$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft File: 755B61748263D4DD472C69CA7F1847254B03EBBC.mft (raw, json) Hash identifier: 2vSk41MWFTCTlYop44yw8Hzh83BWTR65zgBbkEw0Vsw= Subject key identifier: 6A:89:B2:27:88:7C:34:DA:C1:D1:B9:AE:57:96:FE:E6:50:80:D1:81 Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC Certificate issuer: /CN=755B61748263D4DD472C69CA7F1847254B03EBBC Certificate serial: 0CADE89D49AE032B22F5B4949695350CF6C91070 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft Manifest number: 01AF Signing time: Tue 01 Jul 2025 22:31:10 +0000 Manifest this update: Tue 01 Jul 2025 22:26:10 +0000 Manifest next update: Sat 05 Jul 2025 04:45:10 +0000 Files and hashes: 1: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: X1fxET2zqe42Jssm0L2zWkWMpofWKObR83jJ1RUDeIA=) 2: 755B61748263D4DD472C69CA7F1847254B03EBBC.crl (hash: 1cZPeKGtkIRnALw0CzMX7UzS7Oz++PuTUp2x1rjkTko=) 3: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: xydWJV4FL+B55nYYX4HSLXqdjHeafDBY82XL44amtyo=) 4: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: DAvm8lRIaAY0XIz4SwbtJvL9yWurm8Bc/AdxnRRoc6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 04:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ad:e8:9d:49:ae:03:2b:22:f5:b4:94:96:95:35:0c:f6:c9:10:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC Validity Not Before: Jul 1 22:26:10 2025 GMT Not After : Jul 5 04:45:10 2025 GMT Subject: CN=6A89B227887C34DAC1D1B9AE5796FEE65080D181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bf:43:c1:6d:7e:d6:1a:2f:79:c6:6f:c7:f4: cc:d2:ee:22:79:70:4b:f9:d6:60:91:dd:09:4c:31: f0:1e:e2:13:0d:47:12:64:17:ff:ce:eb:eb:c8:d9: 23:73:24:d6:22:29:ca:bb:70:48:f1:1b:fe:39:7c: 95:4c:f3:e4:12:3c:1d:91:e6:35:75:e8:73:c3:aa: 2e:06:9d:ba:16:5d:1e:97:20:45:6b:59:2e:ce:2a: 30:e8:aa:73:bb:88:78:d6:2a:1a:36:45:e5:89:de: e9:fc:b9:f4:f2:11:7a:fb:bd:90:aa:2c:c9:41:ff: 14:e7:40:00:be:8a:88:92:f7:d0:83:bf:61:f5:1d: b8:82:a0:12:bd:e6:9b:ba:35:bf:56:61:7d:d2:a4: e3:2c:30:1f:81:dd:d4:0c:40:aa:41:3c:6e:c3:48: 36:b2:a0:f0:08:a8:56:4d:9f:45:54:b4:4a:7c:fc: 68:a2:bc:c6:ff:6f:36:b0:e0:e0:1d:45:e2:8f:91: 7c:63:1e:8c:55:bf:8e:01:59:35:43:1e:57:04:fc: 3b:63:dc:11:86:a8:d6:4e:7f:3e:01:7c:da:ad:78: e9:6c:3c:3e:76:56:ab:7a:60:fb:36:14:c8:0a:f5: 8b:dd:46:c5:df:79:ea:1c:d7:cc:de:1e:c2:b6:cc: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:89:B2:27:88:7C:34:DA:C1:D1:B9:AE:57:96:FE:E6:50:80:D1:81 X509v3 Authority Key Identifier: keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4a:3e:62:17:3a:9e:0a:4a:1d:39:1a:53:bc:0f:00:37:fb: c6:f0:be:6e:19:4b:e6:b3:e5:ac:a5:34:a3:78:af:fa:a9:a8: 9a:65:86:fb:b4:fb:e8:c8:90:cf:4e:d2:73:e9:18:9f:73:8e: 30:70:af:cf:b5:62:49:c0:68:bc:2a:5d:48:9e:36:2b:e2:37: 90:31:22:86:8c:8a:0f:57:bd:d4:71:b3:9d:35:02:ed:38:0d: 99:a6:c1:2d:1d:e0:c2:c5:e9:ae:6c:b0:96:12:12:d8:a4:f1: a4:5e:99:60:10:43:08:1e:aa:8b:c3:9e:cd:d3:22:d9:a2:c9: ca:d3:ec:ee:aa:8f:5d:29:5f:4a:b6:52:36:0f:8a:30:23:47: 88:4d:b2:b1:ab:b4:6b:7b:27:c0:66:64:74:0d:e3:91:79:c6: 1b:88:e8:d8:1a:ab:5f:ae:90:0b:af:8e:a0:e5:3e:4c:4b:aa: 36:27:73:6d:e7:5d:0f:ad:35:d0:f4:eb:b8:fa:b7:2d:c5:78: 59:5c:1f:9e:3c:ad:7f:31:55:50:bb:96:80:12:22:ea:af:81: 31:2c:2b:56:78:2b:34:c8:ad:4c:1c:79:b4:7e:c0:e9:92:c8: 8f:de:e9:3b:71:da:c0:15:31:dd:ba:f2:3d:83:15:c6:8e:a4: 78:d4:32:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDK3onUmuAysi9bSUlpU1DPbJEHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0 QjAzRUJCQzAeFw0yNTA3MDEyMjI2MTBaFw0yNTA3MDUwNDQ1MTBaMDMxMTAvBgNV BAMTKDZBODlCMjI3ODg3QzM0REFDMUQxQjlBRTU3OTZGRUU2NTA4MEQxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDav0PBbX7WGi95xm/H9MzS7iJ5 cEv51mCR3QlMMfAe4hMNRxJkF//O6+vI2SNzJNYiKcq7cEjxG/45fJVM8+QSPB2R 5jV16HPDqi4GnboWXR6XIEVrWS7OKjDoqnO7iHjWKho2ReWJ3un8ufTyEXr7vZCq LMlB/xTnQAC+ioiS99CDv2H1HbiCoBK95pu6Nb9WYX3SpOMsMB+B3dQMQKpBPG7D SDayoPAIqFZNn0VUtEp8/GiivMb/bzaw4OAdReKPkXxjHoxVv44BWTVDHlcE/Dtj 3BGGqNZOfz4BfNqteOlsPD52Vqt6YPs2FMgK9YvdRsXfeeoc18zeHsK2zM7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaomyJ4h8NNrB0bmuV5b+5lCA0YEwHwYDVR0j BBgwFoAUdVthdIJj1N1HLGnKfxhHJUsD67wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTQ2MDdmMC0xNzAxLTQ5YjEtOTFmZi1iMWJlZDVjYmRlZDEvMC83NTVCNjE3NDgy NjNENERENDcyQzY5Q0E3RjE4NDcyNTRCMDNFQkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0QjAz RUJCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAtMTcwMS00OWIxLTkx ZmYtYjFiZWQ1Y2JkZWQxLzAvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3 MjU0QjAzRUJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNKPmIXOp4KSh05GlO8DwA3+8bwvm4ZS+az 5aylNKN4r/qpqJplhvu0++jIkM9O0nPpGJ9zjjBwr8+1YknAaLwqXUieNiviN5Ax IoaMig9XvdRxs501Au04DZmmwS0d4MLF6a5ssJYSEtik8aRemWAQQwgeqovDns3T ItmiycrT7O6qj10pX0q2UjYPijAjR4hNsrGrtGt7J8BmZHQN45F5xhuI6Ngaq1+u kAuvjqDlPkxLqjYnc23nXQ+tNdD067j6ty3FeFlcH548rX8xVVC7loASIuqvgTEs K1Z4KzTIrUwcebR+wOmSyI/e6Ttx2sAVMd268j2DFcaOpHjUMos= -----END CERTIFICATE-----Generated at Wed Jul 2 11:33:15 2025 by rpki-client