Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
File:                     DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft (raw, json)
Hash identifier:          39aqDC2rrkEKWQl4BnxfZEyqZM+2uen9OfPJmAB0SPE=
Subject key identifier:   6C:24:54:85:2B:48:EF:4F:39:9F:7D:31:77:FE:D4:91:E2:92:2D:C8
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Certificate issuer:       /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial:       5138D1FE7A600F1ABB50B006181D49F0566AAFBC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
Manifest number:          EC
Signing time:             Sun 25 Oct 2026 17:18:13 +0000
Manifest this update:     Sun 25 Oct 2026 17:13:13 +0000
Manifest next update:     Mon 26 Oct 2026 17:59:13 +0000
Files and hashes:         1: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: JMnD/FckAq7CGqxhM7d0QezPRZyfqhzkSaCB6jbBlL4=)
                          2: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (hash: 3HSpbhFt3jsyDHbIYos3Q0wv5WIPJhLhWYlxaO7VL98=)
                          3: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: L8m06v4lypbJFkBBcAeCl2HHpHbjPmRx4afU7zHtGbs=)
                          4: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: +Eo6/X263G5Flhn1qAu9gyHoX0t17OxYpS6itJBlqnw=)
                          5: 34352e3131362e3135382e302f32332d3234203d3e20313333383233.roa (hash: nQrRB76uG72Hh2LxuDnyKLwPlyh9HS7iYL8/pD1Mrfc=)
                          6: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: QdU3eW1GRvmoS7DD//Q44me2q9Bc9Ncs1A4bKejDmys=)
                          7: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: CzpR2y4E7Zo1QOZpSNmtByz2jwVCHD2bth2Q1Yf3tqo=)
                          8: DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl (hash: 6yME7MRhHBV7jUi1wvk0GB9108p+te+Li0fnbmJRW5w=)
                          9: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: ZItAPK09I34Sz0y4vN9sPudl3u7/pYoXuiySE0aWVzw=)
                          10: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: hMe+orbuTN2RzbgcWeM+BwpjsEbYn/EerG23yS+Aa0g=)
                          11: 3130332e3130342e3133342e302f32332d3234203d3e20313333383233.roa (hash: XiipUAxKhZpqExkZmaytbPwvFyOgqAUmnU1lD7TzPNc=)
                          12: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: 7Wj0at79mxr4FCZ9Hpd3BT3x3HOvoiIhi2Pmm/6ArH0=)
                          13: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (hash: rV3JW0a+XbuONn+Xn+83PSsiUiDGSvLcSPYENSKK998=)
                          14: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: BUcB/wlQeYt875aEAFYXrzIUGveCpyEGOJqyrP1PQAg=)
                          15: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: XqdfOz80MkiP/2rgQCkxAmQyHWpujvHUwXiMakIJlMg=)
                          16: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: Z28vh0NgnW+1aBrpmxYKdmq+pclBZTpS+9KNoM7trNc=)
                          17: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: uaiodumf3rhT3ZNuFDvfCf7glzd9Pb2iPFH1iPXAwiE=)
                          18: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: qduWQnePlEvJvVDz1+kCY3smvF204bP3VzAzFq1FCjU=)
                          19: 3130332e35342e39342e302f32332d3234203d3e20313333383233.roa (hash: 8k8GBdwmmLxxYbQl8hVSFJB11CCZhdmJeHDaxUryxLk=)
                          20: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: yk8SbJDjIgwpR1q5UUTthk+GnMv3YbsIc4PcYf72L0s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
                          rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:38:d1:fe:7a:60:0f:1a:bb:50:b0:06:18:1d:49:f0:56:6a:af:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
        Validity
            Not Before: Oct 25 17:13:13 2026 GMT
            Not After : Oct 26 17:59:13 2026 GMT
        Subject: CN=6C2454852B48EF4F399F7D3177FED491E2922DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:af:82:3b:d8:74:ad:8a:e4:12:eb:6e:51:62:
                    82:24:6d:a6:e5:36:45:76:98:21:ae:c1:32:63:8e:
                    1f:c3:74:a4:47:ee:c5:39:d3:58:2c:39:fd:d7:b4:
                    c6:a6:ea:f8:83:bd:58:3a:0b:ad:3b:fa:a2:0a:86:
                    18:e6:08:c2:f2:d7:f0:cd:f5:6b:89:e5:62:2a:bb:
                    3b:ff:b5:82:bd:29:71:99:70:84:1c:28:d0:2c:84:
                    dc:4e:7f:39:ee:46:7f:4b:f0:d4:76:71:dc:88:65:
                    c7:cf:f9:f8:3b:45:27:48:79:17:77:45:95:b1:06:
                    77:40:25:3e:b1:51:a4:df:1e:56:9f:d5:ce:23:e3:
                    b7:07:eb:99:65:7d:58:d3:e8:ab:25:cd:a1:e2:a5:
                    85:e2:c1:99:e2:2b:9c:14:76:00:d6:fa:32:ff:b5:
                    68:65:21:de:2b:20:24:b7:98:03:60:3d:5f:90:cc:
                    1a:5a:17:2d:cd:e9:2f:1a:9c:42:c2:68:41:8e:e0:
                    de:05:b9:4c:45:fb:6e:0b:cc:f9:a3:59:1a:75:79:
                    7a:13:d2:64:90:09:4b:70:13:ee:7f:77:43:36:54:
                    56:22:ce:26:da:5d:e3:a9:35:e8:28:31:6d:e6:79:
                    71:ce:ca:66:1e:d3:7b:a1:df:e3:26:d4:30:b1:24:
                    c1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:24:54:85:2B:48:EF:4F:39:9F:7D:31:77:FE:D4:91:E2:92:2D:C8
            X509v3 Authority Key Identifier:
                keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d6:e5:13:d8:77:93:b5:5c:d2:86:fc:80:7b:fd:51:d7:ff:
         4b:f0:ed:7e:30:0a:e0:72:ae:92:c0:b1:7d:cc:b4:dc:dd:04:
         0a:73:80:59:6c:00:c7:1d:c6:43:7a:9b:3a:c8:d0:f5:f3:ad:
         75:8f:29:a1:2f:b8:da:b7:18:93:39:4f:f4:18:e8:e6:07:48:
         c7:0a:4b:59:1e:64:7c:49:34:09:47:8c:30:01:b6:7c:60:ae:
         7a:db:2c:ef:4f:45:93:bb:7e:06:1a:ef:62:7e:22:56:56:9c:
         f0:f4:f7:52:c6:f8:4f:23:df:82:98:09:f4:9c:ae:46:40:8b:
         69:2d:e9:1f:ab:34:9b:e2:60:a0:12:a0:99:02:69:c5:e4:0b:
         9d:2f:1c:e5:cf:35:21:45:1f:83:0a:02:fd:c6:98:81:26:e5:
         9d:0b:ea:a9:e4:e7:26:c2:9a:46:aa:1d:4a:41:f4:c3:79:71:
         a7:3b:25:a8:b2:6b:c7:5c:1a:fa:94:72:28:9e:49:a5:da:47:
         bd:21:a3:94:99:7f:83:b0:18:33:e6:96:f9:c8:9b:dd:9e:c2:
         25:a8:36:20:cf:23:4a:3a:87:4a:a2:f1:cc:61:48:7f:01:fc:
         ac:9c:c1:b6:87:d5:86:f1:53:e5:a5:46:b4:3c:cf:dd:db:92:
         6b:e9:e1:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUTjR/npgDxq7ULAGGB1J8FZqr7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVDQTkzQzIxNzJFNTAzQkM1Q0FBQTE5NzQ0MTBEM0ZB
NTlEMjQ1NDAeFw0yNjEwMjUxNzEzMTNaFw0yNjEwMjYxNzU5MTNaMDMxMTAvBgNV
BAMTKDZDMjQ1NDg1MkI0OEVGNEYzOTlGN0QzMTc3RkVENDkxRTI5MjJEQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDer4I72HStiuQS625RYoIkbabl
NkV2mCGuwTJjjh/DdKRH7sU501gsOf3XtMam6viDvVg6C607+qIKhhjmCMLy1/DN
9WuJ5WIquzv/tYK9KXGZcIQcKNAshNxOfznuRn9L8NR2cdyIZcfP+fg7RSdIeRd3
RZWxBndAJT6xUaTfHlaf1c4j47cH65llfVjT6KslzaHipYXiwZniK5wUdgDW+jL/
tWhlId4rICS3mANgPV+QzBpaFy3N6S8anELCaEGO4N4FuUxF+24LzPmjWRp1eXoT
0mSQCUtwE+5/d0M2VFYizibaXeOpNegoMW3meXHOymYe03uh3+Mm1DCxJMEtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbCRUhStI7085n30xd/7UkeKSLcgwHwYDVR0j
BBgwFoAU3sqTwhcuUDvFyqoZdEENP6WdJFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDQ3OTFiMWYtNmRhOS00MDBkLThiMTQtOTkyYWFlNjM3NDZjLzAvREVDQTkzQzIx
NzJFNTAzQkM1Q0FBQTE5NzQ0MTBEM0ZBNTlEMjQ1NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ERUNBOTNDMjE3MkU1MDNCQzVDQUFBMTk3NDQxMEQzRkE1OUQy
NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ3OTFiMWYtNmRhOS00MDBkLThi
MTQtOTkyYWFlNjM3NDZjLzAvREVDQTkzQzIxNzJFNTAzQkM1Q0FBQTE5NzQ0MTBE
M0ZBNTlEMjQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHrW5RPYd5O1XNKG/IB7/VHX/0vw7X4wCuBy
rpLAsX3MtNzdBApzgFlsAMcdxkN6mzrI0PXzrXWPKaEvuNq3GJM5T/QY6OYHSMcK
S1keZHxJNAlHjDABtnxgrnrbLO9PRZO7fgYa72J+IlZWnPD091LG+E8j34KYCfSc
rkZAi2kt6R+rNJviYKASoJkCacXkC50vHOXPNSFFH4MKAv3GmIEm5Z0L6qnk5ybC
mkaqHUpB9MN5cac7Jaiya8dcGvqUciieSaXaR70ho5SZf4OwGDPmlvnIm92ewiWo
NiDPI0o6h0qi8cxhSH8B/KycwbaH1YbxU+WlRrQ8z93bkmvp4Z0=
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:06:25 2026 by rpki-client