
$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
File: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft (raw, json)
Hash identifier: tqkr4An1VzkmxVGO+qK6JBPhTYgUMHjT0WyEbE30IU8=
Subject key identifier: 8F:DD:70:55:F2:9F:13:94:47:B9:A6:A9:24:C3:8D:FA:E9:FC:08:F0
Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
Certificate issuer: /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Certificate serial: 3B00FFBBABD65202740894D5F3C32B95DB8973BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
Manifest number: 04D1
Signing time: Sat 28 Feb 2026 20:11:24 +0000
Manifest this update: Sat 28 Feb 2026 20:06:24 +0000
Manifest next update: Wed 04 Mar 2026 03:23:24 +0000
Files and hashes: 1: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl (hash: qrclNRxpwgzKitQ6ImlsFEE2Brdu6Kr66KUN4magcXI=)
2: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: g5hlJx5VxwLWFsZdGKqn9r2RuteLPSgtrh1sr6LNmhM=)
3: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: q9l5WC1lZSRDDfD6k6bjS5S0ZVdtq7f+RpluQ9hh5F0=)
4: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: iNZ3zu9tO0qa+gSNjTNjVY0ck8jJgMDSV+32JZtPZic=)
5: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: cp5DLnNWi9w3KmvCMrojjqhOWr4wL8E6xAvIA2F2SV4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 03:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:00:ff:bb:ab:d6:52:02:74:08:94:d5:f3:c3:2b:95:db:89:73:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Validity
Not Before: Feb 28 20:06:24 2026 GMT
Not After : Mar 4 03:23:24 2026 GMT
Subject: CN=8FDD7055F29F139447B9A6A924C38DFAE9FC08F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:12:f5:e7:2d:7f:ae:f7:44:0b:c7:bb:84:
8d:cb:3a:ec:eb:a8:79:80:2f:de:7f:6c:c1:c8:a8:
77:33:42:67:ca:4e:18:6d:4d:49:42:f5:f5:34:8a:
90:26:04:d0:98:80:01:c9:43:04:0a:c0:e9:e2:e0:
43:65:ca:ca:d2:30:5f:9d:63:c1:cf:8b:9e:24:d0:
03:05:20:78:6d:db:42:1b:ce:ab:4a:5e:e0:8a:a4:
cd:a0:c7:65:99:2d:b6:c8:d9:f2:b9:6f:57:bc:33:
65:81:00:0a:e2:af:71:6e:2a:b6:73:c1:00:87:91:
77:92:f9:af:3f:26:2f:a5:33:3a:58:b9:4f:0f:ee:
dc:b1:3b:c8:95:bb:d4:74:ab:b1:4d:da:4f:1d:83:
e3:bc:13:ec:20:a9:c3:f9:59:c8:0c:18:ff:00:2e:
19:f9:14:2c:ca:84:69:9d:df:de:0a:b2:ca:a6:9e:
2b:cc:84:d6:53:3e:80:66:eb:e2:15:8f:a0:0f:bb:
89:9a:fa:15:79:b7:27:9b:13:0d:66:42:63:10:66:
00:47:af:dc:1d:e8:b3:cb:aa:29:52:4f:88:ee:7c:
56:75:f5:0c:fc:3e:ef:ca:67:5b:4b:1c:fc:63:24:
19:71:ca:c2:fd:eb:62:fb:d2:92:5d:eb:f2:97:91:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DD:70:55:F2:9F:13:94:47:B9:A6:A9:24:C3:8D:FA:E9:FC:08:F0
X509v3 Authority Key Identifier:
keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:00:f1:91:89:5d:4f:e0:24:d3:8c:ff:1f:cc:bb:0c:4e:32:
50:89:f6:30:de:85:6f:20:65:67:17:24:82:5b:54:3f:28:f6:
29:f0:2c:73:de:e0:ac:77:1a:1c:1d:92:9b:e3:f9:d7:7d:a0:
0e:7e:ff:54:6e:2d:79:a3:30:56:c4:d5:ab:2f:b3:c2:bc:30:
39:77:94:00:ad:e7:b5:09:92:6b:74:c0:8a:91:e3:0d:d6:bd:
b9:1c:77:73:cc:d6:5a:0d:2d:d9:d2:15:ac:2c:51:0b:da:8d:
1b:aa:ad:57:d6:8c:bf:63:4d:02:8a:51:d1:2a:4e:06:d7:f4:
61:c7:2d:d5:8e:e6:55:03:31:08:d6:e2:cb:c4:1c:67:03:61:
2b:31:16:bb:46:d7:e5:bf:0c:68:9d:b4:5b:96:cd:cb:94:33:
ad:dd:c2:2e:96:db:b5:6f:8a:f5:b8:0d:95:c7:7a:04:07:82:
12:aa:bb:37:88:e8:18:bd:49:19:26:68:28:10:0e:07:5a:a9:
c3:b6:63:8d:c9:23:3e:12:4e:2d:ce:86:f9:a2:5d:07:0c:f4:
ab:f4:1b:e3:92:bf:9d:69:22:bf:c2:70:03:3a:d5:be:c3:1a:
1d:b8:ae:b6:e4:3e:55:a9:30:6a:17:ca:17:89:8c:65:d9:a0:
db:3d:05:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:14 2026 by rpki-client