Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
File:                     54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft (raw, json)
Hash identifier:          FZ7wtNeKJxDhpgO/rvJ0Q5jPIq1UP4CgsNoJK3LcRAU=
Subject key identifier:   9C:C9:53:39:F8:36:66:0C:71:B8:5C:52:F6:3D:9E:5D:B8:F3:6D:E6
Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
Certificate issuer:       /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Certificate serial:       74A57F595A80222DD3B07C35FBD2AAA1F89203
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
Manifest number:          B0
Signing time:             Sat 12 Sep 2026 04:31:08 +0000
Manifest this update:     Sat 12 Sep 2026 04:26:08 +0000
Manifest next update:     Sun 13 Sep 2026 08:05:08 +0000
Files and hashes:         1: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: NhXXxSty01JiVo75mNrRpSPoRoM1du9nG1hZFq89xkU=)
                          2: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: scTK7rZThGhXfIPySddhmNCX7i4mvgGXTsiyo8jVbxc=)
                          3: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: T5kI5MLIaUqaAxESiPmRsGM1ei7I/qx0IQ84twiYZrk=)
                          4: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: jPDRbw49v7/x8exk1bJ0ina/caLrmzrS8avW8MUPoko=)
                          5: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: /RO2VDTS2O1unkJvgBqg7eacIIlQXn+fwKq2bmsfQaY=)
                          6: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: LKsHqQcZUJCgecYtzz0USmgMLUYXo/qCHZXVnCAPbnM=)
                          7: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: WeOhDg4+1D/xGbcSeIMZ7j4SOySS9cPgnu2CQca06BY=)
                          8: 3130332e34322e3132322e302f32342d3234203d3e203633353136.roa (hash: 8SJDF8HSG10oCM1G4OI58tWX1qc89ErDw3HKtLXzWZM=)
                          9: 54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl (hash: WHlqrLtahhcDTUT7b+RfZc+r6dsDBE7pRA4LmLtY+LY=)
                          10: 323430343a393538303a33313a3a2f34382d3438203d3e203633353136.roa (hash: EDPtJPyVtYnWSioxvGUPqbPBpLVnJzFlpR0LUhqhryg=)
                          11: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: fpQkdOaR92WpkBfxWr9OflPSFmWkPnjC1NbbvtYsxhc=)
                          12: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: QGhKSlIsixKbTEhaqUudsGvUSA4uhlI4HytmJKQImH4=)
                          13: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: MSu/P2Pnm50BIePknSByUVVfzvx6tKgrZyKAlarEWQ8=)
                          14: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: Vyn59WWzDbVDpHfa8qPn7Ythwg95mXNAyeJWWdZJ1nA=)
                          15: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: 8g4qg4fTmzGLrdSqeTYMLQ/nhuyOxDCuFX6q9Vci1Gw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
                          rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Sep 2026 00:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a5:7f:59:5a:80:22:2d:d3:b0:7c:35:fb:d2:aa:a1:f8:92:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
        Validity
            Not Before: Sep 12 04:26:08 2026 GMT
            Not After : Sep 13 08:05:08 2026 GMT
        Subject: CN=9CC95339F836660C71B85C52F63D9E5DB8F36DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:10:16:68:f3:29:f8:5b:1f:3b:21:fc:19:
                    29:ea:73:8c:7f:94:8a:e0:ae:eb:e7:4f:ec:68:eb:
                    a1:8e:3b:6d:f4:69:dc:54:85:35:00:0f:a5:e0:84:
                    b7:46:7c:75:94:da:2e:3b:bc:b7:1b:7a:94:73:22:
                    44:d4:27:18:eb:66:53:31:c6:3a:a6:68:0b:e7:6b:
                    06:9b:0d:91:66:e4:f6:f4:37:e5:11:b4:5c:bd:ba:
                    09:b4:fb:ea:e0:ab:86:ba:96:d1:37:ef:30:71:27:
                    79:d5:50:a9:a4:7e:4f:a6:5e:84:0e:12:4a:6c:5e:
                    80:b0:21:62:30:d5:8b:de:16:16:a4:c7:00:ad:3a:
                    f3:57:32:d2:2a:33:e6:ab:b4:f6:d5:6e:15:9f:62:
                    6d:e2:17:76:b5:30:d7:70:ff:2c:81:e8:f9:a1:2e:
                    c9:9a:7e:88:ec:f1:f8:9f:ec:fe:27:49:2e:c2:7c:
                    a4:34:26:00:e6:95:5c:f5:62:b5:66:24:0f:90:17:
                    5f:ed:54:a7:4b:e9:2c:30:9b:14:e3:b3:35:88:f0:
                    06:e3:09:ad:72:05:fc:d1:04:fd:f4:28:0f:06:b9:
                    27:a6:a8:b0:b2:76:6a:fa:46:7c:c9:21:04:f8:2e:
                    d8:6a:db:79:5e:a5:23:2d:46:0e:12:0c:b8:1a:0a:
                    97:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C9:53:39:F8:36:66:0C:71:B8:5C:52:F6:3D:9E:5D:B8:F3:6D:E6
            X509v3 Authority Key Identifier:
                keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:20:14:47:d4:95:6c:1f:9f:18:c9:73:70:e3:38:ff:3c:c1:
         34:f6:2c:a3:30:84:ee:43:0d:3a:50:4f:1c:15:54:b6:5a:42:
         5b:18:54:1c:fa:3c:21:07:d0:c6:67:0a:63:22:19:ea:1c:61:
         e4:ec:61:49:3e:af:09:5c:71:73:c1:d2:0a:d6:4a:86:3e:4b:
         7d:0f:77:0f:ef:86:6d:f7:14:dd:40:f8:72:cb:54:a0:c2:34:
         f3:6b:c0:1f:7e:f3:d0:d1:8d:8f:41:93:87:e5:2d:e1:63:6f:
         a7:cb:7b:fd:a2:56:b9:93:fe:27:8b:ec:50:20:36:e8:13:c7:
         99:af:ff:35:cb:ed:73:e8:72:e1:05:a8:d3:91:df:94:73:d3:
         4d:8a:ec:1e:ee:d0:dd:8a:1d:33:a0:6b:9b:27:c1:ac:2e:bb:
         08:bd:eb:94:6d:c2:70:e3:66:b6:2e:b8:3a:72:62:dc:8f:09:
         16:1e:c5:e5:46:04:fa:88:c1:bb:3e:eb:9e:08:39:89:fa:c2:
         09:ea:f7:87:4c:ee:d1:1c:00:23:a5:3a:a8:32:c0:b0:28:2e:
         97:66:59:31:ed:3a:c5:1a:d5:04:9c:7d:9b:9f:7b:d7:9b:88:
         d9:72:50:80:83:2c:8d:52:34:fc:53:a0:88:03:55:4e:1d:59:
         f7:c6:16:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:43:38 2026 by rpki-client