
$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
File: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft (raw, json)
Hash identifier: 4ZhmlaZiD1ceJ2qgQ0oYOl/FqUmgDyd4wIvGV2B86XQ=
Subject key identifier: 57:D1:38:60:0E:5F:0E:46:C2:C6:F8:E8:6F:D7:A3:93:5F:75:A5:BB
Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
Certificate issuer: /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Certificate serial: 055A9CB189B874A1999A2D1548DF7084059781FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
Manifest number: 04DB
Signing time: Mon 23 Mar 2026 05:51:17 +0000
Manifest this update: Mon 23 Mar 2026 05:46:17 +0000
Manifest next update: Thu 26 Mar 2026 07:58:17 +0000
Files and hashes: 1: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: g5hlJx5VxwLWFsZdGKqn9r2RuteLPSgtrh1sr6LNmhM=)
2: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: q9l5WC1lZSRDDfD6k6bjS5S0ZVdtq7f+RpluQ9hh5F0=)
3: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl (hash: tpDrod6GkUi6aH7tHNY/cv7u9pfO1t+nnfrDYnLPrsM=)
4: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: cp5DLnNWi9w3KmvCMrojjqhOWr4wL8E6xAvIA2F2SV4=)
5: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: iNZ3zu9tO0qa+gSNjTNjVY0ck8jJgMDSV+32JZtPZic=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 07:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5a:9c:b1:89:b8:74:a1:99:9a:2d:15:48:df:70:84:05:97:81:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Validity
Not Before: Mar 23 05:46:17 2026 GMT
Not After : Mar 26 07:58:17 2026 GMT
Subject: CN=57D138600E5F0E46C2C6F8E86FD7A3935F75A5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:c5:d1:2c:02:bc:b2:9b:0b:3e:06:f9:08:
d6:6f:5d:1f:76:f2:89:07:47:a1:27:7c:85:03:85:
58:a2:c6:cf:95:a2:3c:14:f4:12:a4:af:88:4b:ad:
bf:f0:b2:4d:48:28:ed:b3:c3:25:88:86:df:91:83:
71:f5:2c:29:6d:7d:31:ac:06:36:05:8c:79:7d:9c:
fa:91:3e:af:80:d6:35:4c:88:81:6d:f8:e3:54:84:
dd:eb:2c:11:ec:70:1e:20:81:1e:f7:d9:33:eb:c9:
95:29:e0:cc:3a:ef:9d:35:2d:a2:2c:e9:8b:2d:a5:
07:ea:c3:bb:46:a9:26:62:83:42:ea:db:3f:39:c8:
d1:7d:f3:ba:88:6a:2c:73:0c:be:bd:05:49:05:0f:
f2:d3:35:66:48:97:95:a2:e8:b8:05:95:1b:c3:3a:
41:76:4d:da:4d:7e:4b:f3:fd:24:89:6d:0f:2a:c2:
b5:93:d9:e5:fb:c6:f6:16:45:aa:c4:d2:98:fb:0f:
ed:53:15:11:22:b9:5d:d8:74:62:08:b3:92:3e:a7:
0b:10:63:78:1d:48:c8:7c:e0:0d:23:c7:24:04:0c:
0d:71:33:8a:20:97:05:6f:a3:3a:e3:bb:e6:5a:a1:
df:2d:1d:51:18:d7:82:0d:d9:a5:28:70:6c:56:59:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D1:38:60:0E:5F:0E:46:C2:C6:F8:E8:6F:D7:A3:93:5F:75:A5:BB
X509v3 Authority Key Identifier:
keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2b:29:c2:1c:8a:99:95:d6:4e:1d:b1:b1:6c:55:a5:d1:b4:
7d:e7:ce:e8:0f:b8:82:23:36:9b:a7:84:7d:17:3d:2b:40:b8:
33:57:c1:b1:45:f5:b9:56:58:8d:a5:e1:ed:33:77:c7:98:70:
cb:03:82:7b:bd:34:ae:30:fc:fb:2b:22:57:5c:4d:e7:d4:5e:
85:b0:39:5d:b7:90:a2:cf:94:d2:f8:42:c3:d8:1a:74:2f:3f:
13:e9:79:19:9c:b8:11:17:fb:31:ea:b8:a5:5e:ed:ea:3b:e5:
86:d5:d6:7d:ad:77:de:df:02:48:8b:8e:71:6e:1e:ac:02:6b:
f5:d3:9e:46:a9:bb:43:55:b6:9c:c7:0a:aa:84:da:15:20:c8:
32:91:26:a4:a5:4d:e4:6d:0f:90:c8:b8:24:b5:0e:f5:1b:ed:
72:d6:fb:c5:7e:a8:14:c1:81:24:52:14:6d:3d:1d:d0:17:87:
0c:a3:f4:32:f7:26:35:9d:50:1b:6b:57:58:72:87:b1:af:69:
b4:6d:e5:52:f4:c1:19:37:9d:61:fc:e7:23:f0:53:a7:a8:81:
85:50:c6:d1:6a:41:a3:9a:72:5b:60:49:46:89:88:b0:61:bf:
fc:4a:e0:75:70:1a:81:31:21:d2:2f:9c:0d:bf:2d:88:61:98:
a3:35:4f:1f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBVqcsYm4dKGZmi0VSN9whAWXgfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZD
RTM4MTAyQTAeFw0yNjAzMjMwNTQ2MTdaFw0yNjAzMjYwNzU4MTdaMDMxMTAvBgNV
BAMTKDU3RDEzODYwMEU1RjBFNDZDMkM2RjhFODZGRDdBMzkzNUY3NUE1QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFA8XRLAK8spsLPgb5CNZvXR92
8okHR6EnfIUDhViixs+VojwU9BKkr4hLrb/wsk1IKO2zwyWIht+Rg3H1LCltfTGs
BjYFjHl9nPqRPq+A1jVMiIFt+ONUhN3rLBHscB4ggR732TPryZUp4Mw67501LaIs
6YstpQfqw7tGqSZig0Lq2z85yNF987qIaixzDL69BUkFD/LTNWZIl5Wi6LgFlRvD
OkF2TdpNfkvz/SSJbQ8qwrWT2eX7xvYWRarE0pj7D+1TFREiuV3YdGIIs5I+pwsQ
Y3gdSMh84A0jxyQEDA1xM4oglwVvozrju+Zaod8tHVEY14IN2aUocGxWWQ7FAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUV9E4YA5fDkbCxvjob9ejk191pbswHwYDVR0j
BBgwFoAUVcel1WzsExbP5mDHnALBb844ECowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjllMDYzNi0xZmUyLTRkM2ItOGMzOC0yZGJiOTkxNGU5MTMvMC81NUM3QTVENTZD
RUMxMzE2Q0ZFNjYwQzc5QzAyQzE2RkNFMzgxMDJBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZDRTM4
MTAyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj
MzgtMmRiYjk5MTRlOTEzLzAvNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMx
NkZDRTM4MTAyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIMrKcIcipmV1k4dsbFsVaXRtH3nzugPuIIj
NpunhH0XPStAuDNXwbFF9blWWI2l4e0zd8eYcMsDgnu9NK4w/PsrIldcTefUXoWw
OV23kKLPlNL4QsPYGnQvPxPpeRmcuBEX+zHquKVe7eo75YbV1n2td97fAkiLjnFu
HqwCa/XTnkapu0NVtpzHCqqE2hUgyDKRJqSlTeRtD5DIuCS1DvUb7XLW+8V+qBTB
gSRSFG09HdAXhwyj9DL3JjWdUBtrV1hyh7GvabRt5VL0wRk3nWH85yPwU6eogYVQ
xtFqQaOacltgSUaJiLBhv/xK4HVwGoExIdIvnA2/LYhhmKM1Tx8=
-----END CERTIFICATE-----
Generated at Mon Mar 23 12:55:40 2026 by rpki-client