$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft File: 755B61748263D4DD472C69CA7F1847254B03EBBC.mft (raw, json) Hash identifier: Dulr21IwIUbDeIAwhShmVT3Viy376ruEzcTgMzymVL4= Subject key identifier: 0B:A4:43:BE:7C:FF:78:3F:B0:D4:F1:32:93:46:9E:F4:5E:93:E7:4A Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC Certificate issuer: /CN=755B61748263D4DD472C69CA7F1847254B03EBBC Certificate serial: 5724B8A346B653583E4C650713DC4516C32960AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft Manifest number: 01E1 Signing time: Sun 19 Oct 2025 05:01:12 +0000 Manifest this update: Sun 19 Oct 2025 04:56:12 +0000 Manifest next update: Wed 22 Oct 2025 05:19:12 +0000 Files and hashes: 1: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: NW99gB8qCJlT/OObHXKO0PNmXnjOgR9bEy3lZQmrUX8=) 2: 755B61748263D4DD472C69CA7F1847254B03EBBC.crl (hash: WGALzCM6fNPTqS623ggwStpegquYFkjUMf85fRvd/c0=) 3: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: 0YXLtWcrQqo3QF47I+KQwYusKJlUjyP7HqEp9u0fOCY=) 4: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: O/zlYAvAs7v4wgG3NM581/meU2MKG9Ug+TtqOP46WoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:24:b8:a3:46:b6:53:58:3e:4c:65:07:13:dc:45:16:c3:29:60:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC Validity Not Before: Oct 19 04:56:12 2025 GMT Not After : Oct 22 05:19:12 2025 GMT Subject: CN=0BA443BE7CFF783FB0D4F13293469EF45E93E74A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:76:79:55:ed:c4:eb:de:3c:12:07:dd:55:e3: 72:31:59:7d:07:47:ef:01:0a:77:e6:44:38:53:4f: 42:44:fd:f7:5f:1b:c7:95:e9:ed:2c:13:76:ac:dc: c4:29:aa:95:7b:8d:de:f6:4c:23:fa:07:0c:e2:d9: 21:49:6f:0f:df:22:76:e7:07:62:96:1f:38:bd:7e: f3:eb:05:dc:46:fb:92:55:af:74:10:4b:a9:f8:2d: a1:b3:fc:73:61:68:0d:75:1c:4c:2d:10:7b:b1:d5: 8b:26:68:93:3a:67:43:a2:1f:3a:52:82:79:2f:2c: 9c:ad:8c:7d:a5:70:17:83:6c:f1:78:27:bd:23:86: 60:db:66:46:4d:30:cc:99:cc:03:25:69:47:d7:bb: b1:5d:e6:5f:70:2f:de:23:3b:2f:2e:e2:e2:47:52: 82:3a:b7:81:cc:e9:a4:38:e1:7a:db:cb:c9:d4:a1: b9:e9:f0:71:b3:1c:c4:db:ac:6e:94:7e:71:18:6a: 09:12:f7:ce:93:22:f4:1d:32:bf:f7:bb:3d:e4:f4: 32:23:73:e1:de:86:43:f7:02:4a:77:7e:82:71:90: 1b:b3:84:21:b8:e1:02:d6:d7:c4:c8:ef:77:5d:78: be:21:e5:82:eb:9a:c8:b0:3b:23:ca:da:6a:f6:d2: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A4:43:BE:7C:FF:78:3F:B0:D4:F1:32:93:46:9E:F4:5E:93:E7:4A X509v3 Authority Key Identifier: keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c4:7b:46:ea:ae:19:0f:f6:0d:d0:fb:b8:52:97:d7:73:85: 2f:dc:07:28:7f:7d:88:69:57:42:eb:b8:03:f7:db:a9:69:57: 46:43:ad:5d:9a:26:c4:b4:59:4f:09:6f:ca:bc:db:7c:79:ea: a1:b3:a5:73:a7:14:c6:d9:71:43:7f:57:b3:e0:30:98:29:c8: aa:36:e1:73:35:94:65:e8:9d:ea:15:fc:54:27:58:f1:ef:e0: 1a:4c:11:2c:7c:d5:82:1e:9a:3d:34:88:33:36:98:4d:7c:41: 7c:02:e4:b9:81:3f:49:a3:c6:b9:76:e1:50:ba:81:99:71:00: a0:ba:b3:4d:ab:20:ff:11:e9:49:29:3c:6f:ba:ef:30:81:6a: 42:98:d5:be:e4:f2:ac:8b:ee:07:f0:1a:8b:5a:29:a5:9f:8a: dd:99:1a:65:cf:dd:77:4a:ad:ca:38:43:a0:4b:0c:8c:47:3d: c1:af:fb:11:f9:6e:a1:3b:ec:dd:53:e3:95:8b:ac:18:41:4a: ba:0d:d8:e9:76:64:5c:bd:01:a9:f9:c0:a9:de:9e:59:a0:ab: 35:38:a4:d6:6e:fc:f5:b5:6f:78:81:18:c0:7a:4b:76:40:ad: 3b:2f:3c:41:e0:60:8b:77:b2:5b:86:68:54:ac:bb:4f:bb:5b: 19:26:5d:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyS4o0a2U1g+TGUHE9xFFsMpYK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0 QjAzRUJCQzAeFw0yNTEwMTkwNDU2MTJaFw0yNTEwMjIwNTE5MTJaMDMxMTAvBgNV BAMTKDBCQTQ0M0JFN0NGRjc4M0ZCMEQ0RjEzMjkzNDY5RUY0NUU5M0U3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndnlV7cTr3jwSB91V43IxWX0H R+8BCnfmRDhTT0JE/fdfG8eV6e0sE3as3MQpqpV7jd72TCP6Bwzi2SFJbw/fInbn B2KWHzi9fvPrBdxG+5JVr3QQS6n4LaGz/HNhaA11HEwtEHux1YsmaJM6Z0OiHzpS gnkvLJytjH2lcBeDbPF4J70jhmDbZkZNMMyZzAMlaUfXu7Fd5l9wL94jOy8u4uJH UoI6t4HM6aQ44Xrby8nUobnp8HGzHMTbrG6UfnEYagkS986TIvQdMr/3uz3k9DIj c+HehkP3Akp3foJxkBuzhCG44QLW18TI73ddeL4h5YLrmsiwOyPK2mr20sXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC6RDvnz/eD+w1PEyk0ae9F6T50owHwYDVR0j BBgwFoAUdVthdIJj1N1HLGnKfxhHJUsD67wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTQ2MDdmMC0xNzAxLTQ5YjEtOTFmZi1iMWJlZDVjYmRlZDEvMC83NTVCNjE3NDgy NjNENERENDcyQzY5Q0E3RjE4NDcyNTRCMDNFQkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0QjAz RUJCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAtMTcwMS00OWIxLTkx ZmYtYjFiZWQ1Y2JkZWQxLzAvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3 MjU0QjAzRUJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzEe0bqrhkP9g3Q+7hSl9dzhS/cByh/fYhp V0LruAP326lpV0ZDrV2aJsS0WU8Jb8q823x56qGzpXOnFMbZcUN/V7PgMJgpyKo2 4XM1lGXoneoV/FQnWPHv4BpMESx81YIemj00iDM2mE18QXwC5LmBP0mjxrl24VC6 gZlxAKC6s02rIP8R6UkpPG+67zCBakKY1b7k8qyL7gfwGotaKaWfit2ZGmXP3XdK rco4Q6BLDIxHPcGv+xH5bqE77N1T45WLrBhBSroN2Ol2ZFy9Aan5wKnenlmgqzU4 pNZu/PW1b3iBGMB6S3ZArTsvPEHgYIt3sluGaFSsu0+7WxkmXSM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:36 2025 by rpki-client