Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
File:                     54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft (raw, json)
Hash identifier:          zfvAUwDmmZbrdxfRdgDBjgYVXEJQURqr97a4E3EE7SI=
Subject key identifier:   34:10:24:03:9B:5B:0C:81:B2:B3:59:32:23:5A:AC:A8:59:99:B0:2B
Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
Certificate issuer:       /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Certificate serial:       3CBBAA81A2FED55E6C7B71DBC9F9EDA7103A339E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
Manifest number:          BE
Signing time:             Tue 22 Sep 2026 16:26:44 +0000
Manifest this update:     Tue 22 Sep 2026 16:21:44 +0000
Manifest next update:     Wed 23 Sep 2026 18:46:44 +0000
Files and hashes:         1: 3130332e34322e3132322e302f32342d3234203d3e203633353136.roa (hash: 8SJDF8HSG10oCM1G4OI58tWX1qc89ErDw3HKtLXzWZM=)
                          2: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: 8g4qg4fTmzGLrdSqeTYMLQ/nhuyOxDCuFX6q9Vci1Gw=)
                          3: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: fpQkdOaR92WpkBfxWr9OflPSFmWkPnjC1NbbvtYsxhc=)
                          4: 54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl (hash: sj3cB9bxSpO7jDUe04gVzvL/TuwK5104ngJ6PgunOUw=)
                          5: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: Vyn59WWzDbVDpHfa8qPn7Ythwg95mXNAyeJWWdZJ1nA=)
                          6: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: /RO2VDTS2O1unkJvgBqg7eacIIlQXn+fwKq2bmsfQaY=)
                          7: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: WeOhDg4+1D/xGbcSeIMZ7j4SOySS9cPgnu2CQca06BY=)
                          8: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: QGhKSlIsixKbTEhaqUudsGvUSA4uhlI4HytmJKQImH4=)
                          9: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: NhXXxSty01JiVo75mNrRpSPoRoM1du9nG1hZFq89xkU=)
                          10: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: MSu/P2Pnm50BIePknSByUVVfzvx6tKgrZyKAlarEWQ8=)
                          11: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: LKsHqQcZUJCgecYtzz0USmgMLUYXo/qCHZXVnCAPbnM=)
                          12: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: scTK7rZThGhXfIPySddhmNCX7i4mvgGXTsiyo8jVbxc=)
                          13: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: jPDRbw49v7/x8exk1bJ0ina/caLrmzrS8avW8MUPoko=)
                          14: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: T5kI5MLIaUqaAxESiPmRsGM1ei7I/qx0IQ84twiYZrk=)
                          15: 323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa (hash: EDPtJPyVtYnWSioxvGUPqbPBpLVnJzFlpR0LUhqhryg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
                          rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 17:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bb:aa:81:a2:fe:d5:5e:6c:7b:71:db:c9:f9:ed:a7:10:3a:33:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
        Validity
            Not Before: Sep 22 16:21:44 2026 GMT
            Not After : Sep 23 18:46:44 2026 GMT
        Subject: CN=341024039B5B0C81B2B35932235AACA85999B02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:af:9f:a7:58:e1:7a:e0:18:7d:65:21:a7:17:
                    69:a9:88:e0:0a:6a:10:f8:62:de:ab:46:f6:ea:ea:
                    2a:37:a0:dc:0c:98:da:53:c3:fe:5a:16:78:12:3f:
                    5f:3b:69:ee:eb:eb:ed:9e:85:01:0e:c6:87:96:40:
                    77:f2:ea:8b:f6:52:72:7a:07:1b:8c:5e:d7:5a:6f:
                    19:5e:24:d0:bc:fd:7f:04:18:e0:fb:ff:f1:a2:8b:
                    d2:10:3f:21:07:f4:0d:74:aa:72:e7:11:32:c4:ae:
                    26:76:86:89:ef:cf:8e:b4:a5:92:93:c2:f6:be:1c:
                    fb:b2:d6:87:ff:36:6e:19:46:bb:4a:9a:00:0e:45:
                    29:2c:40:8a:48:b8:02:4f:46:39:31:76:8f:b7:e7:
                    4d:c6:6f:1c:be:2a:64:0e:8e:e3:c6:94:4b:14:8f:
                    52:16:6b:72:e4:5f:54:e6:fb:2e:4c:22:90:8e:c3:
                    23:53:9c:6b:e0:e9:51:b7:da:22:d5:0d:1b:84:d8:
                    c4:02:51:d2:4b:7f:4d:a7:37:42:9d:80:36:94:48:
                    8a:50:a3:ec:06:30:cf:cb:0d:a8:53:fb:4d:12:15:
                    6b:36:ba:39:b3:43:f6:90:45:a4:b6:d0:37:ec:8e:
                    fb:c4:5a:a0:c1:fb:32:ee:40:84:aa:00:8b:09:89:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:10:24:03:9B:5B:0C:81:B2:B3:59:32:23:5A:AC:A8:59:99:B0:2B
            X509v3 Authority Key Identifier:
                keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4b:3f:04:86:98:fb:f7:2d:cd:b9:a4:4f:7d:82:d8:a7:fa:
         28:63:aa:d1:01:5c:6d:69:14:39:cc:23:65:2f:a9:2e:42:cb:
         0c:5f:87:b0:59:38:0f:41:47:1c:05:7b:63:e8:56:4c:9d:f2:
         4e:e1:8f:16:e3:a5:07:8d:bb:71:d6:be:63:93:59:76:98:94:
         62:17:b6:f7:05:6f:8e:8b:bf:20:93:c3:94:36:9b:36:0f:bd:
         eb:00:dc:f0:6c:ae:8a:9c:8e:a5:3b:a6:70:8e:1e:f4:c6:09:
         14:89:9b:39:3a:01:72:0d:30:65:f8:66:c1:e0:99:44:2c:57:
         c0:e2:4e:d7:c3:4e:a1:ae:0e:de:5d:c4:fd:c5:15:1a:e0:7a:
         35:f9:28:b9:5f:3c:05:ad:7a:9b:3a:9a:58:36:e6:a1:f4:fe:
         98:ef:98:63:d8:5a:4f:80:cb:fd:eb:76:28:48:40:b2:c5:2e:
         02:3f:4e:d6:50:ae:8d:b7:6f:b6:4b:f2:92:3f:ca:c3:0b:90:
         7d:73:9f:55:85:a2:31:f8:e3:6b:ea:0c:f8:c7:63:a2:91:de:
         a3:b6:ee:3e:06:bb:45:8f:97:19:38:a9:9a:8b:81:34:00:47:
         f6:2d:84:68:c8:e5:66:b1:0a:3a:30:71:58:eb:e8:da:46:81:
         62:c4:98:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:11:09 2026 by rpki-client