Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft
File:                     54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft (raw, json)
Hash identifier:          39laYGLpRStvuWEutPwsYfR+6MeonemozjU8qJLDzvQ=
Subject key identifier:   A4:91:FF:5A:39:8D:A8:DC:9B:E3:CD:35:93:30:64:24:55:00:6C:84
Authority key identifier: 54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43
Certificate issuer:       /CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
Certificate serial:       1891B1892EF0ED8014D4D54EFDD0EEFDFC49E8F7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft
Manifest number:          BD
Signing time:             Sun 20 Sep 2026 12:12:15 +0000
Manifest this update:     Sun 20 Sep 2026 12:07:15 +0000
Manifest next update:     Mon 21 Sep 2026 13:40:15 +0000
Files and hashes:         1: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: jmK22AxlgO0ojzJBDzofJ3GLX1WyCPhuhz7OAsl4iU4=)
                          2: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: q8KJSTXyBUCvQG+9F/5N3mtPW1b9Jp6hPuoMVrLLx64=)
                          3: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: uo4BQy/qiVUd1UDWobd1v+hQfyM66zNSvTmg0y/Zn7s=)
                          4: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: ozVN8Ju8BM0bHSAMy+0xQoZY1RHC1GTREWGzCCVL94A=)
                          5: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: KM2jw5Yo/h9JpEDhHaI4IH3L2shF+Pb1WHKzVkuv8Kk=)
                          6: 54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl (hash: k292MWjGxe+riar4N/QhjJkCddP/lASd66XYfHkq0TY=)
                          7: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: JXx4rmshK5zeJUCZJebsJceKl7fdvXmMmFCmeFD7JVA=)
                          8: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: QhszDQbWemrtI4HXUWkUHZ8wzdInKO4JyVKFbfV5NWE=)
                          9: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Hg16O8uPy51QSxKbXAXDL032sGsKwGBDZ0pP5uc2vS0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl
                          rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 13:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:91:b1:89:2e:f0:ed:80:14:d4:d5:4e:fd:d0:ee:fd:fc:49:e8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E79DCF008526729EA9BEE1EF3D5CDC82586C43
        Validity
            Not Before: Sep 20 12:07:15 2026 GMT
            Not After : Sep 21 13:40:15 2026 GMT
        Subject: CN=A491FF5A398DA8DC9BE3CD359330642455006C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:f3:1b:b1:5e:7c:25:00:67:97:7e:37:d9:
                    77:c6:29:16:0f:c5:3d:e0:e1:6f:55:6c:e6:53:fc:
                    8b:5d:c9:d9:e5:67:36:c3:5f:0a:3f:a4:67:67:f7:
                    5c:d1:60:34:80:87:3c:0d:bc:9e:4e:a1:7a:f1:2e:
                    58:42:65:15:8e:f8:22:71:5f:12:e2:93:29:87:66:
                    8a:8e:f3:24:c0:b9:44:cb:4e:1a:83:0d:04:10:a9:
                    b4:52:ce:4c:f0:71:29:32:78:a0:a7:bb:a3:99:44:
                    9d:44:1a:1f:a5:9f:84:bf:c4:5a:97:e2:cf:3a:5c:
                    7f:46:b6:c8:47:4b:9f:10:55:b3:48:33:65:c3:ea:
                    3e:f2:07:ce:95:e3:77:8e:ad:77:bd:98:7f:22:38:
                    70:b6:53:75:37:d0:b1:37:f7:b1:3f:d6:32:06:60:
                    7d:79:f2:28:a8:f4:a4:3d:4d:3b:66:25:b4:68:92:
                    08:d8:51:82:b8:5e:31:bf:9f:6b:e6:a3:e5:4b:a0:
                    1f:da:d5:0b:29:7d:f6:a9:b4:cd:24:5e:ad:cc:ba:
                    b1:54:43:e4:d6:51:5d:a6:81:ab:91:a3:22:6d:80:
                    c1:73:26:5c:ab:4a:0c:58:a5:0b:f4:2d:ff:c6:51:
                    45:4d:24:14:0e:44:76:08:de:34:f9:e4:72:f5:d4:
                    ea:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:91:FF:5A:39:8D:A8:DC:9B:E3:CD:35:93:30:64:24:55:00:6C:84
            X509v3 Authority Key Identifier:
                keyid:54:E7:9D:CF:00:85:26:72:9E:A9:BE:E1:EF:3D:5C:DC:82:58:6C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/54E79DCF008526729EA9BEE1EF3D5CDC82586C43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:7f:fd:a3:3b:7c:b5:a5:27:e9:ef:c3:dd:7b:89:06:82:
         6d:e4:59:ef:e3:f7:36:e9:9d:7a:ff:b8:b3:ea:54:03:67:47:
         23:17:ca:1b:26:1d:65:4a:00:61:2e:aa:12:b1:ee:91:8a:e1:
         04:02:c7:b0:85:35:66:93:89:0f:8f:31:21:0e:d5:90:98:9e:
         8b:50:42:8a:04:1d:5c:10:7f:95:0b:d4:1b:8a:f4:47:b6:66:
         70:da:dd:22:c6:a7:08:ca:4c:89:2c:27:2b:52:de:fa:39:34:
         d1:4e:38:88:d1:b7:a2:f0:19:3b:78:6a:38:53:d3:c9:c6:11:
         8a:fa:ef:c5:07:16:d0:76:55:8f:0b:7d:5c:91:cc:77:87:eb:
         ba:88:a4:9a:1e:b0:e1:c7:4d:9c:f1:4a:12:ec:91:98:3c:7c:
         87:f6:1b:c7:15:ca:7a:38:64:60:8f:91:88:5d:e7:8b:76:2f:
         38:0a:54:96:2e:bc:14:45:d2:2a:3c:a3:5e:c7:2f:39:dd:35:
         16:b0:f3:51:99:3c:cf:d6:0b:f3:a9:9c:65:dd:e2:21:4d:37:
         33:46:3b:86:e7:0a:f6:a4:27:7b:c5:72:04:3d:d8:c7:55:fb:
         a4:a0:ee:89:ff:dd:29:20:1b:81:92:22:89:88:0f:eb:b1:b8:
         1d:66:5b:a6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGJGxiS7w7YAU1NVO/dDu/fxJ6PcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRFNzlEQ0YwMDg1MjY3MjlFQTlCRUUxRUYzRDVDREM4
MjU4NkM0MzAeFw0yNjA5MjAxMjA3MTVaFw0yNjA5MjExMzQwMTVaMDMxMTAvBgNV
BAMTKEE0OTFGRjVBMzk4REE4REM5QkUzQ0QzNTkzMzA2NDI0NTUwMDZDODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGifMbsV58JQBnl3432XfGKRYP
xT3g4W9VbOZT/ItdydnlZzbDXwo/pGdn91zRYDSAhzwNvJ5OoXrxLlhCZRWO+CJx
XxLikymHZoqO8yTAuUTLThqDDQQQqbRSzkzwcSkyeKCnu6OZRJ1EGh+ln4S/xFqX
4s86XH9GtshHS58QVbNIM2XD6j7yB86V43eOrXe9mH8iOHC2U3U30LE397E/1jIG
YH158iio9KQ9TTtmJbRokgjYUYK4XjG/n2vmo+VLoB/a1QspffaptM0kXq3MurFU
Q+TWUV2mgauRoyJtgMFzJlyrSgxYpQv0Lf/GUUVNJBQORHYI3jT55HL11OpxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpJH/WjmNqNyb4801kzBkJFUAbIQwHwYDVR0j
BBgwFoAUVOedzwCFJnKeqb7h7z1c3IJYbEMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTU4ZDZkY2EtNmQ3Yi00ODExLTg2MmItMGRjNWQ1N2ZhMmQ5LzAvNTRFNzlEQ0Yw
MDg1MjY3MjlFQTlCRUUxRUYzRDVDREM4MjU4NkM0My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NEU3OURDRjAwODUyNjcyOUVBOUJFRTFFRjNENUNEQzgyNTg2
QzQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2
MmItMGRjNWQ1N2ZhMmQ5LzAvNTRFNzlEQ0YwMDg1MjY3MjlFQTlCRUUxRUYzRDVD
REM4MjU4NkM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFswf/2jO3y1pSfp78Pde4kGgm3kWe/j9zbp
nXr/uLPqVANnRyMXyhsmHWVKAGEuqhKx7pGK4QQCx7CFNWaTiQ+PMSEO1ZCYnotQ
QooEHVwQf5UL1BuK9Ee2ZnDa3SLGpwjKTIksJytS3vo5NNFOOIjRt6LwGTt4ajhT
08nGEYr678UHFtB2VY8LfVyRzHeH67qIpJoesOHHTZzxShLskZg8fIf2G8cVyno4
ZGCPkYhd54t2LzgKVJYuvBRF0io8o17HLzndNRaw81GZPM/WC/OpnGXd4iFNNzNG
O4bnCvakJ3vFcgQ92MdV+6Sg7on/3SkgG4GSIomID+uxuB1mW6Y=
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:09:49 2026 by rpki-client