
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft
File: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft (raw, json)
Hash identifier: wtLfurWwrwOrMnAVh2+rINBnWeTuQPXI8ak+zbCj6Ew=
Subject key identifier: 1C:A9:00:5B:06:D4:6B:51:09:DD:1B:6E:5C:5E:BD:86:91:F5:7A:56
Authority key identifier: D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17
Certificate issuer: /CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17
Certificate serial: 03FC3938E3AEB083CADA0A78F4598357E9D025FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 03:27:39 +0000
Manifest this update: Tue 12 May 2026 03:22:39 +0000
Manifest next update: Wed 13 May 2026 06:18:39 +0000
Files and hashes: 1: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: whFYG+jTb2gWlU4tXTKDvr8VOmh33B5+fTwOyqIk0yw=)
2: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: LLuRHn4xhc/MivkLWWh5CVLPBZ4K3sNosIj++ElGxco=)
3: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl (hash: ABMo+pyp6d9K+3b4w228PojHh0iJSDQ6efSV0MPBBCU=)
4: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: glLFkt9sfYEvpqjXuBfssPvW+ZRZ2fl6wfErSqQG7zc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl
rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:fc:39:38:e3:ae:b0:83:ca:da:0a:78:f4:59:83:57:e9:d0:25:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17
Validity
Not Before: May 12 03:22:39 2026 GMT
Not After : May 13 06:18:39 2026 GMT
Subject: CN=1CA9005B06D46B5109DD1B6E5C5EBD8691F57A56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:3f:05:cc:7d:fc:6f:49:86:7f:d3:27:03:
a7:22:4f:f3:7b:a8:34:e3:75:ad:12:5a:35:cc:ce:
93:8b:13:9d:a6:69:c7:c3:f6:05:b5:7b:58:50:44:
a1:b9:8e:ec:1e:a5:08:cc:64:c0:dc:8a:16:1f:f3:
b5:90:1d:56:cf:e5:5a:e4:f6:f1:f4:40:4f:9c:7e:
26:e2:33:04:3f:61:97:11:52:ae:17:b1:d7:d3:81:
c8:47:f1:9a:30:25:a4:f3:16:59:b7:b2:df:1f:33:
9e:4a:33:76:db:f4:c3:9d:eb:0f:7a:a7:61:44:f8:
5f:8f:09:7e:47:2a:31:ec:a1:23:9c:4b:6c:01:7e:
34:34:9e:86:27:49:05:c8:dd:73:e7:81:fc:3b:0e:
6a:f0:20:f3:fa:ac:9f:af:04:13:42:b0:34:0a:93:
cc:02:bd:13:09:1d:64:30:f0:e5:14:bb:67:d5:61:
61:1b:e0:56:39:8a:ea:0d:92:2b:28:2e:0e:ee:26:
06:24:0b:9e:f6:bf:0e:dc:be:bf:5a:84:d0:49:37:
99:df:ed:0c:6f:67:09:38:0a:0c:6b:85:90:d0:0a:
96:5c:6c:d1:c8:1a:e6:2a:93:40:e2:2e:b7:a4:b1:
2b:6e:a1:6f:06:4f:d2:a8:5a:12:0f:3e:57:39:2c:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:00:5B:06:D4:6B:51:09:DD:1B:6E:5C:5E:BD:86:91:F5:7A:56
X509v3 Authority Key Identifier:
keyid:D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:78:aa:e3:74:7b:52:d0:51:f7:aa:92:2c:3a:34:01:ed:a9:
1c:d9:57:91:d9:08:c4:33:8e:bb:3d:0c:ed:a7:06:e7:51:d5:
f6:7e:71:41:f4:ea:f0:ff:0e:1d:40:19:7a:b8:bb:87:4f:e6:
df:21:47:ae:85:db:41:c3:0d:ee:a6:be:ad:10:fd:41:aa:7e:
7b:22:5a:15:b9:51:c9:43:b0:12:71:ea:cf:ed:83:3b:d0:01:
1c:ff:25:a4:ad:b6:19:ff:e8:d7:54:91:45:47:f5:72:8b:46:
71:73:76:47:28:1c:44:57:a2:03:51:94:5c:44:f5:7c:0a:2f:
b1:1b:b8:e5:6b:95:72:eb:32:00:ff:6b:e2:1e:91:24:11:6f:
d3:61:21:8c:80:19:d5:f1:09:d3:cc:13:46:9f:9c:77:30:37:
a9:bb:05:6f:c4:39:27:7a:18:59:3d:74:ac:a4:ed:88:ca:0c:
8b:bf:53:9c:67:8e:21:fd:da:49:f1:d1:ed:26:f7:0d:b6:79:
22:e0:06:0b:21:7e:f0:39:2a:2d:e8:15:04:9b:dd:f2:ab:20:
13:ef:19:3c:12:c5:ca:36:35:77:23:5e:4c:fe:34:83:2b:35:
38:18:01:ba:15:ae:b0:40:69:58:85:df:16:4f:58:34:2a:68:
8b:3c:74:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:27:50 2026 by rpki-client