
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
File: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft (raw, json)
Hash identifier: vJD0v8N8fVURqExV/jJGQv9+x2dkNGGCejvhcWwr/tk=
Subject key identifier: 8D:59:5E:F4:D3:64:C7:2F:0B:A3:10:BA:02:3A:73:52:AC:2C:1C:89
Authority key identifier: 55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38
Certificate issuer: /CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738
Certificate serial: 66AC3E2F89441486B813923C61748D36FC12901C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
Manifest number: 68
Signing time: Sun 19 Jul 2026 09:59:13 +0000
Manifest this update: Sun 19 Jul 2026 09:54:13 +0000
Manifest next update: Mon 20 Jul 2026 11:42:13 +0000
Files and hashes: 1: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: jJrf12zeJVrcBiox/V38A0AXQJDoXj9thEoTVntgPNk=)
2: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: jJ9QxJS6zZqjgDQVmwLxAklNodyGLVGf4UiD/TxDa2k=)
3: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: 1XYfMCpRwtuPIYvJwaDQFyMUa90ORHg7gRWzITiZx54=)
4: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl (hash: dZJh8AunEW/ZIZnQT/d35RVNFlcfAArMI2FrZx0JDPo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl
rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ac:3e:2f:89:44:14:86:b8:13:92:3c:61:74:8d:36:fc:12:90:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738
Validity
Not Before: Jul 19 09:54:13 2026 GMT
Not After : Jul 20 11:42:13 2026 GMT
Subject: CN=8D595EF4D364C72F0BA310BA023A7352AC2C1C89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:7d:42:94:a1:3f:9e:14:9b:85:e3:e5:dc:
df:23:bd:bf:8d:8c:21:2e:69:cb:0c:f7:e4:9d:19:
2c:21:7b:91:92:5d:d9:06:57:78:d1:ad:42:1b:dc:
e4:24:42:8d:82:7e:d7:b7:31:a3:f2:ce:a8:ee:30:
e2:7b:cc:b7:2e:98:27:9b:96:51:33:16:16:d2:a4:
38:e6:46:31:b1:fa:6f:92:7f:05:f0:1e:1b:62:72:
9f:91:8c:7e:d1:ef:c1:0f:44:2e:44:f2:c1:ca:a8:
50:09:86:7f:f9:f3:f6:c5:81:b4:b2:4e:cc:67:e2:
71:32:ba:7b:76:96:16:b1:85:50:41:b2:35:f7:1d:
c1:0a:c0:e1:17:79:b5:3e:08:d8:24:a4:54:9e:1b:
b0:4e:b2:12:8c:bc:a5:ec:13:ec:19:7f:8d:4f:43:
ee:cf:d0:97:b6:82:54:f2:a3:db:0c:6d:4b:66:e5:
f5:ad:3a:b9:ab:d1:c5:65:4a:b7:db:c3:ec:e3:99:
3e:ed:c8:ef:66:99:9f:42:52:7d:c8:57:91:f1:0d:
21:ab:29:8f:bf:eb:c5:62:2a:6f:43:9a:21:ca:23:
99:46:bc:a5:ac:be:fb:35:c0:53:c1:bd:05:0c:84:
38:64:23:fd:bb:74:49:30:cf:ab:fd:f1:04:7d:48:
68:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:5E:F4:D3:64:C7:2F:0B:A3:10:BA:02:3A:73:52:AC:2C:1C:89
X509v3 Authority Key Identifier:
keyid:55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2f:91:e4:3c:64:9d:ac:20:0e:00:6b:9e:e8:3d:6a:e8:f9:
3d:ab:c1:94:b4:e5:f2:13:12:b7:78:ed:5a:73:b2:03:47:2c:
6b:c9:d7:51:f5:d3:f5:19:c9:16:15:be:0a:7e:09:f2:06:a3:
fa:1d:5b:40:27:df:94:06:0f:62:b5:68:88:3f:e5:7e:6e:d8:
f4:4b:90:03:8e:fa:14:80:33:98:cd:97:6e:ef:41:24:d2:0e:
58:83:99:31:f6:78:cd:8c:12:6c:7e:a2:29:00:7f:76:7e:b2:
a9:5f:a8:8c:5c:da:eb:13:cd:b7:8c:fb:61:cd:ba:97:de:34:
b0:5e:03:f9:be:51:4c:e3:85:1e:25:8a:e5:c4:50:30:dd:d8:
d0:08:e3:26:61:fa:6f:76:1c:5a:72:35:e1:57:8d:6a:2b:76:
c0:93:7b:98:27:8e:65:82:47:45:3d:31:44:94:f8:a3:65:2d:
e4:25:07:e4:e9:e7:7a:ae:21:04:56:a7:a9:e2:32:33:93:b5:
ca:df:2c:72:a9:00:39:02:b3:1f:be:50:ab:d1:ce:d8:8f:47:
c8:46:f7:65:bb:bb:5c:2e:06:7b:8b:30:2c:3d:c5:7c:1c:62:
d0:14:c9:57:dd:79:35:7f:79:82:ef:4f:35:19:e8:e8:60:07:
cf:bb:26:a0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZqw+L4lEFIa4E5I8YXSNNvwSkBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVDOUQwMkJBMEUxM0JBM0VDMTE4NDdCQzE0M0ZGOTRC
MzBENDczODAeFw0yNjA3MTkwOTU0MTNaFw0yNjA3MjAxMTQyMTNaMDMxMTAvBgNV
BAMTKDhENTk1RUY0RDM2NEM3MkYwQkEzMTBCQTAyM0E3MzUyQUMyQzFDODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ln1ClKE/nhSbhePl3N8jvb+N
jCEuacsM9+SdGSwhe5GSXdkGV3jRrUIb3OQkQo2Cfte3MaPyzqjuMOJ7zLcumCeb
llEzFhbSpDjmRjGx+m+SfwXwHhticp+RjH7R78EPRC5E8sHKqFAJhn/58/bFgbSy
Tsxn4nEyunt2lhaxhVBBsjX3HcEKwOEXebU+CNgkpFSeG7BOshKMvKXsE+wZf41P
Q+7P0Je2glTyo9sMbUtm5fWtOrmr0cVlSrfbw+zjmT7tyO9mmZ9CUn3IV5HxDSGr
KY+/68ViKm9DmiHKI5lGvKWsvvs1wFPBvQUMhDhkI/27dEkwz6v98QR9SGgnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjVle9NNkxy8LoxC6AjpzUqwsHIkwHwYDVR0j
BBgwFoAUVcnQK6DhO6PsEYR7wUP/lLMNRzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzU2NGFiZmItMTk2Mi00NGE5LTgzNzYtY2JmYjFlZmNkYWJhLzAvNTVDOUQwMkJB
MEUxM0JBM0VDMTE4NDdCQzE0M0ZGOTRCMzBENDczOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NUM5RDAyQkEwRTEzQkEzRUMxMTg0N0JDMTQzRkY5NEIzMEQ0
NzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz
NzYtY2JmYjFlZmNkYWJhLzAvNTVDOUQwMkJBMEUxM0JBM0VDMTE4NDdCQzE0M0ZG
OTRCMzBENDczOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEEvkeQ8ZJ2sIA4Aa57oPWro+T2rwZS05fIT
Erd47VpzsgNHLGvJ11H10/UZyRYVvgp+CfIGo/odW0An35QGD2K1aIg/5X5u2PRL
kAOO+hSAM5jNl27vQSTSDliDmTH2eM2MEmx+oikAf3Z+sqlfqIxc2usTzbeM+2HN
upfeNLBeA/m+UUzjhR4liuXEUDDd2NAI4yZh+m92HFpyNeFXjWordsCTe5gnjmWC
R0U9MUSU+KNlLeQlB+Tp53quIQRWp6niMjOTtcrfLHKpADkCsx++UKvRztiPR8hG
92W7u1wuBnuLMCw9xXwcYtAUyVfdeTV/eYLvTzUZ6OhgB8+7JqA=
-----END CERTIFICATE-----
Generated at Sun Jul 19 22:49:35 2026 by rpki-client