$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft File: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft (raw, json) Hash identifier: kaTvTW+o5BbOceZdOzjTW4q/PVlrGXMOTjzWQEBZymw= Subject key identifier: F6:52:2C:FD:B0:17:B1:37:3F:1D:EA:DC:D3:7D:54:33:DA:C7:B2:73 Authority key identifier: 55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38 Certificate issuer: /CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738 Certificate serial: 38B5EFB04C66BC8858491A66DC7980CB9213C769 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:22:34 +0000 Manifest this update: Wed 23 Sep 2026 21:17:34 +0000 Manifest next update: Thu 24 Sep 2026 23:55:34 +0000 Files and hashes: 1: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: jJ9QxJS6zZqjgDQVmwLxAklNodyGLVGf4UiD/TxDa2k=) 2: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl (hash: UVAaoqXKDKbmulNmDZpGVnnspXa4fvfqxsWCH6IJ2vk=) 3: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: jJrf12zeJVrcBiox/V38A0AXQJDoXj9thEoTVntgPNk=) 4: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: 1XYfMCpRwtuPIYvJwaDQFyMUa90ORHg7gRWzITiZx54=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b5:ef:b0:4c:66:bc:88:58:49:1a:66:dc:79:80:cb:92:13:c7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738 Validity Not Before: Sep 23 21:17:34 2026 GMT Not After : Sep 24 23:55:34 2026 GMT Subject: CN=F6522CFDB017B1373F1DEADCD37D5433DAC7B273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ac:a4:ba:e2:54:a3:7d:2f:b5:4c:b0:ad:d5: 24:8d:cc:60:07:e7:2c:97:c7:69:8d:ff:f4:3a:8f: a1:8a:74:51:3a:56:57:b1:c0:a7:05:06:3a:cb:31: c6:81:65:7b:45:9e:b6:fb:46:10:54:63:39:74:fc: 5c:01:c3:ae:b6:43:88:40:bc:c4:05:6d:89:67:e8: 0b:4a:07:22:1b:2d:e2:d0:4e:96:7f:0d:8b:c1:6a: cc:c1:65:ff:6d:0d:ca:eb:85:5b:13:05:0f:73:27: 35:5e:5f:71:6a:36:13:9f:91:e8:4b:4c:2e:2f:94: 6a:16:23:ca:d5:f3:ad:5b:7e:b0:ea:89:66:12:19: 17:f9:8d:4e:9b:98:38:a3:e3:15:5a:26:4a:92:91: e5:b6:b3:94:49:67:a2:bd:95:1a:88:2d:0d:d0:ab: 51:78:3c:4a:7a:8d:cb:22:7a:da:97:96:66:3e:3a: 6b:52:31:9d:7b:39:cd:76:1d:9e:2e:5e:d1:a1:2b: 07:2d:98:0d:f4:fb:a2:1f:ad:dd:36:74:91:2c:ba: 92:bc:dc:2b:4c:e2:e9:81:a7:10:36:49:e0:6b:07: e3:87:97:0e:1a:9c:82:1b:8d:0d:c9:47:b2:d5:4d: c7:73:b4:38:3b:2c:5c:56:23:6d:93:f3:44:08:54: 19:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:52:2C:FD:B0:17:B1:37:3F:1D:EA:DC:D3:7D:54:33:DA:C7:B2:73 X509v3 Authority Key Identifier: keyid:55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:43:38:2e:47:ba:e2:47:09:22:42:60:76:da:71:6d:1c:91: 6e:07:7e:41:db:bb:8d:42:3b:3c:d3:02:60:59:cd:96:19:1b: b3:5b:96:d6:a4:53:df:20:6e:14:a6:16:67:5a:db:96:28:74: 4e:31:ce:e0:7c:b5:63:64:b5:6d:a3:48:c7:6e:bb:17:33:0c: 41:b2:55:41:02:fc:88:b5:65:b0:53:80:bd:51:55:15:83:d2: 1c:9e:8e:60:57:01:4d:11:7d:71:51:b1:56:74:47:fb:de:01: 69:1e:9d:ad:e0:b4:9e:b2:7c:f8:8f:7e:f5:cc:30:9e:ec:68: 12:62:8d:5b:4d:b0:cf:63:34:e6:80:a1:e1:d5:76:d7:3c:cb: 81:9d:ba:39:71:96:54:d7:a5:c7:79:93:d3:f3:6f:f2:0f:35: 3b:80:50:73:15:4b:be:87:6d:13:62:3c:ac:c2:b1:39:c7:1c: e1:a4:74:87:a9:08:35:18:bb:2d:a1:42:ae:ed:3f:5d:ee:17: a3:d6:c0:01:8a:d4:e5:77:bc:e8:78:5b:6e:02:03:95:ab:46: 38:23:c7:ed:a0:2c:77:cc:54:48:34:58:d3:75:82:14:06:3c: fe:5e:25:bc:c7:75:40:f0:69:23:da:69:3c:d4:30:52:f9:e1: 3d:ca:67:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLXvsExmvIhYSRpm3HmAy5ITx2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVDOUQwMkJBMEUxM0JBM0VDMTE4NDdCQzE0M0ZGOTRC MzBENDczODAeFw0yNjA5MjMyMTE3MzRaFw0yNjA5MjQyMzU1MzRaMDMxMTAvBgNV BAMTKEY2NTIyQ0ZEQjAxN0IxMzczRjFERUFEQ0QzN0Q1NDMzREFDN0IyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKrKS64lSjfS+1TLCt1SSNzGAH 5yyXx2mN//Q6j6GKdFE6VlexwKcFBjrLMcaBZXtFnrb7RhBUYzl0/FwBw662Q4hA vMQFbYln6AtKByIbLeLQTpZ/DYvBaszBZf9tDcrrhVsTBQ9zJzVeX3FqNhOfkehL TC4vlGoWI8rV861bfrDqiWYSGRf5jU6bmDij4xVaJkqSkeW2s5RJZ6K9lRqILQ3Q q1F4PEp6jcsietqXlmY+OmtSMZ17Oc12HZ4uXtGhKwctmA30+6Ifrd02dJEsupK8 3CtM4umBpxA2SeBrB+OHlw4anIIbjQ3JR7LVTcdztDg7LFxWI22T80QIVBnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9lIs/bAXsTc/Herc031UM9rHsnMwHwYDVR0j BBgwFoAUVcnQK6DhO6PsEYR7wUP/lLMNRzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU2NGFiZmItMTk2Mi00NGE5LTgzNzYtY2JmYjFlZmNkYWJhLzAvNTVDOUQwMkJB MEUxM0JBM0VDMTE4NDdCQzE0M0ZGOTRCMzBENDczOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NUM5RDAyQkEwRTEzQkEzRUMxMTg0N0JDMTQzRkY5NEIzMEQ0 NzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTVDOUQwMkJBMEUxM0JBM0VDMTE4NDdCQzE0M0ZG OTRCMzBENDczOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRDOC5HuuJHCSJCYHbacW0ckW4HfkHbu41C OzzTAmBZzZYZG7NbltakU98gbhSmFmda25YodE4xzuB8tWNktW2jSMduuxczDEGy VUEC/Ii1ZbBTgL1RVRWD0hyejmBXAU0RfXFRsVZ0R/veAWkena3gtJ6yfPiPfvXM MJ7saBJijVtNsM9jNOaAoeHVdtc8y4GdujlxllTXpcd5k9Pzb/IPNTuAUHMVS76H bRNiPKzCsTnHHOGkdIepCDUYuy2hQq7tP13uF6PWwAGK1OV3vOh4W24CA5WrRjgj x+2gLHfMVEg0WNN1ghQGPP5eJbzHdUDwaSPaaTzUMFL54T3KZ7Q= -----END CERTIFICATE-----Generated at Thu Sep 24 10:51:54 2026 by rpki-client