Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
File:                     54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft (raw, json)
Hash identifier:          5uHLXAe9kSjh7TV7VEUvNQ9OWBQN8cgV89w05xF+GTc=
Subject key identifier:   31:6F:AE:66:8E:E0:AD:AD:FE:4E:72:9A:D0:83:DF:B2:41:4F:09:EF
Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
Certificate issuer:       /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Certificate serial:       6C687D7BB2D509E592119EA7BF27C3D6C1B4FFE6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
Manifest number:          F3
Signing time:             Sun 01 Nov 2026 10:15:16 +0000
Manifest this update:     Sun 01 Nov 2026 10:10:16 +0000
Manifest next update:     Mon 02 Nov 2026 10:36:16 +0000
Files and hashes:         1: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: WeOhDg4+1D/xGbcSeIMZ7j4SOySS9cPgnu2CQca06BY=)
                          2: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: scTK7rZThGhXfIPySddhmNCX7i4mvgGXTsiyo8jVbxc=)
                          3: 54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl (hash: qTgs5sMNHnHLU+eAUsp5fPAvF0oPCMXr7PLbbTlk1Zs=)
                          4: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: NhXXxSty01JiVo75mNrRpSPoRoM1du9nG1hZFq89xkU=)
                          5: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: jPDRbw49v7/x8exk1bJ0ina/caLrmzrS8avW8MUPoko=)
                          6: 323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa (hash: EDPtJPyVtYnWSioxvGUPqbPBpLVnJzFlpR0LUhqhryg=)
                          7: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: /RO2VDTS2O1unkJvgBqg7eacIIlQXn+fwKq2bmsfQaY=)
                          8: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: QGhKSlIsixKbTEhaqUudsGvUSA4uhlI4HytmJKQImH4=)
                          9: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: Vyn59WWzDbVDpHfa8qPn7Ythwg95mXNAyeJWWdZJ1nA=)
                          10: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: MSu/P2Pnm50BIePknSByUVVfzvx6tKgrZyKAlarEWQ8=)
                          11: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: T5kI5MLIaUqaAxESiPmRsGM1ei7I/qx0IQ84twiYZrk=)
                          12: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: LKsHqQcZUJCgecYtzz0USmgMLUYXo/qCHZXVnCAPbnM=)
                          13: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: 8g4qg4fTmzGLrdSqeTYMLQ/nhuyOxDCuFX6q9Vci1Gw=)
                          14: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: fpQkdOaR92WpkBfxWr9OflPSFmWkPnjC1NbbvtYsxhc=)
                          15: 3130332e34322e3132322e302f32342d3234203d3e203633353136.roa (hash: 8SJDF8HSG10oCM1G4OI58tWX1qc89ErDw3HKtLXzWZM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
                          rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 23:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:68:7d:7b:b2:d5:09:e5:92:11:9e:a7:bf:27:c3:d6:c1:b4:ff:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
        Validity
            Not Before: Nov  1 10:10:16 2026 GMT
            Not After : Nov  2 10:36:16 2026 GMT
        Subject: CN=316FAE668EE0ADADFE4E729AD083DFB2414F09EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:e4:c6:89:50:6b:99:61:2f:d4:bd:7b:8f:
                    42:e7:20:74:6b:5c:d6:4d:32:ed:4a:73:51:f7:98:
                    7a:dc:e1:40:58:7b:5b:7f:6b:dd:67:d2:b9:9a:d1:
                    2b:9d:f1:30:57:64:99:b8:1b:a3:e2:36:2c:ca:ce:
                    e8:6a:c3:b7:c0:a3:e7:00:b8:db:ad:80:ca:f3:a7:
                    a7:27:0f:36:1d:7f:10:5a:10:47:ca:f6:54:0e:d5:
                    1b:84:69:e2:8b:99:07:f8:8d:84:8d:0b:84:30:60:
                    62:a5:e7:3e:9b:42:eb:eb:86:43:48:dd:af:d0:11:
                    9c:e3:14:cf:90:fe:d3:b7:d1:69:1a:7c:54:aa:21:
                    ff:e1:fa:12:89:88:c2:72:58:3c:ec:9f:15:73:fc:
                    b0:f2:8e:1c:14:46:a0:0b:e4:45:45:09:e3:23:53:
                    cd:30:d7:09:a8:ce:3a:e5:6a:2d:ac:44:21:ac:4b:
                    5d:e9:5b:c4:09:6a:45:8c:ca:01:26:ff:98:a2:64:
                    34:66:a6:6a:5a:7d:6e:aa:6e:d3:93:a5:fb:2d:75:
                    20:3e:67:88:16:1a:71:12:29:13:4b:a9:d8:b6:29:
                    94:f6:c7:ba:84:12:b9:47:41:78:ef:0a:f0:79:dd:
                    b6:2c:8c:04:80:0f:27:34:b0:9a:1a:b8:c8:12:1c:
                    54:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6F:AE:66:8E:E0:AD:AD:FE:4E:72:9A:D0:83:DF:B2:41:4F:09:EF
            X509v3 Authority Key Identifier:
                keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d4:73:59:71:b5:17:03:6d:71:3a:66:77:b0:2f:be:37:50:
         82:7f:be:cd:88:d2:fa:70:4a:76:00:f0:6b:2e:68:10:e5:1d:
         a2:63:09:bf:b9:8f:98:42:94:5b:fd:03:c1:f1:2f:58:b3:2b:
         41:a8:a5:51:a0:f3:75:7b:ce:07:54:ce:c4:07:4b:12:c2:4f:
         38:5a:72:05:e4:a4:b1:fa:d8:b1:c6:b2:a9:82:4c:43:29:04:
         a7:96:8f:bf:af:30:98:82:69:15:2c:86:48:8e:1a:30:2c:76:
         ad:df:6f:68:42:d2:c7:9b:d6:2a:3a:43:92:cc:d9:43:41:54:
         f5:66:1d:b8:b0:16:80:40:a6:15:f0:80:c4:8f:cc:18:b6:96:
         ed:c9:cb:51:95:a5:d4:d0:20:0e:6b:67:b2:08:7a:2c:d8:9f:
         09:94:30:95:15:fe:59:55:85:47:9a:99:70:db:2e:46:59:de:
         dd:83:c3:dc:31:8d:d6:7e:2c:9e:12:68:93:9e:0b:1a:91:b4:
         0d:47:a6:04:1c:73:71:9a:64:c4:51:b0:44:94:30:41:ab:69:
         3f:c5:4c:c9:86:c5:37:28:57:27:cf:1e:73:5b:64:c1:d9:1f:
         9e:ca:a9:38:66:61:b7:e3:03:ee:92:a6:83:18:19:9c:02:63:
         38:f7:03:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:16:37 2026 by rpki-client