Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
File:                     54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft (raw, json)
Hash identifier:          YKMyra+YsEHbFTRisdnBDAUce01OaVmgMDJkiVGMVNs=
Subject key identifier:   54:58:54:A0:8D:1A:E7:79:70:AD:A3:5E:BB:77:B7:F2:CB:44:87:67
Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
Certificate issuer:       /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Certificate serial:       229C36A9CC8B42A70DE6A789E51603E57AC197F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
Manifest number:          BF
Signing time:             Wed 23 Sep 2026 10:49:33 +0000
Manifest this update:     Wed 23 Sep 2026 10:44:33 +0000
Manifest next update:     Thu 24 Sep 2026 14:07:33 +0000
Files and hashes:         1: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: scTK7rZThGhXfIPySddhmNCX7i4mvgGXTsiyo8jVbxc=)
                          2: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: LKsHqQcZUJCgecYtzz0USmgMLUYXo/qCHZXVnCAPbnM=)
                          3: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: QGhKSlIsixKbTEhaqUudsGvUSA4uhlI4HytmJKQImH4=)
                          4: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: fpQkdOaR92WpkBfxWr9OflPSFmWkPnjC1NbbvtYsxhc=)
                          5: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: 8g4qg4fTmzGLrdSqeTYMLQ/nhuyOxDCuFX6q9Vci1Gw=)
                          6: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: T5kI5MLIaUqaAxESiPmRsGM1ei7I/qx0IQ84twiYZrk=)
                          7: 323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa (hash: EDPtJPyVtYnWSioxvGUPqbPBpLVnJzFlpR0LUhqhryg=)
                          8: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: Vyn59WWzDbVDpHfa8qPn7Ythwg95mXNAyeJWWdZJ1nA=)
                          9: 3130332e34322e3132322e302f32342d3234203d3e203633353136.roa (hash: 8SJDF8HSG10oCM1G4OI58tWX1qc89ErDw3HKtLXzWZM=)
                          10: 54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl (hash: gFpoQSI6qoJRxwO/sieBUxfqpHuzznR9za8YaP4KjpI=)
                          11: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: NhXXxSty01JiVo75mNrRpSPoRoM1du9nG1hZFq89xkU=)
                          12: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: jPDRbw49v7/x8exk1bJ0ina/caLrmzrS8avW8MUPoko=)
                          13: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: MSu/P2Pnm50BIePknSByUVVfzvx6tKgrZyKAlarEWQ8=)
                          14: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: /RO2VDTS2O1unkJvgBqg7eacIIlQXn+fwKq2bmsfQaY=)
                          15: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: WeOhDg4+1D/xGbcSeIMZ7j4SOySS9cPgnu2CQca06BY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
                          rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 14:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9c:36:a9:cc:8b:42:a7:0d:e6:a7:89:e5:16:03:e5:7a:c1:97:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
        Validity
            Not Before: Sep 23 10:44:33 2026 GMT
            Not After : Sep 24 14:07:33 2026 GMT
        Subject: CN=545854A08D1AE77970ADA35EBB77B7F2CB448767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:ff:09:64:bd:bc:53:e2:75:22:b3:b8:c3:
                    9e:7a:9a:33:4c:78:0f:49:52:83:53:ad:d9:93:a9:
                    87:ea:1f:4d:60:8b:d2:ef:fc:6b:02:4c:6c:63:f7:
                    0d:e9:19:b2:bd:94:e1:75:84:65:b9:ab:08:b3:ef:
                    59:dd:d1:cc:39:ba:7e:20:55:d2:11:17:03:ba:70:
                    3f:d2:e3:61:44:86:d0:2a:6d:92:11:57:79:39:11:
                    40:30:53:ad:b6:69:fa:51:ac:fc:bf:60:90:fe:c7:
                    b3:6e:00:f3:75:a3:2a:15:d5:dd:c3:d4:a0:04:59:
                    c0:56:d2:4f:03:63:ea:b0:e7:f9:a8:58:5e:bb:63:
                    54:37:46:9b:6b:00:f4:3e:42:64:84:fe:a8:24:32:
                    9e:4b:b1:ee:30:a3:f3:5b:43:1d:79:ad:6f:d7:fc:
                    d5:f5:17:3b:8e:00:64:11:5a:ac:37:9c:a0:26:e3:
                    67:a3:82:0e:d8:e0:13:29:3e:e0:a9:cd:09:b9:3c:
                    81:6a:65:fa:29:54:4e:80:7b:43:69:b8:19:f9:11:
                    d8:2a:c9:0f:c6:e3:41:28:30:96:2c:f3:61:14:ee:
                    23:a8:c1:14:6c:68:16:b5:c1:5f:54:b3:e9:32:80:
                    3b:a9:2d:bf:61:99:ff:73:d5:bd:59:8d:60:d4:28:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:54:A0:8D:1A:E7:79:70:AD:A3:5E:BB:77:B7:F2:CB:44:87:67
            X509v3 Authority Key Identifier:
                keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:14:bb:00:b3:d3:84:a8:c8:7d:c8:0e:0a:ff:88:19:c8:
         3c:de:78:d1:df:9b:e3:b3:aa:c9:59:cd:c9:03:ac:4c:4e:25:
         e0:34:f8:1e:ed:47:af:3e:ed:97:7d:bd:ac:fe:db:e4:fd:82:
         5e:43:f6:54:fc:d8:42:97:f9:3c:f1:e5:ec:3c:db:cf:34:d7:
         84:fe:99:76:d4:2a:be:77:83:c4:94:f0:b0:df:08:a3:05:2a:
         64:8d:a1:b0:0d:c8:71:88:c7:16:c8:6a:0f:3a:6d:1e:8e:60:
         83:e2:b5:c6:9a:33:31:c4:fd:6e:cc:63:42:2b:af:fd:64:1e:
         25:31:a7:7d:43:72:b7:4d:cf:5b:32:b9:dc:e1:ff:13:4a:9b:
         16:03:26:92:02:4f:4c:83:ad:ac:8f:55:53:c6:38:66:17:d7:
         60:10:ed:46:6b:bf:17:5a:bf:d1:42:05:27:14:85:89:3e:f1:
         c9:5a:c7:e4:ab:9f:2b:07:2e:45:89:3f:20:36:b7:35:01:29:
         b9:95:83:70:93:7b:27:26:4f:9c:e4:aa:70:24:f0:0d:12:0a:
         9e:9a:2d:f2:62:60:12:0b:43:8f:0e:c9:3a:b7:c0:a3:e6:b3:
         12:3a:33:44:77:56:9a:a4:ff:a0:95:db:19:2d:75:78:67:a8:
         2b:3e:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:45:40 2026 by rpki-client