
$ rpki-client -vvf repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft
File: 556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft (raw, json)
Hash identifier: prlzj6pf39Qz/LNo+QfUGX9LJgUjeO8Xb1P4rrvPYrg=
Subject key identifier: 1E:77:1F:E4:94:8A:D1:6C:3A:44:4F:F4:B5:63:4C:19:18:48:3F:C0
Authority key identifier: 55:67:56:B0:E2:11:DD:26:2F:0D:5D:C9:EC:59:31:EF:A7:4C:AC:3C
Certificate issuer: /CN=556756B0E211DD262F0D5DC9EC5931EFA74CAC3C
Certificate serial: 3FCEEE40510E3976ABF7113D11A038E2B16BFB64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft
Manifest number: 0201
Signing time: Wed 25 Mar 2026 22:41:32 +0000
Manifest this update: Wed 25 Mar 2026 22:36:32 +0000
Manifest next update: Sun 29 Mar 2026 08:47:32 +0000
Files and hashes: 1: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: dhNCCntTXF8fPVmBhyc2TID6diy3HmHPisy8tFKfm4Y=)
2: 556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl (hash: sx6KliKocDu0jG0jAX3iVmc2ur5b0Jus4WYmrkx2P5s=)
3: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: 6QeO2YACwb/BDxjV2SdJIfE+RbGnx2SRrYdFwDXs0Lw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl
rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 08:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ce:ee:40:51:0e:39:76:ab:f7:11:3d:11:a0:38:e2:b1:6b:fb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556756B0E211DD262F0D5DC9EC5931EFA74CAC3C
Validity
Not Before: Mar 25 22:36:32 2026 GMT
Not After : Mar 29 08:47:32 2026 GMT
Subject: CN=1E771FE4948AD16C3A444FF4B5634C1918483FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:b2:e2:08:7b:00:55:27:6e:82:28:d4:78:
31:b1:12:b0:b8:9a:32:c2:3b:76:16:6a:5e:43:2a:
87:93:5a:e7:ae:2d:3e:b0:0a:5d:36:d0:48:2f:af:
b8:34:d2:a1:1a:ee:31:88:1f:43:05:00:e9:58:13:
2b:c2:69:db:01:c3:93:67:70:fc:2f:9e:01:ee:e4:
c8:c0:e3:c8:01:24:40:39:02:14:b3:c4:27:d0:88:
dc:db:62:ce:c5:a8:7e:16:c1:12:79:f4:e6:72:33:
b5:53:ad:38:c8:ad:f9:4c:06:92:20:59:41:1b:ca:
36:b2:47:b7:28:84:30:0a:39:5e:5a:e7:8e:a1:10:
36:8b:61:da:74:a6:f8:de:d0:95:97:d3:9d:b3:cc:
22:d7:8d:0e:a8:80:ec:22:10:8a:37:e5:a8:4b:c6:
d5:93:e1:96:55:9d:a7:db:64:50:be:58:16:a6:0b:
43:f0:c7:b7:4d:08:cb:a3:b2:d2:47:36:80:4e:46:
b9:ff:5e:e2:3f:bc:59:54:4d:62:22:ce:53:a9:7f:
68:35:c1:3d:fc:0b:d8:97:e3:51:32:fa:f0:30:af:
91:00:e4:95:1a:65:60:f6:de:ab:3e:af:a9:3a:d7:
f1:78:2c:bc:0f:74:a1:d8:cc:0d:81:b2:50:0f:92:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:77:1F:E4:94:8A:D1:6C:3A:44:4F:F4:B5:63:4C:19:18:48:3F:C0
X509v3 Authority Key Identifier:
keyid:55:67:56:B0:E2:11:DD:26:2F:0D:5D:C9:EC:59:31:EF:A7:4C:AC:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:54:4a:58:88:8a:f9:34:66:0f:69:99:e4:ad:30:65:11:26:
37:78:2f:4f:a9:8b:74:8a:a6:32:b0:18:36:ba:ce:86:39:72:
93:b0:7c:dc:22:30:9c:84:d9:cc:18:53:78:ff:aa:15:5f:ee:
a1:c0:28:28:32:1a:d0:a9:60:15:94:99:e6:95:08:5a:10:a2:
9b:1e:c9:d2:05:2d:a0:b7:c3:f2:b2:0e:bb:fa:f2:f2:50:aa:
31:81:66:da:03:0a:fd:d4:d0:b1:48:df:a7:05:b2:41:6e:e8:
1f:23:dd:1c:69:9a:3f:97:20:08:84:f3:cf:fb:0b:79:06:24:
09:e7:2e:96:18:92:75:a0:73:52:eb:05:95:84:59:b0:a9:45:
20:18:8d:3e:e6:24:0c:bc:41:bb:e8:8a:c3:dc:fc:f5:bb:53:
7b:67:73:99:52:28:00:bb:92:f9:e8:a1:8b:bb:30:d2:f5:8a:
5a:19:b3:69:20:4f:56:4c:a4:a1:df:3b:01:1a:f5:29:d9:ab:
3f:8e:f5:19:87:a4:f8:39:92:cb:ca:66:2f:4d:38:07:f5:25:
42:09:ef:73:db:a0:66:4c:f5:ee:73:f1:53:4b:c1:29:31:2c:
96:e3:22:bc:81:b0:86:6b:28:2d:c7:b1:1a:69:be:b3:80:42:
9f:1c:e4:63
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP87uQFEOOXar9xE9EaA44rFr+2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMxRUZB
NzRDQUMzQzAeFw0yNjAzMjUyMjM2MzJaFw0yNjAzMjkwODQ3MzJaMDMxMTAvBgNV
BAMTKDFFNzcxRkU0OTQ4QUQxNkMzQTQ0NEZGNEI1NjM0QzE5MTg0ODNGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdLLiCHsAVSdugijUeDGxErC4
mjLCO3YWal5DKoeTWueuLT6wCl020Egvr7g00qEa7jGIH0MFAOlYEyvCadsBw5Nn
cPwvngHu5MjA48gBJEA5AhSzxCfQiNzbYs7FqH4WwRJ59OZyM7VTrTjIrflMBpIg
WUEbyjayR7cohDAKOV5a546hEDaLYdp0pvje0JWX052zzCLXjQ6ogOwiEIo35ahL
xtWT4ZZVnafbZFC+WBamC0Pwx7dNCMujstJHNoBORrn/XuI/vFlUTWIizlOpf2g1
wT38C9iX41Ey+vAwr5EA5JUaZWD23qs+r6k61/F4LLwPdKHYzA2BslAPkqhPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHncf5JSK0Ww6RE/0tWNMGRhIP8AwHwYDVR0j
BBgwFoAUVWdWsOIR3SYvDV3J7Fkx76dMrDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjRiMjBkOC01OTFiLTQxNTItOTc2OC05YzQyYjA2YzJmZTIvMC81NTY3NTZCMEUy
MTFERDI2MkYwRDVEQzlFQzU5MzFFRkE3NENBQzNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMxRUZBNzRD
QUMzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0YjIwZDgtNTkxYi00MTUyLTk3
NjgtOWM0MmIwNmMyZmUyLzAvNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMx
RUZBNzRDQUMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIJUSliIivk0Zg9pmeStMGURJjd4L0+pi3SK
pjKwGDa6zoY5cpOwfNwiMJyE2cwYU3j/qhVf7qHAKCgyGtCpYBWUmeaVCFoQopse
ydIFLaC3w/KyDrv68vJQqjGBZtoDCv3U0LFI36cFskFu6B8j3Rxpmj+XIAiE88/7
C3kGJAnnLpYYknWgc1LrBZWEWbCpRSAYjT7mJAy8QbvoisPc/PW7U3tnc5lSKAC7
kvnooYu7MNL1iloZs2kgT1ZMpKHfOwEa9SnZqz+O9RmHpPg5ksvKZi9NOAf1JUIJ
73PboGZM9e5z8VNLwSkxLJbjIryBsIZrKC3HsRppvrOAQp8c5GM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:21 2026 by rpki-client