Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
File:                     53A00628F6956E756C477A3B4A12344C34B5F1A8.mft (raw, json)
Hash identifier:          wKcqCqN/M/lkpQbp+ATPCz1jTTvtH13BNSjHoGWVqOY=
Subject key identifier:   F3:6F:59:BF:85:34:73:CD:1E:B0:7A:15:F2:D7:1D:76:4D:4B:C3:FA
Authority key identifier: 53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8
Certificate issuer:       /CN=53A00628F6956E756C477A3B4A12344C34B5F1A8
Certificate serial:       61E95F81DD86B9DD22E47C1973CEF47132B7E466
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
Manifest number:          A5
Signing time:             Wed 02 Sep 2026 22:20:23 +0000
Manifest this update:     Wed 02 Sep 2026 22:15:23 +0000
Manifest next update:     Fri 04 Sep 2026 02:01:23 +0000
Files and hashes:         1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: yc/0oBt8KMkJ6BObdlHua7S5LWTiZ2ieDOyIo2p9JR8=)
                          2: 53A00628F6956E756C477A3B4A12344C34B5F1A8.crl (hash: 8bB8lNCx5zb1NWrsQEe02cUwof8T5UtSI9PjzQIZAsQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl
                          rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 21:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e9:5f:81:dd:86:b9:dd:22:e4:7c:19:73:ce:f4:71:32:b7:e4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53A00628F6956E756C477A3B4A12344C34B5F1A8
        Validity
            Not Before: Sep  2 22:15:23 2026 GMT
            Not After : Sep  4 02:01:23 2026 GMT
        Subject: CN=F36F59BF853473CD1EB07A15F2D71D764D4BC3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:65:2b:75:d8:4b:80:19:46:04:75:88:b9:
                    9d:35:72:ac:e7:c7:1f:84:a2:db:d7:23:12:c6:08:
                    ad:f7:0d:0f:73:70:46:8e:40:27:6a:0f:4d:03:b7:
                    57:ff:46:e4:f7:ed:28:2a:ae:48:73:96:2f:fc:d6:
                    0c:53:eb:89:31:33:a7:20:4b:94:7e:01:be:e8:68:
                    8b:ba:45:e6:42:51:20:99:1a:97:ea:a2:aa:db:ef:
                    99:da:ac:e1:d9:02:66:1e:da:38:f6:b4:6e:57:17:
                    42:8e:1a:d6:c3:77:7a:b5:54:8b:72:b0:2d:eb:78:
                    7c:70:0e:b5:a8:d5:e1:d3:dc:8d:87:29:a7:5c:2c:
                    e2:c1:3c:60:af:36:cb:4e:52:28:4e:85:81:21:61:
                    19:c3:7b:54:bf:e8:75:d8:47:ea:a0:05:e6:5e:c3:
                    80:da:f0:3a:8b:68:17:3c:9d:f6:91:d2:52:80:5c:
                    33:d6:a9:28:c8:d8:b9:e8:10:3c:2d:79:cf:db:c9:
                    c3:9f:b5:0f:0c:95:ee:7f:2c:9c:5a:69:17:5d:9a:
                    3c:34:b5:46:77:44:5e:2d:de:27:45:c3:91:c2:08:
                    d5:a4:43:f6:af:7c:39:34:5e:c2:68:ae:21:00:cd:
                    5f:56:5d:8b:9a:1a:8e:c6:b6:b2:a7:7e:5d:18:10:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6F:59:BF:85:34:73:CD:1E:B0:7A:15:F2:D7:1D:76:4D:4B:C3:FA
            X509v3 Authority Key Identifier:
                keyid:53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:12:d9:86:65:a4:db:50:79:db:0c:fa:ea:ea:34:c2:b5:80:
         22:ab:10:a6:2c:a0:aa:ed:66:fb:cf:c2:2d:3d:77:79:cb:bb:
         53:28:e3:61:22:a3:4a:a3:b6:85:3d:07:b4:ce:eb:54:04:60:
         58:49:fb:4f:ab:9b:56:bd:a2:76:99:94:31:b9:ae:77:38:30:
         e8:c7:a3:4e:f0:4e:d4:5e:bb:4f:70:91:45:3c:43:35:8e:37:
         5d:b3:59:ed:b5:a2:2e:d1:8e:14:04:98:f1:92:4b:24:2c:61:
         1f:12:c0:4d:90:b9:f3:e5:ab:3c:0e:0e:41:b3:a5:d6:48:82:
         55:df:32:03:36:e9:42:c5:f1:d6:66:6f:a7:f6:8e:8f:4b:cf:
         c9:e9:46:e5:ef:33:14:58:d5:e7:c0:b3:0e:d0:25:47:84:34:
         4e:24:23:1d:76:0e:94:fe:51:c2:e2:9f:b1:08:c3:18:7e:03:
         e3:93:0c:4a:85:6f:3d:7a:3a:27:45:d0:2c:c2:4e:b2:ff:a5:
         15:9a:fc:62:aa:a5:0e:82:6e:4d:cf:1f:10:f0:60:ad:5e:ff:
         06:3d:f2:fa:21:e9:a3:90:0d:12:03:9b:3c:32:10:93:65:93:
         d0:49:73:15:a2:c3:9f:f4:fa:fc:73:77:6d:ea:9c:cb:c3:cb:
         92:06:03:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:48:25 2026 by rpki-client