Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft
File:                     DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft (raw, json)
Hash identifier:          ijv3d74I318dRWhdTZ2/qoOa0aVZ8O+MMPFWDm6Qvog=
Subject key identifier:   17:DB:B5:77:A4:44:8D:14:84:0A:29:AF:D5:E9:CB:D4:34:3E:70:7E
Authority key identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3
Certificate issuer:       /CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3
Certificate serial:       53C00106AB0ED0005751A4D21B4D730525FFD705
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft
Manifest number:          92
Signing time:             Wed 19 Aug 2026 18:11:02 +0000
Manifest this update:     Wed 19 Aug 2026 18:06:02 +0000
Manifest next update:     Thu 20 Aug 2026 19:57:02 +0000
Files and hashes:         1: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: D8gdQFYf8NnWhum3Srq97Jkm5hnXUuKFuTsge2OROqA=)
                          2: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: zkjugBCGR1RTN3rv+4fVMMpCR+DjhaqSm22RICfrfmA=)
                          3: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: zZohFjEfg5KbgTKUDn03P4ViER6I84zu0tvUUBWCbms=)
                          4: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: BDfl1ljAlzUeNiFgOAogNvfZpmtNq6Kp37cGWuK0R5E=)
                          5: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: f+1xV3V7eIo4yjJqos+xUQVvX1GIUuOZUCoIKtF+llo=)
                          6: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: 7Jy3y4ltltsmzNhSvINfLmQPgIpSxy3LDWGrSnNQ3Zk=)
                          7: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d26NLF/sKVXadNSIsUNq9koHjOM/iTFNcX1v1zkyxRU=)
                          8: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: ovVBKtJH+Wixf+bjFfGN0BaqhZuS+FBdLYnDH3wV8vw=)
                          9: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: 2xJo8vO5RtzGv7BkUmxulZhOANWhCfhuYoau31MaZh0=)
                          10: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: lZy/D3zEI+V1zNnvBB6OJZ7BzAoFD7HSvYryTbhRU2s=)
                          11: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl (hash: 4+q9b12c3cgO3jU1y+uRjOmavehdtTx3TFGkkIlg7QA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl
                          rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 19:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c0:01:06:ab:0e:d0:00:57:51:a4:d2:1b:4d:73:05:25:ff:d7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3
        Validity
            Not Before: Aug 19 18:06:02 2026 GMT
            Not After : Aug 20 19:57:02 2026 GMT
        Subject: CN=17DBB577A4448D14840A29AFD5E9CBD4343E707E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:82:ac:18:0f:9d:17:3d:8e:9c:79:93:b6:
                    34:97:3b:76:b4:0a:f1:23:bd:72:2e:29:f9:04:dc:
                    ee:85:84:2e:e2:54:59:6e:b9:b4:b1:7a:e0:e7:7a:
                    8c:2f:56:1c:ae:32:15:2b:5e:b2:6e:b0:eb:ca:4b:
                    7a:56:f0:69:53:df:d8:04:18:f4:47:7e:00:9c:5f:
                    95:eb:ba:29:75:5a:43:4e:68:a8:82:7d:84:4d:53:
                    7a:43:07:9e:2f:76:52:f3:55:4d:43:b8:0e:f1:62:
                    5a:2e:0f:3f:01:53:2c:d0:b5:7c:9c:14:59:95:a1:
                    a4:fb:bf:fc:7f:26:c6:96:12:df:3d:4a:87:27:80:
                    77:23:66:42:5f:0d:c1:dc:de:09:66:13:3b:ca:34:
                    a0:e6:25:43:9b:4d:a9:1b:3f:0e:12:7d:82:02:aa:
                    b9:a6:42:dc:0a:2f:6a:fe:8a:fd:7b:ac:64:9e:eb:
                    d9:43:be:6b:cd:9d:f4:23:2d:7a:d3:f5:b4:c8:50:
                    71:1a:e6:7c:8d:66:59:8c:fb:d1:6e:b7:51:c3:8f:
                    e7:8c:61:06:19:b7:da:f2:c2:f5:5b:05:35:8a:e1:
                    90:cd:57:d4:46:15:bc:08:9e:33:ba:86:3d:2d:e9:
                    85:2a:c0:85:de:00:e5:37:3b:01:59:ed:eb:39:13:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DB:B5:77:A4:44:8D:14:84:0A:29:AF:D5:E9:CB:D4:34:3E:70:7E
            X509v3 Authority Key Identifier:
                keyid:DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9d:b9:a2:5a:d7:d7:38:01:aa:61:6c:c1:12:5b:df:a3:e2:
         52:0a:3f:3d:3b:51:71:37:e4:0b:aa:b5:95:af:65:ab:6a:f2:
         de:2e:d9:f7:7d:fc:f5:44:e9:97:ad:e8:85:0c:d5:3b:2b:bf:
         5d:76:dc:b1:36:dd:76:f5:b5:57:5d:fc:f2:ee:1c:a4:3a:af:
         d3:f2:2b:b6:50:d4:76:48:80:bd:1b:88:92:8c:7d:1c:a7:5d:
         79:9f:a0:25:f8:b7:7e:c7:96:1b:57:b4:cf:1a:d9:89:60:88:
         88:70:b2:b2:54:86:44:b0:85:16:0a:6c:db:b6:a4:00:be:6a:
         72:96:58:34:8f:5c:30:44:e1:42:a3:05:cb:2a:2d:99:e5:f4:
         79:4c:5d:41:78:59:c3:f2:bf:56:66:66:23:f9:93:02:e1:48:
         ce:c7:8b:d1:54:26:65:4e:06:df:aa:ef:ff:d4:bc:2d:c7:bf:
         9f:d1:4b:ca:56:97:27:e6:09:9b:cd:46:ad:0a:82:1e:06:15:
         d1:1b:64:0b:5c:07:f3:d0:e4:93:c6:e9:b4:34:a2:6c:ea:08:
         1e:91:ca:e6:62:14:8b:e9:0c:88:7e:b6:c5:9d:71:fe:8e:26:
         c7:2a:1b:da:7b:71:58:05:fc:ff:d2:8a:32:7e:90:d1:a5:d8:
         8d:6d:d6:04
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUU8ABBqsO0ABXUaTSG01zBSX/1wUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2NzRE
REIyOUFDMzAeFw0yNjA4MTkxODA2MDJaFw0yNjA4MjAxOTU3MDJaMDMxMTAvBgNV
BAMTKDE3REJCNTc3QTQ0NDhEMTQ4NDBBMjlBRkQ1RTlDQkQ0MzQzRTcwN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfoKsGA+dFz2OnHmTtjSXO3a0
CvEjvXIuKfkE3O6FhC7iVFluubSxeuDneowvVhyuMhUrXrJusOvKS3pW8GlT39gE
GPRHfgCcX5Xruil1WkNOaKiCfYRNU3pDB54vdlLzVU1DuA7xYlouDz8BUyzQtXyc
FFmVoaT7v/x/JsaWEt89SocngHcjZkJfDcHc3glmEzvKNKDmJUObTakbPw4SfYIC
qrmmQtwKL2r+iv17rGSe69lDvmvNnfQjLXrT9bTIUHEa5nyNZlmM+9Fut1HDj+eM
YQYZt9rywvVbBTWK4ZDNV9RGFbwInjO6hj0t6YUqwIXeAOU3OwFZ7es5Ezh1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUF9u1d6REjRSECimv1enL1DQ+cH4wHwYDVR0j
BBgwFoAU3k6Z6gMK+K6/t7anoOkWdN2ymsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQyNTQ0MTktNTNiZS00YWQ0LWJmN2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEw
MzBBRjhBRUJGQjdCNkE3QTBFOTE2NzREREIyOUFDMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ERTRFOTlFQTAzMEFGOEFFQkZCN0I2QTdBMEU5MTY3NEREQjI5
QUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm
N2YtMjlmODkxMjUyM2QwLzAvREU0RTk5RUEwMzBBRjhBRUJGQjdCNkE3QTBFOTE2
NzREREIyOUFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHyduaJa19c4AaphbMESW9+j4lIKPz07UXE3
5AuqtZWvZatq8t4u2fd9/PVE6Zet6IUM1Tsrv1123LE23Xb1tVdd/PLuHKQ6r9Py
K7ZQ1HZIgL0biJKMfRynXXmfoCX4t37HlhtXtM8a2YlgiIhwsrJUhkSwhRYKbNu2
pAC+anKWWDSPXDBE4UKjBcsqLZnl9HlMXUF4WcPyv1ZmZiP5kwLhSM7Hi9FUJmVO
Bt+q7//UvC3Hv5/RS8pWlyfmCZvNRq0Kgh4GFdEbZAtcB/PQ5JPG6bQ0omzqCB6R
yuZiFIvpDIh+tsWdcf6OJscqG9p7cVgF/P/SijJ+kNGl2I1t1gQ=
-----END CERTIFICATE-----
Generated at Thu Aug 20 07:06:08 2026 by rpki-client