Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
File:                     54C92083A9323650229F71CD77020E900DBD4472.mft (raw, json)
Hash identifier:          8HTQYlNfsVhKNjim6/xuo0Dn9CnAxsz0UA2eoahHk5U=
Subject key identifier:   25:51:34:FF:8A:EF:BB:6F:DA:16:5E:7B:28:BD:2D:5D:82:6E:2D:91
Authority key identifier: 54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72
Certificate issuer:       /CN=54C92083A9323650229F71CD77020E900DBD4472
Certificate serial:       44317201F5E1654AB64F8AAF3CE844277D9DDA16
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 23:38:37 +0000
Manifest this update:     Thu 23 Jul 2026 23:33:37 +0000
Manifest next update:     Sat 25 Jul 2026 03:06:37 +0000
Files and hashes:         1: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: xH/j3P0hNV71yUDTrBLv8LroM8ikwY+gLRmF3/+JErk=)
                          2: 54C92083A9323650229F71CD77020E900DBD4472.crl (hash: c5GwKBGIUoLD1oO1baEOrvjvKXNgeQ09+zlH7yeaoYE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl
                          rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:31:72:01:f5:e1:65:4a:b6:4f:8a:af:3c:e8:44:27:7d:9d:da:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54C92083A9323650229F71CD77020E900DBD4472
        Validity
            Not Before: Jul 23 23:33:37 2026 GMT
            Not After : Jul 25 03:06:37 2026 GMT
        Subject: CN=255134FF8AEFBB6FDA165E7B28BD2D5D826E2D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:09:2e:21:9c:74:0c:93:1c:c9:d8:f5:45:
                    89:85:5d:3a:ce:f4:32:96:7f:6d:4c:27:c0:c1:32:
                    0d:ca:bc:99:2b:81:db:3d:58:5b:3e:af:02:a7:34:
                    70:b7:b3:5c:71:eb:cd:12:a5:0d:ef:6b:82:b8:37:
                    c5:ab:97:62:8b:d3:6e:df:da:59:fa:47:93:7d:5a:
                    e8:e2:8a:64:67:b6:4e:a6:dc:89:b3:a1:07:be:52:
                    2b:ae:33:f3:ec:e2:6d:cc:34:9f:39:92:93:14:ff:
                    2c:2a:06:9a:23:8e:67:5d:7c:a3:ba:50:de:51:0f:
                    fb:9a:99:15:82:a0:c3:71:b0:38:1d:53:a4:86:45:
                    12:69:05:59:bc:00:15:65:d4:07:2a:23:7a:40:2b:
                    ce:7e:09:9c:eb:3b:40:db:dc:48:61:69:0f:82:f9:
                    fe:cb:fb:02:a7:2d:04:63:fa:66:e5:c2:ca:64:65:
                    92:85:bb:66:4f:93:d1:a9:45:cb:79:7d:e2:32:92:
                    9c:fd:e3:35:8d:12:2d:41:bd:8d:9f:47:30:bc:1d:
                    f7:9a:81:54:ab:d3:2e:ff:67:01:d2:81:da:08:e6:
                    04:90:6f:f0:35:ff:63:c6:8e:a3:32:6a:88:32:54:
                    a2:1f:ad:5e:18:c7:ff:c9:56:36:5e:c6:64:e1:74:
                    92:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:51:34:FF:8A:EF:BB:6F:DA:16:5E:7B:28:BD:2D:5D:82:6E:2D:91
            X509v3 Authority Key Identifier:
                keyid:54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:e3:2f:44:61:ad:3a:5d:27:9d:42:d2:5a:ff:d5:f0:99:0d:
         b4:78:e4:1c:4a:94:2a:4b:32:03:b9:96:61:d4:15:57:78:e5:
         f4:49:c2:19:07:f3:9c:8b:37:ee:ea:eb:03:09:22:0f:8e:ae:
         80:27:f4:4b:40:93:1e:e6:51:3e:63:4c:a4:7a:e9:70:00:14:
         22:2f:34:40:f0:32:5f:f1:ed:cc:5b:ea:19:e6:09:c9:20:20:
         2d:c7:14:68:ea:8e:ba:52:ae:03:95:1d:1e:87:87:2b:76:9a:
         e5:39:0e:e3:64:68:f2:a1:ba:28:ee:f6:c2:8d:4d:9d:ba:15:
         7d:ba:91:73:4f:27:6b:95:58:fd:0d:6a:86:77:5e:e2:ea:24:
         2b:3f:0d:ff:9c:20:7d:1f:55:68:0a:a8:46:b8:62:b9:8f:37:
         62:46:99:67:bb:c6:33:f8:e6:bc:d6:cf:f3:5f:cf:34:8f:3c:
         77:2a:e2:2d:42:8a:56:e8:a8:89:20:43:b9:5d:d1:63:e6:d7:
         74:d1:63:aa:2d:55:30:0f:87:71:f8:ec:b0:ad:c6:3d:68:dc:
         b0:3e:f0:f5:be:1d:b0:91:9f:00:04:e3:c7:90:ff:c4:77:f9:
         8d:86:64:e3:18:31:4c:25:45:ae:2f:d5:8a:55:93:97:ae:ae:
         36:e2:17:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:55 2026 by rpki-client