$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft File: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft (raw, json) Hash identifier: MS/IunFyPy97ozIkdpldgfpUOxqaLeQFDCqvRUcr/zo= Subject key identifier: 8D:8D:56:44:8D:41:11:B6:25:11:34:F2:92:DB:09:24:DC:1D:F1:17 Authority key identifier: 55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38 Certificate issuer: /CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738 Certificate serial: 3B51EFF687641E7E04CB3F534BD0A61BF9D9BA9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 11:34:52 +0000 Manifest this update: Fri 25 Sep 2026 11:29:52 +0000 Manifest next update: Sat 26 Sep 2026 11:38:52 +0000 Files and hashes: 1: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: 1XYfMCpRwtuPIYvJwaDQFyMUa90ORHg7gRWzITiZx54=) 2: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: jJrf12zeJVrcBiox/V38A0AXQJDoXj9thEoTVntgPNk=) 3: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl (hash: xmXkq+yPFmUt2Xd6ELfcMFu5pU1cMnUC5V+sIuaA7yQ=) 4: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: jJ9QxJS6zZqjgDQVmwLxAklNodyGLVGf4UiD/TxDa2k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:51:ef:f6:87:64:1e:7e:04:cb:3f:53:4b:d0:a6:1b:f9:d9:ba:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738 Validity Not Before: Sep 25 11:29:52 2026 GMT Not After : Sep 26 11:38:52 2026 GMT Subject: CN=8D8D56448D4111B6251134F292DB0924DC1DF117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:48:16:2c:5a:96:73:6d:01:97:89:ea:5d: 39:db:db:0e:4e:2b:24:c6:50:7e:84:05:f6:91:b1: d4:35:66:8f:a2:d8:64:d5:b6:79:87:5e:f5:6d:2d: c2:ae:60:b0:5c:46:62:39:d4:76:fa:41:ab:84:f8: d7:ab:33:7a:1d:9f:f6:99:ac:63:a7:78:81:36:27: ee:8b:35:6c:3f:e4:ff:6f:15:b8:b9:a0:71:55:0a: ed:fd:c1:08:69:35:16:8e:bb:c1:d5:5b:d5:94:2c: 3a:4c:92:7b:eb:7a:6c:d0:d2:ef:12:6b:c9:79:cf: 1e:04:0c:d4:95:ea:d9:e2:a3:2a:b3:c0:8c:e6:0d: 44:92:1b:f2:da:55:3a:e7:ac:01:e4:ad:ee:61:66: 17:5f:ac:eb:2e:46:7d:2a:35:87:b0:44:c5:0d:80: 58:d4:64:88:0a:f0:65:8b:de:d1:5f:9b:81:4a:f7: f3:79:35:4f:6a:81:a4:29:ff:ca:d1:5e:0b:3f:d7: 77:a8:5a:4c:5f:90:9d:7c:f9:5c:93:ed:3d:f7:1f: 63:3d:bf:00:01:53:ff:a5:4d:e1:35:90:91:72:0e: b1:59:b8:b3:a8:5b:e6:45:dc:50:e5:a0:fb:74:c6: f7:9f:b7:00:58:61:3e:7a:f3:34:24:bc:fe:17:77: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8D:56:44:8D:41:11:B6:25:11:34:F2:92:DB:09:24:DC:1D:F1:17 X509v3 Authority Key Identifier: keyid:55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ea:f1:a3:79:46:5a:61:d5:55:fc:fb:fc:37:53:44:f5:59: f6:7c:db:bd:63:60:1c:a3:53:18:86:49:3c:f0:52:36:b4:7a: a6:ed:07:be:02:c3:b1:2f:fe:24:2d:e0:bf:c5:b7:b6:c1:ad: 08:05:1b:94:64:3b:6b:40:06:ad:e3:24:3b:2d:31:e9:01:d6: 26:93:fd:af:0d:3b:c9:c4:e7:20:75:30:42:1a:ff:f0:e7:61: f5:fa:59:a2:23:1d:51:7a:7e:13:ac:85:b8:de:cb:2d:3f:e2: 8c:fa:06:60:43:cc:e5:88:25:0a:85:a7:85:80:fb:c0:4f:67: 42:02:61:31:d6:00:1a:9e:a6:b6:06:73:f9:ff:b0:6f:10:7e: 4c:13:23:97:a7:e4:c4:f6:b2:60:3a:62:f2:92:5b:97:1a:2a: a0:9c:00:d5:ee:5a:05:b2:c3:8a:5e:63:90:82:22:57:93:e1: d1:5b:df:34:be:01:07:3c:cf:14:b5:a8:e4:e0:2d:19:34:37: 70:41:4f:2c:82:1d:64:87:7a:a4:c0:2c:bb:89:c9:c4:29:f8: d1:d8:3d:f0:33:c8:b3:f8:ff:49:8a:d2:ae:e5:d0:bf:f4:cb: 90:19:b8:88:44:7b:89:d8:4b:25:2b:5f:95:2b:3c:b4:33:7c: 5f:71:42:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1Hv9odkHn4Eyz9TS9CmG/nZupwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVDOUQwMkJBMEUxM0JBM0VDMTE4NDdCQzE0M0ZGOTRC MzBENDczODAeFw0yNjA5MjUxMTI5NTJaFw0yNjA5MjYxMTM4NTJaMDMxMTAvBgNV BAMTKDhEOEQ1NjQ0OEQ0MTExQjYyNTExMzRGMjkyREIwOTI0REMxREYxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCaUgWLFqWc20Bl4nqXTnb2w5O KyTGUH6EBfaRsdQ1Zo+i2GTVtnmHXvVtLcKuYLBcRmI51Hb6QauE+NerM3odn/aZ rGOneIE2J+6LNWw/5P9vFbi5oHFVCu39wQhpNRaOu8HVW9WULDpMknvremzQ0u8S a8l5zx4EDNSV6tnioyqzwIzmDUSSG/LaVTrnrAHkre5hZhdfrOsuRn0qNYewRMUN gFjUZIgK8GWL3tFfm4FK9/N5NU9qgaQp/8rRXgs/13eoWkxfkJ18+VyT7T33H2M9 vwABU/+lTeE1kJFyDrFZuLOoW+ZF3FDloPt0xveftwBYYT568zQkvP4XdwcPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjY1WRI1BEbYlETTyktsJJNwd8RcwHwYDVR0j BBgwFoAUVcnQK6DhO6PsEYR7wUP/lLMNRzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU2NGFiZmItMTk2Mi00NGE5LTgzNzYtY2JmYjFlZmNkYWJhLzAvNTVDOUQwMkJB MEUxM0JBM0VDMTE4NDdCQzE0M0ZGOTRCMzBENDczOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NUM5RDAyQkEwRTEzQkEzRUMxMTg0N0JDMTQzRkY5NEIzMEQ0 NzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTVDOUQwMkJBMEUxM0JBM0VDMTE4NDdCQzE0M0ZG OTRCMzBENDczOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDq8aN5Rlph1VX8+/w3U0T1WfZ8271jYByj UxiGSTzwUja0eqbtB74Cw7Ev/iQt4L/Ft7bBrQgFG5RkO2tABq3jJDstMekB1iaT /a8NO8nE5yB1MEIa//DnYfX6WaIjHVF6fhOshbjeyy0/4oz6BmBDzOWIJQqFp4WA +8BPZ0ICYTHWABqeprYGc/n/sG8QfkwTI5en5MT2smA6YvKSW5caKqCcANXuWgWy w4peY5CCIleT4dFb3zS+AQc8zxS1qOTgLRk0N3BBTyyCHWSHeqTALLuJycQp+NHY PfAzyLP4/0mK0q7l0L/0y5AZuIhEe4nYSyUrX5UrPLQzfF9xQvo= -----END CERTIFICATE-----Generated at Fri Sep 25 19:03:36 2026 by rpki-client