$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft File: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft (raw, json) Hash identifier: VVYX4crwiT+58cw3HLIUmETOPFZMTV5sk9gaJhQEeGY= Subject key identifier: 2D:F8:0A:C0:8D:4B:1F:2D:C0:84:BC:7E:58:8A:44:E5:B1:CE:7C:4C Authority key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 Certificate issuer: /CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Certificate serial: 278A683D663C38F91E0A30C9B2A367320FF79B69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft Manifest number: 0566 Signing time: Tue 21 Apr 2026 07:04:15 +0000 Manifest this update: Tue 21 Apr 2026 06:59:15 +0000 Manifest next update: Fri 24 Apr 2026 12:29:15 +0000 Files and hashes: 1: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: aezyzCcGyqe7zpkvtIU/eZ/H5lzYV15JrdWQKNqGiws=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl (hash: BE5+PFomyoGYYUW4CxlJPjbAf3ecQooOzVy1wO2oEHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8a:68:3d:66:3c:38:f9:1e:0a:30:c9:b2:a3:67:32:0f:f7:9b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Validity Not Before: Apr 21 06:59:15 2026 GMT Not After : Apr 24 12:29:15 2026 GMT Subject: CN=2DF80AC08D4B1F2DC084BC7E588A44E5B1CE7C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:96:ac:bf:29:65:fc:f4:74:c4:5f:ab:8f: 14:b7:c6:ca:fc:9f:e8:76:23:f0:9a:aa:d0:39:ba: 28:b8:64:32:87:e0:d0:24:d0:91:0d:67:05:11:b1: cc:cb:e6:ad:ef:a6:17:b6:7b:9b:88:8d:8a:7b:64: 8a:c5:e5:4a:a5:53:ea:cd:1e:3f:af:26:2d:82:98: 40:34:cd:fe:65:46:20:16:0e:10:62:5d:e8:5a:61: c4:cb:d8:0c:8a:40:9b:cc:fb:11:5c:f5:6a:8d:11: 16:28:d3:4d:51:73:52:f7:88:15:b4:b2:b1:ae:fd: da:a8:bf:e2:6d:dd:4c:91:bd:5b:f8:b4:7b:58:b1: bf:a2:70:2c:c6:d7:a6:6d:bf:24:57:a8:e4:c5:f0: af:d2:a9:71:d3:cc:94:22:e7:97:ab:e6:57:66:24: 64:a8:34:84:90:4f:54:56:d3:e4:e3:4f:e9:c3:b3: 51:83:34:4a:62:e7:bd:7b:0c:2f:70:16:85:2a:60: e4:b1:a4:97:8b:7b:95:f0:94:61:c1:2a:8d:18:0c: 10:7a:f2:77:6b:66:d3:95:90:7f:47:8d:db:f0:b1: 71:3a:79:6d:03:fb:25:0a:f4:a5:0b:d4:a2:d2:8d: e9:94:85:5d:11:50:2c:36:ab:11:a1:d8:1c:ac:f4: bb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F8:0A:C0:8D:4B:1F:2D:C0:84:BC:7E:58:8A:44:E5:B1:CE:7C:4C X509v3 Authority Key Identifier: keyid:55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a5:8a:53:83:90:f2:e7:23:8d:be:e7:a3:1f:af:02:a1:5c: 5d:5a:8d:1d:e6:23:46:ac:ea:25:47:7b:b4:d8:b0:80:51:83: db:ac:92:ce:5e:78:e4:dc:f2:1d:df:71:c2:29:74:c3:c2:6f: bf:ce:15:c3:b3:6d:ed:4f:cf:36:46:cc:72:15:ae:c2:f7:2b: db:07:2b:d2:bc:87:ef:3e:92:06:a9:50:6e:1c:af:a5:d1:f8: d5:41:99:f2:af:d3:3d:7c:ce:87:70:f4:e9:40:99:e9:ce:b5: f9:f4:64:45:dc:8b:54:80:06:8a:39:ec:02:6c:d7:4f:72:d4: 6f:8f:98:3c:45:a2:8c:30:24:00:60:46:79:3b:66:74:84:c0: 56:98:b7:f2:f0:af:73:54:2a:21:e7:35:23:8d:a1:b1:2b:47: d9:64:62:49:f4:a4:42:49:74:9d:ce:9a:cc:99:14:11:12:1b: 6c:7a:ad:c4:98:69:5b:5d:e0:6c:24:47:79:07:7e:e6:27:bc: 61:e8:29:8a:33:1e:43:d6:30:08:5d:dd:29:7f:7c:67:36:70: c4:f3:1e:ce:eb:4a:fe:16:96:11:c3:4c:10:7e:fd:77:f8:d7: a1:7d:71:05:c5:b7:3b:e3:2a:7a:a3:76:77:1f:8c:7c:aa:74: ff:bb:61:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ4poPWY8OPkeCjDJsqNnMg/3m2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2 MEQ0Q0Y5MjAeFw0yNjA0MjEwNjU5MTVaFw0yNjA0MjQxMjI5MTVaMDMxMTAvBgNV BAMTKDJERjgwQUMwOEQ0QjFGMkRDMDg0QkM3RTU4OEE0NEU1QjFDRTdDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yJasvyll/PR0xF+rjxS3xsr8 n+h2I/CaqtA5uii4ZDKH4NAk0JENZwURsczL5q3vphe2e5uIjYp7ZIrF5UqlU+rN Hj+vJi2CmEA0zf5lRiAWDhBiXehaYcTL2AyKQJvM+xFc9WqNERYo001Rc1L3iBW0 srGu/dqov+Jt3UyRvVv4tHtYsb+icCzG16ZtvyRXqOTF8K/SqXHTzJQi55er5ldm JGSoNISQT1RW0+TjT+nDs1GDNEpi5717DC9wFoUqYOSxpJeLe5XwlGHBKo0YDBB6 8ndrZtOVkH9HjdvwsXE6eW0D+yUK9KUL1KLSjemUhV0RUCw2qxGh2Bys9LstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULfgKwI1LHy3AhLx+WIpE5bHOfEwwHwYDVR0j BBgwFoAUVeecHWCxLljRIbJlymfAvWDUz5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMS81NUU3OUMxRDYw QjEyRTU4RDEyMUIyNjVDQTY3QzBCRDYwRDRDRjkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2MEQ0 Q0Y5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0Mw QkQ2MEQ0Q0Y5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKlilODkPLnI42+56MfrwKhXF1ajR3mI0as 6iVHe7TYsIBRg9usks5eeOTc8h3fccIpdMPCb7/OFcOzbe1PzzZGzHIVrsL3K9sH K9K8h+8+kgapUG4cr6XR+NVBmfKv0z18zodw9OlAmenOtfn0ZEXci1SABoo57AJs 109y1G+PmDxFoowwJABgRnk7ZnSEwFaYt/Lwr3NUKiHnNSONobErR9lkYkn0pEJJ dJ3OmsyZFBESG2x6rcSYaVtd4GwkR3kHfuYnvGHoKYozHkPWMAhd3Sl/fGc2cMTz Hs7rSv4WlhHDTBB+/Xf416F9cQXFtzvjKnqjdncfjHyqdP+7YSs= -----END CERTIFICATE-----Generated at Wed Apr 22 01:46:20 2026 by rpki-client