Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
File:                     55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft (raw, json)
Hash identifier:          9TD3aDdB6Vq+gJKRI8n2ZnrbfmpyzfFGJcq8jBKRG6w=
Subject key identifier:   93:5D:8C:1C:30:D8:97:2B:D1:FD:9E:70:77:1E:F4:20:71:B7:ED:9C
Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
Certificate issuer:       /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Certificate serial:       2DAB49CD4D89A521B5E255048B86F308CD045646
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
Manifest number:          40
Signing time:             Thu 18 Jun 2026 08:47:52 +0000
Manifest this update:     Thu 18 Jun 2026 08:42:52 +0000
Manifest next update:     Fri 19 Jun 2026 11:51:52 +0000
Files and hashes:         1: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 7nwXZ7uwqWfwg9TH3c9pYLZKmQEunRTq0qvrKzAXkHk=)
                          2: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl (hash: VNsgof/AlRAx1csdtA6jnkoI2Vw67DDIWAfzOBZ9hRg=)
                          3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: fT+ijd0/vxnImzejYzyk0a9FLi5T/K3JxSUJprhaarY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
                          rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 08:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ab:49:cd:4d:89:a5:21:b5:e2:55:04:8b:86:f3:08:cd:04:56:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
        Validity
            Not Before: Jun 18 08:42:52 2026 GMT
            Not After : Jun 19 11:51:52 2026 GMT
        Subject: CN=935D8C1C30D8972BD1FD9E70771EF42071B7ED9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:61:62:2d:97:b5:25:39:5f:d1:28:88:9f:
                    18:a4:41:3a:33:e4:93:df:bc:d1:d5:9e:55:e5:49:
                    71:49:ff:25:16:df:bc:bf:34:4b:2b:19:1d:b4:78:
                    9d:d1:93:aa:7f:53:b0:47:40:32:0f:62:94:be:83:
                    67:8d:e5:23:70:71:6f:6d:d3:a8:41:00:73:a6:44:
                    3a:fc:74:97:4c:e7:bf:33:75:95:ca:18:7c:7e:18:
                    c0:fd:da:c6:45:53:59:86:7b:af:9b:c7:57:22:55:
                    af:3f:c1:3c:ec:83:ec:36:34:2f:6a:1b:77:34:fa:
                    9a:61:39:7c:0a:4a:42:56:f8:fa:84:43:32:cf:13:
                    2a:16:d4:70:8c:36:bb:20:9a:06:1a:9f:82:56:7d:
                    c0:51:c5:8f:a8:a4:63:49:e0:73:43:1b:a7:5b:1f:
                    45:25:fc:b0:61:64:36:2c:13:f3:c1:cc:11:24:0a:
                    5c:88:a1:36:13:12:4f:d7:5a:82:10:9c:de:92:2f:
                    9a:5d:12:6a:4a:98:db:b5:34:a9:6d:52:dd:a2:fd:
                    71:9c:97:be:04:47:33:dc:ed:6d:e6:a2:97:ce:6b:
                    94:5b:9f:84:2a:90:cb:72:7f:f7:a6:c6:9a:92:f6:
                    20:3c:19:98:20:b1:15:9a:9a:f1:56:45:7a:0a:3f:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:8C:1C:30:D8:97:2B:D1:FD:9E:70:77:1E:F4:20:71:B7:ED:9C
            X509v3 Authority Key Identifier:
                keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e0:f3:b5:73:2b:d9:fb:62:88:99:54:b3:21:b2:10:8f:f8:
         24:39:00:78:41:83:08:1a:23:fe:64:0b:25:8e:4b:10:37:77:
         ae:7c:7e:28:8e:58:8e:d9:b1:24:de:9c:9a:3a:9c:97:f3:8e:
         51:a7:ef:91:95:60:ca:e9:62:f7:5a:c2:78:bc:bb:10:30:6d:
         51:9a:0a:d2:b2:ed:f9:64:72:79:e6:c9:4e:fe:b3:4e:6c:c2:
         fb:ea:2f:ed:bb:e6:7f:00:b4:ba:b7:82:b9:da:1d:67:65:9d:
         43:9b:e3:ae:4d:f8:b6:ab:93:35:8a:0e:f7:76:4b:0d:7e:cf:
         7e:4d:a7:9a:ab:63:08:22:2e:8b:41:2b:87:af:45:5c:27:84:
         7c:2c:4e:f1:b6:23:ea:af:77:65:ff:75:27:a6:92:55:67:cc:
         a8:ad:ff:da:42:8a:19:6a:05:02:fb:36:80:24:e7:1c:6e:4d:
         74:76:f9:2f:c0:3e:6e:8f:63:9e:6e:e5:18:fa:2e:27:f5:df:
         be:3b:44:f2:0d:65:6b:ff:b7:9d:48:3d:84:05:b6:73:da:de:
         ee:2d:03:07:ab:b7:2c:28:58:21:9e:36:ff:c3:af:fb:14:63:
         0b:d2:06:c0:6c:2c:a2:cb:09:b2:11:85:d2:a6:9c:d7:34:cf:
         02:7b:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:12:54 2026 by rpki-client