Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
File:                     54026028AD87AC49BD097621095F68B69F4EF6DB.mft (raw, json)
Hash identifier:          3UQQz+8rstoP0vlVoeJl5TCmjGkmZy74nSsqB45MDDA=
Subject key identifier:   C4:CA:49:B2:0F:D8:7A:63:EA:B1:54:5C:91:EE:F1:69:66:3D:4C:24
Authority key identifier: 54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB
Certificate issuer:       /CN=54026028AD87AC49BD097621095F68B69F4EF6DB
Certificate serial:       51FF573E1C2EAD49B19FB039911AB2E02D697F19
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
Manifest number:          BE
Signing time:             Tue 22 Sep 2026 00:37:13 +0000
Manifest this update:     Tue 22 Sep 2026 00:32:13 +0000
Manifest next update:     Wed 23 Sep 2026 00:54:13 +0000
Files and hashes:         1: 54026028AD87AC49BD097621095F68B69F4EF6DB.crl (hash: Rq2vuxwNCoCA1YE/64Z/hmo6DDIT3n2ca25TSUROsK0=)
                          2: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: 5nmyDoEgajCNa3aQTVrmwY0LqSO8VPqoagBlAooNpbg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl
                          rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 00:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ff:57:3e:1c:2e:ad:49:b1:9f:b0:39:91:1a:b2:e0:2d:69:7f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54026028AD87AC49BD097621095F68B69F4EF6DB
        Validity
            Not Before: Sep 22 00:32:13 2026 GMT
            Not After : Sep 23 00:54:13 2026 GMT
        Subject: CN=C4CA49B20FD87A63EAB1545C91EEF169663D4C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:fb:32:2d:f7:dc:ac:83:a5:74:80:f3:c5:
                    09:29:01:1c:eb:bb:12:01:52:cc:ac:46:3a:17:5a:
                    04:da:ce:ed:82:7d:17:e0:a9:79:c0:bc:ce:e9:48:
                    ec:38:60:60:41:91:7e:6a:f7:f0:eb:9c:b2:41:80:
                    54:7d:84:d5:35:b8:e7:8c:68:e0:a0:22:73:ac:6e:
                    da:c5:10:a6:9a:43:dc:55:f6:62:a5:50:87:6d:b2:
                    b4:82:4c:f5:a9:fd:e6:f7:66:4a:8a:a9:ac:d1:f7:
                    d2:40:ac:b7:df:3a:39:c3:e3:e6:bb:36:02:57:5e:
                    2d:3f:33:e4:ef:cc:4a:19:ac:81:f7:6b:35:48:4d:
                    2e:77:ad:55:c0:ca:84:a0:26:59:a7:a6:d3:47:32:
                    6f:27:ca:c5:8e:65:d7:cb:94:be:99:fc:87:31:e6:
                    b9:be:25:31:ee:3e:1b:79:7f:a0:87:c2:f2:88:73:
                    3f:bf:76:a4:23:af:aa:e7:10:70:ee:43:18:cb:d3:
                    90:1a:16:c3:a9:be:05:98:de:87:7e:fd:84:a9:b4:
                    0d:7a:2b:80:61:06:a6:91:c8:f4:ab:4f:39:72:d8:
                    89:e6:be:c7:b7:51:fe:73:ef:80:30:be:4c:11:e7:
                    b4:cf:53:3c:03:ef:c0:01:12:82:83:08:4d:fa:a5:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CA:49:B2:0F:D8:7A:63:EA:B1:54:5C:91:EE:F1:69:66:3D:4C:24
            X509v3 Authority Key Identifier:
                keyid:54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7b:a9:1e:97:92:de:24:99:87:04:b6:8a:0d:68:69:b3:a8:
         73:09:dd:8d:2e:84:df:c5:c5:c9:a9:a4:4a:50:ad:74:9c:02:
         7e:b5:41:2d:6e:72:ad:68:1a:66:5b:16:69:cb:a9:46:89:48:
         d4:5b:a6:e5:b1:fa:a0:16:80:c7:74:3e:7f:27:b1:e9:91:54:
         d6:3e:4f:b8:62:aa:d0:34:2d:18:6d:e6:a2:68:ac:f3:46:a2:
         04:a4:f5:34:c9:96:6b:42:24:0b:81:9c:76:0c:d3:f3:e1:9b:
         6c:74:18:81:02:37:27:b1:14:6c:fb:9a:31:02:c9:5a:79:39:
         22:80:83:cf:d8:12:aa:ac:f8:84:1e:5d:58:3a:38:a7:9c:47:
         95:32:c5:4a:40:35:5d:0b:a2:f4:35:0e:dc:9d:4f:c8:cd:f8:
         2b:32:da:92:99:97:01:25:f1:a0:13:7e:db:33:fb:8b:8e:55:
         e7:e6:1e:2c:82:75:c6:1c:40:81:7d:10:37:d1:32:9e:99:d7:
         11:75:06:89:2b:f9:48:d2:ef:b2:2d:69:81:a6:a0:bc:b8:f7:
         d4:3b:67:16:0e:9f:d6:21:45:b8:bf:c2:22:a9:21:67:0d:05:
         f6:fe:3a:b1:8c:ce:aa:91:2e:d0:c6:a2:7b:1f:15:97:88:7c:
         3c:3c:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:59:34 2026 by rpki-client