$ rpki-client -vvf rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft File: 55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft (raw, json) Hash identifier: L6iTInumlxlnA6NzIXquBPdOnabePACh/2DfXX8g/+o= Subject key identifier: E7:C0:37:BC:1D:6E:D4:E2:97:2D:0F:C9:F6:A5:32:4C:C2:62:48:90 Authority key identifier: 55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77 Certificate issuer: /CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677 Certificate serial: 2A6FD9BA20EF22B95DFEAA15C02798CD5DD4EA16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:01:07 +0000 Manifest this update: Tue 02 Jun 2026 08:56:07 +0000 Manifest next update: Wed 03 Jun 2026 11:04:07 +0000 Files and hashes: 1: 55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl (hash: ZgpcIWF1hY0ugmEHSTXL051tVxnZVwgs1E0jIMLmWtE=) 2: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: 6DMCC4zoM0ufHjG0QUaKmWhWVe5X3d0md3DvFqu2AIs=) 3: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: VYY0EPTRFVeNS0xmpURLR8nmiyrU+iv53Ydi6p2WVWU=) 4: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: Eyrv+pjzBZrD+KzX9culKkOw9Pi5527N+COQ3UuUxok=) 5: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: 8fbaWk0VlFRstRo1V+vF25anlu8qX6SOYuUDyj1y8XY=) 6: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: u9ONq6of3U/DimX1cWEtNMy6yoedIFXIdHUspVSvqi4=) 7: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: +4f95yT7HYIcHP5KdqwSiBUeBGne1YJwPDKkI/nqfYk=) 8: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: or1/Z7K0bU1AYV2WS/k202vPtDVPNtgWIGTW99rDY5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6f:d9:ba:20:ef:22:b9:5d:fe:aa:15:c0:27:98:cd:5d:d4:ea:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677 Validity Not Before: Jun 2 08:56:07 2026 GMT Not After : Jun 3 11:04:07 2026 GMT Subject: CN=E7C037BC1D6ED4E2972D0FC9F6A5324CC2624890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:c5:73:88:c1:09:f0:36:26:9b:87:53:e2: 34:12:98:26:d0:d6:24:0c:8b:10:d2:6b:95:6f:76: e4:c5:aa:76:0b:92:48:ab:8c:27:bf:e8:60:45:61: 18:40:4d:1f:a8:43:c5:fb:60:67:98:7b:26:ca:82: 2e:cd:4e:9b:d2:a1:42:b3:52:57:f8:5e:9e:34:0b: 5c:15:94:ea:77:04:6d:53:7a:1b:4e:b0:a5:28:90: 37:30:35:9a:dd:5c:d2:eb:a9:72:77:36:ef:04:31: 39:8e:87:e8:0b:bc:dd:7d:d6:64:13:e5:9d:f0:4b: 89:e0:64:86:a9:13:11:ae:4a:f1:ff:d6:de:80:05: 5c:94:ad:54:93:7e:36:80:aa:eb:77:d1:e1:ca:9d: 41:5b:b3:57:5b:a5:fa:67:70:f7:86:69:68:36:4f: c8:31:9e:59:06:8f:ad:2c:db:38:1b:ba:78:5c:65: 27:77:44:7f:e7:46:81:01:40:be:d4:f0:68:33:3b: de:9e:4d:1b:88:e4:b3:de:bf:d5:90:62:b1:98:16: fc:20:ff:35:11:c7:65:15:e4:00:76:c8:72:58:6e: b9:b1:c9:32:d0:bf:7a:6c:8c:74:d4:5e:96:57:af: 97:fd:44:4d:36:fd:5b:88:7c:5c:71:e2:71:cd:00: 1a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C0:37:BC:1D:6E:D4:E2:97:2D:0F:C9:F6:A5:32:4C:C2:62:48:90 X509v3 Authority Key Identifier: keyid:55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:83:c6:e0:cf:7f:f7:b4:5e:e3:2e:60:fc:02:1b:bf:0c:21: 92:66:c8:9d:68:e6:2c:12:1b:9f:c6:e4:dc:6b:ce:88:60:61: b4:3d:69:0e:78:6d:9f:06:f4:8b:da:59:52:13:b0:b1:36:51: 64:72:bb:60:4c:38:c6:24:7f:01:57:05:83:4a:78:6b:04:96: a7:e6:b1:a5:9c:a8:00:19:22:1d:4b:6c:f3:46:12:a6:82:4f: 88:65:13:9b:c3:3e:6c:6d:3f:1e:b3:fc:97:71:db:15:05:0d: 15:51:7b:c7:dc:b4:bf:49:b8:b1:09:53:5d:61:5e:06:a0:13: 73:4e:59:a4:51:a7:26:07:a0:9f:cb:d2:68:5e:a0:60:dc:dc: cd:4e:0e:59:eb:16:97:ec:71:7b:8b:55:ab:73:c8:f6:bd:f6: b8:34:62:ee:32:d6:d1:67:11:28:9f:3a:bd:80:da:5f:65:c1: a7:8b:3e:e7:70:13:3c:9d:41:cf:1e:0a:3d:ab:f7:d8:3a:cf: 4a:e2:ea:08:4d:67:a2:a1:4b:d7:7d:6e:c4:51:ee:42:0e:20: d6:67:27:ea:5e:55:14:00:9f:02:4a:17:08:58:3a:0a:96:a9: f3:a7:75:81:7b:a4:56:c8:04:ee:d1:e4:c6:a4:f4:86:b5:6e: ec:70:25:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKm/ZuiDvIrld/qoVwCeYzV3U6hYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVEMEE0QkREMzBBQjBGMjM0NkE3MjNDRUZCNkM3NkU4 QUQ5OTY3NzAeFw0yNjA2MDIwODU2MDdaFw0yNjA2MDMxMTA0MDdaMDMxMTAvBgNV BAMTKEU3QzAzN0JDMUQ2RUQ0RTI5NzJEMEZDOUY2QTUzMjRDQzI2MjQ4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyYMVziMEJ8DYmm4dT4jQSmCbQ 1iQMixDSa5VvduTFqnYLkkirjCe/6GBFYRhATR+oQ8X7YGeYeybKgi7NTpvSoUKz Ulf4Xp40C1wVlOp3BG1TehtOsKUokDcwNZrdXNLrqXJ3Nu8EMTmOh+gLvN191mQT 5Z3wS4ngZIapExGuSvH/1t6ABVyUrVSTfjaAqut30eHKnUFbs1dbpfpncPeGaWg2 T8gxnlkGj60s2zgbunhcZSd3RH/nRoEBQL7U8GgzO96eTRuI5LPev9WQYrGYFvwg /zURx2UV5AB2yHJYbrmxyTLQv3psjHTUXpZXr5f9RE02/VuIfFxx4nHNABrRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU58A3vB1u1OKXLQ/J9qUyTMJiSJAwHwYDVR0j BBgwFoAUVdCkvdMKsPI0anI877bHborZlncwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTgyZjJiMzgtYWRkZi00YmQzLTkyNDktZTViYTU2Y2QwNTJlLzAvNTVEMEE0QkRE MzBBQjBGMjM0NkE3MjNDRUZCNkM3NkU4QUQ5OTY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NUQwQTRCREQzMEFCMEYyMzQ2QTcyM0NFRkI2Qzc2RThBRDk5 Njc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvNTVEMEE0QkREMzBBQjBGMjM0NkE3MjNDRUZCNkM3 NkU4QUQ5OTY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKDxuDPf/e0XuMuYPwCG78MIZJmyJ1o5iwS G5/G5NxrzohgYbQ9aQ54bZ8G9IvaWVITsLE2UWRyu2BMOMYkfwFXBYNKeGsElqfm saWcqAAZIh1LbPNGEqaCT4hlE5vDPmxtPx6z/Jdx2xUFDRVRe8fctL9JuLEJU11h XgagE3NOWaRRpyYHoJ/L0mheoGDc3M1ODlnrFpfscXuLVatzyPa99rg0Yu4y1tFn ESifOr2A2l9lwaeLPudwEzydQc8eCj2r99g6z0ri6ghNZ6KhS9d9bsRR7kIOINZn J+peVRQAnwJKFwhYOgqWqfOndYF7pFbIBO7R5Mak9Ia1buxwJZs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:36 2026 by rpki-client