$ rpki-client -vvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft File: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft (raw, json) Hash identifier: JRLkGzdgdu4H/Vv3MWCLEfy7O9jFgryHKzr5yl/UTlI= Subject key identifier: B2:53:CB:98:B4:41:05:82:3B:7E:8F:85:45:4D:A3:68:59:C9:DE:A3 Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B Certificate issuer: /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B Certificate serial: 756E7A03EFC11409BF47B44DDD00E99ABFA53440 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:59:37 +0000 Manifest this update: Tue 12 May 2026 18:54:37 +0000 Manifest next update: Wed 13 May 2026 21:32:37 +0000 Files and hashes: 1: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: fT+ijd0/vxnImzejYzyk0a9FLi5T/K3JxSUJprhaarY=) 2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 7nwXZ7uwqWfwg9TH3c9pYLZKmQEunRTq0qvrKzAXkHk=) 3: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl (hash: vG3uqzb0npl2LC4Nz/MScbDxSKAaCYo4U3BhGQfEvJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6e:7a:03:ef:c1:14:09:bf:47:b4:4d:dd:00:e9:9a:bf:a5:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B Validity Not Before: May 12 18:54:37 2026 GMT Not After : May 13 21:32:37 2026 GMT Subject: CN=B253CB98B44105823B7E8F85454DA36859C9DEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:e9:5a:5a:54:ad:98:eb:9a:9c:5d:35:58: 16:a4:7a:ac:bd:4d:3d:ac:0c:d0:16:e9:bd:53:df: 08:d7:04:6a:d3:26:5c:eb:5d:01:77:05:77:30:27: ed:a0:18:d8:65:3b:66:33:6e:85:cf:9b:db:86:af: 18:54:14:eb:0e:1f:9f:c0:8b:01:c6:f6:4c:07:37: 4a:57:30:c6:16:f7:2c:08:07:c8:27:5e:60:22:ff: 6d:10:90:6f:ba:70:ac:bf:ac:0e:94:f0:24:07:cb: 4e:94:d0:76:09:a6:ab:b8:91:76:7e:ae:36:d2:1e: 70:c1:33:48:7f:6c:80:f4:ad:1f:94:70:60:21:27: 9b:b2:66:f9:0c:fd:41:d6:8d:fb:d5:fe:cc:4a:73: 96:d1:3d:af:25:8a:22:18:c0:5e:61:8a:3d:a3:2c: db:04:dd:1e:7d:a8:4a:fb:7b:46:ec:56:27:26:fb: 3f:8e:0f:d7:3c:2d:e5:da:82:ae:ba:44:50:df:f3: 2e:58:34:de:b5:b6:12:24:57:34:53:6d:d8:56:f8: 0a:56:3a:1d:c8:ba:80:d1:55:a6:1e:2d:72:94:8a: ac:d7:98:e9:ce:0b:db:0c:d1:98:4a:e1:6e:c2:8b: 4f:e3:13:7f:1f:7a:db:f2:ee:31:97:67:45:e0:f2: ae:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:53:CB:98:B4:41:05:82:3B:7E:8F:85:45:4D:A3:68:59:C9:DE:A3 X509v3 Authority Key Identifier: keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:07:28:0d:4d:fa:dc:87:15:11:ea:c4:c9:1b:4c:f2:e7:27: eb:e5:f2:32:8f:d4:9d:6b:51:2a:55:2a:c2:85:21:38:39:46: e1:42:24:97:37:f3:c1:35:ee:d0:73:84:f2:7e:8c:31:90:da: bf:d3:53:96:9d:6f:52:0c:be:03:65:a3:e9:db:6f:0d:eb:57: 92:36:ea:3a:c2:3f:ac:5c:dd:bf:4e:d9:ba:dc:c1:85:35:43: 3d:42:4d:8b:b1:d5:db:33:7e:e0:17:92:df:a6:82:01:d9:86: 8d:b8:7e:a4:f7:7d:06:57:12:c7:f9:bc:50:6e:6d:88:f2:44: 87:78:c5:cd:00:cc:6e:2d:5a:c9:6d:05:ea:80:1e:e6:6f:65: 25:4b:9b:31:2b:6b:30:2a:cd:d3:e4:1f:ac:d9:a1:16:94:3f: 0b:ab:83:b8:4b:d8:4e:1c:12:83:67:87:cd:8a:6a:1d:96:36: ec:43:74:60:0a:0f:d8:90:88:a9:19:79:ef:0e:10:d0:36:48: 93:1a:b3:b4:3b:e8:50:c8:86:8f:3d:0d:bb:8b:b9:33:70:c9: e6:ca:2b:12:5b:e3:36:d7:ff:d7:4e:b7:82:9d:ee:81:2c:a7: 5e:02:25:62:07:3c:72:7c:3a:e1:0c:89:81:9f:78:94:b9:49: 85:00:bc:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdW56A+/BFAm/R7RN3QDpmr+lNEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVEOTA3QUEwODRCRjg2QzA0NjlEMjQ4NkRFMDRDRDI4 QkQ5RjE3QjAeFw0yNjA1MTIxODU0MzdaFw0yNjA1MTMyMTMyMzdaMDMxMTAvBgNV BAMTKEIyNTNDQjk4QjQ0MTA1ODIzQjdFOEY4NTQ1NERBMzY4NTlDOURFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS5elaWlStmOuanF01WBakeqy9 TT2sDNAW6b1T3wjXBGrTJlzrXQF3BXcwJ+2gGNhlO2YzboXPm9uGrxhUFOsOH5/A iwHG9kwHN0pXMMYW9ywIB8gnXmAi/20QkG+6cKy/rA6U8CQHy06U0HYJpqu4kXZ+ rjbSHnDBM0h/bID0rR+UcGAhJ5uyZvkM/UHWjfvV/sxKc5bRPa8liiIYwF5hij2j LNsE3R59qEr7e0bsVicm+z+OD9c8LeXagq66RFDf8y5YNN61thIkVzRTbdhW+ApW Oh3IuoDRVaYeLXKUiqzXmOnOC9sM0ZhK4W7Ci0/jE38fetvy7jGXZ0Xg8q7rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUslPLmLRBBYI7fo+FRU2jaFnJ3qMwHwYDVR0j BBgwFoAUVdkHqghL+GwEadJIbeBM0ovZ8XswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU2ZTQyZTYtYzZjZC00Y2NkLWJkYTctNWFlOWEyNDYwNDRhLzAvNTVEOTA3QUEw ODRCRjg2QzA0NjlEMjQ4NkRFMDRDRDI4QkQ5RjE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NUQ5MDdBQTA4NEJGODZDMDQ2OUQyNDg2REUwNENEMjhCRDlG MTdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvNTVEOTA3QUEwODRCRjg2QzA0NjlEMjQ4NkRFMDRD RDI4QkQ5RjE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkHKA1N+tyHFRHqxMkbTPLnJ+vl8jKP1J1r USpVKsKFITg5RuFCJJc388E17tBzhPJ+jDGQ2r/TU5adb1IMvgNlo+nbbw3rV5I2 6jrCP6xc3b9O2brcwYU1Qz1CTYux1dszfuAXkt+mggHZho24fqT3fQZXEsf5vFBu bYjyRId4xc0AzG4tWsltBeqAHuZvZSVLmzErazAqzdPkH6zZoRaUPwurg7hL2E4c EoNnh82Kah2WNuxDdGAKD9iQiKkZee8OENA2SJMas7Q76FDIho89DbuLuTNwyebK KxJb4zbX/9dOt4Kd7oEsp14CJWIHPHJ8OuEMiYGfeJS5SYUAvDw= -----END CERTIFICATE-----Generated at Tue May 12 23:21:00 2026 by rpki-client