
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
File: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft (raw, json)
Hash identifier: Ybv7wXug1/dt8snVU05p3S4Bywz5JxSaDDLJMl6mMco=
Subject key identifier: F0:55:A7:EE:9E:6D:CF:4A:BA:05:88:B1:5B:A2:64:A7:2E:F9:B5:DB
Authority key identifier: A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB
Certificate issuer: /CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
Certificate serial: 5A8DA78C03CD55247498E56BF89EFE483CB8BDD3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 15:00:03 +0000
Manifest this update: Mon 20 Jul 2026 14:55:03 +0000
Manifest next update: Tue 21 Jul 2026 16:00:03 +0000
Files and hashes: 1: 3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (hash: 53bRIBjSwWo7fUHZf8q8wJM22KHC6YENy9XlgqItFdw=)
2: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl (hash: DRNWFdhOgG/YM53nA26kEaUbDypY+SmN1uEkstDa9Qc=)
3: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (hash: KJ4tcOWA2SH5n/Mp2J21qXYJWXIviat2U7Oo6EVnrbg=)
4: 3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (hash: inh5OwQ0YrBgY5xCxaOxxgj16EXDsFBhdopHtNq3Eyc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl
rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 16:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8d:a7:8c:03:cd:55:24:74:98:e5:6b:f8:9e:fe:48:3c:b8:bd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB
Validity
Not Before: Jul 20 14:55:03 2026 GMT
Not After : Jul 21 16:00:03 2026 GMT
Subject: CN=F055A7EE9E6DCF4ABA0588B15BA264A72EF9B5DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:af:1b:9d:98:79:40:7a:f0:d8:26:2c:12:
c7:d1:6d:4c:7d:8c:52:3f:5f:bc:39:33:0a:8a:c0:
65:4b:2f:fc:be:29:ee:93:13:38:4b:82:bc:f4:c9:
52:6b:b5:b6:86:9d:d1:05:65:90:07:6e:cd:4d:2f:
22:05:6d:40:fa:03:cd:2c:55:30:f9:a1:34:10:b0:
cb:48:6b:d8:ff:3d:4b:8b:8a:92:62:90:f6:4e:3b:
a4:66:44:e1:69:e4:32:46:aa:65:95:06:d0:c3:3c:
07:f8:fd:f9:52:f8:20:f4:e7:d4:3f:b3:9f:7b:f8:
8b:3a:31:db:12:c5:50:d0:11:a0:16:ee:94:7d:97:
a4:f6:52:7e:cd:8f:15:cb:97:6e:63:e7:9e:f7:05:
d8:f3:99:94:2d:5a:7a:5c:fa:86:3d:dd:a0:9c:f5:
94:9b:bd:a1:58:44:f9:f8:a3:f7:af:25:ea:fc:c7:
ff:0d:5b:b2:74:86:23:77:fa:14:a0:49:5b:80:2d:
6f:df:87:46:e8:f0:ca:20:3a:6a:7f:70:5d:72:c8:
6a:b5:45:15:89:9f:6d:32:e2:c0:40:c5:63:4d:02:
e3:1a:60:a9:62:0e:9b:85:e1:96:3c:82:e1:99:79:
d0:b8:9f:35:eb:4e:70:93:a0:71:8f:61:2f:33:35:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:55:A7:EE:9E:6D:CF:4A:BA:05:88:B1:5B:A2:64:A7:2E:F9:B5:DB
X509v3 Authority Key Identifier:
keyid:A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fc:9d:0f:ee:61:4e:fc:8f:c1:5c:7c:6f:e1:6a:aa:b4:ea:
7e:4e:91:a1:81:39:49:74:fa:e0:ba:56:aa:43:33:be:92:ec:
b8:68:16:58:35:91:c4:8c:23:3b:e3:a2:35:35:1b:ee:25:5e:
04:50:23:73:da:61:9e:b6:23:07:54:9a:35:b8:e1:eb:cd:cc:
de:02:a3:e7:aa:9c:a5:32:e5:0b:a5:04:34:a1:61:aa:18:01:
7d:2e:1a:32:5d:25:9f:41:1d:77:07:e7:89:c5:d1:41:2d:bc:
b8:1a:84:e3:12:5c:80:54:8a:f1:29:fe:f0:77:17:3f:23:7f:
19:6a:21:62:4b:cf:2d:00:a2:14:de:8f:55:c9:b1:d0:c2:0a:
86:d6:7c:e6:b2:40:d9:73:a3:ba:7f:39:e4:8e:68:e8:d7:38:
b3:02:93:c1:31:4f:c8:52:d2:01:6b:0c:f5:c1:3c:27:de:cd:
7b:72:0d:fe:e1:4d:3c:07:31:62:98:5e:bf:84:59:e8:63:8d:
13:7f:40:9a:fd:8f:7a:b8:15:c9:94:c9:84:63:9f:28:a1:9b:
5f:a6:0e:9a:90:b5:b2:c2:c1:52:70:96:8d:82:9b:ae:34:7e:
16:22:67:0d:5c:6b:3e:50:d0:36:8a:a8:15:4b:fb:bb:63:0f:
77:57:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:51:23 2026 by rpki-client