
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
File: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft (raw, json)
Hash identifier: eLCblhtywf8J3wyUqCF/0VCIqAnGwckYgiZd6ArnYZA=
Subject key identifier: 43:25:05:DB:BE:E0:51:67:15:6E:1F:11:C2:F6:13:64:84:9D:DE:CD
Authority key identifier: 55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38
Certificate issuer: /CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738
Certificate serial: 1A3DE527FADF699C6592BA0D901F4966F8D6C58B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 03:00:18 +0000
Manifest this update: Mon 21 Sep 2026 02:55:18 +0000
Manifest next update: Tue 22 Sep 2026 04:19:18 +0000
Files and hashes: 1: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: 1XYfMCpRwtuPIYvJwaDQFyMUa90ORHg7gRWzITiZx54=)
2: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: jJ9QxJS6zZqjgDQVmwLxAklNodyGLVGf4UiD/TxDa2k=)
3: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: jJrf12zeJVrcBiox/V38A0AXQJDoXj9thEoTVntgPNk=)
4: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl (hash: bqaUgVwWUvktSSdHUXyvp4LrH0cBXldYETwGbAXMucs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl
rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 04:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3d:e5:27:fa:df:69:9c:65:92:ba:0d:90:1f:49:66:f8:d6:c5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738
Validity
Not Before: Sep 21 02:55:18 2026 GMT
Not After : Sep 22 04:19:18 2026 GMT
Subject: CN=432505DBBEE05167156E1F11C2F61364849DDECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:89:9e:c2:ef:5a:6b:7d:6e:6e:79:63:30:
89:49:ae:2a:5e:d2:ca:6a:bd:74:e1:06:44:a3:f9:
44:c2:5c:e5:ac:1e:30:68:e3:50:89:c5:b0:1e:da:
50:46:2f:60:77:14:92:17:51:01:8d:ab:2a:93:3f:
40:af:11:0f:6a:37:d3:dd:5d:32:32:88:0b:c8:5e:
96:c7:97:87:e7:c3:ed:e1:f8:3e:82:2f:f4:37:99:
00:47:ee:c7:3b:61:e9:fa:2d:f0:92:09:c4:41:82:
4f:37:e9:d2:b4:85:6c:3a:8d:98:f5:80:1f:d0:85:
00:36:01:f6:f3:33:97:55:a9:3d:e7:e6:5f:84:2c:
3d:65:93:4f:9c:e1:30:5f:e1:81:9b:7f:f2:67:66:
73:55:66:8f:a6:dc:af:23:ce:32:d4:af:c7:2f:4c:
83:88:50:d9:f3:cd:9b:87:00:dc:5e:74:2e:ae:a7:
e9:5c:a3:3d:07:e6:89:a0:97:e7:aa:9b:ce:60:f7:
dd:53:05:61:26:48:4e:b3:5e:fb:11:eb:2f:9f:05:
08:35:20:11:1f:31:e4:69:4f:0a:b9:d2:09:d1:5d:
a7:f8:72:bb:af:e1:51:e9:d4:32:0e:e9:8f:a8:2a:
cb:0d:a3:09:23:49:6e:e2:a9:48:72:0f:ec:f8:b2:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:25:05:DB:BE:E0:51:67:15:6E:1F:11:C2:F6:13:64:84:9D:DE:CD
X509v3 Authority Key Identifier:
keyid:55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:fb:7d:ce:29:e6:8a:af:98:89:44:45:17:7a:6f:64:79:c6:
10:a3:6c:48:8e:cc:d5:1a:05:4d:16:26:26:38:ce:c6:79:5b:
86:80:1f:67:df:ba:a4:90:1c:de:a6:ab:d6:35:63:6a:20:76:
9b:39:dd:44:88:f8:58:8e:46:05:84:67:e6:55:68:b8:58:3b:
ca:27:72:7a:21:ac:e6:3e:35:bf:42:2c:b3:ed:5e:dc:a9:4e:
4a:ca:85:bd:bd:6c:d3:ca:b2:5e:78:69:c7:e7:94:a8:32:b0:
7c:ce:e7:ed:c9:80:74:15:c0:36:88:86:d6:12:23:50:3d:52:
01:3c:b0:4b:eb:c4:b0:97:d6:97:54:6f:df:71:13:40:43:5e:
85:c8:d8:e2:ab:4b:e1:3c:d5:b4:c6:8f:4e:fa:5c:7b:af:11:
f2:69:11:1c:44:24:21:02:14:66:74:e8:77:2e:88:48:36:55:
41:ab:7e:80:8f:b3:51:a8:5d:9f:96:5e:00:9f:17:3e:b7:b1:
8b:be:3d:c5:aa:2b:5b:e0:81:21:e6:82:42:b5:53:b1:e9:bb:
c4:65:75:85:08:8a:4d:9b:f9:8f:24:b7:3b:54:35:54:52:a4:
98:dc:60:50:d1:fa:f6:41:49:5f:e6:25:8b:e2:69:00:57:2d:
44:90:d6:4b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGj3lJ/rfaZxlkroNkB9JZvjWxYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVDOUQwMkJBMEUxM0JBM0VDMTE4NDdCQzE0M0ZGOTRC
MzBENDczODAeFw0yNjA5MjEwMjU1MThaFw0yNjA5MjIwNDE5MThaMDMxMTAvBgNV
BAMTKDQzMjUwNURCQkVFMDUxNjcxNTZFMUYxMUMyRjYxMzY0ODQ5RERFQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWsomewu9aa31ubnljMIlJripe
0spqvXThBkSj+UTCXOWsHjBo41CJxbAe2lBGL2B3FJIXUQGNqyqTP0CvEQ9qN9Pd
XTIyiAvIXpbHl4fnw+3h+D6CL/Q3mQBH7sc7Yen6LfCSCcRBgk836dK0hWw6jZj1
gB/QhQA2AfbzM5dVqT3n5l+ELD1lk0+c4TBf4YGbf/JnZnNVZo+m3K8jzjLUr8cv
TIOIUNnzzZuHANxedC6up+lcoz0H5omgl+eqm85g991TBWEmSE6zXvsR6y+fBQg1
IBEfMeRpTwq50gnRXaf4cruv4VHp1DIO6Y+oKssNowkjSW7iqUhyD+z4sn1BAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQyUF277gUWcVbh8RwvYTZISd3s0wHwYDVR0j
BBgwFoAUVcnQK6DhO6PsEYR7wUP/lLMNRzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzU2NGFiZmItMTk2Mi00NGE5LTgzNzYtY2JmYjFlZmNkYWJhLzAvNTVDOUQwMkJB
MEUxM0JBM0VDMTE4NDdCQzE0M0ZGOTRCMzBENDczOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NUM5RDAyQkEwRTEzQkEzRUMxMTg0N0JDMTQzRkY5NEIzMEQ0
NzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz
NzYtY2JmYjFlZmNkYWJhLzAvNTVDOUQwMkJBMEUxM0JBM0VDMTE4NDdCQzE0M0ZG
OTRCMzBENDczOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJj7fc4p5oqvmIlERRd6b2R5xhCjbEiOzNUa
BU0WJiY4zsZ5W4aAH2ffuqSQHN6mq9Y1Y2ogdps53USI+FiORgWEZ+ZVaLhYO8on
cnohrOY+Nb9CLLPtXtypTkrKhb29bNPKsl54acfnlKgysHzO5+3JgHQVwDaIhtYS
I1A9UgE8sEvrxLCX1pdUb99xE0BDXoXI2OKrS+E81bTGj076XHuvEfJpERxEJCEC
FGZ06HcuiEg2VUGrfoCPs1GoXZ+WXgCfFz63sYu+PcWqK1vggSHmgkK1U7Hpu8Rl
dYUIik2b+Y8ktztUNVRSpJjcYFDR+vZBSV/mJYviaQBXLUSQ1ks=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:50:04 2026 by rpki-client