Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
File:                     DCA916604EAE55F638D4691DA6D930A094E4281C.mft (raw, json)
Hash identifier:          OrFxTwunP2y0eT7BAI/X/uHcgKJw5APsNGAMk7dP4DQ=
Subject key identifier:   FD:63:2C:D8:E1:93:9B:E6:69:9E:9E:78:2D:EC:73:9F:3E:2B:03:FD
Authority key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C
Certificate issuer:       /CN=DCA916604EAE55F638D4691DA6D930A094E4281C
Certificate serial:       678E6E461A46B03ED4334BEA6505B8EFD4F2C2DA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
Manifest number:          40
Signing time:             Thu 18 Jun 2026 06:25:01 +0000
Manifest this update:     Thu 18 Jun 2026 06:20:01 +0000
Manifest next update:     Fri 19 Jun 2026 10:08:01 +0000
Files and hashes:         1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: 0ggaPePdCSw/n+Sh533ZsWKg9491ZisyRCt3cB57Hw0=)
                          2: DCA916604EAE55F638D4691DA6D930A094E4281C.crl (hash: NYx8q7+nUmQT7rJA14PnVpTCilC6VnfBHQ/LkEBTN/I=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl
                          rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 10:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8e:6e:46:1a:46:b0:3e:d4:33:4b:ea:65:05:b8:ef:d4:f2:c2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA916604EAE55F638D4691DA6D930A094E4281C
        Validity
            Not Before: Jun 18 06:20:01 2026 GMT
            Not After : Jun 19 10:08:01 2026 GMT
        Subject: CN=FD632CD8E1939BE6699E9E782DEC739F3E2B03FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:20:39:f7:65:76:6f:b8:f8:1a:7d:9d:36:
                    56:1f:47:d0:0b:b5:21:9f:76:19:a1:04:91:9c:19:
                    4f:f8:3f:6f:4e:ac:f4:f9:7f:df:11:d7:12:d5:f4:
                    88:ae:ad:ed:14:be:cf:25:5f:b4:b3:46:a2:5d:6c:
                    a8:56:53:43:78:6b:c8:a8:52:9e:4a:82:d4:dc:27:
                    30:9b:8d:50:f6:ef:ed:c6:bc:89:9d:ba:be:ae:57:
                    3e:d3:f7:30:da:86:a9:1e:06:43:93:e1:f3:c8:18:
                    f1:22:de:e7:01:fa:83:87:97:83:ae:ab:4e:45:5a:
                    04:78:ea:f7:3b:b7:cd:0a:c6:35:54:1e:81:55:e2:
                    33:b7:3a:45:41:cd:1d:e5:e5:11:51:2b:37:e4:d0:
                    48:02:d3:ae:9f:25:ff:0d:ef:f7:07:c7:ee:8a:1d:
                    f0:9f:38:e3:b3:38:95:56:96:20:70:ef:d8:65:75:
                    9c:77:4b:c8:d2:e1:14:a9:dd:99:b6:34:e3:d9:4e:
                    67:67:aa:48:2c:44:0c:d9:bb:5d:b2:d4:9f:42:f7:
                    a5:f3:04:a0:e0:36:af:af:60:89:f3:97:1d:61:9d:
                    88:63:79:47:65:57:40:ca:0c:2c:49:a1:ec:91:93:
                    ba:9f:b3:a2:21:1c:7c:97:6c:b0:50:5a:5d:f2:ab:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:63:2C:D8:E1:93:9B:E6:69:9E:9E:78:2D:EC:73:9F:3E:2B:03:FD
            X509v3 Authority Key Identifier:
                keyid:DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5b:3a:6d:89:5b:90:e5:3c:61:ea:2f:76:1c:48:e2:00:68:
         59:ab:4c:b3:36:37:9d:e5:51:76:f3:24:a7:bf:5d:58:fd:63:
         c9:e5:79:f1:c1:52:85:8e:6c:96:85:ec:5f:2f:96:dc:7b:13:
         19:0d:10:43:ac:fb:d5:0c:13:d3:7a:a6:6b:53:66:5a:8e:0a:
         26:cd:48:f3:50:bb:55:c0:ae:88:52:67:60:70:54:70:49:e8:
         db:da:ef:aa:ea:be:b7:f7:95:f5:c5:d9:93:06:1c:03:cb:31:
         6d:6e:41:12:07:9c:15:ad:a6:de:db:a7:dc:b0:4d:5f:16:85:
         49:92:cf:d8:29:e6:e2:74:83:7c:e9:3d:a7:99:00:bf:04:48:
         95:6d:f2:1a:74:3c:1e:0f:1a:65:f2:47:ff:e7:cb:15:8e:71:
         f6:9d:33:17:e6:ae:7d:58:a1:44:1e:00:47:00:41:e9:74:e9:
         e9:d5:b9:cc:dd:bf:e8:0d:e7:d5:58:de:0b:29:dc:04:d5:8a:
         83:64:c6:33:f1:3b:1d:4a:1c:3a:e9:c6:b0:e0:28:f5:00:c6:
         55:52:d7:6d:ec:49:ea:09:3a:e6:2b:65:e2:3c:f0:ab:b0:2d:
         10:8c:fa:38:66:48:25:00:02:a9:e3:75:13:8a:0d:92:9c:a8:
         e0:dd:58:f0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ45uRhpGsD7UM0vqZQW479TywtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5
NEU0MjgxQzAeFw0yNjA2MTgwNjIwMDFaFw0yNjA2MTkxMDA4MDFaMDMxMTAvBgNV
BAMTKEZENjMyQ0Q4RTE5MzlCRTY2OTlFOUU3ODJERUM3MzlGM0UyQjAzRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUySA592V2b7j4Gn2dNlYfR9AL
tSGfdhmhBJGcGU/4P29OrPT5f98R1xLV9Iiure0Uvs8lX7SzRqJdbKhWU0N4a8io
Up5KgtTcJzCbjVD27+3GvImdur6uVz7T9zDahqkeBkOT4fPIGPEi3ucB+oOHl4Ou
q05FWgR46vc7t80KxjVUHoFV4jO3OkVBzR3l5RFRKzfk0EgC066fJf8N7/cHx+6K
HfCfOOOzOJVWliBw79hldZx3S8jS4RSp3Zm2NOPZTmdnqkgsRAzZu12y1J9C96Xz
BKDgNq+vYInzlx1hnYhjeUdlV0DKDCxJoeyRk7qfs6IhHHyXbLBQWl3yq7dLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/WMs2OGTm+Zpnp54Lexznz4rA/0wHwYDVR0j
BBgwFoAU3KkWYE6uVfY41GkdptkwoJTkKBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0
RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5NEU0MjgxQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EQ0E5MTY2MDRFQUU1NUY2MzhENDY5MURBNkQ5MzBBMDk0RTQy
ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk
MjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMw
QTA5NEU0MjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE5bOm2JW5DlPGHqL3YcSOIAaFmrTLM2N53l
UXbzJKe/XVj9Y8nlefHBUoWObJaF7F8vltx7ExkNEEOs+9UME9N6pmtTZlqOCibN
SPNQu1XArohSZ2BwVHBJ6Nva76rqvrf3lfXF2ZMGHAPLMW1uQRIHnBWtpt7bp9yw
TV8WhUmSz9gp5uJ0g3zpPaeZAL8ESJVt8hp0PB4PGmXyR//nyxWOcfadMxfmrn1Y
oUQeAEcAQel06enVuczdv+gN59VY3gsp3ATVioNkxjPxOx1KHDrpxrDgKPUAxlVS
123sSeoJOuYrZeI88KuwLRCM+jhmSCUAAqnjdROKDZKcqODdWPA=
-----END CERTIFICATE-----
Generated at Thu Jun 18 19:09:17 2026 by rpki-client