
$ rpki-client -vvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
File: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft (raw, json)
Hash identifier: AotD+Vu047X+5P3faIN1n4OxhSNBNAJq3K3SNK696mQ=
Subject key identifier: 55:D3:35:0C:2A:F5:D8:26:E6:6F:88:4A:F4:42:41:67:72:D2:40:87
Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
Certificate issuer: /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Certificate serial: 148F1CF2AFBF7B6E7B0876DC29DF2ED083B2AFE2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 20:44:13 +0000
Manifest this update: Tue 16 Jun 2026 20:39:13 +0000
Manifest next update: Wed 17 Jun 2026 20:58:13 +0000
Files and hashes: 1: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 7nwXZ7uwqWfwg9TH3c9pYLZKmQEunRTq0qvrKzAXkHk=)
2: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: fT+ijd0/vxnImzejYzyk0a9FLi5T/K3JxSUJprhaarY=)
3: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl (hash: QDhXUs3MpQMqDVI082jDcXbTY1KYhvVbdG3ub9wpkXM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8f:1c:f2:af:bf:7b:6e:7b:08:76:dc:29:df:2e:d0:83:b2:af:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Validity
Not Before: Jun 16 20:39:13 2026 GMT
Not After : Jun 17 20:58:13 2026 GMT
Subject: CN=55D3350C2AF5D826E66F884AF442416772D24087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:7b:36:4e:22:1e:95:08:df:cd:27:53:8d:
9e:93:04:e5:b4:f5:d3:d8:f0:42:20:37:13:5b:d3:
e8:57:4a:9e:04:95:4a:0f:ed:6d:0a:a9:db:cf:18:
71:10:23:0c:40:ed:ab:94:ae:f1:6f:26:e2:1d:f1:
64:55:9f:b6:56:f1:53:ff:6e:e5:d4:12:29:1e:e4:
a8:a8:ee:e2:d4:fa:60:3f:7a:fc:38:ed:b9:16:26:
15:11:c8:36:83:df:e3:e3:dd:f8:91:24:cc:cd:cb:
b6:f4:29:ed:6a:2a:98:a0:98:20:16:80:93:3f:11:
59:63:98:c9:3c:1a:36:b8:0e:ee:a5:90:06:6d:49:
1c:d8:d7:d8:16:f1:c1:40:ed:ec:7b:6c:2a:8b:21:
50:7f:eb:1b:b9:b1:aa:76:85:58:f5:f6:ad:69:93:
eb:f3:19:b4:a8:92:08:bc:7c:d2:fb:59:74:f1:24:
44:40:35:fc:8a:d2:26:a1:26:18:6f:cd:f2:20:56:
ab:92:c9:f0:b9:e7:8a:2e:15:42:05:12:e5:e0:c2:
fe:2d:ac:4a:df:6a:46:d7:6d:2c:f7:88:f7:be:67:
50:a4:ab:4d:e5:19:0f:69:21:f6:d2:13:5a:4b:76:
96:4d:2a:25:2d:e0:6e:27:e2:68:22:81:08:1f:1e:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D3:35:0C:2A:F5:D8:26:E6:6F:88:4A:F4:42:41:67:72:D2:40:87
X509v3 Authority Key Identifier:
keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a2:85:a4:42:9f:2d:39:f3:ea:a3:58:55:c3:23:e5:ec:93:
89:dd:f3:bc:f2:fa:84:e7:fb:1b:98:0a:1a:ff:a8:73:9f:05:
ff:4b:82:02:4f:e4:41:e6:c2:52:ba:2d:d0:34:c1:c8:f8:a5:
d4:47:8f:0e:cc:92:95:7d:f7:6f:88:b1:dd:17:4b:28:8f:82:
75:47:c2:42:76:84:28:9b:ec:55:63:59:af:fe:21:06:2f:3b:
bf:47:6e:04:3d:9f:64:73:69:8d:fd:6c:78:bf:66:a2:96:5d:
93:b1:bd:b4:ff:18:76:7c:b2:1b:46:d1:3a:46:9f:d9:87:2b:
e4:2d:7d:8b:aa:2c:2e:af:41:89:8c:f4:be:ed:c3:c0:de:e0:
61:a0:85:58:1a:71:e2:7e:e2:1f:8d:e2:c1:6e:b3:13:3c:e3:
1c:9a:a7:bc:55:0b:da:45:0f:98:1d:7b:20:01:ca:d6:13:68:
d1:c0:86:f2:c6:28:16:ec:7e:81:3d:78:80:1d:3d:cd:c4:10:
06:85:5a:4a:46:14:70:8c:83:27:57:d1:4b:02:a3:12:66:99:
ed:c6:f7:21:bf:66:e3:14:cc:14:4f:88:02:8e:f2:a5:9e:aa:
99:ea:71:4d:b8:f9:c9:4a:5a:8e:86:ff:57:06:b4:7e:3b:e6:
6d:6e:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:49:15 2026 by rpki-client