$ rpki-client -vvvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft File: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft (raw, json) Hash identifier: 5Cu+z5ACPPlwZpxaWwU8uCGImgeXMU1d9aYC9WhDQ9Q= Subject key identifier: 87:15:A7:B8:B4:A3:7F:55:72:02:D4:A1:BD:C6:1C:32:F5:37:2A:1A Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B Certificate issuer: /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B Certificate serial: 330CD562DB2CF7935D8FC2E126C774B325EBDED8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 16:55:40 +0000 Manifest this update: Sat 14 Nov 2026 16:50:40 +0000 Manifest next update: Sun 15 Nov 2026 19:31:40 +0000 Files and hashes: 1: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl (hash: xlSoToEaamSR8hsDQiOXtH32U0UoNvIMNmp4YNuSc1I=) 2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 7nwXZ7uwqWfwg9TH3c9pYLZKmQEunRTq0qvrKzAXkHk=) 3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: fT+ijd0/vxnImzejYzyk0a9FLi5T/K3JxSUJprhaarY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0c:d5:62:db:2c:f7:93:5d:8f:c2:e1:26:c7:74:b3:25:eb:de:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B Validity Not Before: Nov 14 16:50:40 2026 GMT Not After : Nov 15 19:31:40 2026 GMT Subject: CN=8715A7B8B4A37F557202D4A1BDC61C32F5372A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ed:9f:ec:f1:10:18:a8:06:d5:ae:52:61:0d: d7:1c:8a:da:03:59:2a:47:2d:13:64:8d:ce:22:fe: 78:b5:b6:1d:20:8e:cc:06:fe:e5:f0:63:67:6b:e9: 21:75:fa:1c:1a:93:51:92:c7:35:2a:54:60:76:d3: 29:21:36:1b:d0:cf:32:09:b2:79:92:6f:da:73:78: 71:34:ad:93:82:47:86:a3:be:4b:bf:2f:28:b2:30: 42:7c:3a:02:0d:44:80:a4:99:10:05:e7:e4:e5:c4: ed:a2:8d:7f:21:04:60:af:5c:32:4d:7b:b7:77:42: 93:d6:35:fa:c2:ac:07:bd:d0:09:0a:44:a2:0f:05: 8d:07:9e:20:b3:3e:52:cf:16:19:8f:7e:52:04:56: 5f:66:23:3f:d3:14:72:88:e3:b0:f4:76:3e:38:f4: 19:97:26:c4:10:fc:bb:77:99:d5:fe:00:04:5c:2b: c2:25:d2:cf:c1:f8:6e:ef:3c:cd:3f:ec:e3:82:d9: f8:78:1b:f7:a3:dc:18:83:c0:cf:f1:a8:a7:76:05: 3b:b2:ac:a5:49:64:75:8e:e8:0a:ca:11:c0:fe:ba: 22:bb:ee:80:f4:78:eb:af:70:a0:c4:e8:5f:7b:cf: 90:3b:11:18:a0:82:4c:01:ac:4f:50:be:68:42:8e: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:15:A7:B8:B4:A3:7F:55:72:02:D4:A1:BD:C6:1C:32:F5:37:2A:1A X509v3 Authority Key Identifier: keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:7b:1d:2a:7f:3c:bf:3b:2f:5b:37:df:bc:f7:89:03:18:54: a8:04:1d:d6:a7:eb:25:3c:9d:e2:27:b1:7c:c9:de:7a:e9:51: fb:92:80:67:2f:0d:52:59:2c:b9:01:ed:99:78:54:e6:bf:9b: fc:25:35:83:07:f0:14:7f:6e:28:1c:62:40:79:70:c9:2a:c5: 38:64:0c:15:b0:19:cc:dc:96:c4:fe:00:8f:43:c9:7e:5b:11: a7:7a:f0:1d:70:e7:ed:17:e6:bb:a6:5b:6d:ac:a4:1d:b1:eb: b1:c1:e2:2d:16:57:fd:49:dc:b2:8a:43:8e:18:e9:00:bb:66: 12:3c:94:3a:6f:96:61:c9:a9:30:61:05:91:aa:f6:35:d9:7e: 90:53:d7:a4:1d:84:a2:79:34:4d:2d:aa:f4:4b:db:bf:bc:30: 95:a8:8a:b7:b6:96:e0:40:84:54:8d:3a:7b:d9:40:8b:0a:e1: 4f:af:ec:95:33:39:d1:4e:11:13:54:0d:dc:48:61:b9:b7:82: 2f:48:4d:cc:e9:4c:0b:65:2f:7d:9a:30:1f:b9:5d:9a:d9:e9: 1e:ad:7a:47:f7:77:8d:f5:aa:0b:c0:89:2f:52:47:72:f2:d0: f5:92:3b:ec:37:90:74:5f:71:bb:90:59:6b:56:ba:ea:83:be: d1:f5:be:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwzVYtss95Ndj8LhJsd0syXr3tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVEOTA3QUEwODRCRjg2QzA0NjlEMjQ4NkRFMDRDRDI4 QkQ5RjE3QjAeFw0yNjExMTQxNjUwNDBaFw0yNjExMTUxOTMxNDBaMDMxMTAvBgNV BAMTKDg3MTVBN0I4QjRBMzdGNTU3MjAyRDRBMUJEQzYxQzMyRjUzNzJBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD37Z/s8RAYqAbVrlJhDdccitoD WSpHLRNkjc4i/ni1th0gjswG/uXwY2dr6SF1+hwak1GSxzUqVGB20ykhNhvQzzIJ snmSb9pzeHE0rZOCR4ajvku/LyiyMEJ8OgINRICkmRAF5+TlxO2ijX8hBGCvXDJN e7d3QpPWNfrCrAe90AkKRKIPBY0HniCzPlLPFhmPflIEVl9mIz/TFHKI47D0dj44 9BmXJsQQ/Lt3mdX+AARcK8Il0s/B+G7vPM0/7OOC2fh4G/ej3BiDwM/xqKd2BTuy rKVJZHWO6ArKEcD+uiK77oD0eOuvcKDE6F97z5A7ERiggkwBrE9QvmhCjlDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhxWnuLSjf1VyAtShvcYcMvU3KhowHwYDVR0j BBgwFoAUVdkHqghL+GwEadJIbeBM0ovZ8XswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU2ZTQyZTYtYzZjZC00Y2NkLWJkYTctNWFlOWEyNDYwNDRhLzAvNTVEOTA3QUEw ODRCRjg2QzA0NjlEMjQ4NkRFMDRDRDI4QkQ5RjE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NUQ5MDdBQTA4NEJGODZDMDQ2OUQyNDg2REUwNENEMjhCRDlG MTdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvNTVEOTA3QUEwODRCRjg2QzA0NjlEMjQ4NkRFMDRD RDI4QkQ5RjE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFN7HSp/PL87L1s337z3iQMYVKgEHdan6yU8 neInsXzJ3nrpUfuSgGcvDVJZLLkB7Zl4VOa/m/wlNYMH8BR/bigcYkB5cMkqxThk DBWwGczclsT+AI9DyX5bEad68B1w5+0X5rumW22spB2x67HB4i0WV/1J3LKKQ44Y 6QC7ZhI8lDpvlmHJqTBhBZGq9jXZfpBT16QdhKJ5NE0tqvRL27+8MJWoire2luBA hFSNOnvZQIsK4U+v7JUzOdFOERNUDdxIYbm3gi9ITczpTAtlL32aMB+5XZrZ6R6t ekf3d431qgvAiS9SR3Ly0PWSO+w3kHRfcbuQWWtWuuqDvtH1vsg= -----END CERTIFICATE-----Generated at Sun Nov 15 00:58:35 2026 by rpki-client