$ rpki-client -vvf rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft File: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft (raw, json) Hash identifier: 9Ph6qb5REFXY8RZQU21xPCgX7o/IDTfpxYeIwD+Ccz0= Subject key identifier: EF:4D:1F:05:24:20:17:49:15:7E:8D:DB:33:BD:48:81:A4:9E:74:83 Authority key identifier: 55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38 Certificate issuer: /CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738 Certificate serial: 4B8B961F888D5C566079858D4BC83ABC2EFDBE97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft Manifest number: 19 Signing time: Wed 20 May 2026 12:06:22 +0000 Manifest this update: Wed 20 May 2026 12:01:22 +0000 Manifest next update: Thu 21 May 2026 13:15:22 +0000 Files and hashes: 1: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: jJrf12zeJVrcBiox/V38A0AXQJDoXj9thEoTVntgPNk=) 2: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: jJ9QxJS6zZqjgDQVmwLxAklNodyGLVGf4UiD/TxDa2k=) 3: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: 1XYfMCpRwtuPIYvJwaDQFyMUa90ORHg7gRWzITiZx54=) 4: 55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl (hash: dvHc8VKIxtpuajbsmBKVzgiQCLBxW1nFYIuO7oq5/P0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 May 2026 09:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8b:96:1f:88:8d:5c:56:60:79:85:8d:4b:c8:3a:bc:2e:fd:be:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55C9D02BA0E13BA3EC11847BC143FF94B30D4738 Validity Not Before: May 20 12:01:22 2026 GMT Not After : May 21 13:15:22 2026 GMT Subject: CN=EF4D1F0524201749157E8DDB33BD4881A49E7483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:a2:dc:a7:84:0f:e1:41:60:be:2f:00:54: cf:18:f5:d0:8e:65:15:9f:e5:31:dc:06:21:94:46: 4e:3d:17:9a:0b:ba:0e:60:9a:26:6d:e9:c6:e7:6f: 81:a5:2b:8e:5b:7f:7a:bc:8c:32:90:05:5b:04:ce: 0a:a0:7c:ce:86:78:bb:d3:a7:fb:42:5f:76:e2:3f: 7b:9c:ed:a1:7e:a8:73:9c:02:0b:06:d1:0b:3d:ff: eb:76:70:c4:70:01:80:c1:45:26:ce:5a:ae:00:6b: 15:94:40:b8:e5:9c:59:a6:2a:2d:e6:70:5c:04:de: f3:13:13:f2:da:50:1f:9d:86:26:5c:16:c8:8d:c2: 30:4f:0c:e3:d8:f6:cb:ad:c6:38:0b:61:b7:c5:25: 37:9d:06:1f:0b:13:66:f1:2c:f3:ff:42:68:ce:44: 0f:77:b1:03:8e:85:91:d4:4e:1d:3e:1f:f3:dc:c1: c8:61:81:4f:c4:fe:6b:3e:76:ac:04:f3:8b:01:97: 5c:52:39:c8:8e:73:f8:2c:6f:e8:43:1d:e2:c5:89: a0:16:9d:e7:13:44:18:37:00:ed:d6:40:61:db:83: cf:a3:e4:06:af:1f:77:70:b4:02:8e:e0:51:cd:10: b0:9c:d4:6d:66:43:34:58:ba:f2:85:0d:4b:26:dd: e2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4D:1F:05:24:20:17:49:15:7E:8D:DB:33:BD:48:81:A4:9E:74:83 X509v3 Authority Key Identifier: keyid:55:C9:D0:2B:A0:E1:3B:A3:EC:11:84:7B:C1:43:FF:94:B3:0D:47:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/55C9D02BA0E13BA3EC11847BC143FF94B30D4738.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:87:7f:aa:6d:a0:bd:a1:29:ac:71:c2:43:ff:6b:73:32:7f: f1:aa:aa:45:5b:2f:a6:68:2c:bd:c3:35:02:1a:1a:4d:68:b7: 77:4b:a8:0b:00:56:f6:e4:1a:2a:a1:df:8b:81:29:8e:97:2f: b1:e0:d0:c9:ac:39:a0:e9:da:fb:18:aa:0e:7f:5c:7b:9a:13: 4e:18:78:ac:21:ac:cf:07:5d:69:76:29:52:af:04:aa:70:c8: 5c:11:f1:04:21:ac:70:0f:f4:1a:ee:f1:f3:dd:18:9b:15:b0: b5:08:c5:ab:d6:d2:3b:0b:0e:26:a3:b2:c1:31:ec:ef:f8:ae: 9f:2a:63:88:5b:ed:91:36:82:ff:6d:9a:33:f5:7d:7d:83:08: b6:e5:19:3f:b1:ef:f2:11:ce:d7:7d:4c:b7:6c:55:ce:70:6d: 33:f3:69:0c:c8:71:bd:cb:95:10:92:93:89:20:3e:c7:6d:4c: ee:a6:e3:26:65:f3:57:ff:f7:0c:ac:2b:53:dd:67:70:e7:b9: de:67:f1:e2:21:35:22:3a:8b:9d:f8:10:34:f9:23:76:af:2b: 4c:af:25:c8:7e:83:dd:38:a3:7d:0c:33:bc:a4:42:8b:0c:8f: 8f:ff:7f:59:43:75:26:a9:89:01:56:03:23:d3:bf:26:84:30: 03:cb:00:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4uWH4iNXFZgeYWNS8g6vC79vpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVDOUQwMkJBMEUxM0JBM0VDMTE4NDdCQzE0M0ZGOTRC MzBENDczODAeFw0yNjA1MjAxMjAxMjJaFw0yNjA1MjExMzE1MjJaMDMxMTAvBgNV BAMTKEVGNEQxRjA1MjQyMDE3NDkxNTdFOEREQjMzQkQ0ODgxQTQ5RTc0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOuKLcp4QP4UFgvi8AVM8Y9dCO ZRWf5THcBiGURk49F5oLug5gmiZt6cbnb4GlK45bf3q8jDKQBVsEzgqgfM6GeLvT p/tCX3biP3uc7aF+qHOcAgsG0Qs9/+t2cMRwAYDBRSbOWq4AaxWUQLjlnFmmKi3m cFwE3vMTE/LaUB+dhiZcFsiNwjBPDOPY9sutxjgLYbfFJTedBh8LE2bxLPP/QmjO RA93sQOOhZHUTh0+H/PcwchhgU/E/ms+dqwE84sBl1xSOciOc/gsb+hDHeLFiaAW necTRBg3AO3WQGHbg8+j5AavH3dwtAKO4FHNELCc1G1mQzRYuvKFDUsm3eKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU700fBSQgF0kVfo3bM71IgaSedIMwHwYDVR0j BBgwFoAUVcnQK6DhO6PsEYR7wUP/lLMNRzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU2NGFiZmItMTk2Mi00NGE5LTgzNzYtY2JmYjFlZmNkYWJhLzAvNTVDOUQwMkJB MEUxM0JBM0VDMTE4NDdCQzE0M0ZGOTRCMzBENDczOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NUM5RDAyQkEwRTEzQkEzRUMxMTg0N0JDMTQzRkY5NEIzMEQ0 NzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTVDOUQwMkJBMEUxM0JBM0VDMTE4NDdCQzE0M0ZG OTRCMzBENDczOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeHf6ptoL2hKaxxwkP/a3Myf/GqqkVbL6Zo LL3DNQIaGk1ot3dLqAsAVvbkGiqh34uBKY6XL7Hg0MmsOaDp2vsYqg5/XHuaE04Y eKwhrM8HXWl2KVKvBKpwyFwR8QQhrHAP9Bru8fPdGJsVsLUIxavW0jsLDiajssEx 7O/4rp8qY4hb7ZE2gv9tmjP1fX2DCLblGT+x7/IRztd9TLdsVc5wbTPzaQzIcb3L lRCSk4kgPsdtTO6m4yZl81f/9wysK1PdZ3Dnud5n8eIhNSI6i534EDT5I3avK0yv Jch+g904o30MM7ykQosMj4//f1lDdSapiQFWAyPTvyaEMAPLADs= -----END CERTIFICATE-----Generated at Wed May 20 22:32:31 2026 by rpki-client