Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
File:                     DCA916604EAE55F638D4691DA6D930A094E4281C.mft (raw, json)
Hash identifier:          ED376zh1AZzJJAHNvu2gJTCJEu/T4+NQ5f0QHjqVDDM=
Subject key identifier:   29:5C:7E:24:81:02:CC:35:5C:59:B3:AC:36:F1:28:1D:07:65:2E:75
Authority key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C
Certificate issuer:       /CN=DCA916604EAE55F638D4691DA6D930A094E4281C
Certificate serial:       5F765BA44E4C1E87BB6CA62C5B187A7A2511CA7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
Manifest number:          7C
Signing time:             Sun 02 Aug 2026 16:06:56 +0000
Manifest this update:     Sun 02 Aug 2026 16:01:56 +0000
Manifest next update:     Mon 03 Aug 2026 18:38:56 +0000
Files and hashes:         1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: 0ggaPePdCSw/n+Sh533ZsWKg9491ZisyRCt3cB57Hw0=)
                          2: DCA916604EAE55F638D4691DA6D930A094E4281C.crl (hash: nyNO6jOsLFQGQgAjV860bEh8wiB4OjstV9CZ9J69nkE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl
                          rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:76:5b:a4:4e:4c:1e:87:bb:6c:a6:2c:5b:18:7a:7a:25:11:ca:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA916604EAE55F638D4691DA6D930A094E4281C
        Validity
            Not Before: Aug  2 16:01:56 2026 GMT
            Not After : Aug  3 18:38:56 2026 GMT
        Subject: CN=295C7E248102CC355C59B3AC36F1281D07652E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:32:9c:2b:5d:5f:aa:5f:28:92:ea:e3:df:
                    e3:2a:de:c5:36:5b:37:fd:ab:06:fe:f6:f9:f6:85:
                    ab:04:d4:0e:7c:a4:ae:f8:7c:76:f4:c8:b0:ab:7c:
                    7c:3c:34:25:fb:0a:5a:13:1e:93:99:7b:fa:50:21:
                    27:90:b7:e1:9f:79:56:20:75:90:4b:88:85:d0:41:
                    37:17:37:c2:25:27:0f:b1:5d:a2:22:c4:8b:19:dd:
                    b4:c8:08:08:a2:ab:8b:ed:4f:0b:79:0f:25:1f:a5:
                    ce:db:12:e4:fc:c9:d7:3c:95:04:95:59:36:bb:dd:
                    31:22:58:0b:3c:72:5c:db:92:e9:f4:d4:40:06:ff:
                    bd:99:8c:df:1e:88:2b:52:ec:91:84:7a:9d:84:58:
                    d5:81:04:c1:9d:f7:ec:76:6c:90:c0:3e:46:59:66:
                    4d:4d:c2:d4:b4:8a:53:07:f3:e7:b9:7d:82:dd:0f:
                    7c:e0:41:66:28:aa:0d:6b:23:05:85:b9:7a:47:16:
                    8a:80:5f:f2:1c:f4:49:1b:f6:3c:b9:38:53:d4:06:
                    88:b3:2d:1d:da:9e:17:f3:a4:32:94:cf:f9:9c:7f:
                    33:19:34:d1:d8:38:fb:3c:74:74:b6:ea:05:bf:a4:
                    cf:16:59:2c:29:13:5b:f5:40:69:a5:4f:49:93:58:
                    e7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:7E:24:81:02:CC:35:5C:59:B3:AC:36:F1:28:1D:07:65:2E:75
            X509v3 Authority Key Identifier:
                keyid:DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:07:98:77:00:b2:c9:25:51:a9:0c:f3:1a:31:d0:ee:0d:5a:
         fe:88:dd:6d:ed:59:13:75:7f:c3:81:26:06:af:98:d6:83:93:
         53:f0:43:cf:fe:46:91:d1:c1:14:d8:b6:84:75:e7:c2:22:10:
         98:67:62:e0:02:bb:37:09:df:a9:80:1c:1c:59:c8:80:a3:1a:
         3d:08:11:b1:1e:ad:37:cf:43:d9:74:1b:eb:ce:9f:da:3c:13:
         5d:03:1e:11:a2:a6:c9:f8:34:a2:50:f6:f7:ca:64:b4:31:14:
         67:d1:cd:4d:d9:77:a2:55:9a:4c:f0:4d:23:98:80:30:30:18:
         47:63:5e:b4:22:e4:bd:69:3c:cf:45:e2:75:43:7e:e1:42:b5:
         89:9b:8d:bb:4f:b6:64:95:97:56:87:81:37:74:b8:74:63:7e:
         ce:f8:f8:e6:28:f3:78:bf:c5:b9:7a:94:d4:38:be:9d:2a:14:
         6f:bb:df:e0:5d:7e:6c:18:ee:2a:de:f1:a2:5c:a5:e1:67:e6:
         28:48:1a:7f:40:63:37:d9:0d:36:e3:21:4d:e9:60:c8:f2:68:
         99:ee:c0:26:7e:70:54:9c:a3:65:dd:a6:3c:ed:ac:b4:77:d9:
         a1:8f:33:1f:3f:0c:f6:20:ea:64:44:93:71:09:74:fb:9a:5e:
         3a:df:64:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 22:45:40 2026 by rpki-client