Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/55CE727AA6B9944C9010EE99C5FC0234F5705FA2.mft
File:                     55CE727AA6B9944C9010EE99C5FC0234F5705FA2.mft (raw, json)
Hash identifier:          hX7fIGxYz5IVIUPLrcbcGdDKjzDLyqdRXWGpee/vZcU=
Subject key identifier:   3F:48:C7:6D:99:CB:2C:E2:C9:F3:1C:3B:76:FC:9C:C2:D8:64:9D:9F
Authority key identifier: 55:CE:72:7A:A6:B9:94:4C:90:10:EE:99:C5:FC:02:34:F5:70:5F:A2
Certificate issuer:       /CN=55CE727AA6B9944C9010EE99C5FC0234F5705FA2
Certificate serial:       380A882D7C4447D8B04023102C92E2FA3261EB75
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55CE727AA6B9944C9010EE99C5FC0234F5705FA2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/55CE727AA6B9944C9010EE99C5FC0234F5705FA2.mft
Manifest number:          C0
Signing time:             Wed 23 Sep 2026 08:31:48 +0000
Manifest this update:     Wed 23 Sep 2026 08:26:48 +0000
Manifest next update:     Thu 24 Sep 2026 11:55:48 +0000
Files and hashes:         1: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: Gsc3KJl3/82nRcNIxHoMA0hIVJ7McS30J+eRaYMCnSo=)
                          2: 55CE727AA6B9944C9010EE99C5FC0234F5705FA2.crl (hash: gs+frbCda1FWzv2JF9V9mREDz3oFCObsgHOcsrpah54=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/55CE727AA6B9944C9010EE99C5FC0234F5705FA2.crl
                          rsync://rpki-rsync.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/55CE727AA6B9944C9010EE99C5FC0234F5705FA2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55CE727AA6B9944C9010EE99C5FC0234F5705FA2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 11:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0a:88:2d:7c:44:47:d8:b0:40:23:10:2c:92:e2:fa:32:61:eb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55CE727AA6B9944C9010EE99C5FC0234F5705FA2
        Validity
            Not Before: Sep 23 08:26:48 2026 GMT
            Not After : Sep 24 11:55:48 2026 GMT
        Subject: CN=3F48C76D99CB2CE2C9F31C3B76FC9CC2D8649D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:88:d3:42:4b:e3:b9:65:ed:9a:a1:e2:ac:
                    d4:2e:d1:f5:86:f1:e4:43:78:f4:07:1e:05:78:f5:
                    cb:cd:54:4f:8e:f5:33:38:92:84:0f:75:f1:9f:08:
                    b6:1a:d8:46:79:0b:82:0b:32:71:f3:b8:f6:f7:09:
                    50:99:37:0a:17:c6:83:ae:8d:d5:ee:54:9a:5a:f1:
                    c0:a9:8a:b1:88:17:f6:80:35:7f:c2:b8:2d:bf:de:
                    89:c1:06:2b:94:5c:be:68:88:9c:2d:a0:07:04:aa:
                    ea:e4:d7:d6:b7:a8:69:aa:7d:50:b8:be:53:e3:48:
                    75:9d:c6:72:d8:35:86:c4:58:86:9b:e3:5f:83:6b:
                    c6:b5:e7:64:ee:90:6b:87:72:ba:05:a7:24:78:f6:
                    f9:0c:66:65:de:4f:29:79:96:4f:19:ea:52:97:4e:
                    46:1b:8b:03:14:05:44:db:a2:5d:64:a4:ae:9f:8c:
                    3a:15:68:1c:90:81:0b:4e:4f:85:a9:90:67:43:56:
                    25:41:9d:00:90:f8:80:81:a7:55:06:de:d9:90:00:
                    c3:17:c1:fc:a1:2d:ec:db:df:4e:de:77:93:20:12:
                    69:d5:c5:cc:23:95:a1:6a:b5:43:d7:dd:8f:75:3d:
                    3b:87:c4:03:78:6b:b3:99:15:46:b4:45:42:c9:47:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:48:C7:6D:99:CB:2C:E2:C9:F3:1C:3B:76:FC:9C:C2:D8:64:9D:9F
            X509v3 Authority Key Identifier:
                keyid:55:CE:72:7A:A6:B9:94:4C:90:10:EE:99:C5:FC:02:34:F5:70:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/55CE727AA6B9944C9010EE99C5FC0234F5705FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55CE727AA6B9944C9010EE99C5FC0234F5705FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/55CE727AA6B9944C9010EE99C5FC0234F5705FA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:19:03:d1:eb:75:c8:9f:7a:5d:de:91:32:41:93:3f:bd:
         55:b8:d4:a0:ba:6f:35:e2:9c:f5:b0:e8:01:77:1b:fe:69:7f:
         ad:b1:23:b5:f3:c6:ba:80:dc:05:4c:d3:a5:a1:41:30:31:e2:
         c8:9b:34:fd:5d:83:da:66:b2:f0:0b:54:96:45:62:93:7e:67:
         bc:1e:e8:16:04:62:7c:ac:e7:e4:de:d7:9c:43:4e:06:81:ca:
         91:37:f7:90:60:d5:16:97:fd:68:6b:73:f6:7d:e9:8b:57:ee:
         ab:fe:e7:03:fe:05:38:93:e0:c7:cb:a4:06:9b:4e:a1:db:d2:
         7a:24:80:ff:b2:84:3c:77:65:b0:5b:d7:c7:d1:e8:e7:65:6c:
         f1:79:06:9f:90:e4:0b:15:18:3e:f2:b2:bd:35:a1:2c:45:1e:
         81:53:04:a2:d4:fe:27:76:f6:e7:b3:48:eb:db:ec:1f:1b:7e:
         dc:18:31:a5:2a:c9:8e:95:a8:d8:90:7d:f9:e1:31:41:e4:43:
         98:cb:4c:40:8f:6f:27:06:63:00:a9:83:39:8b:87:c8:aa:32:
         f5:f6:b8:de:9e:b2:76:15:53:ac:b6:d3:f6:cd:7f:f3:78:fa:
         3a:bf:ce:24:ea:80:f6:e0:12:93:3b:77:89:dc:b0:23:6a:ba:
         25:39:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:33:54 2026 by rpki-client