
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
File: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft (raw, json)
Hash identifier: xPjlZ+VOJcuqHNTuz6tE4LDr1u86ybgvaLQkyT9zjTc=
Subject key identifier: A9:76:C4:36:36:EB:61:02:98:36:96:D7:14:3D:B0:59:DC:36:97:70
Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
Certificate issuer: /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Certificate serial: 052A625B35D9DF0D2DAF543B3241FE0DE5C2FAC8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 01:21:48 +0000
Manifest this update: Fri 25 Sep 2026 01:16:48 +0000
Manifest next update: Sat 26 Sep 2026 01:47:48 +0000
Files and hashes: 1: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl (hash: 5zzc43R9Tw3xksY6n80JxKXejHD2ErxSDJC/Er+UkCI=)
2: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: fT+ijd0/vxnImzejYzyk0a9FLi5T/K3JxSUJprhaarY=)
3: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 7nwXZ7uwqWfwg9TH3c9pYLZKmQEunRTq0qvrKzAXkHk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 01:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2a:62:5b:35:d9:df:0d:2d:af:54:3b:32:41:fe:0d:e5:c2:fa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Validity
Not Before: Sep 25 01:16:48 2026 GMT
Not After : Sep 26 01:47:48 2026 GMT
Subject: CN=A976C43636EB6102983696D7143DB059DC369770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:26:c4:5f:27:3b:68:89:38:69:03:cb:85:
f5:36:c9:2e:81:2c:ed:d2:84:a0:cf:32:2e:c5:dd:
9c:65:23:db:c7:65:e1:6e:79:7e:59:a6:b4:bb:bb:
f8:c9:87:ea:f4:fa:55:ab:2a:ab:45:a2:04:69:dc:
28:95:e4:0c:78:9b:79:3f:95:70:51:84:c5:21:67:
68:6c:87:e7:e9:6d:4b:c2:2d:aa:95:dd:34:6c:3b:
7b:b4:e0:21:ea:7b:5b:d2:91:90:55:33:f9:a0:e7:
97:5c:1b:3a:42:52:78:93:66:7a:15:14:bb:b0:0f:
aa:fa:42:97:b0:10:5e:f7:7e:fd:d2:e4:57:c0:eb:
0a:0c:ed:0f:5a:46:97:fd:9e:0a:08:99:27:f7:da:
83:20:e5:a6:f5:f3:0d:54:51:e1:74:f5:12:f0:83:
d3:aa:b8:18:bf:86:bb:5e:ae:4a:1c:4b:ea:e4:f2:
00:8f:cb:8e:94:ec:d7:0b:e2:b7:df:8b:49:d6:ca:
ce:15:6f:d9:da:75:b5:6c:8e:12:f3:57:ea:8d:aa:
1b:b6:2c:b9:fb:31:3d:2e:5e:d3:62:f4:25:d1:eb:
c8:27:a7:41:3d:3a:e4:e8:23:f1:98:39:68:26:25:
07:e1:c7:fc:43:cd:79:94:07:01:37:47:a1:2a:75:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:C4:36:36:EB:61:02:98:36:96:D7:14:3D:B0:59:DC:36:97:70
X509v3 Authority Key Identifier:
keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:38:ca:9b:89:f2:4f:8a:06:4b:e4:da:8b:32:62:f3:67:1e:
be:37:14:3a:34:89:e5:89:51:27:bc:b7:4c:c8:13:dd:54:c0:
ee:7a:d4:f8:87:3c:09:32:11:87:06:55:9e:9c:bd:e6:d6:1d:
1d:55:5d:35:a3:9e:53:d7:b7:18:ff:46:d9:bc:48:40:78:4a:
eb:21:2c:63:fd:df:81:6f:94:0a:0b:52:77:d0:95:a1:34:eb:
e2:7e:a9:db:a9:cd:40:c5:6d:b0:53:b4:28:82:34:f5:73:bd:
50:00:cd:61:24:a6:76:a3:c3:26:6b:fa:ad:b9:e5:e5:8b:08:
4c:6f:cd:a9:9d:8a:4e:68:d2:44:2d:ea:3c:89:f3:91:ad:72:
6e:b0:39:48:65:37:20:c3:d8:5c:8d:39:00:f9:1a:37:96:81:
99:6d:96:0d:17:10:0c:4a:6f:c7:a9:62:01:cf:1b:2e:47:b2:
5c:be:0a:e8:4d:f7:19:dc:8d:d7:b2:18:8b:4f:c3:41:9b:a9:
52:79:56:b5:66:7b:c8:e9:29:7a:a7:92:1e:f6:20:25:51:d2:
27:8c:e6:09:9e:f9:21:d3:c2:e6:79:12:7c:81:f1:34:73:2d:
9d:1a:49:8b:93:3f:bd:4b:e1:23:9a:8f:98:1d:20:34:99:f7:
33:61:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:44:54 2026 by rpki-client