Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft
File:                     54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft (raw, json)
Hash identifier:          FfaJHzABY5qxBEximzCVZsH5HxtRa9aZUrTeCk4EUAw=
Subject key identifier:   4D:DC:DE:E9:D7:2E:B8:01:6B:B5:55:C1:1D:53:A6:B6:1F:41:28:88
Authority key identifier: 54:C2:B0:96:AB:A5:77:84:0E:8C:FF:28:A4:5F:9E:0B:06:6F:36:1F
Certificate issuer:       /CN=54C2B096ABA577840E8CFF28A45F9E0B066F361F
Certificate serial:       1D82F3D43B991CCA60679A11E9DC97334530767F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54C2B096ABA577840E8CFF28A45F9E0B066F361F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft
Manifest number:          C1
Signing time:             Wed 23 Sep 2026 23:19:55 +0000
Manifest this update:     Wed 23 Sep 2026 23:14:55 +0000
Manifest next update:     Fri 25 Sep 2026 01:50:55 +0000
Files and hashes:         1: 3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (hash: CZxoOJt1mcB0J5ge1VFKiB1idehPYzARJVthkXF0WVg=)
                          2: 54C2B096ABA577840E8CFF28A45F9E0B066F361F.crl (hash: n8C1MXpXFKMUftebkXSOm83Wj93ugn+SoxEYxb4wpKc=)
                          3: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (hash: MProqR3+IjMWS7se961mZj4ZxnK4O4igfKtOCECcphc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.crl
                          rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54C2B096ABA577840E8CFF28A45F9E0B066F361F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 01:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:82:f3:d4:3b:99:1c:ca:60:67:9a:11:e9:dc:97:33:45:30:76:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54C2B096ABA577840E8CFF28A45F9E0B066F361F
        Validity
            Not Before: Sep 23 23:14:55 2026 GMT
            Not After : Sep 25 01:50:55 2026 GMT
        Subject: CN=4DDCDEE9D72EB8016BB555C11D53A6B61F412888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:9d:a5:5a:c4:67:ae:69:d4:72:87:c3:83:
                    6a:2c:a3:8a:39:d6:a6:2a:1e:b7:20:a8:21:38:e7:
                    59:58:66:12:3c:75:28:71:6d:9a:46:d7:97:ad:8e:
                    3e:d6:3f:b7:11:fd:48:c4:9c:a9:84:97:35:46:29:
                    4e:9c:2c:8f:71:ce:e5:0d:01:a9:84:af:b1:80:bb:
                    22:ac:4d:2d:8f:da:a2:66:57:a7:1f:18:8c:04:5c:
                    76:63:1d:b7:06:e8:75:7a:0d:ad:3e:a5:a0:7d:48:
                    d6:ea:f4:e5:02:13:b7:e6:25:5e:d6:d8:a3:f5:9e:
                    af:f8:bd:bb:d3:c2:22:eb:56:39:f2:85:a0:32:b6:
                    b1:42:83:76:d5:e6:41:83:7e:9c:d0:59:cb:f5:40:
                    80:70:6f:11:84:17:98:0a:f4:91:b9:3f:83:a4:ce:
                    6b:83:da:e6:d1:4f:e5:2c:71:e8:ed:94:b2:c6:ea:
                    49:f8:da:6b:63:0d:da:df:94:cf:18:4d:7a:40:99:
                    57:e7:9c:24:2d:8a:21:d1:63:6c:02:8e:80:78:3f:
                    11:60:b2:50:d8:d3:dc:51:e3:b9:b6:7b:70:82:12:
                    5a:3e:c3:f3:cd:64:9f:69:b8:01:ad:ad:4a:d3:f9:
                    7a:db:27:64:1a:ed:cd:7e:8e:b3:c6:cf:51:24:63:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DC:DE:E9:D7:2E:B8:01:6B:B5:55:C1:1D:53:A6:B6:1F:41:28:88
            X509v3 Authority Key Identifier:
                keyid:54:C2:B0:96:AB:A5:77:84:0E:8C:FF:28:A4:5F:9E:0B:06:6F:36:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54C2B096ABA577840E8CFF28A45F9E0B066F361F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b2:dd:67:28:3e:46:b1:43:36:8f:14:55:96:6b:57:a8:e0:
         3e:67:28:35:0b:4d:9d:7f:70:86:ad:8c:d3:8d:c9:39:1e:88:
         fb:cd:8a:3f:e1:2e:01:17:75:7a:30:0b:47:cb:e6:d6:23:53:
         29:7c:cd:e4:3d:65:03:42:b5:2f:25:30:06:99:eb:82:2d:03:
         ae:9f:86:dd:ba:e3:a9:54:26:96:e1:34:d8:f9:95:91:ef:74:
         6d:36:b0:5b:7e:86:52:5b:d9:e5:5d:92:90:3d:f9:05:f6:0e:
         db:10:47:89:e8:07:ee:17:ef:90:2b:9a:57:c7:36:40:59:22:
         1e:69:70:22:7e:5c:d8:77:66:9d:58:ab:5b:84:96:77:53:17:
         39:2d:bb:25:05:7e:f2:9f:ea:e4:9d:ff:cf:50:78:a1:ca:ae:
         62:81:0b:a9:56:15:a4:85:24:cc:2e:26:b1:18:e1:4a:33:27:
         f7:9c:58:42:3b:39:34:a3:a6:a7:0d:03:80:85:35:d7:d5:7c:
         7d:ec:18:67:77:6c:b2:9e:62:e4:ab:65:ed:5d:0f:bf:84:6f:
         ae:78:6f:1e:f2:23:f0:62:d7:41:cb:79:5e:49:b3:16:59:c4:
         af:2a:78:2e:b8:05:7c:7f:39:0f:da:8c:4d:9e:cc:38:62:53:
         1a:d8:27:ab
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHYLz1DuZHMpgZ5oR6dyXM0Uwdn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRDMkIwOTZBQkE1Nzc4NDBFOENGRjI4QTQ1RjlFMEIw
NjZGMzYxRjAeFw0yNjA5MjMyMzE0NTVaFw0yNjA5MjUwMTUwNTVaMDMxMTAvBgNV
BAMTKDRERENERUU5RDcyRUI4MDE2QkI1NTVDMTFENTNBNkI2MUY0MTI4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnc52lWsRnrmnUcofDg2oso4o5
1qYqHrcgqCE451lYZhI8dShxbZpG15etjj7WP7cR/UjEnKmElzVGKU6cLI9xzuUN
AamEr7GAuyKsTS2P2qJmV6cfGIwEXHZjHbcG6HV6Da0+paB9SNbq9OUCE7fmJV7W
2KP1nq/4vbvTwiLrVjnyhaAytrFCg3bV5kGDfpzQWcv1QIBwbxGEF5gK9JG5P4Ok
zmuD2ubRT+UscejtlLLG6kn42mtjDdrflM8YTXpAmVfnnCQtiiHRY2wCjoB4PxFg
slDY09xR47m2e3CCElo+w/PNZJ9puAGtrUrT+XrbJ2Qa7c1+jrPGz1EkY9eLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTdze6dcuuAFrtVXBHVOmth9BKIgwHwYDVR0j
BBgwFoAUVMKwlquld4QOjP8opF+eCwZvNh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGRmMmZmZGEtMDVkMS00MDg1LWExMzUtMDM5ODdhMDdmMzllLzAvNTRDMkIwOTZB
QkE1Nzc4NDBFOENGRjI4QTQ1RjlFMEIwNjZGMzYxRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NEMyQjA5NkFCQTU3Nzg0MEU4Q0ZGMjhBNDVGOUUwQjA2NkYz
NjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRmMmZmZGEtMDVkMS00MDg1LWEx
MzUtMDM5ODdhMDdmMzllLzAvNTRDMkIwOTZBQkE1Nzc4NDBFOENGRjI4QTQ1RjlF
MEIwNjZGMzYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI+y3WcoPkaxQzaPFFWWa1eo4D5nKDULTZ1/
cIatjNONyTkeiPvNij/hLgEXdXowC0fL5tYjUyl8zeQ9ZQNCtS8lMAaZ64ItA66f
ht2646lUJpbhNNj5lZHvdG02sFt+hlJb2eVdkpA9+QX2DtsQR4noB+4X75ArmlfH
NkBZIh5pcCJ+XNh3Zp1Yq1uElndTFzktuyUFfvKf6uSd/89QeKHKrmKBC6lWFaSF
JMwuJrEY4UozJ/ecWEI7OTSjpqcNA4CFNdfVfH3sGGd3bLKeYuSrZe1dD7+Eb654
bx7yI/Bi10HLeV5JsxZZxK8qeC64BXx/OQ/ajE2ezDhiUxrYJ6s=
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:18:55 2026 by rpki-client