$ rpki-client -vvvf rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft File: 55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft (raw, json) Hash identifier: 2vWuRaf7aNjioaBz71SnzfMdZaxKxvLULxxoiu09LnI= Subject key identifier: 18:DE:80:29:6F:95:12:A3:03:D8:E2:4A:A9:64:BC:10:FF:40:5F:82 Authority key identifier: 55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77 Certificate issuer: /CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677 Certificate serial: 6032F9443F57E1049D9DC1E5329147B20AD08EFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft Manifest number: F6 Signing time: Sun 01 Nov 2026 15:26:51 +0000 Manifest this update: Sun 01 Nov 2026 15:21:51 +0000 Manifest next update: Mon 02 Nov 2026 16:14:51 +0000 Files and hashes: 1: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: VYY0EPTRFVeNS0xmpURLR8nmiyrU+iv53Ydi6p2WVWU=) 2: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: u9ONq6of3U/DimX1cWEtNMy6yoedIFXIdHUspVSvqi4=) 3: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: or1/Z7K0bU1AYV2WS/k202vPtDVPNtgWIGTW99rDY5M=) 4: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: Eyrv+pjzBZrD+KzX9culKkOw9Pi5527N+COQ3UuUxok=) 5: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: +4f95yT7HYIcHP5KdqwSiBUeBGne1YJwPDKkI/nqfYk=) 6: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: 6DMCC4zoM0ufHjG0QUaKmWhWVe5X3d0md3DvFqu2AIs=) 7: 55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl (hash: iNUmjwbIuOd/M5iYBSbuChJFe0FJZC+O4Rw58OurOsA=) 8: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: 8fbaWk0VlFRstRo1V+vF25anlu8qX6SOYuUDyj1y8XY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:32:f9:44:3f:57:e1:04:9d:9d:c1:e5:32:91:47:b2:0a:d0:8e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677 Validity Not Before: Nov 1 15:21:51 2026 GMT Not After : Nov 2 16:14:51 2026 GMT Subject: CN=18DE80296F9512A303D8E24AA964BC10FF405F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:87:a4:e2:ad:09:c6:d5:55:ab:3a:7b:c5: bf:ae:c0:2a:cb:54:11:9a:05:9d:34:99:42:2a:59: 6a:69:a1:0c:76:50:82:57:2e:e6:58:0d:1c:76:d0: 71:b1:0a:83:e5:28:ea:dc:01:8b:8c:de:56:de:8e: eb:25:ac:d2:98:78:9c:37:08:03:40:a4:d3:03:d3: 84:5d:94:dc:c9:6b:bf:5a:cb:8a:62:aa:a3:0e:0f: 7e:16:05:5f:02:9b:d1:db:60:79:f4:0b:06:f5:dc: ee:c5:f4:19:cc:de:9a:89:1b:7a:90:de:08:9b:3e: 46:88:3b:0f:8b:32:bf:9a:c1:c1:8b:f7:19:fd:ff: e0:32:5b:e3:a2:40:e8:b3:20:8b:88:8b:3c:c2:d6: 17:f8:da:52:68:15:45:46:4d:83:2b:be:6e:b1:01: 39:db:71:c9:09:91:21:42:5b:4c:f6:b6:7b:37:83: a1:52:95:fe:30:6f:27:21:4d:36:e4:b9:de:24:97: 2b:4c:74:09:76:fc:76:32:a9:aa:5c:80:3e:1a:8f: 84:b0:91:d7:6f:39:fc:91:2d:45:72:c7:5f:5b:ac: af:76:65:da:d6:56:49:57:63:46:49:e6:9c:ee:18: be:b2:fc:b0:c9:66:56:bc:30:5d:a4:f9:29:08:f1: 17:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DE:80:29:6F:95:12:A3:03:D8:E2:4A:A9:64:BC:10:FF:40:5F:82 X509v3 Authority Key Identifier: keyid:55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ce:33:b8:47:ec:b5:02:cb:2d:09:79:e4:6e:da:2e:bf:dd: 08:13:88:95:87:89:ad:33:a8:7f:06:cd:9a:f8:7f:84:f6:1a: 23:69:09:3d:d9:c1:a2:5b:73:2f:cc:90:7e:20:a4:a4:e1:43: 97:d0:39:1c:0c:d0:a2:2f:a1:1b:4e:bd:75:57:4b:a6:c4:79: fe:9a:fe:29:76:af:49:bc:34:f8:bb:b4:1d:a0:3f:fa:f9:a2: 1e:1f:46:fc:6f:71:df:74:95:2c:b4:58:94:d1:7e:59:c5:8f: ef:7d:ad:80:0f:1e:b7:f1:de:46:45:13:ce:92:a1:13:86:4a: d6:5e:6d:ad:1e:6f:95:b4:9d:be:7d:33:ac:86:c0:a4:45:07: d5:09:4c:3a:9c:18:d9:d9:cf:96:a6:f7:22:73:e1:5f:d9:55: 85:c8:3f:8a:b5:d6:a7:1a:68:6c:88:e4:00:91:94:11:59:58: d6:43:be:04:81:bc:a7:24:fd:7e:4f:21:18:04:44:b0:f5:e1: f7:84:19:ab:6e:78:18:32:90:b2:19:44:fe:39:47:06:91:a8: db:71:ae:0c:6d:b2:bd:e4:8e:63:2f:d9:c7:7c:9f:19:6a:ec: fc:2a:0e:44:b0:43:67:16:66:70:51:65:4d:66:ff:c7:1f:3c: 36:43:3c:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDL5RD9X4QSdncHlMpFHsgrQjv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVEMEE0QkREMzBBQjBGMjM0NkE3MjNDRUZCNkM3NkU4 QUQ5OTY3NzAeFw0yNjExMDExNTIxNTFaFw0yNjExMDIxNjE0NTFaMDMxMTAvBgNV BAMTKDE4REU4MDI5NkY5NTEyQTMwM0Q4RTI0QUE5NjRCQzEwRkY0MDVGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZ4ek4q0JxtVVqzp7xb+uwCrL VBGaBZ00mUIqWWppoQx2UIJXLuZYDRx20HGxCoPlKOrcAYuM3lbejuslrNKYeJw3 CANApNMD04RdlNzJa79ay4piqqMOD34WBV8Cm9HbYHn0Cwb13O7F9BnM3pqJG3qQ 3gibPkaIOw+LMr+awcGL9xn9/+AyW+OiQOizIIuIizzC1hf42lJoFUVGTYMrvm6x ATnbcckJkSFCW0z2tns3g6FSlf4wbychTTbkud4klytMdAl2/HYyqapcgD4aj4Sw kddvOfyRLUVyx19brK92ZdrWVklXY0ZJ5pzuGL6y/LDJZla8MF2k+SkI8RddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGN6AKW+VEqMD2OJKqWS8EP9AX4IwHwYDVR0j BBgwFoAUVdCkvdMKsPI0anI877bHborZlncwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTgyZjJiMzgtYWRkZi00YmQzLTkyNDktZTViYTU2Y2QwNTJlLzAvNTVEMEE0QkRE MzBBQjBGMjM0NkE3MjNDRUZCNkM3NkU4QUQ5OTY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NUQwQTRCREQzMEFCMEYyMzQ2QTcyM0NFRkI2Qzc2RThBRDk5 Njc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvNTVEMEE0QkREMzBBQjBGMjM0NkE3MjNDRUZCNkM3 NkU4QUQ5OTY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvOM7hH7LUCyy0JeeRu2i6/3QgTiJWHia0z qH8GzZr4f4T2GiNpCT3ZwaJbcy/MkH4gpKThQ5fQORwM0KIvoRtOvXVXS6bEef6a /il2r0m8NPi7tB2gP/r5oh4fRvxvcd90lSy0WJTRflnFj+99rYAPHrfx3kZFE86S oROGStZeba0eb5W0nb59M6yGwKRFB9UJTDqcGNnZz5am9yJz4V/ZVYXIP4q11qca aGyI5ACRlBFZWNZDvgSBvKck/X5PIRgERLD14feEGatueBgykLIZRP45RwaRqNtx rgxtsr3kjmMv2cd8nxlq7PwqDkSwQ2cWZnBRZU1m/8cfPDZDPNE= -----END CERTIFICATE-----Generated at Sun Nov 1 21:25:27 2026 by rpki-client