          5: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: CzpR2y4E7Zo1QOZpSNmtByz2jwVCHD2bth2Q1Yf3tqo=)
                          6: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: 7Wj0at79mxr4FCZ9Hpd3BT3x3HOvoiIhi2Pmm/6ArH0=)
                          7: 3130332e3130342e3133342e302f32332d3234203d3e20313333383233.roa (hash: XiipUAxKhZpqExkZmaytbPwvFyOgqAUmnU1lD7TzPNc=)
                          8: 34352e3131362e3135382e302f32332d3234203d3e20313333383233.roa (hash: nQrRB76uG72Hh2LxuDnyKLwPlyh9HS7iYL8/pD1Mrfc=)
                          9: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: ZItAPK09I34Sz0y4vN9sPudl3u7/pYoXuiySE0aWVzw=)
                          10: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: uaiodumf3rhT3ZNuFDvfCf7glzd9Pb2iPFH1iPXAwiE=)
                          11: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: XqdfOz80MkiP/2rgQCkxAmQyHWpujvHUwXiMakIJlMg=)
                          12: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: L8m06v4lypbJFkBBcAeCl2HHpHbjPmRx4afU7zHtGbs=)
                          13: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: QdU3eW1GRvmoS7DD//Q44me2q9Bc9Ncs1A4bKejDmys=)
                          14: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: +Eo6/X263G5Flhn1qAu9gyHoX0t17OxYpS6itJBlqnw=)
                          15: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (hash: rV3JW0a+XbuONn+Xn+83PSsiUiDGSvLcSPYENSKK998=)
                          16: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: BUcB/wlQeYt875aEAFYXrzIUGveCpyEGOJqyrP1PQAg=)
                          17: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (hash: 3HSpbhFt3jsyDHbIYos3Q0wv5WIPJhLhWYlxaO7VL98=)
                          18: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: hMe+orbuTN2RzbgcWeM+BwpjsEbYn/EerG23yS+Aa0g=)
                          19: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: yk8SbJDjIgwpR1q5UUTthk+GnMv3YbsIc4PcYf72L0s=)
                          20: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: JMnD/FckAq7CGqxhM7d0QezPRZyfqhzkSaCB6jbBlL4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
                          rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 01:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b3:66:f2:e1:e1:cc:d5:33:9d:02:63:21:04:51:5d:ea:f8:98:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
        Validity
            Not Before: Sep 25 00:30:49 2026 GMT
            Not After : Sep 26 01:31:49 2026 GMT
        Subject: CN=C9A797DD9065F642AC67F25020FBD90FECFA76F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:2d:fd:84:95:36:db:c9:28:fb:12:4b:d0:
                    d0:67:e2:f6:19:64:04:c9:d4:9d:e0:9a:b3:43:37:
                    67:98:6b:09:15:5a:0b:1a:f4:7e:71:7b:f3:18:2e:
                    9d:8b:a2:ff:e4:28:37:93:80:b3:8e:94:fa:79:01:
                    91:f6:46:c1:42:a0:eb:3e:fa:b9:a9:44:42:3e:c0:
                    a9:29:59:df:aa:5e:c2:cc:f2:1f:27:21:c4:78:95:
                    a0:db:c3:a2:f7:bd:67:c0:a9:9d:dc:b2:be:36:32:
                    1f:1f:04:7c:5f:18:80:2f:6f:fc:70:d0:ef:42:c4:
                    39:a9:4f:7c:82:f7:ec:4d:57:7e:86:78:bd:b7:79:
                    d6:ec:eb:33:84:8a:f6:47:6d:7b:ca:76:43:fd:0c:
                    e3:8d:03:e2:bd:b9:eb:98:c5:8f:24:15:53:01:50:
                    9d:76:2f:00:d9:35:71:63:39:a3:7e:ae:d9:b8:02:
                    c9:be:f9:81:ba:f4:30:1f:b0:e7:b7:c0:be:0d:27:
                    0c:ec:b0:2e:22:4d:57:bd:11:6b:57:c6:5a:45:15:
                    73:cd:c3:c1:ad:59:17:a6:cf:d5:4d:61:01:85:aa:
                    1a:fd:5b:2e:54:a0:c2:69:39:9c:23:44:8d:34:11:
                    1f:b8:e3:9c:05:95:fb:b3:d0:33:ad:d8:b4:23:56:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A7:97:DD:90:65:F6:42:AC:67:F2:50:20:FB:D9:0F:EC:FA:76:F3
            X509v3 Authority Key Identifier:
                keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:36:23:8f:4e:e7:62:01:44:7d:b2:0c:a7:42:d7:3a:b8:2e:
         86:b0:43:15:58:5b:21:1e:ae:bc:a0:c2:0f:5e:a2:a0:48:8f:
         51:49:82:7c:09:0e:dc:43:bc:a3:ca:ad:f5:15:69:03:25:d8:
         c2:ed:e0:90:fd:18:cf:8a:2a:8e:45:2a:b6:0c:46:e8:52:ab:
         6d:d1:32:f9:54:c2:a0:b2:7a:ec:47:16:51:81:e2:16:63:83:
         a2:cd:af:f4:3c:de:ad:a5:8d:4d:cb:73:7a:96:ca:22:27:2b:
         d1:17:6c:2e:5d:4c:35:e4:29:a9:e1:4e:f3:cd:ee:04:b1:d6:
         df:01:84:1d:f5:1f:2f:3e:74:56:be:8e:15:f8:96:77:9f:47:
         b3:bd:ea:99:cf:fc:bc:2d:4a:46:ef:0a:fa:ad:22:6b:ae:87:
         6e:e0:86:a3:b1:6b:f4:fd:e6:cf:7c:d6:53:34:33:79:7b:20:
         8f:fa:66:70:da:00:b7:e2:8b:d8:5a:58:27:76:ae:eb:69:a1:
         45:28:31:4a:d0:83:9f:7a:75:4b:b2:13:3b:d3:a8:41:f3:ba:
         bc:6a:54:e4:55:52:c8:a3:1e:38:33:fe:3f:56:56:bd:c2:b3:
         16:6f:b9:45:bc:d4:ec:02:55:70:b2:d3:cd:91:cd:77:94:bb:
         85:ef:a7:ec
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOLNm8uHhzNUznQJjIQRRXer4mBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVDQTkzQzIxNzJFNTAzQkM1Q0FBQTE5NzQ0MTBEM0ZB
NTlEMjQ1NDAeFw0yNjA5MjUwMDMwNDlaFw0yNjA5MjYwMTMxNDlaMDMxMTAvBgNV
BAMTKEM5QTc5N0REOTA2NUY2NDJBQzY3RjI1MDIwRkJEOTBGRUNGQTc2RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhy39hJU228ko+xJL0NBn4vYZ
ZATJ1J3gmrNDN2eYawkVWgsa9H5xe/MYLp2Lov/kKDeTgLOOlPp5AZH2RsFCoOs+
+rmpREI+wKkpWd+qXsLM8h8nIcR4laDbw6L3vWfAqZ3csr42Mh8fBHxfGIAvb/xw
0O9CxDmpT3yC9+xNV36GeL23edbs6zOEivZHbXvKdkP9DOONA+K9ueuYxY8kFVMB
UJ12LwDZNXFjOaN+rtm4Asm++YG69DAfsOe3wL4NJwzssC4iTVe9EWtXxlpFFXPN
w8GtWRemz9VNYQGFqhr9Wy5UoMJpOZwjRI00ER+445wFlfuz0DOt2LQjVlijAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyaeX3ZBl9kKsZ/JQIPvZD+z6dvMwHwYDVR0j
BBgwFoAU3sqTwhcuUDvFyqoZdEENP6WdJFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDQ3OTFiMWYtNmRhOS00MDBkLThiMTQtOTkyYWFlNjM3NDZjLzAvREVDQTkzQzIx
NzJFNTAzQkM1Q0FBQTE5NzQ0MTBEM0ZBNTlEMjQ1NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ERUNBOTNDMjE3MkU1MDNCQzVDQUFBMTk3NDQxMEQzRkE1OUQy
NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ3OTFiMWYtNmRhOS00MDBkLThi
MTQtOTkyYWFlNjM3NDZjLzAvREVDQTkzQzIxNzJFNTAzQkM1Q0FBQTE5NzQ0MTBE
M0ZBNTlEMjQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHk2I49O52IBRH2yDKdC1zq4LoawQxVYWyEe
rrygwg9eoqBIj1FJgnwJDtxDvKPKrfUVaQMl2MLt4JD9GM+KKo5FKrYMRuhSq23R
MvlUwqCyeuxHFlGB4hZjg6LNr/Q83q2ljU3Lc3qWyiInK9EXbC5dTDXkKanhTvPN
7gSx1t8BhB31Hy8+dFa+jhX4lnefR7O96pnP/LwtSkbvCvqtImuuh27ghqOxa/T9
5s981lM0M3l7II/6ZnDaALfii9haWCd2rutpoUUoMUrQg596dUuyEzvTqEHzurxq
VORVUsijHjgz/j9WVr3CsxZvuUW81OwCVXCy082RzXeUu4Xvp+w=
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:35:41 2026 by rpki-client