Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
File:                     DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft (raw, json)
Hash identifier:          QARbd7JNPYQam2/ifh4WNx9LqHV3y0nTL6dnPOv9vbk=
Subject key identifier:   27:FD:61:5B:B7:B6:AE:E4:7C:95:A1:0D:47:56:60:0B:8D:FB:C1:8F
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Certificate issuer:       /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial:       072ED1BEC0F728DF7A36D4B173FE7ED0081FE865
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
Manifest number:          75
Signing time:             Tue 28 Jul 2026 08:47:39 +0000
Manifest this update:     Tue 28 Jul 2026 08:42:39 +0000
Manifest next update:     Wed 29 Jul 2026 10:51:39 +0000
Files and hashes:         1: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: Z28vh0NgnW+1aBrpmxYKdmq+pclBZTpS+9KNoM7trNc=)
                          2: DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl (hash: lQ2bYfsmrZX5rQDOqVsdDKdELVSpIStUzSNJeHBiWuQ=)
                          3: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: ZItAPK09I34Sz0y4vN9sPudl3u7/pYoXuiySE0aWVzw=)
                          4: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: QdU3eW1GRvmoS7DD//Q44me2q9Bc9Ncs1A4bKejDmys=)
                          5: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (hash: 3HSpbhFt3jsyDHbIYos3Q0wv5WIPJhLhWYlxaO7VL98=)
                          6: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: yk8SbJDjIgwpR1q5UUTthk+GnMv3YbsIc4PcYf72L0s=)
                          7: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: +Eo6/X263G5Flhn1qAu9gyHoX0t17OxYpS6itJBlqnw=)
                          8: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: uaiodumf3rhT3ZNuFDvfCf7glzd9Pb2iPFH1iPXAwiE=)
                          9: 3130332e3130342e3133342e302f32332d3234203d3e20313333383233.roa (hash: XiipUAxKhZpqExkZmaytbPwvFyOgqAUmnU1lD7TzPNc=)
                          10: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: BUcB/wlQeYt875aEAFYXrzIUGveCpyEGOJqyrP1PQAg=)
                          11: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: L8m06v4lypbJFkBBcAeCl2HHpHbjPmRx4afU7zHtGbs=)
                          12: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: hMe+orbuTN2RzbgcWeM+BwpjsEbYn/EerG23yS+Aa0g=)
                          13: 34352e3131362e3135382e302f32332d3234203d3e20313333383233.roa (hash: nQrRB76uG72Hh2LxuDnyKLwPlyh9HS7iYL8/pD1Mrfc=)
                          14: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: JMnD/FckAq7CGqxhM7d0QezPRZyfqhzkSaCB6jbBlL4=)
                          15: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: qduWQnePlEvJvVDz1+kCY3smvF204bP3VzAzFq1FCjU=)
                          16: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: 7Wj0at79mxr4FCZ9Hpd3BT3x3HOvoiIhi2Pmm/6ArH0=)
                          17: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (hash: rV3JW0a+XbuONn+Xn+83PSsiUiDGSvLcSPYENSKK998=)
                          18: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: CzpR2y4E7Zo1QOZpSNmtByz2jwVCHD2bth2Q1Yf3tqo=)
                          19: 3130332e35342e39342e302f32332d3234203d3e20313333383233.roa (hash: 8k8GBdwmmLxxYbQl8hVSFJB11CCZhdmJeHDaxUryxLk=)
                          20: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: XqdfOz80MkiP/2rgQCkxAmQyHWpujvHUwXiMakIJlMg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
                          rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 10:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2e:d1:be:c0:f7:28:df:7a:36:d4:b1:73:fe:7e:d0:08:1f:e8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
        Validity
            Not Before: Jul 28 08:42:39 2026 GMT
            Not After : Jul 29 10:51:39 2026 GMT
        Subject: CN=27FD615BB7B6AEE47C95A10D4756600B8DFBC18F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:cb:5c:a2:39:9d:e7:e4:28:d7:da:7a:9c:
                    8e:ea:af:9b:9d:03:90:b6:58:3c:da:8f:28:d4:22:
                    4d:3e:8c:a0:01:8c:ed:94:58:d9:59:6b:cd:5e:e4:
                    8f:b9:46:2f:87:ba:70:7f:50:4d:95:fa:c3:26:65:
                    7b:87:af:61:42:da:56:09:d1:4a:ae:81:b5:21:e7:
                    d5:0d:cd:a6:47:25:91:61:b5:41:d0:e1:20:a1:bd:
                    98:33:1b:0d:c3:36:f5:83:b7:5c:c1:0f:f8:00:ac:
                    f6:26:3a:56:7f:02:23:42:7c:5c:9b:13:f5:d7:e0:
                    20:61:4b:f9:e4:be:6b:44:24:fa:f0:65:43:29:4e:
                    aa:84:6c:45:76:2f:70:e7:e8:04:b4:4a:44:0a:fe:
                    21:a0:85:dc:c5:c9:2e:7b:da:c1:c1:43:0b:e0:2d:
                    00:d9:74:b7:57:b9:aa:f3:62:96:43:31:e6:30:be:
                    3e:ee:4c:bb:9c:09:ae:b7:7c:84:fd:73:c3:a7:22:
                    0f:e9:c2:9e:4c:a2:90:22:c6:81:38:ac:53:d0:07:
                    11:17:34:e9:b3:42:b6:ba:51:25:04:f6:4b:96:35:
                    ac:53:93:fd:25:14:6d:fd:98:a4:38:6f:8f:ea:fe:
                    11:60:2b:b2:8a:a5:bc:b6:41:7c:3d:13:d4:f7:9b:
                    7d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FD:61:5B:B7:B6:AE:E4:7C:95:A1:0D:47:56:60:0B:8D:FB:C1:8F
            X509v3 Authority Key Identifier:
                keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ce:ae:f7:63:a8:6c:a8:09:b3:dd:2e:ee:24:01:1c:3f:cb:
         96:4f:9b:f5:48:5e:da:35:cf:70:1e:71:de:04:b4:2d:1e:b3:
         c8:4d:29:46:2b:44:bd:76:f3:e9:91:37:a9:1a:65:a5:cf:ab:
         99:4f:aa:84:1d:20:b1:eb:00:b3:31:fc:df:8c:bb:43:54:13:
         31:ae:6d:f2:dd:dd:a4:a8:bc:1c:20:c5:f4:cc:75:a5:68:a5:
         96:9b:0e:ec:c8:11:4f:45:f1:3b:82:43:fa:6b:f0:7e:69:35:
         62:bc:df:c8:68:05:8c:6f:4b:c4:fd:4b:45:57:65:5f:e0:7a:
         af:96:e3:ef:eb:a7:3d:1b:c3:56:62:ac:bb:f3:18:f2:6c:7a:
         97:33:70:86:e9:27:45:6c:99:5e:ac:a5:44:cc:38:14:22:e6:
         db:2b:aa:2c:81:3b:b3:35:44:0b:2f:4d:36:66:2b:3a:2a:3e:
         e8:83:60:7c:1e:73:46:e3:c2:15:de:e4:d4:c6:7b:02:55:87:
         c4:9a:8f:4d:82:c0:41:08:a9:8c:72:a6:20:78:10:0a:64:01:
         d2:2a:ec:45:0b:6f:78:b9:a9:fc:0c:d8:f0:b2:54:32:be:eb:
         54:86:bb:b0:c5:55:a2:56:94:9d:5e:e1:87:e3:30:ab:fe:15:
         19:1a:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:52:14 2026 by rpki-client