Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
File:                     53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft (raw, json)
Hash identifier:          mu5ubKcXRCrAri5EhwWaDRYKtSvC7VQ6Io353EslBAM=
Subject key identifier:   DA:AF:7B:A6:D6:22:92:5F:9E:45:EE:E7:F9:2B:4A:A8:05:2E:83:19
Authority key identifier: 53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1
Certificate issuer:       /CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1
Certificate serial:       78E1147C93FC0DA73DB571F08F89872AAD6EA667
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
Manifest number:          D5
Signing time:             Thu 08 Oct 2026 17:03:26 +0000
Manifest this update:     Thu 08 Oct 2026 16:58:26 +0000
Manifest next update:     Fri 09 Oct 2026 20:19:26 +0000
Files and hashes:         1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: sGKE5Fi9WNAXy6MtGSBzO3fsWvU5EdeEKi1Fq0HGEPY=)
                          2: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl (hash: OgO4uBZYBfYrbmYT5bJxjIr07r/kdmKAqWZzpYSEyJA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl
                          rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 11:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e1:14:7c:93:fc:0d:a7:3d:b5:71:f0:8f:89:87:2a:ad:6e:a6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1
        Validity
            Not Before: Oct  8 16:58:26 2026 GMT
            Not After : Oct  9 20:19:26 2026 GMT
        Subject: CN=DAAF7BA6D622925F9E45EEE7F92B4AA8052E8319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:c6:ce:21:93:1c:31:b0:d1:36:df:88:16:
                    49:b3:e5:8f:68:7a:55:2e:a9:c2:42:52:45:ec:b2:
                    7a:77:8a:5e:1f:f5:2c:2e:45:27:bf:29:5a:06:6c:
                    7f:c7:ed:1c:07:18:19:45:58:41:91:b4:81:38:12:
                    35:9f:f7:d9:89:bb:74:29:13:19:ef:67:f4:c8:02:
                    34:05:91:6e:81:2b:46:56:52:f6:1e:72:c6:23:cb:
                    56:07:8c:74:25:4f:0e:a9:51:fe:45:d3:43:2e:93:
                    97:0a:11:ea:9c:68:7b:6f:81:c1:3f:a6:f4:6f:06:
                    c7:56:16:ab:46:1a:85:e4:93:89:c4:90:9d:76:4d:
                    de:86:4e:36:20:f1:34:06:6e:0c:42:9c:54:90:13:
                    fb:12:f8:c3:16:6e:e7:43:32:83:3c:be:f0:7c:a8:
                    23:26:51:91:a6:35:51:05:ce:33:2e:39:32:8c:45:
                    6c:1a:8b:95:fa:d8:eb:8e:be:0a:12:88:42:7a:31:
                    49:02:14:4e:27:39:a2:86:20:1e:0c:6f:9a:bc:c0:
                    e0:1e:95:3a:ce:30:22:fa:09:d1:71:45:2c:94:11:
                    49:e5:36:e7:d0:24:85:ac:72:77:22:48:35:fb:6f:
                    db:89:6e:8e:29:c9:75:4b:e2:62:41:db:07:a0:24:
                    76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AF:7B:A6:D6:22:92:5F:9E:45:EE:E7:F9:2B:4A:A8:05:2E:83:19
            X509v3 Authority Key Identifier:
                keyid:53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:83:fc:8a:fb:25:a6:76:1b:52:21:bf:a7:41:b1:37:43:de:
         3d:20:7a:6f:31:37:f5:35:d8:88:fe:0a:2e:bd:25:7f:e2:51:
         c0:bb:c4:38:da:79:67:df:26:ea:e7:a0:94:61:95:9f:5a:38:
         2a:d4:62:22:d6:7a:40:a5:ec:cf:4a:b2:e7:7f:4c:10:1c:e6:
         ea:c5:94:23:91:ff:b0:1c:17:7a:ac:7f:0b:68:26:ab:f3:7d:
         e0:80:8b:88:51:fb:37:e3:ff:e0:90:31:84:d4:32:cb:41:13:
         f3:74:40:fc:7d:cc:1a:36:c4:6d:dc:fb:5f:d6:a5:fc:dc:1e:
         6d:9f:44:be:c4:93:83:69:7f:c5:d6:01:66:ac:27:66:2b:38:
         f2:c8:1a:31:98:a0:62:0b:c4:b4:ec:8c:67:60:4e:33:c9:10:
         e3:a6:80:71:37:3f:3d:d6:80:a8:6b:13:78:ea:5f:8a:50:27:
         e0:46:82:49:6f:70:20:93:5f:90:54:51:fd:76:5f:55:3c:a1:
         1f:68:d8:76:62:16:4c:cf:c6:39:1d:19:1a:ce:35:0d:1f:b0:
         e0:16:8d:c2:e3:02:39:bf:e3:46:29:16:59:1c:50:ff:22:08:
         4d:44:37:f5:cb:0c:30:ed:7a:b2:61:c1:53:96:58:75:ea:28:
         a2:20:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:16:59 2026 by rpki-client