
$ rpki-client -vvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
File: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft (raw, json)
Hash identifier: lQd1dArym9z9JzDsRpdsqBdCwOQh/qX8trZ0BGrB+9M=
Subject key identifier: 40:C4:77:CF:E7:14:15:5E:EE:D2:34:35:16:ED:C1:95:A2:8F:90:8A
Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
Certificate issuer: /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Certificate serial: 71129D8358C5B640B2A2AC12F9F97977790B0C7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 21:46:34 +0000
Manifest this update: Thu 23 Jul 2026 21:41:34 +0000
Manifest next update: Fri 24 Jul 2026 23:02:34 +0000
Files and hashes: 1: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl (hash: fzcAUATLPNI7atFdDFdOckv9mGD0FKfMZC3ObRR+9WA=)
2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 7nwXZ7uwqWfwg9TH3c9pYLZKmQEunRTq0qvrKzAXkHk=)
3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: fT+ijd0/vxnImzejYzyk0a9FLi5T/K3JxSUJprhaarY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:12:9d:83:58:c5:b6:40:b2:a2:ac:12:f9:f9:79:77:79:0b:0c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Validity
Not Before: Jul 23 21:41:34 2026 GMT
Not After : Jul 24 23:02:34 2026 GMT
Subject: CN=40C477CFE714155EEED2343516EDC195A28F908A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:19:d6:b6:cd:20:20:1c:08:4f:c4:5c:d7:
f3:ed:fa:57:cc:f8:60:b4:2a:3a:82:70:12:8e:6c:
23:4a:67:de:95:0e:90:b4:7f:38:02:c8:62:f0:5a:
a2:5e:26:43:df:18:97:02:19:eb:20:1a:b1:7f:c4:
4c:36:5a:a2:bd:88:2b:e5:6d:5b:aa:a9:bc:b6:03:
87:0d:ad:62:36:e4:68:a0:0d:ab:81:80:9a:a0:3b:
c4:92:2a:97:78:3e:4e:64:5c:08:78:79:95:d1:0d:
6b:d5:6a:eb:80:78:97:5c:d6:40:74:ec:09:69:5e:
1e:fc:56:1b:0a:5d:1b:35:a1:c7:7e:e3:13:82:5e:
bd:9a:b6:5d:a3:6a:67:7b:39:b3:ab:5a:c0:5e:ae:
7a:0d:c5:72:47:ba:50:23:60:33:1c:52:0a:26:04:
c9:46:27:75:61:34:c0:50:7a:73:b5:7f:4c:25:05:
b5:fb:13:0d:92:5a:97:2c:36:30:13:46:ab:60:4a:
68:6d:5b:73:9c:f7:59:4b:72:c7:ce:27:4e:9a:d7:
7f:bb:71:6e:b8:d0:29:79:3c:52:d4:64:87:5f:ec:
a8:21:56:df:2b:1a:b2:f4:69:da:9b:53:32:ee:7f:
c5:30:37:a3:e5:1e:a5:a3:aa:c4:ea:ae:50:39:9a:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:77:CF:E7:14:15:5E:EE:D2:34:35:16:ED:C1:95:A2:8F:90:8A
X509v3 Authority Key Identifier:
keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9f:78:ac:32:01:b2:22:d2:42:93:d9:38:77:48:5f:10:c9:
3c:12:67:33:60:dd:7e:ad:94:66:b6:fe:bf:dd:71:34:96:d0:
fa:53:08:f9:1e:6b:c5:0d:f4:41:36:c9:cc:84:b6:2a:7f:f2:
79:0a:b1:3a:e1:88:96:63:20:ee:89:47:d7:a9:06:3e:da:0a:
a0:e6:36:26:9d:63:3f:b7:71:fe:51:cc:9c:78:ac:1e:e9:3c:
49:39:27:1d:f4:49:59:0c:ce:08:85:6e:fb:7f:70:03:d5:d4:
f6:b8:fa:ba:1b:37:95:2d:c5:6f:8e:29:43:b5:59:75:42:0f:
76:cc:33:71:fb:99:03:31:10:36:50:30:c7:13:1f:99:49:e6:
a4:c7:81:10:62:cd:dd:3e:ec:f5:61:7d:a9:bf:95:84:ff:10:
16:65:04:fe:97:db:0a:f5:71:fd:cd:a3:ee:98:4c:ec:46:e5:
e7:5d:44:d9:92:fc:07:79:1f:02:3f:97:0d:d2:af:a5:7f:85:
6f:fd:94:35:4e:c8:17:35:27:70:22:ee:d4:59:ac:ea:ea:31:
cc:fd:37:8a:8c:61:3f:2f:16:47:2a:29:25:f6:51:86:fd:ae:
a4:c0:ed:3c:4f:17:65:82:4e:5d:6b:8e:25:54:42:81:37:da:
2e:61:a2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:54 2026 by rpki-client