
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
File: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft (raw, json)
Hash identifier: sqIKU0u9tqni9NIAKVdxqBVXxR8ZSqQAmbySgIAK8eE=
Subject key identifier: A0:D3:17:F6:E1:85:52:21:12:32:22:EF:7B:C3:5B:66:8D:D6:9F:A6
Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
Certificate issuer: /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Certificate serial: 4AABD6C10153A1EDCF0D3A13B726FDCCBC3C4DDF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 07:02:12 +0000
Manifest this update: Thu 17 Sep 2026 06:57:12 +0000
Manifest next update: Fri 18 Sep 2026 07:27:12 +0000
Files and hashes: 1: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 7nwXZ7uwqWfwg9TH3c9pYLZKmQEunRTq0qvrKzAXkHk=)
2: 55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl (hash: 6ZyDt9EuPdKpJoSrkN0swei6hQ4JkuhwihNYDPxZ2jE=)
3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: fT+ijd0/vxnImzejYzyk0a9FLi5T/K3JxSUJprhaarY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ab:d6:c1:01:53:a1:ed:cf:0d:3a:13:b7:26:fd:cc:bc:3c:4d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Validity
Not Before: Sep 17 06:57:12 2026 GMT
Not After : Sep 18 07:27:12 2026 GMT
Subject: CN=A0D317F6E1855221123222EF7BC35B668DD69FA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:6b:c8:c9:21:3e:59:56:5f:80:ca:f3:54:
e8:b7:85:4d:60:15:7d:5e:0b:0c:e8:d7:f8:e6:af:
99:98:e0:14:c4:76:7e:e8:0d:3c:fa:18:9a:3e:bf:
46:31:99:16:a7:4c:17:e0:6d:dd:87:94:1a:6c:4f:
f8:d3:11:a8:65:27:84:90:73:f6:d8:47:47:21:e7:
18:8c:6b:02:09:d6:f4:b4:21:ed:31:4f:41:e2:42:
f6:cc:a1:07:97:f8:f0:6b:94:a1:e7:17:1d:fc:01:
71:82:dd:91:a1:fd:f7:89:bc:0a:36:60:3a:0d:a2:
6b:b3:73:38:78:d7:b4:98:2c:93:d3:9b:70:13:b8:
95:09:c5:79:d7:24:f8:92:62:1c:3f:9d:90:bc:f4:
5e:4f:47:24:35:40:52:d2:ca:4d:e6:b1:88:d3:9b:
90:ff:76:a7:35:44:2b:86:5b:04:44:93:90:c2:4a:
87:8d:a2:b9:10:c1:03:87:1d:b9:cd:d8:64:7d:af:
4d:58:30:9a:31:4e:e9:1e:ff:32:5a:2b:0f:a6:52:
69:76:63:26:c6:8e:d5:f0:61:ff:37:9f:e4:9f:9a:
ec:f1:f2:71:13:45:58:cb:a6:1d:aa:08:4b:7d:c9:
e4:eb:9c:ef:e3:7e:f4:31:66:57:39:83:b9:b5:5e:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D3:17:F6:E1:85:52:21:12:32:22:EF:7B:C3:5B:66:8D:D6:9F:A6
X509v3 Authority Key Identifier:
keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5e:e2:5e:d1:ec:1f:89:f0:b2:5e:cc:aa:9c:0e:80:e2:44:
6f:ea:f5:de:7f:c8:03:53:b9:b3:af:0f:0c:e1:91:00:8a:1e:
bc:00:4b:0b:5f:fe:fd:0f:39:36:4d:91:13:2f:33:9b:2c:a6:
fa:79:28:59:ba:47:27:88:55:65:62:49:52:10:c0:7d:0f:70:
f6:11:b8:6b:5e:90:f6:37:13:e9:c9:8c:3c:d0:ca:04:ac:2c:
85:a8:1e:94:a9:ce:d6:eb:d3:b5:03:d7:f0:1f:ca:d5:50:17:
5a:65:dc:14:34:7a:33:e3:74:53:91:f1:32:bd:cc:95:f6:98:
03:5a:8b:42:d6:2c:98:87:53:9c:ea:f0:77:dd:0d:3f:3b:73:
d8:23:9f:c6:be:eb:29:14:ea:5d:a6:96:7d:91:30:b8:0d:e5:
6c:59:b1:1e:ff:73:30:86:30:8c:b2:93:62:af:2f:c4:90:0d:
9a:cf:01:a7:b2:b1:06:db:d0:31:17:43:0e:f2:11:05:9d:74:
5b:d6:53:16:78:66:da:dc:4c:ae:28:2b:cf:b0:5b:73:05:ce:
01:f4:05:4a:91:3d:d9:09:26:da:d4:4e:c2:a7:62:12:04:45:
9c:11:0d:8a:98:94:14:34:59:29:f9:b9:5a:11:b7:1d:5b:b4:
7b:cb:ed:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:39:19 2026 by rpki-client