Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
File:                     53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft (raw, json)
Hash identifier:          LDtFW8kW1JJwUZ6cqDpeQCscwSNcPF/IXPYUqZOg5BE=
Subject key identifier:   07:E7:A2:87:CA:03:69:9C:21:D7:D1:8A:76:0C:FC:3D:2E:D2:CB:CC
Authority key identifier: 53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5
Certificate issuer:       /CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5
Certificate serial:       6221B084EB4163162DD4A8F08C600912EB9C016B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 11:13:04 +0000
Manifest this update:     Sat 13 Jun 2026 11:08:04 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:04 +0000
Files and hashes:         1: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: aaKY+MlBIUGtoYrPuIo9eQvpF3POtIeNeOCAoDOkoyU=)
                          2: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl (hash: En8fNxWTHLl/cVEoS7BMPCESUevRSqWGLiKZGVA/NWE=)
                          3: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: NrWFwcjJtF0+pFV8eK8O+MJouNSPXjIKPbKv/xdaZv8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl
                          rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:21:b0:84:eb:41:63:16:2d:d4:a8:f0:8c:60:09:12:eb:9c:01:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5
        Validity
            Not Before: Jun 13 11:08:04 2026 GMT
            Not After : Jun 14 14:01:04 2026 GMT
        Subject: CN=07E7A287CA03699C21D7D18A760CFC3D2ED2CBCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:d8:1a:30:6c:7f:21:5e:d0:28:e8:03:b1:
                    73:65:0e:fb:45:02:32:7b:fe:ad:4c:bb:30:ac:b9:
                    2b:78:fd:d4:2c:22:fa:87:b9:43:e0:76:79:05:46:
                    83:7f:b2:ce:23:b0:cb:04:5f:39:ba:37:76:d9:69:
                    22:65:00:cd:07:16:5a:a6:cf:65:07:56:11:05:c6:
                    68:9e:51:c4:08:b6:16:b5:36:a7:9b:d8:76:14:d4:
                    79:57:85:17:86:ee:55:22:b8:87:91:51:1f:b6:c2:
                    fe:7c:03:77:ce:37:50:a3:11:1b:17:8e:18:3d:d6:
                    62:0c:75:7e:5e:f6:eb:1d:f4:88:19:55:ac:55:f8:
                    2f:11:cd:7c:4e:31:a1:07:d4:29:a5:de:c2:c5:01:
                    74:16:8b:e0:0a:04:78:e8:5a:f0:38:9e:95:9e:ec:
                    f0:10:bc:79:74:11:f7:eb:fe:c8:04:f9:e3:f1:b9:
                    35:61:ca:99:e5:97:be:4b:16:d4:b5:06:c3:f1:87:
                    94:88:88:4c:21:b7:05:61:e3:cf:d3:8c:61:51:6b:
                    44:a0:02:56:5d:33:cd:50:8c:03:d8:f3:d9:07:17:
                    7b:f8:23:f0:f8:cb:d4:0d:8a:f0:b1:ae:ca:e7:fe:
                    5e:94:35:19:21:1a:f5:99:a5:ae:fd:2e:03:e0:49:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E7:A2:87:CA:03:69:9C:21:D7:D1:8A:76:0C:FC:3D:2E:D2:CB:CC
            X509v3 Authority Key Identifier:
                keyid:53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:56:24:16:02:72:54:f7:8a:8f:77:d5:db:a0:0a:c0:ec:99:
         8b:90:33:ab:eb:ed:31:e7:d7:70:66:5a:a3:17:3b:88:24:6d:
         e2:95:0c:fe:1b:92:10:86:fe:97:43:04:03:cb:52:f7:cf:2f:
         97:83:5b:63:99:32:fa:c4:c1:00:7c:ae:02:5a:76:ab:1a:f6:
         4c:77:0f:27:55:1d:47:e8:d9:c5:91:b7:5a:82:6b:ab:7c:c0:
         45:50:2e:a5:05:68:b8:7a:52:e0:8a:16:56:99:a6:6d:66:07:
         6a:d8:5d:7c:ca:f8:fc:c9:90:07:a9:55:59:cf:b0:5b:a6:d7:
         68:bd:ba:73:d3:40:a8:cd:81:3b:81:ce:a1:85:df:76:75:af:
         b4:d4:3c:8c:17:22:37:12:60:1b:06:0e:c5:5e:fa:8c:4c:f8:
         2a:f4:74:15:1d:bf:a3:3e:bc:5b:73:cd:bc:bc:88:26:a4:6a:
         45:d6:ee:94:dc:e9:c3:1e:0b:68:fc:be:c2:c9:0a:11:74:46:
         e5:1d:1b:cb:83:a1:06:5f:91:2a:b6:9c:06:f4:b3:64:9b:6b:
         38:b4:33:24:0b:74:65:12:26:98:f4:a2:0d:f2:56:0c:c5:76:
         f1:f2:2d:0b:7c:ba:bd:07:2e:26:13:e4:87:ba:60:a8:c8:ef:
         ec:74:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:19:42 2026 by rpki-client