
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft
File: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft (raw, json)
Hash identifier: yiN1SAN0HeGspfbkEDKZwqEWTMQnq8P4qhaG0awQs0k=
Subject key identifier: E1:86:9F:79:93:91:59:75:CB:55:D5:3F:38:41:1D:CB:EE:4C:93:83
Authority key identifier: D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17
Certificate issuer: /CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17
Certificate serial: 0CC87AB0BBC4475447E33B4C2363C3BC5F485EF7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 21:00:41 +0000
Manifest this update: Thu 23 Jul 2026 20:55:41 +0000
Manifest next update: Fri 24 Jul 2026 23:33:41 +0000
Files and hashes: 1: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: glLFkt9sfYEvpqjXuBfssPvW+ZRZ2fl6wfErSqQG7zc=)
2: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: LLuRHn4xhc/MivkLWWh5CVLPBZ4K3sNosIj++ElGxco=)
3: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: whFYG+jTb2gWlU4tXTKDvr8VOmh33B5+fTwOyqIk0yw=)
4: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl (hash: 5TBlZxMYLwf88FA4C/swmhEUwqYFjpS8VBJz1fQJx3c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl
rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c8:7a:b0:bb:c4:47:54:47:e3:3b:4c:23:63:c3:bc:5f:48:5e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17
Validity
Not Before: Jul 23 20:55:41 2026 GMT
Not After : Jul 24 23:33:41 2026 GMT
Subject: CN=E1869F7993915975CB55D53F38411DCBEE4C9383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:3e:f0:f9:c0:fe:f5:cb:9f:31:ff:96:68:
2b:d5:87:7b:d1:0c:78:c6:ee:70:9d:88:f6:bf:47:
ab:9c:d1:7b:e1:b6:8e:c5:74:fb:72:0f:5a:b0:1d:
c8:f8:50:6e:be:03:d4:a6:d6:83:71:28:b0:69:ed:
15:12:b3:0d:fa:8d:15:26:78:ac:16:a7:35:a2:d7:
a5:ae:68:c9:d0:a7:ef:37:48:05:d8:8b:eb:0b:d6:
9b:14:02:72:47:39:65:1b:7c:d1:fa:19:d9:c9:d5:
3d:c2:95:ff:ff:35:71:ba:e5:e8:7b:f6:98:06:06:
03:ac:a6:c5:14:53:8b:99:42:df:0f:b3:f9:48:8c:
fb:71:53:a5:a1:13:e4:63:f5:3d:95:24:5d:5e:fb:
9f:c2:3b:95:be:b8:7b:93:be:7b:61:55:7c:5f:97:
3b:b7:a0:37:ca:80:1b:98:5b:fc:5b:93:10:1c:6e:
18:04:41:72:10:e5:5e:df:38:a8:a7:87:86:43:d0:
cd:7c:e5:0f:b8:24:ff:25:18:e6:ee:95:ca:70:ce:
92:93:6e:ee:b9:f4:af:ae:70:63:b5:5d:57:47:8a:
56:b7:05:90:f5:97:25:a4:af:b2:ff:ab:d8:d3:47:
a1:66:a1:42:57:61:91:6b:b2:75:79:27:92:13:d8:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:9F:79:93:91:59:75:CB:55:D5:3F:38:41:1D:CB:EE:4C:93:83
X509v3 Authority Key Identifier:
keyid:D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f2:3d:9e:d0:8a:cd:72:52:28:5d:e6:0a:6f:fe:39:af:ee:
00:78:a1:5e:10:6b:ff:30:b2:18:eb:3f:8c:d3:8f:54:1c:73:
95:4b:ac:17:56:26:c6:19:e8:00:c3:10:84:e6:d1:78:96:80:
01:ba:91:c8:80:75:82:c3:5a:54:9a:e0:1e:6a:b8:45:5a:ce:
07:9c:a1:6a:e0:7f:09:e5:9c:77:8b:86:b2:1b:47:a8:9d:61:
3e:87:93:51:f4:e5:87:26:39:ea:fe:8c:6c:93:18:48:42:36:
eb:3d:65:26:3d:58:d2:ac:97:e7:00:5d:ad:47:7e:7a:50:50:
ce:59:69:c7:a2:4b:21:fc:8e:6f:8d:d0:01:78:43:37:d3:91:
59:d3:6a:01:9b:6d:f3:da:16:30:e1:57:01:75:8f:a2:d4:12:
bd:11:d5:ea:cb:f2:68:9f:e9:ac:3e:cc:fa:02:8a:5c:52:d3:
d7:15:bb:30:35:59:9d:66:68:b9:d8:a4:8e:9b:cb:be:09:87:
7b:9b:4e:a6:e6:0e:fc:bb:af:f6:2e:b0:97:49:cf:d5:b9:99:
e9:b6:38:05:a4:70:16:90:8d:07:73:09:47:94:81:41:76:28:
86:da:4d:70:17:31:d7:6d:6c:06:d7:c5:1e:5c:ef:71:d5:44:
d2:f5:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:22:29 2026 by rpki-client