Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
File:                     5509BA3B36B8E5C809C09949749272FEF605F530.mft (raw, json)
Hash identifier:          ofEJILtdH1harPoWRb9O+mOAVu7/EPXcWfxiBNsuX4c=
Subject key identifier:   EE:69:67:F9:43:A3:F2:43:3C:9D:CB:3F:30:CB:30:EC:73:57:88:60
Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30
Certificate issuer:       /CN=5509BA3B36B8E5C809C09949749272FEF605F530
Certificate serial:       473938ABF70AABA5235955F171E92548DA23B503
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
Manifest number:          01A0
Signing time:             Fri 22 Aug 2025 20:11:22 +0000
Manifest this update:     Fri 22 Aug 2025 20:06:22 +0000
Manifest next update:     Tue 26 Aug 2025 05:58:22 +0000
Files and hashes:         1: 5509BA3B36B8E5C809C09949749272FEF605F530.crl (hash: TUliHuS2mZxY6On/pU9LCuqPuU2IGLY5Rxzohv3VJHY=)
                          2: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: S0UelN4KVkqU3QsrPYjGFbixGaR+dwxcUsc+/2UXzCs=)
                          3: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: dShjUK+1B9xhLAsugTMDbSpNCwLh0hAVCcSuJIUamwo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl
                          rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 05:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:39:38:ab:f7:0a:ab:a5:23:59:55:f1:71:e9:25:48:da:23:b5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530
        Validity
            Not Before: Aug 22 20:06:22 2025 GMT
            Not After : Aug 26 05:58:22 2025 GMT
        Subject: CN=EE6967F943A3F2433C9DCB3F30CB30EC73578860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:08:be:8a:e9:a4:58:26:2e:e8:59:dc:2e:a0:
                    31:7e:a7:3b:42:fc:6c:63:af:6a:03:1c:cc:6e:ce:
                    c6:52:f7:11:6a:c3:70:91:e0:e2:c6:dc:8e:6c:97:
                    61:88:3c:0d:3e:af:7d:c4:fd:9b:03:3f:a7:06:52:
                    74:75:0e:15:6a:e0:15:b2:22:0d:1a:c1:14:b4:c1:
                    4b:0e:80:6f:da:56:44:f1:6d:8c:ff:5a:2f:47:18:
                    ac:07:90:74:3a:67:8f:d6:3b:e6:19:bf:13:c9:2d:
                    3a:1b:1b:cb:bf:6b:d2:94:ae:bc:60:36:02:bb:76:
                    64:35:8a:33:8a:3d:dc:84:60:cf:6d:71:d7:d4:e7:
                    f9:30:75:a2:e7:80:9f:30:a4:63:34:37:ad:0e:34:
                    0a:11:5c:29:f7:41:8e:5c:33:32:c1:11:fd:a4:22:
                    ff:49:53:85:b0:ad:6f:d3:48:e0:77:de:a1:02:35:
                    22:fb:d1:42:b1:1c:9c:99:a6:3d:cd:fd:46:3e:4e:
                    09:ff:56:46:1e:36:64:3c:33:b0:6d:4c:59:f7:5f:
                    4e:ab:57:39:c9:87:92:b7:09:c1:ff:c9:89:34:14:
                    65:70:15:68:28:80:fe:b8:7e:bf:d4:dc:df:68:2c:
                    6a:1e:b9:f5:f4:2a:b4:83:55:72:38:05:b9:37:37:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:69:67:F9:43:A3:F2:43:3C:9D:CB:3F:30:CB:30:EC:73:57:88:60
            X509v3 Authority Key Identifier:
                keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:93:88:ad:2b:52:69:a9:1e:a5:b3:15:7d:fd:01:f6:3b:89:
         62:ed:6f:38:bc:84:c8:03:a0:63:95:db:2e:d7:7f:ee:72:01:
         fd:4f:ae:50:23:3c:5d:fc:c4:7d:cd:9c:6e:53:a9:34:1e:9d:
         a1:b8:96:8f:f0:83:9b:98:2b:6d:4f:8c:f3:06:0e:48:46:00:
         a0:10:8f:7f:5b:21:7f:03:98:eb:b1:86:2c:a2:57:49:02:d4:
         02:72:aa:30:59:83:a7:1d:08:97:a1:59:d5:75:8e:69:d8:db:
         44:9e:3d:36:17:ad:d7:10:22:0b:12:09:58:66:c4:46:9a:a4:
         32:22:e7:46:70:83:13:38:b4:7f:bd:fa:19:85:53:47:c5:34:
         b3:e3:68:dd:46:af:76:35:13:67:a9:52:d8:22:98:f4:04:3d:
         b0:4e:48:5a:0e:15:7a:84:9c:c5:5a:ac:b4:8f:20:6b:4c:12:
         4a:13:27:97:46:bd:6f:a0:b4:94:d7:29:82:1f:0e:33:79:b3:
         47:20:fe:a3:7c:a7:24:5d:24:32:80:95:d8:dc:49:ad:98:61:
         75:f5:2b:e3:2d:27:8d:3f:74:41:96:99:bc:2f:c3:18:2a:45:
         d3:0e:76:3f:70:91:d7:c6:88:91:75:c5:59:23:c1:24:7e:51:
         5f:1f:60:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:36 2025 by rpki-client