Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
File:                     54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft (raw, json)
Hash identifier:          BAPHV6lwf7u+mojF158cnyLl84+nnSjdF9Xtz5pC1BA=
Subject key identifier:   6A:9D:B3:60:DB:42:A6:B6:CE:57:F9:7C:C6:40:D8:B1:40:D1:DC:8C
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Certificate issuer:       /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial:       5D39AA0DA8D3186C9F76C41C0EC9C15FCD837C10
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
Manifest number:          A7
Signing time:             Fri 04 Sep 2026 09:07:26 +0000
Manifest this update:     Fri 04 Sep 2026 09:02:26 +0000
Manifest next update:     Sat 05 Sep 2026 09:53:26 +0000
Files and hashes:         1: 323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa (hash: ZqLtX6oxF7GFvkV0mRmheNcCMqhAtfEhCP1VWKOSD+0=)
                          2: 323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa (hash: wXdu5uchlM7aR4PAhUVPmODhH7DS4bnAhG9G5Y038v8=)
                          3: 323430373a366163303a3a2f33322d3332203d3e20313431393638.roa (hash: WQR96xVbOR8YHfuDPH4pCwZMpccOELsvadx46Qaje3c=)
                          4: 323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa (hash: OgMvJFpeHT/hH4IqJm59WR5oH0vQUNaIBbI9r2tk5VE=)
                          5: 323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa (hash: 8/WtzvalY+UjdRN/awqnO7En0ObKFVi4IQgF1lJZ4J0=)
                          6: 323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa (hash: MT+AOCbI8EQY8s6DvYU6udC4xfhzZzx/R2M7EBN7Qko=)
                          7: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (hash: Xd7kvB2d5pV98w0bGGy07hPiu9BB3biQaz9ZRgtaGiA=)
                          8: 323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa (hash: mazZEIAiOuG4KpGr5hwlPA5N57EIEV/LQkQcu7NU8cw=)
                          9: 323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa (hash: 9cJ++u24FggknXR65ZUDZ3U3axJ3PPfSK2AE5AdFGp4=)
                          10: 323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa (hash: fGfLj2m8zzv2gBVrxG8woEOuvLb7BQto8QhIvETUk+0=)
                          11: 3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa (hash: Rzam6PvLZ+xrmgagrwXwqhMp9MJWOtcAhOVQGce0u+k=)
                          12: 54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl (hash: ZLt6H+YdwvRuiYfgk5XAHXSzB4FvjiVxGUwU9r6AkGQ=)
                          13: 323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa (hash: qdE4RD/HR1xmhOawh5oWfClbtd44Y844JZUMBrK1XCU=)
                          14: 3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa (hash: yoLJQ2p5oc/N+ycEQpkidwthgAJPdn46896MAVru/hM=)
                          15: 323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa (hash: TYeKvyyE7tAq8MrpNee2w5v+sScpqs071es7y7huqR4=)
                          16: 323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa (hash: IcB4hGK3v9ZmrWAht51ow3fFRasuFAdj4nAaGG7o+CM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
                          rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 09:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:39:aa:0d:a8:d3:18:6c:9f:76:c4:1c:0e:c9:c1:5f:cd:83:7c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
        Validity
            Not Before: Sep  4 09:02:26 2026 GMT
            Not After : Sep  5 09:53:26 2026 GMT
        Subject: CN=6A9DB360DB42A6B6CE57F97CC640D8B140D1DC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:9c:35:06:a7:37:0c:b7:fa:09:1d:4c:f5:
                    15:d3:a6:3f:19:98:e1:cb:aa:af:51:2e:9c:08:3c:
                    24:95:3b:6b:f5:1f:9c:43:71:ae:e3:ff:c1:a3:34:
                    81:a2:1e:1a:e9:c1:76:c0:56:a7:1a:08:74:09:6e:
                    19:d5:b2:46:46:9e:18:b8:5a:95:37:23:44:e1:c7:
                    b2:1b:6b:dc:e4:ca:ff:e7:8e:72:d0:e0:38:8d:38:
                    8a:77:a5:d9:52:95:60:5e:c4:8a:ef:9c:6e:7e:0a:
                    a0:09:6a:4c:f9:b0:54:1e:73:23:f3:80:82:31:5b:
                    d7:23:86:62:db:68:39:a0:3f:c1:a6:dc:a8:3c:83:
                    77:56:c1:86:1b:2e:6d:2a:dd:24:e4:bc:f3:b0:ca:
                    03:8d:5c:a6:ca:7a:1a:18:97:fc:0f:aa:f2:59:e8:
                    98:c0:65:2d:e1:17:26:fd:77:0c:44:74:10:1f:4d:
                    f2:87:09:b3:29:e9:61:6b:6b:ca:7e:7b:be:ea:b9:
                    37:fe:34:e2:7e:12:fc:39:4e:db:25:cd:e7:1d:9a:
                    ac:56:a2:46:b2:63:ef:17:ad:fc:4d:e4:62:4d:02:
                    e8:d4:93:72:c5:3b:ae:12:4f:02:c5:21:c1:9f:e5:
                    5f:f8:e2:10:1b:9f:27:f5:86:89:47:6c:43:64:10:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9D:B3:60:DB:42:A6:B6:CE:57:F9:7C:C6:40:D8:B1:40:D1:DC:8C
            X509v3 Authority Key Identifier:
                keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a1:d7:d5:1f:b0:51:51:3a:11:3c:03:77:29:ed:f2:d0:4f:
         83:c4:cc:46:77:13:d0:ac:52:da:ad:0d:ca:f4:0e:1d:60:7e:
         06:b1:ab:bb:17:da:29:1c:89:97:d2:e0:01:09:12:a7:9f:df:
         dd:96:e3:ec:8f:5f:74:c6:1e:49:cc:10:12:74:f6:f7:a3:86:
         57:f5:b8:90:72:8c:29:40:83:1e:fd:4d:c3:00:99:b2:71:fa:
         14:5d:58:8e:c2:39:56:79:fc:b9:a0:25:f1:30:11:eb:3a:4a:
         54:45:46:ab:42:02:8e:70:7c:c4:07:d5:37:41:b7:2e:e1:a1:
         26:b6:3a:3c:83:30:74:56:1f:b9:09:7c:d1:5a:5d:d5:cc:77:
         40:51:f6:58:4e:b8:7f:b8:05:da:3e:b4:55:ec:64:fe:ff:f0:
         5d:9e:16:bd:3d:91:e3:04:5d:fb:21:2e:91:ba:26:90:cc:a6:
         90:08:ff:3f:f7:a7:1c:a4:d6:22:bd:f4:ec:8d:76:09:81:d0:
         8a:d7:5c:22:e1:b9:6e:a4:52:8b:34:1e:3d:c7:f1:5c:aa:87:
         d3:62:ea:22:4a:59:77:0f:87:cc:3a:67:2b:cb:36:7e:94:f7:
         cd:e5:60:90:c9:61:fd:dc:f3:4f:62:33:17:23:21:26:4b:8f:
         93:f5:7c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:35 2026 by rpki-client