$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft File: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft (raw, json) Hash identifier: Aha2MptNfYq7EVjYlNf1jVSV5+MOSvBHDS9xgR5EFfc= Subject key identifier: 00:F9:9A:E2:F2:82:C1:1A:DF:4E:14:77:09:66:FE:9B:21:29:16:0D Authority key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 Certificate issuer: /CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Certificate serial: 50CA0E4F04DAD8C2B56CCE9B5ABCF7CFA129256C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft Manifest number: 04FA Signing time: Fri 22 Aug 2025 04:52:16 +0000 Manifest this update: Fri 22 Aug 2025 04:47:16 +0000 Manifest next update: Mon 25 Aug 2025 16:14:16 +0000 Files and hashes: 1: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl (hash: 1C694E6Ju9yZnDWRgfjaSPpbqqEQx3rnpfT8FwlNy80=) 2: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: aezyzCcGyqe7zpkvtIU/eZ/H5lzYV15JrdWQKNqGiws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ca:0e:4f:04:da:d8:c2:b5:6c:ce:9b:5a:bc:f7:cf:a1:29:25:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Validity Not Before: Aug 22 04:47:16 2025 GMT Not After : Aug 25 16:14:16 2025 GMT Subject: CN=00F99AE2F282C11ADF4E14770966FE9B2129160D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:09:9a:be:f3:7a:4b:49:3c:d7:cb:e0:53: 22:f8:d6:14:42:3a:b5:ba:14:7f:f5:89:b9:92:65: e2:e2:72:e4:ba:55:c9:a2:83:b0:67:30:2d:83:cc: d0:84:0f:8d:2b:35:e5:c9:85:c6:34:93:3e:71:d6: a7:c3:dd:2b:7f:0f:e6:86:8f:4d:c9:72:3f:e5:56: e3:1a:a3:d8:ed:82:67:cc:59:49:47:24:5c:da:2b: c1:1e:47:f9:46:04:0d:c0:c4:e5:c7:dd:85:4b:1c: 30:68:32:a9:2a:34:ae:a3:2f:08:07:1c:f3:5d:94: a9:21:76:3a:6d:d8:76:7b:90:cd:df:18:19:16:06: 7d:79:3d:d1:d9:98:51:85:aa:79:df:98:62:4b:26: 00:b5:61:61:17:02:2a:45:b2:a0:7a:78:d6:b4:00: 41:a8:e1:3c:ff:db:23:3d:d9:9c:b2:5a:42:2d:00: 59:6b:1b:71:55:12:cb:cc:3f:3b:91:27:55:e5:4e: 6c:44:e8:86:c6:a2:e7:3e:2f:ad:b7:99:c0:a7:6a: f3:23:3e:30:bb:2a:12:48:22:6b:db:fd:19:89:b9: ba:f6:86:be:7d:a2:cf:00:1a:76:6e:2f:f6:6f:e2: 86:99:61:d6:05:e3:3f:1c:a8:7a:b5:2d:08:55:4c: 62:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F9:9A:E2:F2:82:C1:1A:DF:4E:14:77:09:66:FE:9B:21:29:16:0D X509v3 Authority Key Identifier: keyid:55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:63:65:80:02:9c:68:99:bb:0c:88:91:6a:4c:74:96:57:7b: b0:81:73:f7:87:1f:a3:3d:b8:f3:c8:4f:f5:26:39:3d:72:85: 7e:a9:a8:7c:c3:f6:b1:4d:e4:67:27:83:d4:41:f6:69:a6:9b: 66:7b:37:1f:42:5c:82:06:6f:cb:11:55:5e:cc:37:00:4d:8d: a0:a0:60:04:47:34:9d:ef:29:1e:53:a5:24:2f:3e:11:d9:5f: 28:14:96:91:66:2c:a7:01:d7:7e:58:8c:39:5e:03:60:ce:b7: 45:58:46:a9:a8:e0:20:fe:61:97:2a:ed:c2:fb:cb:c6:41:b9: b6:35:cf:1f:7a:2e:f1:fe:3a:7f:2d:56:95:80:fb:29:93:f0: 5f:7c:16:29:98:ff:b5:bb:30:cf:d8:29:7e:0c:c6:93:23:71: 14:f5:d3:34:1e:45:13:21:a4:b1:10:8b:4e:66:67:9c:4b:49: 46:fc:0b:14:14:3a:85:b1:06:b1:59:a0:4a:59:88:5c:22:d8: 62:2c:0c:7d:74:18:04:20:63:c6:c8:73:ce:71:b1:bc:35:7f: d7:f1:65:67:34:05:5a:5d:60:26:36:67:5f:43:02:ef:cd:82: 6c:8e:26:41:31:c6:bf:9b:39:09:43:be:2a:62:4f:92:37:be: 30:58:ae:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUMoOTwTa2MK1bM6bWrz3z6EpJWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2 MEQ0Q0Y5MjAeFw0yNTA4MjIwNDQ3MTZaFw0yNTA4MjUxNjE0MTZaMDMxMTAvBgNV BAMTKDAwRjk5QUUyRjI4MkMxMUFERjRFMTQ3NzA5NjZGRTlCMjEyOTE2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3gmavvN6S0k818vgUyL41hRC OrW6FH/1ibmSZeLicuS6Vcmig7BnMC2DzNCED40rNeXJhcY0kz5x1qfD3St/D+aG j03Jcj/lVuMao9jtgmfMWUlHJFzaK8EeR/lGBA3AxOXH3YVLHDBoMqkqNK6jLwgH HPNdlKkhdjpt2HZ7kM3fGBkWBn15PdHZmFGFqnnfmGJLJgC1YWEXAipFsqB6eNa0 AEGo4Tz/2yM92ZyyWkItAFlrG3FVEsvMPzuRJ1XlTmxE6IbGouc+L623mcCnavMj PjC7KhJIImvb/RmJubr2hr59os8AGnZuL/Zv4oaZYdYF4z8cqHq1LQhVTGK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAPma4vKCwRrfThR3CWb+myEpFg0wHwYDVR0j BBgwFoAUVeecHWCxLljRIbJlymfAvWDUz5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMS81NUU3OUMxRDYw QjEyRTU4RDEyMUIyNjVDQTY3QzBCRDYwRDRDRjkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2MEQ0 Q0Y5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0Mw QkQ2MEQ0Q0Y5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxjZYACnGiZuwyIkWpMdJZXe7CBc/eHH6M9 uPPIT/UmOT1yhX6pqHzD9rFN5Gcng9RB9mmmm2Z7Nx9CXIIGb8sRVV7MNwBNjaCg YARHNJ3vKR5TpSQvPhHZXygUlpFmLKcB135YjDleA2DOt0VYRqmo4CD+YZcq7cL7 y8ZBubY1zx96LvH+On8tVpWA+ymT8F98FimY/7W7MM/YKX4MxpMjcRT10zQeRRMh pLEQi05mZ5xLSUb8CxQUOoWxBrFZoEpZiFwi2GIsDH10GAQgY8bIc85xsbw1f9fx ZWc0BVpdYCY2Z19DAu/NgmyOJkExxr+bOQlDvipiT5I3vjBYrvI= -----END CERTIFICATE-----Generated at Sun Aug 24 08:58:21 2025 by rpki-client