Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
File:                     54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft (raw, json)
Hash identifier:          DVDCufxgH8Xyn4K+8g6avTSY87tTdmb7vomAJ/A4jOo=
Subject key identifier:   E4:A2:C5:B6:F0:15:69:E4:B6:1F:F5:0C:7C:80:9A:6E:AD:1F:9A:4F
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Certificate issuer:       /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial:       329959B8D5BBFF49E6DAD080DFCC47F2AC52FE5B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
Manifest number:          BD
Signing time:             Sun 20 Sep 2026 15:21:02 +0000
Manifest this update:     Sun 20 Sep 2026 15:16:02 +0000
Manifest next update:     Mon 21 Sep 2026 18:03:02 +0000
Files and hashes:         1: 323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa (hash: fGfLj2m8zzv2gBVrxG8woEOuvLb7BQto8QhIvETUk+0=)
                          2: 323430373a366163303a3a2f33322d3332203d3e20313431393638.roa (hash: WQR96xVbOR8YHfuDPH4pCwZMpccOELsvadx46Qaje3c=)
                          3: 323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa (hash: IcB4hGK3v9ZmrWAht51ow3fFRasuFAdj4nAaGG7o+CM=)
                          4: 54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl (hash: ry24BaDrJMbSDx5c7tuBVEPTrCUbLitEyenxQ7lb6ZA=)
                          5: 3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa (hash: Rzam6PvLZ+xrmgagrwXwqhMp9MJWOtcAhOVQGce0u+k=)
                          6: 323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa (hash: qdE4RD/HR1xmhOawh5oWfClbtd44Y844JZUMBrK1XCU=)
                          7: 323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa (hash: mazZEIAiOuG4KpGr5hwlPA5N57EIEV/LQkQcu7NU8cw=)
                          8: 323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa (hash: ZqLtX6oxF7GFvkV0mRmheNcCMqhAtfEhCP1VWKOSD+0=)
                          9: 323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa (hash: 9cJ++u24FggknXR65ZUDZ3U3axJ3PPfSK2AE5AdFGp4=)
                          10: 323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa (hash: MT+AOCbI8EQY8s6DvYU6udC4xfhzZzx/R2M7EBN7Qko=)
                          11: 323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa (hash: TYeKvyyE7tAq8MrpNee2w5v+sScpqs071es7y7huqR4=)
                          12: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (hash: Xd7kvB2d5pV98w0bGGy07hPiu9BB3biQaz9ZRgtaGiA=)
                          13: 3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa (hash: yoLJQ2p5oc/N+ycEQpkidwthgAJPdn46896MAVru/hM=)
                          14: 323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa (hash: wXdu5uchlM7aR4PAhUVPmODhH7DS4bnAhG9G5Y038v8=)
                          15: 323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa (hash: 8/WtzvalY+UjdRN/awqnO7En0ObKFVi4IQgF1lJZ4J0=)
                          16: 323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa (hash: OgMvJFpeHT/hH4IqJm59WR5oH0vQUNaIBbI9r2tk5VE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
                          rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 17:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:99:59:b8:d5:bb:ff:49:e6:da:d0:80:df:cc:47:f2:ac:52:fe:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
        Validity
            Not Before: Sep 20 15:16:02 2026 GMT
            Not After : Sep 21 18:03:02 2026 GMT
        Subject: CN=E4A2C5B6F01569E4B61FF50C7C809A6EAD1F9A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:2a:b0:bd:a2:b8:4b:ba:59:13:f9:62:27:
                    09:cc:47:b5:c6:a5:37:f2:bd:61:ed:1c:4b:e4:57:
                    66:b1:9a:6f:16:f6:b7:80:c2:64:99:77:86:10:59:
                    ec:ba:0b:57:62:0c:e5:91:ac:2e:c5:1c:28:26:6c:
                    a7:f0:a3:88:b0:3b:5a:e6:cc:d2:11:a0:2c:42:38:
                    f0:c8:d8:54:25:0b:5c:80:bf:ff:5c:f6:52:44:90:
                    28:77:c2:42:a8:11:94:e5:7f:25:2b:32:c8:71:f3:
                    a3:45:e5:98:12:b2:32:91:3b:3f:3d:67:96:be:5b:
                    c5:a7:e7:73:b8:25:f2:6e:8b:39:26:45:21:d6:a6:
                    b7:d7:c9:03:db:31:7a:27:54:2f:b5:fc:da:b5:d1:
                    91:9a:33:c6:bf:65:47:ef:05:49:59:fc:f3:8b:9f:
                    a3:4d:a0:02:bd:d4:21:ce:05:7e:54:1e:ee:f7:13:
                    c4:01:16:3e:ef:cb:df:0a:cf:29:b7:09:e2:98:5d:
                    56:fd:cb:98:72:d2:8c:7f:f3:a5:cc:60:c3:c2:87:
                    9d:ff:53:e7:66:25:c9:1d:2a:86:23:00:91:6a:e6:
                    c3:be:61:cb:6a:20:eb:87:7d:e9:a1:a8:c3:ca:52:
                    a2:ae:ec:11:0a:10:da:3f:23:9b:c5:cc:75:c5:7d:
                    81:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A2:C5:B6:F0:15:69:E4:B6:1F:F5:0C:7C:80:9A:6E:AD:1F:9A:4F
            X509v3 Authority Key Identifier:
                keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:93:3a:6b:7c:53:03:12:08:b1:cb:c2:ee:c9:b8:1d:2b:
         0d:a5:bf:20:45:ae:80:57:f9:03:15:fe:9c:26:24:e7:a6:a4:
         9b:b8:58:99:43:80:b0:df:67:49:8c:a8:b8:7f:6a:f4:95:88:
         37:0a:de:ba:0b:7f:76:c3:d9:0a:f2:b9:ba:5b:a2:81:0b:eb:
         19:d8:e9:e0:c6:f8:95:54:e7:91:10:cd:66:66:e0:23:1b:0d:
         c1:45:6f:dd:a1:e3:01:2b:ac:a0:ff:6c:ff:77:6a:86:e6:01:
         a3:92:11:53:c8:ec:7b:73:4f:5f:92:a3:0f:32:a1:8e:07:92:
         dc:62:fa:73:7b:33:35:95:68:37:08:b2:a0:ca:83:60:00:a2:
         95:1d:f9:19:20:26:da:57:21:6d:9a:26:98:4a:5a:c4:85:7c:
         63:41:b6:a4:85:79:85:af:31:60:67:26:42:54:66:ba:69:75:
         39:d3:f2:61:7e:ea:8d:06:02:9a:be:89:9d:83:3c:91:13:6d:
         12:d9:b3:76:70:a1:0e:b2:d5:99:ee:88:b0:84:12:78:e6:de:
         68:1f:d6:61:41:a0:d8:5f:1f:78:e8:68:93:0a:c1:bd:a3:da:
         b4:2f:81:34:d3:8d:80:3f:c2:b0:1e:6e:ef:0a:a8:33:9d:7d:
         6d:b2:fc:36
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMplZuNW7/0nm2tCA38xH8qxS/lswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRGN0EwMDhEOUJCRTlENUQ1MzkzMzY0MjVENEI4RkQz
NjhEQkIyMjAeFw0yNjA5MjAxNTE2MDJaFw0yNjA5MjExODAzMDJaMDMxMTAvBgNV
BAMTKEU0QTJDNUI2RjAxNTY5RTRCNjFGRjUwQzdDODA5QTZFQUQxRjlBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQiqwvaK4S7pZE/liJwnMR7XG
pTfyvWHtHEvkV2axmm8W9reAwmSZd4YQWey6C1diDOWRrC7FHCgmbKfwo4iwO1rm
zNIRoCxCOPDI2FQlC1yAv/9c9lJEkCh3wkKoEZTlfyUrMshx86NF5ZgSsjKROz89
Z5a+W8Wn53O4JfJuizkmRSHWprfXyQPbMXonVC+1/Nq10ZGaM8a/ZUfvBUlZ/POL
n6NNoAK91CHOBX5UHu73E8QBFj7vy98Kzym3CeKYXVb9y5hy0ox/86XMYMPCh53/
U+dmJckdKoYjAJFq5sO+YctqIOuHfemhqMPKUqKu7BEKENo/I5vFzHXFfYHbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5KLFtvAVaeS2H/UMfICabq0fmk8wHwYDVR0j
BBgwFoAUVPegCNm76dXVOTNkJdS4/TaNuyIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTM2YTIxNzEtMTJhMC00ZTAxLWJjYWItYmUzYjZiODM2ZjVkLzAvNTRGN0EwMDhE
OUJCRTlENUQ1MzkzMzY0MjVENEI4RkQzNjhEQkIyMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NEY3QTAwOEQ5QkJFOUQ1RDUzOTMzNjQyNUQ0QjhGRDM2OERC
QjIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM2YTIxNzEtMTJhMC00ZTAxLWJj
YWItYmUzYjZiODM2ZjVkLzAvNTRGN0EwMDhEOUJCRTlENUQ1MzkzMzY0MjVENEI4
RkQzNjhEQkIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGGckzprfFMDEgixy8LuybgdKw2lvyBFroBX
+QMV/pwmJOempJu4WJlDgLDfZ0mMqLh/avSViDcK3roLf3bD2QryubpbooEL6xnY
6eDG+JVU55EQzWZm4CMbDcFFb92h4wErrKD/bP93aobmAaOSEVPI7HtzT1+Sow8y
oY4Hktxi+nN7MzWVaDcIsqDKg2AAopUd+RkgJtpXIW2aJphKWsSFfGNBtqSFeYWv
MWBnJkJUZrppdTnT8mF+6o0GApq+iZ2DPJETbRLZs3ZwoQ6y1ZnuiLCEEnjm3mgf
1mFBoNhfH3joaJMKwb2j2rQvgTTTjYA/wrAebu8KqDOdfW2y/DY=
-----END CERTIFICATE-----
Generated at Mon Sep 21 07:20:49 2026 by rpki-client