$ rpki-client -vvvf rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft File: 55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft (raw, json) Hash identifier: PvmgGxSyQ2JAqm2kxNKbga4D9nsd2OXBckjZ+K7i97U= Subject key identifier: 86:A6:DB:77:4C:39:93:01:9C:F5:DD:CE:55:8C:8A:9B:34:49:A8:0C Authority key identifier: 55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77 Certificate issuer: /CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677 Certificate serial: 1D7A47BAB45A34FEC4B537C584B7850362256DF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:06:41 +0000 Manifest this update: Mon 21 Sep 2026 00:01:41 +0000 Manifest next update: Tue 22 Sep 2026 01:35:41 +0000 Files and hashes: 1: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: 8fbaWk0VlFRstRo1V+vF25anlu8qX6SOYuUDyj1y8XY=) 2: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: u9ONq6of3U/DimX1cWEtNMy6yoedIFXIdHUspVSvqi4=) 3: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: 6DMCC4zoM0ufHjG0QUaKmWhWVe5X3d0md3DvFqu2AIs=) 4: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: +4f95yT7HYIcHP5KdqwSiBUeBGne1YJwPDKkI/nqfYk=) 5: 55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl (hash: KVBkNbNGvdMhy2toLiSzs0OdJ9T4lDVcJQd90X4ps0E=) 6: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: Eyrv+pjzBZrD+KzX9culKkOw9Pi5527N+COQ3UuUxok=) 7: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: VYY0EPTRFVeNS0xmpURLR8nmiyrU+iv53Ydi6p2WVWU=) 8: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: or1/Z7K0bU1AYV2WS/k202vPtDVPNtgWIGTW99rDY5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7a:47:ba:b4:5a:34:fe:c4:b5:37:c5:84:b7:85:03:62:25:6d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677 Validity Not Before: Sep 21 00:01:41 2026 GMT Not After : Sep 22 01:35:41 2026 GMT Subject: CN=86A6DB774C3993019CF5DDCE558C8A9B3449A80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:bc:c5:8b:30:ea:56:31:53:4a:3f:17:ef: 58:05:fc:35:31:50:35:8a:bb:20:b8:ef:6d:ea:01: 7a:ba:fc:4d:9b:36:21:af:09:01:af:b0:17:30:ab: 77:f1:ce:4e:0f:93:ed:65:85:2f:0f:99:3e:86:47: 16:76:ea:9e:30:05:3b:4b:93:ca:97:10:cf:97:83: 26:7c:50:84:68:29:79:73:33:bb:18:5e:04:a2:ff: 2d:d8:5c:60:ab:86:02:aa:44:ad:fc:3b:62:87:98: c5:95:a9:0e:7a:ff:12:fa:8b:c7:67:a8:02:3f:d6: a4:40:a1:33:9a:0e:7a:36:8c:6b:af:68:17:9c:f1: 0a:b7:5f:9d:9e:57:eb:1c:06:39:2f:4c:4c:da:cd: 09:73:53:a8:0f:1b:4a:23:12:fc:53:c1:3c:de:47: c2:ba:fc:7b:b9:b9:79:b6:77:d5:37:c5:0d:dd:74: 6f:67:38:7e:c4:02:1b:6c:11:3e:e2:d6:3a:e8:30: 7a:41:61:0e:74:ac:8a:78:c3:da:af:2c:ab:59:7c: 53:1e:ee:8e:d8:9f:00:75:dc:33:c4:75:3e:5f:95: 35:e2:89:88:75:61:bb:98:6e:56:4a:d8:93:99:07: 33:0a:a8:8c:94:94:c3:b1:32:7b:a4:e2:7c:a2:f0: e7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A6:DB:77:4C:39:93:01:9C:F5:DD:CE:55:8C:8A:9B:34:49:A8:0C X509v3 Authority Key Identifier: keyid:55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c7:c5:a8:45:62:89:d5:47:4f:6f:d8:80:cc:49:48:4a:01: 0e:3b:88:bb:6e:dd:a7:55:ae:06:82:25:3b:a7:61:93:ed:d7: f7:ac:cf:b1:48:43:87:99:c8:37:48:9f:48:62:48:ec:3e:e8: 92:73:56:fa:4f:19:5d:f3:91:b5:41:53:6c:d0:f7:53:fd:87: 56:fc:c2:5e:a5:c6:1b:bb:e7:7c:17:1d:43:1b:fa:a7:03:09: 05:e5:a5:dd:57:4f:66:47:7c:ae:3c:ac:e1:de:cc:4e:dc:42: 74:48:76:d2:e7:13:e8:38:b5:45:4a:5b:a4:55:eb:da:5a:8b: 91:9a:eb:38:84:24:36:1a:62:f9:97:7c:ec:05:ef:b8:63:e0: 07:0f:33:26:fe:03:a5:15:0f:26:13:4e:a3:cf:86:57:f3:8f: 69:c0:4f:38:dc:d8:96:90:44:03:c0:7e:ad:ba:cd:61:5f:7e: 56:af:e2:c4:96:34:c6:e0:c2:31:77:3d:24:dd:24:d9:0b:0c: 6e:78:9d:37:be:44:38:5a:96:66:25:5c:7c:92:91:3a:22:1e: 89:69:ab:a3:ec:07:17:ba:fc:e3:6d:00:72:35:ad:5b:3a:32: 71:c0:ff:4f:9a:f7:4c:77:5d:6b:c7:87:5a:0f:4a:5e:ee:2f: 03:83:ea:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXpHurRaNP7EtTfFhLeFA2IlbfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVEMEE0QkREMzBBQjBGMjM0NkE3MjNDRUZCNkM3NkU4 QUQ5OTY3NzAeFw0yNjA5MjEwMDAxNDFaFw0yNjA5MjIwMTM1NDFaMDMxMTAvBgNV BAMTKDg2QTZEQjc3NEMzOTkzMDE5Q0Y1RERDRTU1OEM4QTlCMzQ0OUE4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrbzFizDqVjFTSj8X71gF/DUx UDWKuyC4723qAXq6/E2bNiGvCQGvsBcwq3fxzk4Pk+1lhS8PmT6GRxZ26p4wBTtL k8qXEM+XgyZ8UIRoKXlzM7sYXgSi/y3YXGCrhgKqRK38O2KHmMWVqQ56/xL6i8dn qAI/1qRAoTOaDno2jGuvaBec8Qq3X52eV+scBjkvTEzazQlzU6gPG0ojEvxTwTze R8K6/Hu5uXm2d9U3xQ3ddG9nOH7EAhtsET7i1jroMHpBYQ50rIp4w9qvLKtZfFMe 7o7YnwB13DPEdT5flTXiiYh1YbuYblZK2JOZBzMKqIyUlMOxMnuk4nyi8OcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhqbbd0w5kwGc9d3OVYyKmzRJqAwwHwYDVR0j BBgwFoAUVdCkvdMKsPI0anI877bHborZlncwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTgyZjJiMzgtYWRkZi00YmQzLTkyNDktZTViYTU2Y2QwNTJlLzAvNTVEMEE0QkRE MzBBQjBGMjM0NkE3MjNDRUZCNkM3NkU4QUQ5OTY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NUQwQTRCREQzMEFCMEYyMzQ2QTcyM0NFRkI2Qzc2RThBRDk5 Njc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvNTVEMEE0QkREMzBBQjBGMjM0NkE3MjNDRUZCNkM3 NkU4QUQ5OTY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHHxahFYonVR09v2IDMSUhKAQ47iLtu3adV rgaCJTunYZPt1/esz7FIQ4eZyDdIn0hiSOw+6JJzVvpPGV3zkbVBU2zQ91P9h1b8 wl6lxhu753wXHUMb+qcDCQXlpd1XT2ZHfK48rOHezE7cQnRIdtLnE+g4tUVKW6RV 69pai5Ga6ziEJDYaYvmXfOwF77hj4AcPMyb+A6UVDyYTTqPPhlfzj2nATzjc2JaQ RAPAfq26zWFfflav4sSWNMbgwjF3PSTdJNkLDG54nTe+RDhalmYlXHySkToiHolp q6PsBxe6/ONtAHI1rVs6MnHA/0+a90x3XWvHh1oPSl7uLwOD6qU= -----END CERTIFICATE-----Generated at Mon Sep 21 17:33:25 2026 by rpki-client