$ rpki-client -vvvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft File: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft (raw, json) Hash identifier: 6cDMdICKiBrooThhREDunGFN+NcA/3bHs6e+dft+GIQ= Subject key identifier: D7:53:42:C6:87:CE:57:62:B6:0A:7A:9F:11:CB:4D:CE:19:0F:AA:3D Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B Certificate issuer: /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B Certificate serial: 58EF8F62EC80FB5D847C3D28392DF21ECCA59FB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft Manifest number: BF Signing time: Tue 22 Sep 2026 06:14:12 +0000 Manifest this update: Tue 22 Sep 2026 06:09:12 +0000 Manifest next update: Wed 23 Sep 2026 08:03:12 +0000 Files and hashes: 1: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl (hash: hniLmdtsgCCkpEdSEzya63JLQj/nClY4NUhJjwkIaZk=) 2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 7nwXZ7uwqWfwg9TH3c9pYLZKmQEunRTq0qvrKzAXkHk=) 3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: fT+ijd0/vxnImzejYzyk0a9FLi5T/K3JxSUJprhaarY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 08:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ef:8f:62:ec:80:fb:5d:84:7c:3d:28:39:2d:f2:1e:cc:a5:9f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B Validity Not Before: Sep 22 06:09:12 2026 GMT Not After : Sep 23 08:03:12 2026 GMT Subject: CN=D75342C687CE5762B60A7A9F11CB4DCE190FAA3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:35:f3:85:7a:22:41:8b:9b:c3:42:fc:98:21: e0:ca:87:87:2e:fe:b0:4c:c0:42:f8:77:fc:c7:b1: ca:3c:f4:5c:7e:74:50:af:8a:21:40:b2:00:38:2c: 18:4c:20:03:31:b8:0d:60:03:da:58:44:48:c6:33: 58:12:54:e5:d2:31:ed:92:4d:ff:0b:6e:03:16:c9: 62:a6:0e:77:f2:45:1c:ea:80:90:3f:21:62:cd:dd: bb:6a:43:a3:5d:b2:cb:2b:2a:14:fe:8f:fd:e2:90: a7:4f:3b:6f:d3:76:a2:6a:50:4c:dc:d7:3a:20:98: 9b:da:1d:6c:ca:72:8c:c8:f4:7a:08:d4:47:3e:60: a4:d5:ac:b9:de:e9:d2:ec:5b:65:91:02:36:53:10: 52:5c:36:f1:36:3f:4c:a1:80:1c:5d:99:8e:b6:e2: c5:b1:f0:3e:60:02:7d:a2:77:82:67:c6:52:96:d6: ee:49:88:f2:89:d7:dd:26:ce:03:3c:da:55:71:ff: 7e:e3:5b:fa:4d:b6:35:16:10:b7:51:ad:f9:97:cd: 5d:36:12:90:4f:af:ce:36:ed:42:31:e2:bc:17:0a: 6c:f8:53:e7:a9:bb:66:cb:56:93:e2:c2:55:07:f0: a3:15:91:34:bc:05:de:d3:e6:03:c9:ff:9a:82:e3: 7e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:53:42:C6:87:CE:57:62:B6:0A:7A:9F:11:CB:4D:CE:19:0F:AA:3D X509v3 Authority Key Identifier: keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1b:3f:01:77:ea:72:f1:b5:81:e2:09:72:fb:cb:54:8f:2f: 4e:35:6f:a7:30:15:de:65:36:b6:d0:8a:81:71:a7:18:53:fd: e6:66:99:f4:dc:6b:15:60:40:5d:19:05:fa:0c:27:94:3c:d1: ba:45:96:fa:0d:a3:a7:0a:14:07:fc:5b:91:d4:f1:79:ee:4b: a7:8b:93:0d:25:92:7e:f4:b5:e4:63:c3:d5:a6:4b:9e:0d:e8: db:93:0a:d6:11:21:b6:6e:7c:18:fe:d0:b9:73:d2:b3:67:25: 23:dc:eb:12:73:cc:af:8f:04:b7:b8:49:3f:16:37:80:85:40: 8a:69:17:0f:87:e5:eb:f2:81:42:2b:3f:3c:9d:d4:c0:04:4f: 86:30:4c:91:e1:50:1d:81:1c:b4:88:52:be:5e:d6:aa:a8:22: 16:b6:bb:c5:53:d5:b0:6a:3b:cb:3a:24:4c:1b:50:1f:42:b0: 92:73:65:d1:47:ba:10:df:21:ff:62:00:b3:86:b5:f6:83:69: 60:82:55:07:39:03:8f:1c:31:46:85:8f:18:0e:08:96:0a:89: 8e:c3:46:2a:0e:d1:46:20:ab:66:6d:f9:76:58:7a:56:35:99: 7e:e9:ca:83:76:d2:3d:22:99:14:fd:d6:b6:f1:02:07:16:f0: d2:08:cd:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWO+PYuyA+12EfD0oOS3yHsyln7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVEOTA3QUEwODRCRjg2QzA0NjlEMjQ4NkRFMDRDRDI4 QkQ5RjE3QjAeFw0yNjA5MjIwNjA5MTJaFw0yNjA5MjMwODAzMTJaMDMxMTAvBgNV BAMTKEQ3NTM0MkM2ODdDRTU3NjJCNjBBN0E5RjExQ0I0RENFMTkwRkFBM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYNfOFeiJBi5vDQvyYIeDKh4cu /rBMwEL4d/zHsco89Fx+dFCviiFAsgA4LBhMIAMxuA1gA9pYREjGM1gSVOXSMe2S Tf8LbgMWyWKmDnfyRRzqgJA/IWLN3btqQ6NdsssrKhT+j/3ikKdPO2/TdqJqUEzc 1zogmJvaHWzKcozI9HoI1Ec+YKTVrLne6dLsW2WRAjZTEFJcNvE2P0yhgBxdmY62 4sWx8D5gAn2id4JnxlKW1u5JiPKJ190mzgM82lVx/37jW/pNtjUWELdRrfmXzV02 EpBPr8427UIx4rwXCmz4U+epu2bLVpPiwlUH8KMVkTS8Bd7T5gPJ/5qC435rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU11NCxofOV2K2CnqfEctNzhkPqj0wHwYDVR0j BBgwFoAUVdkHqghL+GwEadJIbeBM0ovZ8XswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU2ZTQyZTYtYzZjZC00Y2NkLWJkYTctNWFlOWEyNDYwNDRhLzAvNTVEOTA3QUEw ODRCRjg2QzA0NjlEMjQ4NkRFMDRDRDI4QkQ5RjE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NUQ5MDdBQTA4NEJGODZDMDQ2OUQyNDg2REUwNENEMjhCRDlG MTdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvNTVEOTA3QUEwODRCRjg2QzA0NjlEMjQ4NkRFMDRD RDI4QkQ5RjE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQbPwF36nLxtYHiCXL7y1SPL041b6cwFd5l NrbQioFxpxhT/eZmmfTcaxVgQF0ZBfoMJ5Q80bpFlvoNo6cKFAf8W5HU8XnuS6eL kw0lkn70teRjw9WmS54N6NuTCtYRIbZufBj+0Llz0rNnJSPc6xJzzK+PBLe4ST8W N4CFQIppFw+H5evygUIrPzyd1MAET4YwTJHhUB2BHLSIUr5e1qqoIha2u8VT1bBq O8s6JEwbUB9CsJJzZdFHuhDfIf9iALOGtfaDaWCCVQc5A48cMUaFjxgOCJYKiY7D RioO0UYgq2Zt+XZYelY1mX7pyoN20j0imRT91rbxAgcW8NIIzQs= -----END CERTIFICATE-----Generated at Tue Sep 22 18:41:06 2026 by rpki-client