
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.mft
File: 055B63D1B5F66B71EA3283775B07777CB0E06BCB.mft (raw, json)
Hash identifier: b6onaPC0PZvInIjw/zPj8TwrOXLp6KG6RQnZcTGpzYY=
Subject key identifier: 58:81:D4:97:B3:0F:5D:FF:A3:32:7D:39:14:71:C0:BD:9E:F1:AB:9D
Authority key identifier: 05:5B:63:D1:B5:F6:6B:71:EA:32:83:77:5B:07:77:7C:B0:E0:6B:CB
Certificate issuer: /CN=055B63D1B5F66B71EA3283775B07777CB0E06BCB
Certificate serial: 6041861AC72D2932EA30961F2D3C5F80DE71A6CE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.mft
Manifest number: D7
Signing time: Fri 09 Oct 2026 23:26:46 +0000
Manifest this update: Fri 09 Oct 2026 23:21:46 +0000
Manifest next update: Sun 11 Oct 2026 01:31:46 +0000
Files and hashes: 1: 3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa (hash: jx2HwnhG0kuZcgDv00l692zwXfEJYOPCbIA1EpdN4wE=)
2: 34352e3234392e3232322e302f32342d3234203d3e203535363634.roa (hash: KbgjFhun7XdR01rOSfAesedHbprS5wILJzfeSB1pxuc=)
3: 34352e3234392e3232302e302f32342d3234203d3e203535363634.roa (hash: ZB3QPiqCUU/NDBlFWb9Xc84TcqNHZ8w/CZwc7mHYkwI=)
4: 055B63D1B5F66B71EA3283775B07777CB0E06BCB.crl (hash: fMnTZMNLT+lI/VtAxMTwjw2oLLyIajOUkHDO5ItQMAs=)
5: 3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa (hash: sa+2OLXeMisaXlspLkiNEhUy00BFh3YNahDju9Re7zk=)
6: 3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa (hash: WSM8tOPKpAjMs/vvwDG7h6jX2tOLVHX/GCNtzKgkFc4=)
7: 34352e3234392e3232312e302f32342d3234203d3e203535363634.roa (hash: HbBPzeDt1cXeR3BTYO04zhY5evGhPJE6vDjU7VM1+TM=)
8: 34352e3234392e3232332e302f32342d3234203d3e203535363634.roa (hash: UTP7n2LHofA1cQoeYla9G+hP0kV5GAsKQRjCB14UyyM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.crl
rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 01:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:41:86:1a:c7:2d:29:32:ea:30:96:1f:2d:3c:5f:80:de:71:a6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055B63D1B5F66B71EA3283775B07777CB0E06BCB
Validity
Not Before: Oct 9 23:21:46 2026 GMT
Not After : Oct 11 01:31:46 2026 GMT
Subject: CN=5881D497B30F5DFFA3327D391471C0BD9EF1AB9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f4:5d:f8:b2:a8:f9:5a:10:3f:8c:65:7f:22:
01:bd:82:14:71:ce:af:73:7f:49:b0:66:92:b2:0e:
c8:89:8d:57:86:ce:aa:6a:a2:52:67:e7:fc:64:e9:
98:b9:c5:6b:5d:c8:42:8c:17:03:47:e4:cc:6a:c1:
2c:b6:42:a1:72:22:07:00:21:cc:25:cc:0e:3f:6e:
8f:22:b9:37:af:f5:f5:f4:0c:4b:9f:ca:4f:46:68:
63:c1:ea:21:de:82:4a:e6:54:fd:bb:47:4e:cf:34:
56:f2:fc:f2:a4:0d:be:cc:5d:c1:be:a1:15:02:3b:
fc:d6:6e:97:ac:69:1f:88:d9:2d:8d:d4:5a:12:d7:
c4:d2:52:40:24:f8:f4:81:89:5d:b3:4d:e1:70:89:
06:19:42:c9:e3:81:07:59:0d:18:a5:3d:cf:8b:e4:
90:9b:c2:eb:21:37:24:52:f3:b7:e1:42:94:6c:d5:
3a:f8:1a:4f:d4:fa:c4:7e:65:66:53:f4:53:37:82:
cb:75:8a:6c:32:2f:62:f1:a9:bf:ff:f0:a4:96:19:
af:d3:7e:88:69:b8:ad:92:05:9b:a2:ec:67:d0:ce:
53:1e:fe:5a:48:55:a7:24:67:72:b9:82:6f:61:fc:
0e:04:c1:34:8c:d0:ac:72:dd:8d:0f:b4:61:6f:ed:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:D4:97:B3:0F:5D:FF:A3:32:7D:39:14:71:C0:BD:9E:F1:AB:9D
X509v3 Authority Key Identifier:
keyid:05:5B:63:D1:B5:F6:6B:71:EA:32:83:77:5B:07:77:7C:B0:E0:6B:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1b:69:40:ce:31:58:4c:95:6f:dc:df:90:a6:87:97:63:86:
78:f3:15:0d:9c:a0:76:6f:a1:89:a1:6f:0b:06:91:e4:df:20:
d3:09:3e:42:e0:b6:7e:0a:c3:df:fb:bc:90:c0:53:a1:e7:8d:
ba:04:25:83:79:ee:f6:1d:13:f7:1e:58:94:3a:db:58:48:3f:
63:e1:6d:da:71:14:7f:de:6a:86:09:da:9f:ab:55:ce:ce:28:
c2:e6:ec:20:d1:83:61:c7:cf:b5:18:9b:74:70:19:b9:f8:39:
c1:13:69:db:48:af:85:46:a9:67:17:0b:dd:7d:69:ac:24:17:
95:4a:51:7f:1e:3b:78:6c:53:6b:4d:54:94:2f:2f:d6:a1:8e:
92:16:9c:ee:9f:42:d7:9d:b1:e0:90:98:05:b3:ea:fa:17:48:
26:0e:6a:c1:39:3d:7c:19:77:21:8b:9d:bc:da:91:19:ea:58:
80:a7:22:58:b4:6e:47:c4:e5:56:d3:1d:68:37:48:d9:37:c6:
1f:c2:a0:be:d4:aa:ba:a9:46:52:85:f4:ac:78:55:21:2a:c4:
9c:50:a2:2e:0d:12:5d:95:29:fd:e3:8b:15:7b:97:29:16:7e:
8b:4b:a6:31:2b:bf:01:84:80:d3:b6:9c:fe:5d:29:ae:62:66:
d0:6d:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:09:49 2026 by rpki-client