Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft
File:                     54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft (raw, json)
Hash identifier:          SdPAwGrly9/WauDwKkFfCxvLJREivQtLtMRMKCAKAyM=
Subject key identifier:   59:CD:3E:A6:D5:18:A0:37:AC:23:80:49:FD:AE:4A:F1:D5:C5:5C:32
Authority key identifier: 54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43
Certificate issuer:       /CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
Certificate serial:       3DA66DDF5B8E656581CD46E0A9A1ED45C8F5FF92
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 17:15:01 +0000
Manifest this update:     Tue 16 Jun 2026 17:10:01 +0000
Manifest next update:     Wed 17 Jun 2026 20:55:01 +0000
Files and hashes:         1: 54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl (hash: 8/t2m498KOGcABejnbsEldcFTy8tdSW5MjaxKnCvFew=)
                          2: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: QhszDQbWemrtI4HXUWkUHZ8wzdInKO4JyVKFbfV5NWE=)
                          3: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: JXx4rmshK5zeJUCZJebsJceKl7fdvXmMmFCmeFD7JVA=)
                          4: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: KM2jw5Yo/h9JpEDhHaI4IH3L2shF+Pb1WHKzVkuv8Kk=)
                          5: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: uo4BQy/qiVUd1UDWobd1v+hQfyM66zNSvTmg0y/Zn7s=)
                          6: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: jmK22AxlgO0ojzJBDzofJ3GLX1WyCPhuhz7OAsl4iU4=)
                          7: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: q8KJSTXyBUCvQG+9F/5N3mtPW1b9Jp6hPuoMVrLLx64=)
                          8: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: ozVN8Ju8BM0bHSAMy+0xQoZY1RHC1GTREWGzCCVL94A=)
                          9: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Hg16O8uPy51QSxKbXAXDL032sGsKwGBDZ0pP5uc2vS0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl
                          rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 20:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a6:6d:df:5b:8e:65:65:81:cd:46:e0:a9:a1:ed:45:c8:f5:ff:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
        Validity
            Not Before: Jun 16 17:10:01 2026 GMT
            Not After : Jun 17 20:55:01 2026 GMT
        Subject: CN=59CD3EA6D518A037AC238049FDAE4AF1D5C55C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:b7:7d:3b:70:b7:7e:44:c2:97:25:94:e9:
                    7d:17:5b:e0:b7:f9:49:b8:0f:a7:97:fd:80:38:19:
                    36:e4:8e:8b:87:36:2d:35:dd:d8:8b:f9:fb:37:40:
                    38:ad:a5:8b:fd:b2:23:db:c5:25:b1:e9:3f:ba:71:
                    a0:5c:77:4f:19:3c:ac:51:90:93:4c:90:ff:95:4f:
                    f6:96:cd:11:64:43:ca:ff:84:09:cd:60:ba:33:a3:
                    2e:0d:c7:75:b1:09:ff:b7:ba:04:46:d7:1d:ab:74:
                    11:4f:7c:a0:87:91:a3:d4:cb:ca:a8:23:22:b5:ba:
                    77:be:73:92:53:59:03:ed:6f:dd:69:60:70:44:10:
                    0e:4d:91:e2:4c:3f:e3:f3:dc:57:fe:ef:b4:9b:c7:
                    2e:0d:2d:f0:91:34:af:b7:11:0c:66:2a:25:22:4f:
                    28:23:97:a9:9e:a5:fd:4a:24:4d:11:df:b4:a7:fb:
                    49:76:64:27:52:52:cf:19:58:3d:20:c3:72:17:4f:
                    6e:18:03:dd:ac:d3:d4:bd:8c:72:67:e2:70:c2:50:
                    1c:4f:1d:d0:de:84:b8:7a:7a:bc:f0:2f:b2:13:8f:
                    96:bf:02:88:cb:ca:85:d9:f6:f7:cb:62:c0:72:43:
                    f7:68:58:cf:4d:43:96:ed:fa:ce:9c:e0:f3:6d:4f:
                    04:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CD:3E:A6:D5:18:A0:37:AC:23:80:49:FD:AE:4A:F1:D5:C5:5C:32
            X509v3 Authority Key Identifier:
                keyid:54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fe:72:1b:e8:3b:8e:23:c8:13:ca:08:79:77:b4:20:2c:d5:
         05:36:64:d3:30:b3:0f:19:6d:c0:73:9a:0d:d2:3a:37:b4:2a:
         c9:42:8a:53:06:15:c2:e8:78:3d:2e:51:30:0a:0e:72:6d:8d:
         f1:93:19:7c:fc:7c:9a:9e:01:62:28:2e:cd:02:1a:45:05:5d:
         45:39:4e:29:97:ed:11:21:11:3c:1f:47:81:48:c6:75:98:f5:
         9e:34:82:0c:9c:4d:37:51:65:16:46:53:64:40:38:86:33:1a:
         79:61:65:21:0d:74:c8:c6:55:77:67:ec:55:fc:66:94:c1:e0:
         62:44:3c:7c:d1:dd:33:26:67:cc:82:ad:6b:ed:20:62:54:a1:
         ab:0e:fd:7e:99:20:79:ae:43:01:8b:fb:ff:e3:33:e7:22:49:
         4a:fa:d8:ba:d6:6b:a8:76:c6:3d:c2:d2:0e:cf:3b:e6:d3:cb:
         9f:8f:87:14:ef:1c:6a:a7:78:2f:f5:9e:a5:1c:4c:a5:c6:9f:
         22:94:eb:01:fa:0e:c4:1e:45:0f:4d:4c:7a:2f:c9:85:0d:66:
         42:db:57:57:6d:92:e9:0c:75:fb:ae:55:f1:b7:6d:13:03:c7:
         39:28:32:f8:9b:2c:b0:b8:68:27:46:71:39:13:e3:98:f5:d8:
         24:09:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:16 2026 by rpki-client