
$ rpki-client -vvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
File: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft (raw, json)
Hash identifier: 9TD3aDdB6Vq+gJKRI8n2ZnrbfmpyzfFGJcq8jBKRG6w=
Subject key identifier: 93:5D:8C:1C:30:D8:97:2B:D1:FD:9E:70:77:1E:F4:20:71:B7:ED:9C
Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
Certificate issuer: /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Certificate serial: 2DAB49CD4D89A521B5E255048B86F308CD045646
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 08:47:52 +0000
Manifest this update: Thu 18 Jun 2026 08:42:52 +0000
Manifest next update: Fri 19 Jun 2026 11:51:52 +0000
Files and hashes: 1: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 7nwXZ7uwqWfwg9TH3c9pYLZKmQEunRTq0qvrKzAXkHk=)
2: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl (hash: VNsgof/AlRAx1csdtA6jnkoI2Vw67DDIWAfzOBZ9hRg=)
3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: fT+ijd0/vxnImzejYzyk0a9FLi5T/K3JxSUJprhaarY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ab:49:cd:4d:89:a5:21:b5:e2:55:04:8b:86:f3:08:cd:04:56:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Validity
Not Before: Jun 18 08:42:52 2026 GMT
Not After : Jun 19 11:51:52 2026 GMT
Subject: CN=935D8C1C30D8972BD1FD9E70771EF42071B7ED9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:61:62:2d:97:b5:25:39:5f:d1:28:88:9f:
18:a4:41:3a:33:e4:93:df:bc:d1:d5:9e:55:e5:49:
71:49:ff:25:16:df:bc:bf:34:4b:2b:19:1d:b4:78:
9d:d1:93:aa:7f:53:b0:47:40:32:0f:62:94:be:83:
67:8d:e5:23:70:71:6f:6d:d3:a8:41:00:73:a6:44:
3a:fc:74:97:4c:e7:bf:33:75:95:ca:18:7c:7e:18:
c0:fd:da:c6:45:53:59:86:7b:af:9b:c7:57:22:55:
af:3f:c1:3c:ec:83:ec:36:34:2f:6a:1b:77:34:fa:
9a:61:39:7c:0a:4a:42:56:f8:fa:84:43:32:cf:13:
2a:16:d4:70:8c:36:bb:20:9a:06:1a:9f:82:56:7d:
c0:51:c5:8f:a8:a4:63:49:e0:73:43:1b:a7:5b:1f:
45:25:fc:b0:61:64:36:2c:13:f3:c1:cc:11:24:0a:
5c:88:a1:36:13:12:4f:d7:5a:82:10:9c:de:92:2f:
9a:5d:12:6a:4a:98:db:b5:34:a9:6d:52:dd:a2:fd:
71:9c:97:be:04:47:33:dc:ed:6d:e6:a2:97:ce:6b:
94:5b:9f:84:2a:90:cb:72:7f:f7:a6:c6:9a:92:f6:
20:3c:19:98:20:b1:15:9a:9a:f1:56:45:7a:0a:3f:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5D:8C:1C:30:D8:97:2B:D1:FD:9E:70:77:1E:F4:20:71:B7:ED:9C
X509v3 Authority Key Identifier:
keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:f3:b5:73:2b:d9:fb:62:88:99:54:b3:21:b2:10:8f:f8:
24:39:00:78:41:83:08:1a:23:fe:64:0b:25:8e:4b:10:37:77:
ae:7c:7e:28:8e:58:8e:d9:b1:24:de:9c:9a:3a:9c:97:f3:8e:
51:a7:ef:91:95:60:ca:e9:62:f7:5a:c2:78:bc:bb:10:30:6d:
51:9a:0a:d2:b2:ed:f9:64:72:79:e6:c9:4e:fe:b3:4e:6c:c2:
fb:ea:2f:ed:bb:e6:7f:00:b4:ba:b7:82:b9:da:1d:67:65:9d:
43:9b:e3:ae:4d:f8:b6:ab:93:35:8a:0e:f7:76:4b:0d:7e:cf:
7e:4d:a7:9a:ab:63:08:22:2e:8b:41:2b:87:af:45:5c:27:84:
7c:2c:4e:f1:b6:23:ea:af:77:65:ff:75:27:a6:92:55:67:cc:
a8:ad:ff:da:42:8a:19:6a:05:02:fb:36:80:24:e7:1c:6e:4d:
74:76:f9:2f:c0:3e:6e:8f:63:9e:6e:e5:18:fa:2e:27:f5:df:
be:3b:44:f2:0d:65:6b:ff:b7:9d:48:3d:84:05:b6:73:da:de:
ee:2d:03:07:ab:b7:2c:28:58:21:9e:36:ff:c3:af:fb:14:63:
0b:d2:06:c0:6c:2c:a2:cb:09:b2:11:85:d2:a6:9c:d7:34:cf:
02:7b:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:12:54 2026 by rpki-client