Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft
File:                     544C20A6FC634FB65FE9129F38839E35C4A2E951.mft (raw, json)
Hash identifier:          lf6s87BsgrT2i8cly6hjJEzXt/VYbXkvep8A3X5Yk3k=
Subject key identifier:   FE:FE:5D:57:38:63:C3:B1:32:BF:80:48:83:71:0E:04:1F:63:5F:89
Authority key identifier: 54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51
Certificate issuer:       /CN=544C20A6FC634FB65FE9129F38839E35C4A2E951
Certificate serial:       12D02BC15AD7BE200821B1EA3D89E98BE918128C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft
Manifest number:          47
Signing time:             Tue 23 Jun 2026 19:50:18 +0000
Manifest this update:     Tue 23 Jun 2026 19:45:18 +0000
Manifest next update:     Wed 24 Jun 2026 23:07:18 +0000
Files and hashes:         1: 544C20A6FC634FB65FE9129F38839E35C4A2E951.crl (hash: kYXJZElYTHhkQcMs/tgCr8SAvTenLe5jH8MrrJ8Vfls=)
                          2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: Acp8tEk1385vIHHLK7HpaSAdAl0nLE5FcS0yXdmqlJg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl
                          rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Jun 2026 23:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d0:2b:c1:5a:d7:be:20:08:21:b1:ea:3d:89:e9:8b:e9:18:12:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544C20A6FC634FB65FE9129F38839E35C4A2E951
        Validity
            Not Before: Jun 23 19:45:18 2026 GMT
            Not After : Jun 24 23:07:18 2026 GMT
        Subject: CN=FEFE5D573863C3B132BF804883710E041F635F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:72:36:95:39:fb:f7:0c:75:9c:21:42:41:
                    89:b0:c4:86:9e:f3:03:ca:fe:70:e7:3e:0b:a4:7a:
                    ca:d9:a9:e3:1a:e8:f1:b0:bd:fd:00:e8:3b:6d:21:
                    c1:60:4f:26:e4:9f:9f:76:a0:3f:5d:19:e4:ed:61:
                    ba:91:c1:69:d4:e4:03:ce:86:e7:f5:29:8f:10:01:
                    66:92:d5:77:b7:11:02:13:3c:f0:a6:ba:70:fa:d0:
                    90:b5:48:77:ce:82:de:8f:af:a5:d6:af:54:28:fb:
                    70:fd:6c:cd:b3:4d:f4:f6:20:4b:b2:16:90:c9:e7:
                    80:dd:1d:58:f0:e9:08:b9:fc:6e:3f:da:54:2b:dd:
                    c4:1c:8d:c7:61:79:36:60:6b:6a:45:60:3c:de:34:
                    39:81:85:b9:b0:23:47:39:67:8e:c2:0a:05:55:ff:
                    a4:81:21:a7:8c:ed:26:03:13:dd:8b:d2:c9:28:13:
                    4f:df:5f:1f:38:2c:20:74:e2:06:39:1c:be:69:b2:
                    19:e3:e0:21:c0:54:c6:04:78:c5:e4:95:07:8b:bb:
                    ae:91:71:e6:fa:04:42:56:5c:8c:dc:0e:3b:a0:f7:
                    20:52:c5:0c:25:3b:b8:1b:0b:99:6d:a9:9d:1e:8e:
                    bc:3f:25:91:f2:43:4e:94:2f:fe:d1:43:4b:eb:48:
                    c8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FE:5D:57:38:63:C3:B1:32:BF:80:48:83:71:0E:04:1F:63:5F:89
            X509v3 Authority Key Identifier:
                keyid:54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9e:98:4c:07:e3:4c:90:24:71:cc:ac:4c:92:8a:50:03:5f:
         92:4f:7c:21:d2:d0:84:cf:d6:a1:36:59:f6:ba:9e:d3:a0:f2:
         08:7e:28:e6:26:b9:70:79:f9:de:d3:46:77:f2:22:da:83:55:
         66:93:ee:ee:f5:7e:ae:52:26:03:33:3e:06:82:e6:9d:05:72:
         4a:c8:10:c1:45:da:fa:f7:f7:40:47:5a:4b:87:23:0a:83:02:
         f8:5e:1f:91:6a:dc:0f:68:57:e2:01:52:6f:fc:07:c6:77:1c:
         79:63:6b:5d:e3:38:fc:aa:bd:97:9e:80:9e:bf:23:ed:68:f2:
         73:aa:5d:74:b3:4f:86:5d:29:10:78:24:0c:dd:b9:b0:10:98:
         11:3a:23:5f:e1:1e:75:7a:d0:9c:69:53:41:03:89:56:c2:b6:
         a7:3b:30:32:09:73:6a:59:3e:dd:9b:ad:4c:8c:46:4c:60:51:
         85:06:ed:5d:71:fb:6b:f4:d4:0c:c5:d7:1a:06:80:53:97:d4:
         01:52:22:20:e3:96:e2:f8:d9:d2:4e:17:70:0f:ba:ae:69:71:
         1c:9c:e0:f5:1f:a9:1a:a1:44:c9:e3:06:ec:46:33:91:f5:53:
         3c:8c:bb:12:01:61:26:66:ec:6f:43:b2:a1:f6:a5:e2:58:74:
         53:97:d9:fb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEtArwVrXviAIIbHqPYnpi+kYEowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVD
NEEyRTk1MTAeFw0yNjA2MjMxOTQ1MThaFw0yNjA2MjQyMzA3MThaMDMxMTAvBgNV
BAMTKEZFRkU1RDU3Mzg2M0MzQjEzMkJGODA0ODgzNzEwRTA0MUY2MzVGODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZHI2lTn79wx1nCFCQYmwxIae
8wPK/nDnPgukesrZqeMa6PGwvf0A6DttIcFgTybkn592oD9dGeTtYbqRwWnU5APO
huf1KY8QAWaS1Xe3EQITPPCmunD60JC1SHfOgt6Pr6XWr1Qo+3D9bM2zTfT2IEuy
FpDJ54DdHVjw6Qi5/G4/2lQr3cQcjcdheTZga2pFYDzeNDmBhbmwI0c5Z47CCgVV
/6SBIaeM7SYDE92L0skoE0/fXx84LCB04gY5HL5pshnj4CHAVMYEeMXklQeLu66R
ceb6BEJWXIzcDjug9yBSxQwlO7gbC5ltqZ0ejrw/JZHyQ06UL/7RQ0vrSMiDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/v5dVzhjw7Eyv4BIg3EOBB9jX4kwHwYDVR0j
BBgwFoAUVEwgpvxjT7Zf6RKfOIOeNcSi6VEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTM3MWRiOWItN2M0MC00OTY2LTk5MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZG
QzYzNEZCNjVGRTkxMjlGMzg4MzlFMzVDNEEyRTk1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NDRDMjBBNkZDNjM0RkI2NUZFOTEyOUYzODgzOUUzNUM0QTJF
OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5
MWItNTEzOGIzNjkzMjQ2LzAvNTQ0QzIwQTZGQzYzNEZCNjVGRTkxMjlGMzg4MzlF
MzVDNEEyRTk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABGemEwH40yQJHHMrEySilADX5JPfCHS0ITP
1qE2Wfa6ntOg8gh+KOYmuXB5+d7TRnfyItqDVWaT7u71fq5SJgMzPgaC5p0FckrI
EMFF2vr390BHWkuHIwqDAvheH5Fq3A9oV+IBUm/8B8Z3HHlja13jOPyqvZeegJ6/
I+1o8nOqXXSzT4ZdKRB4JAzdubAQmBE6I1/hHnV60JxpU0EDiVbCtqc7MDIJc2pZ
Pt2brUyMRkxgUYUG7V1x+2v01AzF1xoGgFOX1AFSIiDjluL42dJOF3APuq5pcRyc
4PUfqRqhRMnjBuxGM5H1UzyMuxIBYSZm7G9DsqH2peJYdFOX2fs=
-----END CERTIFICATE-----
Generated at Wed Jun 24 15:47:41 2026 by rpki-client