Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
File:                     54C92083A9323650229F71CD77020E900DBD4472.mft (raw, json)
Hash identifier:          75jLzVOW16ZiLkemCTGvSKdKFemBwd04wkhkChaSxNA=
Subject key identifier:   CA:18:C5:A0:AF:AC:BE:80:AF:69:AF:7A:22:0F:98:08:EA:36:EB:E8
Authority key identifier: 54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72
Certificate issuer:       /CN=54C92083A9323650229F71CD77020E900DBD4472
Certificate serial:       1A0FBC06E99765A06655432B8287490F24DAF897
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 15:40:12 +0000
Manifest this update:     Tue 12 May 2026 15:35:12 +0000
Manifest next update:     Wed 13 May 2026 17:43:12 +0000
Files and hashes:         1: 54C92083A9323650229F71CD77020E900DBD4472.crl (hash: VB5SPfE0cKPja0M8M2YIAJJZErlAJBsUgBpNJono4Fc=)
                          2: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: xH/j3P0hNV71yUDTrBLv8LroM8ikwY+gLRmF3/+JErk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl
                          rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0f:bc:06:e9:97:65:a0:66:55:43:2b:82:87:49:0f:24:da:f8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54C92083A9323650229F71CD77020E900DBD4472
        Validity
            Not Before: May 12 15:35:12 2026 GMT
            Not After : May 13 17:43:12 2026 GMT
        Subject: CN=CA18C5A0AFACBE80AF69AF7A220F9808EA36EBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:11:46:48:5c:ae:9c:b0:11:35:6d:52:7e:1e:
                    e9:49:76:d1:c2:9a:72:93:05:ad:48:cf:6a:76:2c:
                    28:d2:7b:fc:06:1f:e6:b8:b6:31:5b:f2:de:02:52:
                    e4:69:36:f5:80:57:ae:96:33:d7:c1:de:eb:18:cd:
                    2a:83:0b:1f:cd:22:d9:c4:26:78:9c:91:8c:0a:7e:
                    0e:cc:4a:12:cf:1b:e3:48:97:7d:ff:6d:79:8b:8c:
                    39:c6:b3:17:35:70:3b:fc:08:22:65:a9:4d:50:4a:
                    c5:74:03:6f:c3:be:6f:ee:c1:1d:1b:b5:f4:70:77:
                    d9:69:8b:e8:00:d5:4c:05:9e:fb:83:36:20:08:25:
                    de:88:8b:c9:0b:c9:2a:12:b0:18:8d:e2:39:c8:14:
                    75:25:83:50:4a:cf:9c:41:39:76:80:ec:6e:5c:c5:
                    38:d0:9a:a9:ae:42:a4:bd:cd:37:81:a2:91:62:15:
                    12:bf:67:d1:30:9c:47:bc:f9:5b:f0:bf:72:66:8c:
                    bc:41:7a:ec:10:5b:d8:e6:63:41:a7:bd:f1:07:50:
                    f7:22:c5:39:d2:4b:c3:43:b9:6e:0f:12:4d:ce:de:
                    68:b3:98:54:5d:7b:49:bc:93:f1:87:a0:4c:8f:63:
                    c8:ec:7c:ff:ec:f2:4a:33:7b:4b:e7:c5:29:c2:f4:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:18:C5:A0:AF:AC:BE:80:AF:69:AF:7A:22:0F:98:08:EA:36:EB:E8
            X509v3 Authority Key Identifier:
                keyid:54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:27:06:34:68:1c:66:ac:ae:e2:68:8d:f6:b0:00:b2:20:
         b9:a9:2d:ba:05:dc:91:8d:60:42:e6:d1:0f:40:a2:1f:ce:d5:
         d6:2b:ec:67:3a:eb:85:34:17:c5:ad:d7:f7:b5:98:0e:3d:f4:
         a7:d8:aa:18:a9:9e:5c:34:26:a3:e6:d4:c2:d3:87:4a:fe:b7:
         cd:29:51:9d:c8:88:0c:cc:d6:4f:8f:bb:98:ef:6a:17:5a:1e:
         f9:ce:e2:8f:82:44:af:69:4b:c4:e9:89:df:ec:a5:1f:cd:77:
         29:6f:e7:14:e6:44:fb:6a:c8:3f:66:34:0c:58:55:da:46:b8:
         73:eb:4f:74:ea:55:76:9f:86:60:ac:13:e8:dd:8b:26:51:43:
         75:5f:6a:02:27:1a:50:54:87:f5:2f:30:6b:73:cc:9d:55:f7:
         78:97:33:ab:ad:dc:93:fc:c9:ce:51:a2:7a:14:39:66:bb:a8:
         88:58:54:6e:45:b8:31:83:82:61:1f:32:0e:6a:2f:60:a9:e4:
         7b:d8:91:0a:fa:ae:f4:b2:fb:0c:7a:43:96:f6:40:c6:00:9a:
         52:49:73:54:96:b3:af:c6:b7:48:23:7d:b7:7a:14:7d:a9:4e:
         cb:6b:38:c7:0e:4f:0d:66:bb:c3:4b:de:c6:99:b0:38:d4:f4:
         e0:c8:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:44 2026 by rpki-client