Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
File:                     DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft (raw, json)
Hash identifier:          jCNlTnkcBiYPuYQVbvnTB2E44xyIsOFvV7cOxKWePLk=
Subject key identifier:   2B:89:82:73:09:C2:3D:B4:EA:A4:1A:5F:3D:A1:16:C9:B6:0D:97:85
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Certificate issuer:       /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial:       0D4BAED6B153AA7F08D088570097E641862AD328
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 13:11:13 +0000
Manifest this update:     Tue 02 Jun 2026 13:06:13 +0000
Manifest next update:     Wed 03 Jun 2026 16:45:13 +0000
Files and hashes:         1: DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl (hash: 12orfUefYuLCp9TFmb7d47YzTvaajSbQjiFbH9ew1Rg=)
                          2: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: L8m06v4lypbJFkBBcAeCl2HHpHbjPmRx4afU7zHtGbs=)
                          3: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: CzpR2y4E7Zo1QOZpSNmtByz2jwVCHD2bth2Q1Yf3tqo=)
                          4: 3130332e35342e39342e302f32332d3234203d3e20313333383233.roa (hash: 8k8GBdwmmLxxYbQl8hVSFJB11CCZhdmJeHDaxUryxLk=)
                          5: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: XqdfOz80MkiP/2rgQCkxAmQyHWpujvHUwXiMakIJlMg=)
                          6: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: JMnD/FckAq7CGqxhM7d0QezPRZyfqhzkSaCB6jbBlL4=)
                          7: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: 7Wj0at79mxr4FCZ9Hpd3BT3x3HOvoiIhi2Pmm/6ArH0=)
                          8: 34352e3131362e3135382e302f32332d3234203d3e20313333383233.roa (hash: nQrRB76uG72Hh2LxuDnyKLwPlyh9HS7iYL8/pD1Mrfc=)
                          9: 3130332e3130342e3133342e302f32332d3234203d3e20313333383233.roa (hash: XiipUAxKhZpqExkZmaytbPwvFyOgqAUmnU1lD7TzPNc=)
                          10: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (hash: 3HSpbhFt3jsyDHbIYos3Q0wv5WIPJhLhWYlxaO7VL98=)
                          11: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: Z28vh0NgnW+1aBrpmxYKdmq+pclBZTpS+9KNoM7trNc=)
                          12: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: qduWQnePlEvJvVDz1+kCY3smvF204bP3VzAzFq1FCjU=)
                          13: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: yk8SbJDjIgwpR1q5UUTthk+GnMv3YbsIc4PcYf72L0s=)
                          14: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: ZItAPK09I34Sz0y4vN9sPudl3u7/pYoXuiySE0aWVzw=)
                          15: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: uaiodumf3rhT3ZNuFDvfCf7glzd9Pb2iPFH1iPXAwiE=)
                          16: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: QdU3eW1GRvmoS7DD//Q44me2q9Bc9Ncs1A4bKejDmys=)
                          17: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (hash: rV3JW0a+XbuONn+Xn+83PSsiUiDGSvLcSPYENSKK998=)
                          18: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: +Eo6/X263G5Flhn1qAu9gyHoX0t17OxYpS6itJBlqnw=)
                          19: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: hMe+orbuTN2RzbgcWeM+BwpjsEbYn/EerG23yS+Aa0g=)
                          20: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: BUcB/wlQeYt875aEAFYXrzIUGveCpyEGOJqyrP1PQAg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
                          rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4b:ae:d6:b1:53:aa:7f:08:d0:88:57:00:97:e6:41:86:2a:d3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
        Validity
            Not Before: Jun  2 13:06:13 2026 GMT
            Not After : Jun  3 16:45:13 2026 GMT
        Subject: CN=2B89827309C23DB4EAA41A5F3DA116C9B60D9785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:58:5b:4a:ac:48:03:c8:c6:02:56:7f:b5:
                    5f:5c:47:75:7c:43:6e:6e:a9:96:87:85:50:7b:74:
                    6f:1e:27:fb:c0:52:e3:aa:11:7f:72:72:de:41:ea:
                    88:15:12:0e:8a:40:68:9e:d8:34:10:0b:a5:e9:53:
                    5a:6d:77:78:87:ad:f9:7a:29:3a:21:5a:cb:d9:ad:
                    e6:26:70:e6:d5:dd:37:89:da:9f:45:9c:7c:18:1a:
                    b1:ad:5d:7a:c6:bd:9e:ca:64:f7:8e:f3:7b:ac:7e:
                    9a:87:a6:06:41:2a:26:41:0f:ea:d5:26:ca:de:e5:
                    d9:68:70:fc:13:46:a4:11:4e:ea:6d:aa:34:f0:05:
                    39:a4:d8:32:38:34:1f:5d:a5:74:6c:ff:8b:54:20:
                    75:8f:a4:4b:dd:7a:cc:c3:8b:eb:ed:e4:a5:1f:a8:
                    a6:60:c0:e6:35:22:67:13:6a:b5:82:e9:2f:67:ee:
                    85:9b:cb:5a:c7:dd:b6:0b:84:bc:c4:3f:74:3a:cd:
                    22:9f:32:a6:27:72:2a:43:82:5d:a3:d9:fa:22:86:
                    18:b2:df:e7:d2:4f:5e:60:bb:b2:18:97:1f:fe:e4:
                    60:56:d7:c3:11:10:d2:7f:10:3a:ce:7b:e6:22:53:
                    d7:e5:8c:98:b8:2d:b0:15:9d:24:70:89:ab:83:79:
                    d4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:89:82:73:09:C2:3D:B4:EA:A4:1A:5F:3D:A1:16:C9:B6:0D:97:85
            X509v3 Authority Key Identifier:
                keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7b:61:84:1e:fa:30:1f:74:61:2a:f2:82:cd:f7:37:d9:35:
         62:2d:b0:05:7c:2b:13:b4:fb:c9:0b:78:2e:79:0c:fb:7b:ca:
         3b:1b:7f:6e:54:25:ae:1c:68:89:8f:30:da:d6:36:3a:af:61:
         c5:86:8f:a9:07:03:42:d5:dc:00:22:5d:33:80:fa:e7:74:8f:
         82:48:f9:5f:f8:14:c0:af:35:62:00:3a:17:69:39:7b:bb:8c:
         fd:9d:4e:76:3e:33:17:21:b5:fb:6c:38:68:31:c6:01:60:0e:
         3e:87:ff:49:22:f4:05:c9:0c:6e:f7:5e:1d:14:cb:a4:32:17:
         c3:d4:92:80:34:2e:ec:34:af:fb:9b:e8:48:62:78:91:82:9b:
         fd:47:19:70:fa:1a:d0:da:84:b9:ad:45:43:aa:c6:22:c8:55:
         0a:28:45:65:2a:15:0e:62:64:65:5a:21:a8:d2:30:71:86:96:
         e1:3a:f2:75:ab:cc:8e:3c:eb:f1:98:4e:c0:32:42:43:f5:26:
         83:d0:56:d4:be:73:9e:84:c1:84:60:60:25:20:e7:6f:70:44:
         a4:25:1c:66:38:19:90:22:d9:d2:7b:be:cd:41:71:1c:95:63:
         7d:2e:1e:bd:c1:26:59:bc:3a:15:05:19:74:93:04:e0:d4:f7:
         a5:44:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:20:57 2026 by rpki-client