Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
File:                     54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft (raw, json)
Hash identifier:          SNtcYt4eP3bSVbwvBuQWroHmXuclQcvug8JZLAZKQPg=
Subject key identifier:   84:EA:02:D1:2B:C0:EC:88:6A:83:77:81:04:F8:62:C0:88:C8:D1:9F
Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
Certificate issuer:       /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Certificate serial:       593C97BFB74695B9630BFD2BA99634EA05302336
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 14:22:01 +0000
Manifest this update:     Sat 13 Jun 2026 14:17:01 +0000
Manifest next update:     Sun 14 Jun 2026 16:46:01 +0000
Files and hashes:         1: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: 8g4qg4fTmzGLrdSqeTYMLQ/nhuyOxDCuFX6q9Vci1Gw=)
                          2: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: /RO2VDTS2O1unkJvgBqg7eacIIlQXn+fwKq2bmsfQaY=)
                          3: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: scTK7rZThGhXfIPySddhmNCX7i4mvgGXTsiyo8jVbxc=)
                          4: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: T5kI5MLIaUqaAxESiPmRsGM1ei7I/qx0IQ84twiYZrk=)
                          5: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: NhXXxSty01JiVo75mNrRpSPoRoM1du9nG1hZFq89xkU=)
                          6: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: QGhKSlIsixKbTEhaqUudsGvUSA4uhlI4HytmJKQImH4=)
                          7: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: WeOhDg4+1D/xGbcSeIMZ7j4SOySS9cPgnu2CQca06BY=)
                          8: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: LKsHqQcZUJCgecYtzz0USmgMLUYXo/qCHZXVnCAPbnM=)
                          9: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: MSu/P2Pnm50BIePknSByUVVfzvx6tKgrZyKAlarEWQ8=)
                          10: 3130332e34322e3132322e302f32342d3234203d3e203633353136.roa (hash: 8SJDF8HSG10oCM1G4OI58tWX1qc89ErDw3HKtLXzWZM=)
                          11: 54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl (hash: CJ9hdMjcCWNgBaMtBcXs+idEYfdjCT0m+vw/lmRjEDM=)
                          12: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: jPDRbw49v7/x8exk1bJ0ina/caLrmzrS8avW8MUPoko=)
                          13: 323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa (hash: EDPtJPyVtYnWSioxvGUPqbPBpLVnJzFlpR0LUhqhryg=)
                          14: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: fpQkdOaR92WpkBfxWr9OflPSFmWkPnjC1NbbvtYsxhc=)
                          15: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: Vyn59WWzDbVDpHfa8qPn7Ythwg95mXNAyeJWWdZJ1nA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
                          rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3c:97:bf:b7:46:95:b9:63:0b:fd:2b:a9:96:34:ea:05:30:23:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
        Validity
            Not Before: Jun 13 14:17:01 2026 GMT
            Not After : Jun 14 16:46:01 2026 GMT
        Subject: CN=84EA02D12BC0EC886A83778104F862C088C8D19F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:04:43:8d:5f:00:bc:ed:55:fb:9d:78:58:
                    74:ab:cf:38:69:f5:0e:c7:f2:19:72:36:35:9f:09:
                    ad:11:41:a5:f6:ed:31:cf:04:e7:fe:c1:33:ee:22:
                    96:b7:dc:96:b6:ac:b7:54:3b:d9:24:a0:62:35:70:
                    3d:88:29:44:50:f8:6b:c4:5a:0a:9e:d4:25:aa:63:
                    d2:bb:71:61:81:3a:26:dd:70:2c:49:90:ea:3d:51:
                    be:c8:93:11:b7:dc:58:41:58:82:dd:39:eb:64:f7:
                    5d:9e:9a:0c:11:5e:cf:f9:d0:21:c0:26:de:fd:59:
                    5d:a2:b8:8c:56:c0:ff:3f:03:54:e2:18:ce:3a:2d:
                    c4:ed:db:6b:c4:db:52:eb:d7:77:a6:d9:ec:ed:df:
                    fc:0c:2d:5b:1e:51:2b:01:5f:0f:85:08:89:32:0a:
                    0c:86:80:d0:dc:70:87:78:c5:be:f0:65:90:e8:ce:
                    26:c4:49:8b:09:fd:d3:11:c2:6f:b1:f6:b4:f3:65:
                    cd:a9:3a:e7:08:cf:35:38:86:14:56:32:f2:b8:c0:
                    bc:fb:b9:b2:06:2b:32:5b:5c:02:4b:9b:a2:77:6f:
                    4c:6c:eb:66:d8:0c:13:ec:f2:69:01:e9:e3:3a:08:
                    e0:e8:69:84:82:9f:4c:8d:97:71:ee:50:b2:e9:8a:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EA:02:D1:2B:C0:EC:88:6A:83:77:81:04:F8:62:C0:88:C8:D1:9F
            X509v3 Authority Key Identifier:
                keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a0:37:12:a1:87:82:dd:d1:3f:39:98:6b:a7:c0:aa:96:e2:
         62:6d:3a:ae:4b:3e:8d:af:46:5a:59:a2:c6:8c:43:18:4c:9a:
         f8:b5:13:68:91:19:19:bb:c2:54:61:d2:17:b3:99:ae:7a:23:
         2e:bb:0d:8d:17:c2:21:b6:33:51:9f:bf:a6:1a:bc:96:fc:c7:
         8f:1b:d8:51:e0:a1:e1:ea:de:49:e1:d6:73:46:e8:aa:7f:e0:
         dd:bf:a0:34:27:2f:a1:12:35:06:f1:f1:bc:b3:52:91:7b:4a:
         c5:99:dd:88:46:ce:e2:17:2e:07:d8:5c:ac:62:bc:16:28:cc:
         ef:6d:df:50:59:84:80:ad:95:52:c0:20:82:bf:9f:94:26:3c:
         e1:7e:79:25:7f:89:36:b0:86:98:0c:4c:8d:ec:c8:c1:e8:46:
         12:0e:20:2c:c4:4b:f6:24:ad:cf:fb:c0:ac:df:d3:e5:2d:42:
         34:f6:7f:67:6e:46:a1:a6:54:c6:b5:d7:45:32:0e:1c:85:11:
         6b:35:a8:02:5a:cd:70:0e:52:cc:41:bb:cd:0e:fb:5a:34:9a:
         43:e4:3c:6a:3d:5b:cc:f9:db:eb:9f:86:db:e9:be:9b:f5:64:
         e7:e5:2c:9b:77:b2:f8:08:13:16:c1:17:e1:7a:11:04:c2:ef:
         78:c0:15:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:53:07 2026 by rpki-client