$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft File: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft (raw, json) Hash identifier: TTXZevhhawr0kgdJOS5Zrmfcmr2kskNcID67CBqhFU4= Subject key identifier: DD:AA:CA:C0:FA:F8:F6:1D:44:9B:53:78:5C:0B:7C:65:39:D5:C1:25 Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A Certificate issuer: /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A Certificate serial: 6CE6A53A624DFC14CFE26A2114EF0F2F40782A41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft Manifest number: 04DC Signing time: Wed 25 Mar 2026 08:01:18 +0000 Manifest this update: Wed 25 Mar 2026 07:56:18 +0000 Manifest next update: Sat 28 Mar 2026 09:07:18 +0000 Files and hashes: 1: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl (hash: cnC5B6Iwi8pMeuL7Z3b4Q3jVd8536KgDHCcNVAxHDBk=) 2: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: g5hlJx5VxwLWFsZdGKqn9r2RuteLPSgtrh1sr6LNmhM=) 3: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: cp5DLnNWi9w3KmvCMrojjqhOWr4wL8E6xAvIA2F2SV4=) 4: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: iNZ3zu9tO0qa+gSNjTNjVY0ck8jJgMDSV+32JZtPZic=) 5: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: q9l5WC1lZSRDDfD6k6bjS5S0ZVdtq7f+RpluQ9hh5F0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e6:a5:3a:62:4d:fc:14:cf:e2:6a:21:14:ef:0f:2f:40:78:2a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A Validity Not Before: Mar 25 07:56:18 2026 GMT Not After : Mar 28 09:07:18 2026 GMT Subject: CN=DDAACAC0FAF8F61D449B53785C0B7C6539D5C125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:e0:60:e2:4e:a5:a6:08:3f:63:85:7f:ac: 3b:9b:6f:2d:12:b5:24:21:9c:a8:df:b7:d9:ce:15: fb:8b:61:7f:eb:f9:03:99:71:f0:55:24:5c:4d:86: 80:dd:04:46:23:1c:d1:60:4a:cf:ef:db:2f:f4:72: a5:9f:c1:53:88:23:61:9f:1d:d6:a5:4d:4b:9e:3b: 1a:05:68:91:95:09:c0:11:15:55:6b:fa:88:a0:5c: f3:13:51:4f:be:f6:c0:f3:3e:78:d2:92:69:6f:3b: 8b:65:ff:bd:90:90:12:05:ce:e6:49:05:d7:ab:54: 63:d7:bb:d0:a0:06:ed:9d:15:06:a1:f1:ac:19:77: b9:7a:7e:0b:16:05:5d:58:b3:9d:8e:3c:2f:ea:08: 25:6b:24:b2:d1:ab:1c:bc:c0:05:56:3e:54:12:63: eb:e9:00:3f:3b:54:51:b4:9f:0d:fb:bd:47:2b:be: 96:79:81:d3:2f:04:99:0a:e0:ef:9d:90:06:8f:0f: 41:46:4d:f9:7c:98:ce:a3:89:e7:1a:48:65:9a:e2: 59:53:e3:9e:53:3d:e2:40:54:ff:16:6b:6b:3f:09: d7:4b:00:31:c5:d9:4b:44:16:75:46:55:a9:7c:d4: e0:f6:2e:3a:f3:6c:ae:70:e9:e6:22:e6:89:ac:b4: 37:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AA:CA:C0:FA:F8:F6:1D:44:9B:53:78:5C:0B:7C:65:39:D5:C1:25 X509v3 Authority Key Identifier: keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b1:13:7b:12:40:f1:ab:b2:e7:60:fb:8f:01:4f:8b:05:27: b1:b1:e8:95:b1:56:64:53:29:dd:25:a8:13:29:32:87:6e:5a: 1c:f2:8d:95:ff:47:db:f2:53:03:7d:77:84:48:45:bd:e2:35: 21:e3:ea:41:78:db:67:44:67:b5:2b:c8:8d:81:51:0d:39:2a: 92:31:af:15:a5:d8:3d:7c:2d:bb:7a:b2:de:d0:86:80:23:83: b1:f9:3a:17:5c:ac:4d:14:a4:de:ec:dc:8b:3f:56:a7:1f:6f: 1b:e9:10:7f:43:cd:ba:64:e2:9b:30:44:3e:fa:83:68:98:42: 47:ad:4d:2a:ee:c9:73:6b:e2:cc:0d:ad:ff:d3:a9:9d:7e:bc: 82:ed:b7:51:cc:97:11:3e:6b:50:49:11:9f:dc:a5:df:f6:41: ff:97:3a:42:a3:2a:c8:f8:fd:85:56:38:ce:89:b0:62:1c:8d: 46:0c:7e:87:bc:7a:e0:20:99:ae:5a:f7:46:7b:bb:51:fc:a1: 91:14:9a:8a:aa:31:29:0a:73:b9:78:02:6f:bc:9b:59:b3:e6: 9f:ce:81:1a:30:36:6d:4e:91:6a:8d:82:54:24:75:f8:32:69: b6:80:cf:6c:ee:62:17:36:60:05:eb:d3:a9:e8:b6:88:65:4a: 22:e2:5b:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOalOmJN/BTP4mohFO8PL0B4KkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZD RTM4MTAyQTAeFw0yNjAzMjUwNzU2MThaFw0yNjAzMjgwOTA3MThaMDMxMTAvBgNV BAMTKEREQUFDQUMwRkFGOEY2MUQ0NDlCNTM3ODVDMEI3QzY1MzlENUMxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcpOBg4k6lpgg/Y4V/rDubby0S tSQhnKjft9nOFfuLYX/r+QOZcfBVJFxNhoDdBEYjHNFgSs/v2y/0cqWfwVOII2Gf HdalTUueOxoFaJGVCcARFVVr+oigXPMTUU++9sDzPnjSkmlvO4tl/72QkBIFzuZJ BderVGPXu9CgBu2dFQah8awZd7l6fgsWBV1Ys52OPC/qCCVrJLLRqxy8wAVWPlQS Y+vpAD87VFG0nw37vUcrvpZ5gdMvBJkK4O+dkAaPD0FGTfl8mM6jiecaSGWa4llT 455TPeJAVP8Wa2s/CddLADHF2UtEFnVGVal81OD2LjrzbK5w6eYi5omstDcnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3arKwPr49h1Em1N4XAt8ZTnVwSUwHwYDVR0j BBgwFoAUVcel1WzsExbP5mDHnALBb844ECowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjllMDYzNi0xZmUyLTRkM2ItOGMzOC0yZGJiOTkxNGU5MTMvMC81NUM3QTVENTZD RUMxMzE2Q0ZFNjYwQzc5QzAyQzE2RkNFMzgxMDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZDRTM4 MTAyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj MzgtMmRiYjk5MTRlOTEzLzAvNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMx NkZDRTM4MTAyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyxE3sSQPGrsudg+48BT4sFJ7Gx6JWxVmRT Kd0lqBMpModuWhzyjZX/R9vyUwN9d4RIRb3iNSHj6kF422dEZ7UryI2BUQ05KpIx rxWl2D18Lbt6st7QhoAjg7H5OhdcrE0UpN7s3Is/VqcfbxvpEH9Dzbpk4pswRD76 g2iYQketTSruyXNr4swNrf/TqZ1+vILtt1HMlxE+a1BJEZ/cpd/2Qf+XOkKjKsj4 /YVWOM6JsGIcjUYMfoe8euAgma5a90Z7u1H8oZEUmoqqMSkKc7l4Am+8m1mz5p/O gRowNm1OkWqNglQkdfgyabaAz2zuYhc2YAXr06notohlSiLiW6w= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:53 2026 by rpki-client