$ rpki-client -vvvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft File: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft (raw, json) Hash identifier: PD3Pua886P9mFR5Nitx6LR158NK8bG9A7nZgpdBQdiA= Subject key identifier: AC:C9:28:0A:82:D7:1E:64:D8:40:EB:56:CA:50:6F:51:A5:DA:82:C2 Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B Certificate issuer: /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B Certificate serial: 3E99A837661B27F250A987F2AE203C742A30827A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 22:15:38 +0000 Manifest this update: Sun 01 Nov 2026 22:10:38 +0000 Manifest next update: Tue 03 Nov 2026 01:14:38 +0000 Files and hashes: 1: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 7nwXZ7uwqWfwg9TH3c9pYLZKmQEunRTq0qvrKzAXkHk=) 2: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: fT+ijd0/vxnImzejYzyk0a9FLi5T/K3JxSUJprhaarY=) 3: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl (hash: Hzo+H/2wA2qIRzykJ2tOJCBR2hKzEvXZ8W6Q1nc8+uk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:99:a8:37:66:1b:27:f2:50:a9:87:f2:ae:20:3c:74:2a:30:82:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B Validity Not Before: Nov 1 22:10:38 2026 GMT Not After : Nov 3 01:14:38 2026 GMT Subject: CN=ACC9280A82D71E64D840EB56CA506F51A5DA82C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:d8:b7:63:34:64:17:a7:61:d5:0a:12:cb: 71:e3:ea:f9:01:cd:15:4f:4b:ac:9a:86:c7:37:cd: 9e:a2:45:19:6b:d8:4f:d1:89:21:14:48:c3:0d:6a: e3:40:a1:d4:fa:4b:e6:32:5d:73:18:83:ab:57:ef: c0:ce:2c:21:93:4a:53:9a:20:28:7c:a5:1b:e5:9c: d9:f2:6d:78:39:db:e6:e6:24:57:16:dd:6a:94:68: 10:e0:c6:2d:bf:46:ad:5c:dd:5c:95:4d:27:3b:81: eb:85:c0:f2:69:1b:ae:f9:3c:dd:ff:7d:46:ee:29: a0:6a:24:37:87:fa:d5:34:67:1a:09:fb:9f:e9:8f: 72:47:9e:cb:5d:96:5c:8b:31:be:24:62:43:5f:32: 49:d0:65:a7:28:c1:4f:e9:d1:79:7c:da:42:b7:a6: dd:c5:b3:6c:52:bd:ad:eb:89:76:8b:df:fb:cc:0a: fd:39:b2:57:be:84:11:ae:9f:f2:d0:ed:37:5f:67: 2f:73:66:27:ba:f6:ad:e6:25:27:f9:e8:77:ed:8c: c7:bf:44:33:a0:8f:c6:24:63:48:0b:c9:c0:ae:81: 0b:72:4d:57:e3:17:2d:f5:51:6e:88:bb:9b:ab:b3: 4d:7a:36:d0:66:0a:e6:d4:0e:69:3e:63:40:fb:93: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C9:28:0A:82:D7:1E:64:D8:40:EB:56:CA:50:6F:51:A5:DA:82:C2 X509v3 Authority Key Identifier: keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1e:8b:d9:90:d4:6f:cb:bc:a6:5d:2a:38:51:49:87:68:f3: dd:2e:7e:c5:28:d8:47:7d:98:fc:e3:77:22:37:4a:56:e7:28: 40:a3:ae:78:a5:b6:23:91:62:49:91:45:6a:a3:14:57:af:66: cc:45:40:7f:0c:35:8b:3a:b1:07:8c:63:74:5d:0e:24:42:e0: ff:e8:0f:60:b1:d4:a9:69:9f:dc:2d:62:78:18:dd:83:08:06: 0f:7a:52:cc:df:b3:d1:46:bd:33:5b:6e:c5:2d:36:b0:f9:27: 5a:9c:6f:98:2c:ca:fa:94:b8:29:27:4f:a8:d0:de:98:c5:0b: 7f:30:ae:93:ce:81:6e:7d:8a:8e:12:e5:fc:38:69:17:68:21: ae:74:a9:a7:b0:84:be:71:74:06:77:2c:d5:04:af:42:9b:12: 57:e4:e8:c9:07:e8:08:0b:a3:52:76:3b:7f:4a:38:60:12:97: 48:5c:98:f2:f3:82:0e:1d:3e:57:c9:35:90:22:fc:66:06:8b: 85:ac:d5:7e:31:a2:4c:68:8f:56:53:5e:16:7f:84:11:7f:06: 1f:e4:79:73:ff:6c:7b:d9:d9:63:8f:47:0d:1b:f2:51:e9:a3: 19:6b:0d:c9:3e:15:5b:87:c8:d6:bb:ba:0a:4f:5e:78:b4:4c: 79:f0:78:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPpmoN2YbJ/JQqYfyriA8dCowgnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVEOTA3QUEwODRCRjg2QzA0NjlEMjQ4NkRFMDRDRDI4 QkQ5RjE3QjAeFw0yNjExMDEyMjEwMzhaFw0yNjExMDMwMTE0MzhaMDMxMTAvBgNV BAMTKEFDQzkyODBBODJENzFFNjREODQwRUI1NkNBNTA2RjUxQTVEQTgyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fNi3YzRkF6dh1QoSy3Hj6vkB zRVPS6yahsc3zZ6iRRlr2E/RiSEUSMMNauNAodT6S+YyXXMYg6tX78DOLCGTSlOa ICh8pRvlnNnybXg52+bmJFcW3WqUaBDgxi2/Rq1c3VyVTSc7geuFwPJpG675PN3/ fUbuKaBqJDeH+tU0ZxoJ+5/pj3JHnstdllyLMb4kYkNfMknQZacowU/p0Xl82kK3 pt3Fs2xSva3riXaL3/vMCv05sle+hBGun/LQ7TdfZy9zZie69q3mJSf56HftjMe/ RDOgj8YkY0gLycCugQtyTVfjFy31UW6Iu5urs016NtBmCubUDmk+Y0D7k1RvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrMkoCoLXHmTYQOtWylBvUaXagsIwHwYDVR0j BBgwFoAUVdkHqghL+GwEadJIbeBM0ovZ8XswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU2ZTQyZTYtYzZjZC00Y2NkLWJkYTctNWFlOWEyNDYwNDRhLzAvNTVEOTA3QUEw ODRCRjg2QzA0NjlEMjQ4NkRFMDRDRDI4QkQ5RjE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NUQ5MDdBQTA4NEJGODZDMDQ2OUQyNDg2REUwNENEMjhCRDlG MTdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvNTVEOTA3QUEwODRCRjg2QzA0NjlEMjQ4NkRFMDRD RDI4QkQ5RjE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgei9mQ1G/LvKZdKjhRSYdo890ufsUo2Ed9 mPzjdyI3SlbnKECjrniltiORYkmRRWqjFFevZsxFQH8MNYs6sQeMY3RdDiRC4P/o D2Cx1Klpn9wtYngY3YMIBg96Uszfs9FGvTNbbsUtNrD5J1qcb5gsyvqUuCknT6jQ 3pjFC38wrpPOgW59io4S5fw4aRdoIa50qaewhL5xdAZ3LNUEr0KbElfk6MkH6AgL o1J2O39KOGASl0hcmPLzgg4dPlfJNZAi/GYGi4Ws1X4xokxoj1ZTXhZ/hBF/Bh/k eXP/bHvZ2WOPRw0b8lHpoxlrDck+FVuHyNa7ugpPXni0THnweP0= -----END CERTIFICATE-----Generated at Mon Nov 2 17:15:49 2026 by rpki-client