Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
File:                     54C92083A9323650229F71CD77020E900DBD4472.mft (raw, json)
Hash identifier:          k16YE8QTHZsYe6eNddz7nShH3tcIIIRI0txcCTPbKZM=
Subject key identifier:   9D:D1:40:A3:C4:E3:7A:11:3B:07:F7:F9:12:A8:76:4F:38:22:57:4A
Authority key identifier: 54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72
Certificate issuer:       /CN=54C92083A9323650229F71CD77020E900DBD4472
Certificate serial:       74E6D5F2BDB671EB1E43E907EAAEFF9FAF30E360
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 15:15:26 +0000
Manifest this update:     Mon 21 Sep 2026 15:10:26 +0000
Manifest next update:     Tue 22 Sep 2026 15:34:26 +0000
Files and hashes:         1: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: xH/j3P0hNV71yUDTrBLv8LroM8ikwY+gLRmF3/+JErk=)
                          2: 54C92083A9323650229F71CD77020E900DBD4472.crl (hash: x8uM2dItltaW1LLQwW4ofkOu/L/Twjej5XRbMnq7Okk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl
                          rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e6:d5:f2:bd:b6:71:eb:1e:43:e9:07:ea:ae:ff:9f:af:30:e3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54C92083A9323650229F71CD77020E900DBD4472
        Validity
            Not Before: Sep 21 15:10:26 2026 GMT
            Not After : Sep 22 15:34:26 2026 GMT
        Subject: CN=9DD140A3C4E37A113B07F7F912A8764F3822574A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:10:d6:f2:29:75:58:5a:19:4d:9c:8f:98:5c:
                    e1:51:db:a1:d9:43:7a:64:82:15:02:45:8e:89:4b:
                    5a:6d:a1:8c:79:49:a2:9d:3f:a8:db:90:18:f5:91:
                    e2:5c:73:ea:57:31:48:a9:a7:67:1b:bd:ff:66:d0:
                    0a:55:14:4d:1f:73:f2:4f:2c:c0:27:ab:26:5e:0c:
                    24:5e:04:1c:65:b2:d4:ec:a5:ea:f0:0d:c8:5d:8b:
                    eb:c1:33:f8:5f:63:b5:3b:56:f7:f9:b9:3f:3a:e3:
                    07:13:1c:6c:83:91:02:d4:c6:0c:0f:07:8c:ed:44:
                    ce:d9:7e:e1:16:06:43:9c:6d:03:24:68:4b:ec:96:
                    69:8f:be:75:ab:52:3b:de:e7:52:41:d6:7c:d0:97:
                    3f:f7:3e:f6:e4:2b:5a:c5:4b:a0:1f:89:c9:86:63:
                    c0:37:21:ae:4d:94:04:16:7f:a2:a1:2b:a7:25:a1:
                    cd:5f:e2:c0:83:a3:0a:c2:9f:c2:60:c4:97:5e:3a:
                    83:24:ac:4c:74:5c:85:58:7a:2a:a0:dc:e3:3b:73:
                    9d:ba:e8:8a:cc:da:c0:8e:f6:39:91:4e:f0:6d:b0:
                    fc:49:61:22:c4:b1:89:0d:9d:5f:33:e6:6e:b7:30:
                    9a:fd:d1:89:fb:c5:fd:6c:c3:e4:d4:52:f4:82:03:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D1:40:A3:C4:E3:7A:11:3B:07:F7:F9:12:A8:76:4F:38:22:57:4A
            X509v3 Authority Key Identifier:
                keyid:54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1b:a9:ca:ce:01:48:b6:34:40:55:99:b9:9b:89:d3:7b:99:
         5b:66:ad:91:86:bb:8f:53:93:0b:fd:61:c0:9b:21:69:d8:2a:
         3a:d8:bc:28:a7:96:34:c8:e3:8c:96:e9:a4:98:46:55:a2:e9:
         a1:30:1b:59:c2:b0:d3:b7:41:64:bc:2f:30:9c:e7:aa:78:cc:
         cb:d4:28:8a:bb:ec:db:86:30:c7:06:fd:11:15:57:f0:da:ac:
         01:02:fb:33:6c:82:d1:8d:a2:ca:38:30:04:8b:13:b8:5f:0a:
         85:3d:02:ff:ea:fe:d5:51:85:d7:29:da:e5:3c:c5:bd:3b:f0:
         de:9b:87:a6:62:e2:14:b1:33:8e:a2:a9:be:b5:1e:d9:8d:68:
         07:d3:2e:01:4d:29:f0:75:8d:77:fe:8c:5e:9c:ad:4b:c0:b1:
         63:48:82:dc:c4:e2:cc:b4:df:8f:56:ed:4e:55:0b:af:6a:9d:
         62:35:29:d1:5b:c2:e1:e5:dd:37:27:1c:9b:79:38:f2:40:83:
         a6:fe:20:de:97:d7:e5:5c:4b:56:85:89:02:0f:e9:9e:0d:fd:
         fd:fd:ba:f7:d1:88:be:5f:fa:a3:4f:5e:47:97:bf:5f:72:b8:
         09:1f:5d:db:d0:2f:8d:74:48:c1:d3:bc:86:c2:cd:1b:c5:d0:
         66:38:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:54 2026 by rpki-client