$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft File: 755B61748263D4DD472C69CA7F1847254B03EBBC.mft (raw, json) Hash identifier: pmXEY7N7S7Lva9RpjrFlPpjgj9I43zquL2qUZjBuJEo= Subject key identifier: A0:76:D3:BD:D7:FC:4F:D0:BF:32:41:77:9B:0B:9D:3D:23:9B:75:0A Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC Certificate issuer: /CN=755B61748263D4DD472C69CA7F1847254B03EBBC Certificate serial: 3C0E1394D035866E7DF87B7CE2BBC5120E98C769 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft Manifest number: 0197 Signing time: Fri 09 May 2025 14:41:12 +0000 Manifest this update: Fri 09 May 2025 14:36:12 +0000 Manifest next update: Mon 12 May 2025 23:32:12 +0000 Files and hashes: 1: 755B61748263D4DD472C69CA7F1847254B03EBBC.crl (hash: CKVAUlHexiHxmw3/IzSwJDyH6ZJMLTA/tDSwluBdOl0=) 2: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: X1fxET2zqe42Jssm0L2zWkWMpofWKObR83jJ1RUDeIA=) 3: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: xydWJV4FL+B55nYYX4HSLXqdjHeafDBY82XL44amtyo=) 4: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: DAvm8lRIaAY0XIz4SwbtJvL9yWurm8Bc/AdxnRRoc6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 23:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0e:13:94:d0:35:86:6e:7d:f8:7b:7c:e2:bb:c5:12:0e:98:c7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC Validity Not Before: May 9 14:36:12 2025 GMT Not After : May 12 23:32:12 2025 GMT Subject: CN=A076D3BDD7FC4FD0BF3241779B0B9D3D239B750A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:32:45:ed:0d:e2:17:3a:93:8c:c2:cc:da: e0:69:58:42:be:9f:f3:86:a3:63:49:ea:49:f0:58: e9:73:f4:d5:de:e9:b6:98:29:11:82:f8:70:30:1e: ff:c8:44:94:3d:42:2e:d0:92:d5:8c:07:c4:8a:ae: 38:c7:a8:18:6e:64:6d:ed:48:bf:f6:9c:f6:a1:20: ba:4a:5d:93:ad:ed:0a:82:a5:89:49:ff:3c:5e:cc: df:89:3c:f7:6b:d7:15:e4:f0:c8:dc:60:32:cc:dc: 0c:99:d9:90:7c:c2:e7:8a:50:1b:e0:6c:96:2b:66: 7f:b6:91:7d:ae:d4:72:bf:fb:90:10:09:b1:31:15: d7:d7:8c:0d:47:ed:19:e2:76:91:2a:14:c5:3b:4e: 60:8e:80:69:44:53:e4:a8:f2:b0:81:4c:62:55:51: 61:f2:87:f0:db:b0:bc:eb:2c:ec:d4:0a:49:07:d2: b9:1f:b3:43:d1:69:e4:df:5b:29:e4:2a:f4:52:6f: a2:7f:fd:03:7b:df:7a:d1:c4:f3:7d:34:b8:47:90: aa:1f:46:e8:7e:66:9f:1e:31:8e:ec:70:23:1f:bf: 4f:70:d7:b7:66:0e:b2:0d:ff:1b:68:e3:29:09:5f: 29:00:98:07:bf:eb:b9:9a:a6:29:43:de:22:94:54: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:76:D3:BD:D7:FC:4F:D0:BF:32:41:77:9B:0B:9D:3D:23:9B:75:0A X509v3 Authority Key Identifier: keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:4d:45:df:c4:f5:7d:f7:78:c1:f2:83:3a:b1:46:f4:23:25: 5d:26:39:61:f7:04:58:92:76:a2:5e:be:e7:8d:bd:c9:89:7c: 5f:0f:3c:99:79:80:c1:8b:b7:95:25:d6:be:d5:04:37:f2:77: ec:fb:21:5e:c4:06:a5:7f:6b:9e:63:38:f6:8a:74:f6:c7:0f: 8e:4e:86:fa:c9:33:28:4b:47:86:21:1e:19:63:31:86:79:31: bf:b7:b1:a0:a2:44:95:6d:ed:6e:93:b9:65:c3:9b:8f:da:f9: de:8d:50:4c:00:97:a4:dc:a2:36:f5:8b:43:76:3c:c8:df:5d: 2d:5a:7d:26:26:85:a4:6f:ed:32:36:f3:c0:77:03:52:95:94: fb:9a:cc:07:47:2a:f5:e8:75:51:80:70:41:9a:34:54:52:d1: a1:e9:8b:ff:9e:f2:e8:2c:0a:3e:d2:56:1f:04:85:0c:84:1e: e9:46:61:fa:66:48:bd:c0:9c:d4:bb:cf:32:b8:9e:b1:7f:3c: 34:f4:59:25:27:c9:15:cc:f7:9e:cb:48:b3:d1:cb:a1:34:68: d6:ae:ff:f4:d4:38:4e:7a:7e:83:0c:42:11:e6:da:42:1a:fc: e2:36:29:0f:0e:c3:c9:2c:da:1a:a4:35:b0:3e:e6:d3:dc:d2: 24:9f:56:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPA4TlNA1hm59+Ht84rvFEg6Yx2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0 QjAzRUJCQzAeFw0yNTA1MDkxNDM2MTJaFw0yNTA1MTIyMzMyMTJaMDMxMTAvBgNV BAMTKEEwNzZEM0JERDdGQzRGRDBCRjMyNDE3NzlCMEI5RDNEMjM5Qjc1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhTJF7Q3iFzqTjMLM2uBpWEK+ n/OGo2NJ6knwWOlz9NXe6baYKRGC+HAwHv/IRJQ9Qi7QktWMB8SKrjjHqBhuZG3t SL/2nPahILpKXZOt7QqCpYlJ/zxezN+JPPdr1xXk8MjcYDLM3AyZ2ZB8wueKUBvg bJYrZn+2kX2u1HK/+5AQCbExFdfXjA1H7RnidpEqFMU7TmCOgGlEU+So8rCBTGJV UWHyh/DbsLzrLOzUCkkH0rkfs0PRaeTfWynkKvRSb6J//QN733rRxPN9NLhHkKof Ruh+Zp8eMY7scCMfv09w17dmDrIN/xto4ykJXykAmAe/67mapilD3iKUVNOVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoHbTvdf8T9C/MkF3mwudPSObdQowHwYDVR0j BBgwFoAUdVthdIJj1N1HLGnKfxhHJUsD67wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTQ2MDdmMC0xNzAxLTQ5YjEtOTFmZi1iMWJlZDVjYmRlZDEvMC83NTVCNjE3NDgy NjNENERENDcyQzY5Q0E3RjE4NDcyNTRCMDNFQkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0QjAz RUJCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAtMTcwMS00OWIxLTkx ZmYtYjFiZWQ1Y2JkZWQxLzAvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3 MjU0QjAzRUJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlNRd/E9X33eMHygzqxRvQjJV0mOWH3BFiS dqJevueNvcmJfF8PPJl5gMGLt5Ul1r7VBDfyd+z7IV7EBqV/a55jOPaKdPbHD45O hvrJMyhLR4YhHhljMYZ5Mb+3saCiRJVt7W6TuWXDm4/a+d6NUEwAl6Tcojb1i0N2 PMjfXS1afSYmhaRv7TI288B3A1KVlPuazAdHKvXodVGAcEGaNFRS0aHpi/+e8ugs Cj7SVh8EhQyEHulGYfpmSL3AnNS7zzK4nrF/PDT0WSUnyRXM957LSLPRy6E0aNau //TUOE56foMMQhHm2kIa/OI2KQ8Ow8ks2hqkNbA+5tPc0iSfVug= -----END CERTIFICATE-----Generated at Sun May 11 04:26:47 2025 by rpki-client