
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft
File: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft (raw, json)
Hash identifier: zHdxtExexgMnIjp7+FsRvQ9uwh1MNrXQ/Re8A71ldZM=
Subject key identifier: C2:9C:2E:0E:E5:F5:37:99:7F:FF:90:98:58:CF:96:D5:44:A4:DF:1F
Authority key identifier: 55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D
Certificate issuer: /CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D
Certificate serial: 7C16B5F08F04F085EF0CFBF87CB70C04D079887F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 14:34:43 +0000
Manifest this update: Thu 03 Sep 2026 14:29:43 +0000
Manifest next update: Fri 04 Sep 2026 16:11:43 +0000
Files and hashes: 1: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: 8JHdIEqNbeJfT5OVw6EBi4k3e542O+VmKhuJlmXA+os=)
2: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl (hash: mUvp7AL3E9O3EW33itKtLY8CaPWMJhOn8IEpDjXoLvU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl
rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:16:b5:f0:8f:04:f0:85:ef:0c:fb:f8:7c:b7:0c:04:d0:79:88:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D
Validity
Not Before: Sep 3 14:29:43 2026 GMT
Not After : Sep 4 16:11:43 2026 GMT
Subject: CN=C29C2E0EE5F537997FFF909858CF96D544A4DF1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:1d:7c:51:6f:91:09:51:96:3c:bd:95:60:
23:c2:bb:e6:c0:2c:89:83:aa:69:a4:6a:77:b4:64:
c7:0d:22:56:69:ea:2a:c2:31:9c:4d:eb:23:46:1b:
df:52:95:23:10:76:b2:4e:42:9e:44:c0:28:14:3a:
af:2f:e5:1a:89:78:27:dc:ff:bc:05:85:18:cc:64:
73:00:15:af:3a:93:65:a6:bc:a8:b5:bb:f3:80:a3:
e7:21:e3:d1:f6:be:46:d9:c0:3a:6f:d6:76:98:6c:
72:f5:04:59:aa:7f:d7:6e:b8:16:05:02:eb:33:82:
69:39:c3:b5:11:06:2f:32:39:09:5b:1e:82:34:57:
fd:3a:53:ed:4d:a3:76:db:28:71:37:40:5d:f8:ba:
20:ab:ff:9a:bc:f6:b7:68:58:52:7b:49:33:3c:8b:
f1:b0:fb:bd:a6:b8:59:34:eb:d2:d4:c8:1c:21:99:
a7:56:a0:9b:76:7d:41:79:0e:20:b2:95:f4:ac:1f:
5e:07:c4:ef:12:28:9a:a0:08:cf:ae:bf:56:65:90:
f8:bc:3b:29:58:da:58:f8:e9:c0:71:64:d7:46:da:
22:13:a0:25:d4:9e:2f:58:ce:89:42:87:0c:13:92:
e8:29:0f:c3:83:80:42:15:3c:2b:ff:57:78:52:72:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:2E:0E:E5:F5:37:99:7F:FF:90:98:58:CF:96:D5:44:A4:DF:1F
X509v3 Authority Key Identifier:
keyid:55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8a:69:77:8e:44:e0:64:02:0c:b1:79:fe:67:b0:4a:c3:59:
5f:2c:10:5c:27:49:db:7a:a1:3a:0b:c6:72:0c:01:b0:9d:e8:
bd:1d:9d:fd:71:5f:54:ae:04:f0:7a:27:87:f7:95:e2:5c:21:
ee:80:54:9c:f1:f0:e6:7b:1f:80:bc:49:c2:6d:46:78:82:d1:
82:fb:be:89:28:b8:4e:a8:af:b8:c7:ad:7d:79:26:11:2d:91:
a9:d4:ac:45:7e:e9:f5:cf:9b:f4:ac:6f:b8:26:c0:e9:72:37:
25:70:79:71:5b:3d:44:7e:10:f4:f1:fd:e5:9a:f7:23:95:15:
64:fc:ad:85:c5:f6:7a:dc:15:1a:43:80:f4:f0:f8:e9:e3:62:
7e:1f:df:34:bd:d3:99:8f:f9:ed:c4:74:07:a3:bd:12:a3:7e:
47:0c:68:1a:f7:9f:a9:67:b0:3c:28:8b:65:40:7f:5b:a8:74:
eb:78:c6:f7:54:26:ca:30:48:f5:25:76:2a:26:3c:a3:7b:47:
ec:0d:5d:ff:a5:8a:8b:7b:86:84:27:e2:32:48:2c:ff:4a:48:
b4:c1:a0:47:52:1f:6e:7a:b3:a3:02:fa:c1:7e:88:e3:be:05:
61:a1:ea:39:5d:76:73:c9:d3:bd:df:86:a5:62:ae:1e:90:fd:
7d:11:ab:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:13:00 2026 by rpki-client