Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft
File:                     54AF61D322823AA9528CD145C400C58C1FA4526E.mft (raw, json)
Hash identifier:          VNpNt/bY6vIakTzK4CYVbTJleT9JY36P/hJ8IzWsyYw=
Subject key identifier:   19:65:6F:9B:06:A6:53:DF:2B:AC:4E:44:68:0C:6B:BD:62:CD:F2:39
Authority key identifier: 54:AF:61:D3:22:82:3A:A9:52:8C:D1:45:C4:00:C5:8C:1F:A4:52:6E
Certificate issuer:       /CN=54AF61D322823AA9528CD145C400C58C1FA4526E
Certificate serial:       48F31843DF4FC31A9232F1576E63FE210D0C6493
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AF61D322823AA9528CD145C400C58C1FA4526E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft
Manifest number:          BF
Signing time:             Wed 23 Sep 2026 05:07:18 +0000
Manifest this update:     Wed 23 Sep 2026 05:02:18 +0000
Manifest next update:     Thu 24 Sep 2026 06:07:18 +0000
Files and hashes:         1: 54AF61D322823AA9528CD145C400C58C1FA4526E.crl (hash: FRq6siTuXMVYDDXr4oy123u/YUyiAPvYJw8eG/nZ/RQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.crl
                          rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AF61D322823AA9528CD145C400C58C1FA4526E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 06:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f3:18:43:df:4f:c3:1a:92:32:f1:57:6e:63:fe:21:0d:0c:64:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54AF61D322823AA9528CD145C400C58C1FA4526E
        Validity
            Not Before: Sep 23 05:02:18 2026 GMT
            Not After : Sep 24 06:07:18 2026 GMT
        Subject: CN=19656F9B06A653DF2BAC4E44680C6BBD62CDF239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:d4:5d:a5:8f:0e:b8:44:18:60:d3:35:ee:
                    be:0b:92:ef:f8:f6:9d:7a:e2:58:56:dd:84:e3:dc:
                    0f:5b:61:e4:d2:96:7d:0b:b6:a6:2a:82:4b:3c:b7:
                    61:0b:7b:d9:ae:42:f2:3a:6b:84:82:e3:f3:ed:56:
                    a8:2b:15:e8:b2:cc:db:8f:e0:a0:f6:b0:cb:73:47:
                    0b:74:1a:e0:a3:68:f8:40:52:fe:92:c0:13:84:b8:
                    e9:e0:de:13:26:66:2b:78:b2:fa:26:74:8d:e9:17:
                    0e:68:a3:ef:e8:4c:4b:6a:02:ef:b4:d1:27:29:bc:
                    fd:cb:e0:5b:bb:04:32:82:49:0d:33:be:92:83:03:
                    3d:10:a4:0b:4b:0c:e3:09:69:78:6d:5a:e5:3d:4c:
                    87:00:5a:8e:cb:02:53:5f:ce:47:83:f2:b9:3e:70:
                    68:20:bc:c5:1e:76:bf:db:5d:12:57:31:c4:11:79:
                    b2:98:bc:fb:5b:78:f4:dd:7c:8c:c1:8f:b2:cd:6b:
                    94:a4:b7:d3:44:f4:04:17:4d:58:eb:a6:23:1f:9a:
                    94:7f:1a:0f:3f:1a:f5:33:92:7e:e6:70:7d:8a:cf:
                    27:83:ed:86:25:f6:41:10:dd:8f:76:f5:7e:42:93:
                    c0:bb:58:fb:97:18:8a:7b:46:21:a0:94:b8:03:fb:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:65:6F:9B:06:A6:53:DF:2B:AC:4E:44:68:0C:6B:BD:62:CD:F2:39
            X509v3 Authority Key Identifier:
                keyid:54:AF:61:D3:22:82:3A:A9:52:8C:D1:45:C4:00:C5:8C:1F:A4:52:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AF61D322823AA9528CD145C400C58C1FA4526E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7f:48:c3:31:67:a0:f1:13:4b:ad:9c:fd:6a:de:29:78:8a:
         59:14:b2:ae:67:2c:b4:e4:96:6a:5e:25:60:f6:e1:18:bb:a6:
         bf:00:51:f5:21:b5:c5:a7:eb:92:fd:21:ed:fe:7c:84:c5:6d:
         4e:97:fb:86:83:be:54:1b:f1:60:1b:38:61:0b:39:11:a9:45:
         21:7e:c2:41:6a:05:ed:f0:6c:e5:7f:3a:04:1b:bf:95:49:3d:
         6f:e3:78:78:5d:03:cb:cb:2a:f4:bd:99:16:62:b1:c3:47:41:
         1d:24:8a:71:ee:38:1d:41:30:b8:9f:d5:66:27:de:72:5e:5b:
         13:66:69:db:fb:db:d7:c7:4a:a5:a3:fe:3e:be:15:f1:fd:2e:
         4d:23:11:bf:75:48:7f:16:0f:c5:42:ba:a8:b8:4d:bf:12:31:
         2c:3c:2d:8f:46:47:15:fd:ff:19:37:74:3a:e5:48:84:f6:c4:
         08:a1:83:69:df:17:24:af:99:28:c6:7c:70:76:b4:c4:0a:ea:
         c3:25:b9:37:56:9a:a9:6b:9e:3c:21:20:5d:e6:3c:0c:db:e1:
         8b:93:f0:fc:b5:22:b9:e6:7d:e7:90:f8:1b:50:bc:2f:b0:5d:
         c5:09:8f:37:a2:5d:0d:3d:c9:5e:88:53:74:02:de:1a:a2:e8:
         9c:3c:e5:60
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSPMYQ99PwxqSMvFXbmP+IQ0MZJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBRjYxRDMyMjgyM0FBOTUyOENEMTQ1QzQwMEM1OEMx
RkE0NTI2RTAeFw0yNjA5MjMwNTAyMThaFw0yNjA5MjQwNjA3MThaMDMxMTAvBgNV
BAMTKDE5NjU2RjlCMDZBNjUzREYyQkFDNEU0NDY4MEM2QkJENjJDREYyMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrf9RdpY8OuEQYYNM17r4Lku/4
9p164lhW3YTj3A9bYeTSln0LtqYqgks8t2ELe9muQvI6a4SC4/PtVqgrFeiyzNuP
4KD2sMtzRwt0GuCjaPhAUv6SwBOEuOng3hMmZit4svomdI3pFw5oo+/oTEtqAu+0
0ScpvP3L4Fu7BDKCSQ0zvpKDAz0QpAtLDOMJaXhtWuU9TIcAWo7LAlNfzkeD8rk+
cGggvMUedr/bXRJXMcQRebKYvPtbePTdfIzBj7LNa5Skt9NE9AQXTVjrpiMfmpR/
Gg8/GvUzkn7mcH2KzyeD7YYl9kEQ3Y929X5Ck8C7WPuXGIp7RiGglLgD+8bRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGWVvmwamU98rrE5EaAxrvWLN8jkwHwYDVR0j
BBgwFoAUVK9h0yKCOqlSjNFFxADFjB+kUm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTNmYzFkYTMtOGJmMy00ZmYyLTk3N2MtMjNjYjI3M2FkMjQ4LzAvNTRBRjYxRDMy
MjgyM0FBOTUyOENEMTQ1QzQwMEM1OEMxRkE0NTI2RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NEFGNjFEMzIyODIzQUE5NTI4Q0QxNDVDNDAwQzU4QzFGQTQ1
MjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3
N2MtMjNjYjI3M2FkMjQ4LzAvNTRBRjYxRDMyMjgyM0FBOTUyOENEMTQ1QzQwMEM1
OEMxRkE0NTI2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAB/SMMxZ6DxE0utnP1q3il4ilkUsq5nLLTk
lmpeJWD24Ri7pr8AUfUhtcWn65L9Ie3+fITFbU6X+4aDvlQb8WAbOGELORGpRSF+
wkFqBe3wbOV/OgQbv5VJPW/jeHhdA8vLKvS9mRZiscNHQR0kinHuOB1BMLif1WYn
3nJeWxNmadv729fHSqWj/j6+FfH9Lk0jEb91SH8WD8VCuqi4Tb8SMSw8LY9GRxX9
/xk3dDrlSIT2xAihg2nfFySvmSjGfHB2tMQK6sMluTdWmqlrnjwhIF3mPAzb4YuT
8Py1IrnmfeeQ+BtQvC+wXcUJjzeiXQ09yV6IU3QC3hqi6Jw85WA=
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:19:57 2026 by rpki-client