
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
File: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft (raw, json)
Hash identifier: pgGvh5E2NOGMXIZ2pnaeNz59DsoUnpeK4Id8RLzEgA0=
Subject key identifier: 34:D1:C5:FC:E1:CD:9B:F3:9E:0D:75:99:04:58:29:BA:9A:7F:D8:7B
Authority key identifier: 55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38
Certificate issuer: /CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738
Certificate serial: 07BA210B25D945C2EB640C02DD96EDC9399EDC25
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 22:32:27 +0000
Manifest this update: Thu 23 Jul 2026 22:27:27 +0000
Manifest next update: Fri 24 Jul 2026 22:44:27 +0000
Files and hashes: 1: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: jJ9QxJS6zZqjgDQVmwLxAklNodyGLVGf4UiD/TxDa2k=)
2: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl (hash: ONhvZa/SbsfpqbjsM6Ui92ExXTznU7aDcqnfXWImq+w=)
3: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: 1XYfMCpRwtuPIYvJwaDQFyMUa90ORHg7gRWzITiZx54=)
4: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: jJrf12zeJVrcBiox/V38A0AXQJDoXj9thEoTVntgPNk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl
rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ba:21:0b:25:d9:45:c2:eb:64:0c:02:dd:96:ed:c9:39:9e:dc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738
Validity
Not Before: Jul 23 22:27:27 2026 GMT
Not After : Jul 24 22:44:27 2026 GMT
Subject: CN=34D1C5FCE1CD9BF39E0D7599045829BA9A7FD87B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:bf:6d:8c:ad:e0:28:dd:ef:3f:3f:35:a6:
c2:7e:48:f7:26:c9:05:90:ed:69:bc:e8:80:c7:5b:
9c:74:3b:f8:1d:b7:06:c8:ad:35:e4:a2:69:4f:1a:
e6:b6:05:be:6d:f5:ea:07:98:98:1e:90:92:71:35:
c1:e3:6e:49:d7:ff:dd:19:6c:e2:00:ce:30:5e:11:
8c:48:e9:56:60:2c:6f:1b:63:a0:c2:04:b7:be:40:
5e:49:3f:74:0b:4b:fb:8a:ae:b2:5d:5d:02:46:5f:
7c:cb:56:81:04:f6:bf:ca:6c:fb:6a:b4:cd:f2:b0:
64:10:ef:2f:95:bc:c0:28:02:f2:d5:1c:8f:e7:47:
54:b7:e7:3a:f2:99:7e:b5:60:d4:51:c0:39:8b:a1:
63:a1:30:06:7e:f8:d2:5c:3f:a0:0f:70:8c:d8:8e:
6e:8d:be:69:3a:ba:f6:62:31:1e:e7:89:5b:0f:42:
32:35:a8:7d:e3:50:16:f0:6b:c5:26:70:c4:25:31:
68:53:35:b8:d3:de:97:a2:7b:96:c9:71:2f:be:7d:
10:9a:83:bb:50:af:57:31:62:1a:52:79:21:21:09:
0f:ef:bd:05:43:ad:6b:7e:68:c5:b9:c5:48:b2:09:
b8:88:6f:4d:ed:ee:7f:48:1d:7a:89:a2:7f:93:da:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D1:C5:FC:E1:CD:9B:F3:9E:0D:75:99:04:58:29:BA:9A:7F:D8:7B
X509v3 Authority Key Identifier:
keyid:55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:12:36:6e:fa:7c:35:72:a3:6b:0a:9d:18:24:57:84:0d:1f:
98:43:64:9b:22:ef:65:05:56:33:c2:fd:aa:c7:2a:68:c1:cd:
1f:c1:60:b7:90:42:38:60:d6:fb:67:bf:b3:9c:d1:7a:81:e5:
c4:1f:0b:3e:34:11:ea:38:0a:65:fc:ee:19:78:25:31:2e:89:
38:19:e1:a1:7e:e4:a1:2a:66:e4:e4:10:83:39:64:99:23:98:
c3:05:bf:42:cd:b1:a1:33:c0:ec:c8:98:0e:96:55:a6:e6:c5:
02:e3:e5:22:a0:44:ef:50:57:fc:1f:a4:a4:0a:5c:75:48:8c:
5b:6c:5d:4c:30:71:12:57:84:21:6e:b2:ad:66:eb:c0:f9:12:
96:fa:44:8a:1b:03:57:e5:e8:61:44:b1:64:72:3b:be:b2:b8:
86:21:a7:20:a4:23:da:92:14:b2:6e:21:a4:4d:8c:39:d9:0c:
9e:18:81:84:7b:62:d0:5f:4e:73:2d:41:c7:30:60:9e:8c:d0:
65:74:59:fa:59:8b:a0:ba:6d:d1:9e:87:64:0a:87:ea:e7:39:
fe:c4:d4:c5:46:87:09:3a:8c:95:33:f6:8e:c9:7c:45:9c:86:
b8:a3:b8:7b:12:ff:ff:92:2f:b8:7b:ed:c2:12:9d:50:45:2a:
8b:dc:e3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:41 2026 by rpki-client