Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft
File:                     DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft (raw, json)
Hash identifier:          deCttlIRYX3Ca8UCRm82Z6E0heQKaL/MIwBGhiYaYus=
Subject key identifier:   8E:CC:CB:DA:03:72:4F:E4:F5:71:6B:B1:CA:86:91:A1:F7:28:7B:86
Authority key identifier: DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76
Certificate issuer:       /CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76
Certificate serial:       67C83E97E085A2DCDA36257CB473E4C0DF798E1E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft
Manifest number:          B7
Signing time:             Wed 16 Sep 2026 14:47:21 +0000
Manifest this update:     Wed 16 Sep 2026 14:42:21 +0000
Manifest next update:     Thu 17 Sep 2026 17:39:21 +0000
Files and hashes:         1: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: hgyoReewnJKW4nr6+Jg49Hdij/Yxck5vrTJyyAU/fpU=)
                          2: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: CdzPgARwHWVAiNVpWfYHHcwq4khjb1oCYEqwBbuFJZI=)
                          3: DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl (hash: BV0M/t2qydzoMHYmVHlQtdd8cde+/IcWlX5QSE0ZO2A=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl
                          rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c8:3e:97:e0:85:a2:dc:da:36:25:7c:b4:73:e4:c0:df:79:8e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76
        Validity
            Not Before: Sep 16 14:42:21 2026 GMT
            Not After : Sep 17 17:39:21 2026 GMT
        Subject: CN=8ECCCBDA03724FE4F5716BB1CA8691A1F7287B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:63:2c:70:3c:b4:5a:da:c3:8d:f9:33:b2:
                    89:a5:f4:4e:a8:0f:0b:11:83:d6:d0:15:80:a3:b3:
                    76:2e:51:80:41:ed:f3:f0:f2:4a:31:ea:32:3c:c4:
                    e7:34:2b:db:8e:60:09:b1:19:48:81:b8:ff:da:fb:
                    ee:6f:57:3f:43:45:e4:12:78:a8:fe:a5:17:7d:f7:
                    e8:ea:9f:d5:5a:3f:30:59:56:49:0a:a8:f2:58:07:
                    86:0a:21:c5:6d:11:5b:b5:5b:0a:be:7b:40:b3:a3:
                    03:41:c6:22:31:1d:66:21:42:f1:40:56:18:8e:8d:
                    66:69:df:2f:40:e7:20:a3:e0:54:e1:82:c1:85:21:
                    0f:76:9b:d6:4c:21:0e:c7:11:7b:e5:26:5e:27:28:
                    e3:eb:3c:ee:62:b5:06:cc:34:8a:20:90:49:17:18:
                    43:35:68:21:36:81:ef:b8:78:0a:6f:80:07:b1:56:
                    3e:48:91:27:b4:e9:7e:2c:6c:11:4c:fc:53:eb:e5:
                    6b:e1:8e:e4:e1:5b:ce:5e:cc:09:d2:58:95:4d:7d:
                    ee:d2:72:2e:f1:9a:91:a9:b9:49:d9:78:0b:ba:63:
                    29:bc:ab:9f:05:05:e1:50:8a:60:f5:ce:e6:3a:96:
                    0c:26:f5:42:bd:07:58:84:e7:59:a4:52:3e:37:8f:
                    99:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CC:CB:DA:03:72:4F:E4:F5:71:6B:B1:CA:86:91:A1:F7:28:7B:86
            X509v3 Authority Key Identifier:
                keyid:DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a5:29:54:b5:48:8b:88:e1:eb:72:eb:b2:05:28:2d:90:e5:
         a6:27:f9:b9:21:ec:1c:18:a5:03:e0:79:d8:fc:5a:0c:49:c4:
         02:65:78:24:21:e7:19:60:e4:a0:5c:2e:d3:d3:7b:d3:3a:4e:
         da:d4:53:8c:ba:e6:dc:0d:bd:53:0e:87:68:5b:8e:cf:3a:59:
         10:03:29:0a:9f:ae:a6:4b:e8:6e:83:c6:5f:1c:d0:ce:7a:d3:
         6d:e7:5a:4c:ca:bd:31:66:4c:ec:0a:8d:ff:1f:95:fc:09:dc:
         d0:7d:64:db:68:f0:19:df:ea:78:30:f6:a4:74:c6:75:f7:61:
         2d:1e:db:b9:6c:cc:f2:b5:9d:6f:3c:25:5f:92:73:c7:eb:b2:
         fd:0f:fb:bb:97:5a:c3:78:83:87:0d:1d:b5:70:4f:d7:3e:25:
         ac:e5:24:25:96:b3:f9:8e:4e:ca:16:17:a1:98:f7:51:e5:fe:
         5d:7f:73:87:30:0d:3d:18:5e:87:8d:d9:ee:b1:7a:86:23:0b:
         03:4d:d8:9c:55:a6:d1:00:70:27:a9:9f:23:ff:2a:fc:97:e4:
         61:de:5a:f6:8d:47:90:de:a1:64:8c:21:8e:ff:d1:a0:29:bd:
         ef:6a:32:44:78:88:37:b2:f2:f6:b5:9a:ef:90:62:3d:cf:d8:
         15:91:02:41
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ8g+l+CFotzaNiV8tHPkwN95jh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1
MjI2NEQ3NjAeFw0yNjA5MTYxNDQyMjFaFw0yNjA5MTcxNzM5MjFaMDMxMTAvBgNV
BAMTKDhFQ0NDQkRBMDM3MjRGRTRGNTcxNkJCMUNBODY5MUExRjcyODdCODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QWMscDy0WtrDjfkzsoml9E6o
DwsRg9bQFYCjs3YuUYBB7fPw8kox6jI8xOc0K9uOYAmxGUiBuP/a++5vVz9DReQS
eKj+pRd99+jqn9VaPzBZVkkKqPJYB4YKIcVtEVu1Wwq+e0CzowNBxiIxHWYhQvFA
VhiOjWZp3y9A5yCj4FThgsGFIQ92m9ZMIQ7HEXvlJl4nKOPrPO5itQbMNIogkEkX
GEM1aCE2ge+4eApvgAexVj5IkSe06X4sbBFM/FPr5WvhjuThW85ezAnSWJVNfe7S
ci7xmpGpuUnZeAu6Yym8q58FBeFQimD1zuY6lgwm9UK9B1iE51mkUj43j5kXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjszL2gNyT+T1cWuxyoaRofcoe4YwHwYDVR0j
BBgwFoAU3KpQDlbfWbaBet4dUbVgX1ImTXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTMyOTVkZTYtMjA1OC00NmE3LTkzNmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1
NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1MjI2NEQ3Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EQ0FBNTAwRTU2REY1OUI2ODE3QURFMUQ1MUI1NjA1RjUyMjY0
RDc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz
NmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYw
NUY1MjI2NEQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGOlKVS1SIuI4ety67IFKC2Q5aYn+bkh7BwY
pQPgedj8WgxJxAJleCQh5xlg5KBcLtPTe9M6TtrUU4y65twNvVMOh2hbjs86WRAD
KQqfrqZL6G6Dxl8c0M56023nWkzKvTFmTOwKjf8flfwJ3NB9ZNto8Bnf6ngw9qR0
xnX3YS0e27lszPK1nW88JV+Sc8frsv0P+7uXWsN4g4cNHbVwT9c+JazlJCWWs/mO
TsoWF6GY91Hl/l1/c4cwDT0YXoeN2e6xeoYjCwNN2JxVptEAcCepnyP/KvyX5GHe
WvaNR5DeoWSMIY7/0aApve9qMkR4iDey8va1mu+QYj3P2BWRAkE=
-----END CERTIFICATE-----
Generated at Thu Sep 17 09:23:15 2026 by rpki-client