$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft File: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft (raw, json) Hash identifier: EUVS3pjhGszrqe5OlVVsaPYFZjEryTS1Eswme3gGS4w= Subject key identifier: A0:BF:E2:FC:19:4A:2B:55:FB:C7:FA:6A:F2:C0:FA:31:09:BF:CE:99 Authority key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 Certificate issuer: /CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Certificate serial: 419DD4C3C36D263B3A0BEDA1B100E4155005C712 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft Manifest number: 04E4 Signing time: Thu 03 Jul 2025 17:12:08 +0000 Manifest this update: Thu 03 Jul 2025 17:07:08 +0000 Manifest next update: Sun 06 Jul 2025 20:14:08 +0000 Files and hashes: 1: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: aezyzCcGyqe7zpkvtIU/eZ/H5lzYV15JrdWQKNqGiws=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl (hash: ygphbZhTQks1YH5M8FQz216yoqt+MxNVz58CcET6XbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 20:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9d:d4:c3:c3:6d:26:3b:3a:0b:ed:a1:b1:00:e4:15:50:05:c7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Validity Not Before: Jul 3 17:07:08 2025 GMT Not After : Jul 6 20:14:08 2025 GMT Subject: CN=A0BFE2FC194A2B55FBC7FA6AF2C0FA3109BFCE99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:8d:4d:a2:6c:1e:0f:3b:a3:b2:35:ba:02: 41:ec:77:fe:38:6f:df:96:ed:eb:cc:9f:ee:5e:1c: bb:db:fa:ea:49:24:b6:90:a9:41:48:2c:83:60:d5: 8a:2e:51:bf:2e:84:c2:74:ca:dd:5d:ff:15:e7:50: 97:77:c0:ae:47:d7:3b:3b:01:b8:98:74:b6:f6:51: bd:e9:5c:81:43:9f:61:f6:3e:dc:f3:1c:82:03:aa: ad:b0:cc:2d:50:6f:4f:6c:53:4d:e2:89:47:49:24: 64:ab:e2:5d:de:f5:17:ae:3a:dd:14:c6:b4:7a:69: 83:70:b1:5b:38:5d:3f:bb:ed:07:2b:6e:7f:cf:fa: 4c:95:a1:ed:4d:7c:4d:dc:fc:ff:55:0a:7a:a2:47: a0:0a:51:cf:ef:bc:72:89:4f:ee:5b:41:ce:00:f8: 35:08:2f:91:37:67:e2:5f:31:4c:66:e4:e9:f9:5e: 07:4e:50:d5:33:27:31:cb:c6:2e:f9:38:60:b4:66: 01:13:fe:09:75:a8:24:eb:15:d2:49:94:76:91:ad: b1:7d:80:ec:2c:c2:24:9b:06:c5:fa:a6:ec:b8:7c: 6f:fc:cf:49:1c:62:88:97:99:a8:b1:e4:26:f5:db: 00:4b:e9:e6:b9:9b:f9:bc:cb:6a:7c:11:73:a2:f0: 6c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BF:E2:FC:19:4A:2B:55:FB:C7:FA:6A:F2:C0:FA:31:09:BF:CE:99 X509v3 Authority Key Identifier: keyid:55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6e:e5:83:ed:f8:a1:bd:b4:f6:c6:83:d2:91:24:7e:22:58: a0:f1:0f:43:51:ea:88:cc:d0:fc:cb:8d:2f:1f:9a:bb:10:52: 98:a9:bd:f4:ee:a8:a6:56:ee:1b:ea:26:16:50:4e:68:1c:26: c4:d5:03:e8:7e:9c:17:f8:2a:b3:9f:66:10:a3:72:0e:a9:30: 7e:b0:b7:9b:0d:70:13:b5:97:33:74:11:73:d1:05:bb:7c:41: d4:2f:26:57:c1:80:7d:b2:18:25:eb:56:c6:9a:43:cd:1e:dd: 12:88:98:14:00:c3:0b:f7:e7:ae:64:96:cd:bd:87:7f:8e:78: c7:7f:6d:1e:57:a9:bd:e7:c4:7f:46:e7:c8:fe:3e:94:38:81: a4:56:45:f5:39:16:72:86:60:ca:65:54:42:15:21:ce:68:07: 45:71:60:12:27:49:e7:4f:e3:76:0f:c6:f8:41:36:f1:dc:40: 49:e3:70:d1:02:47:8f:f8:e1:54:6a:7a:21:14:c6:c7:01:2d: b1:44:32:29:60:a9:06:c3:a7:65:44:cf:66:ea:00:f5:5a:ce: 39:63:4c:57:a0:d5:76:97:20:ea:64:a4:8e:99:0e:5a:4e:1d: 5e:fb:26:ed:9c:46:91:1c:b8:72:ea:9e:b6:ad:ff:1a:fb:b0: 30:1e:6e:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZ3Uw8NtJjs6C+2hsQDkFVAFxxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2 MEQ0Q0Y5MjAeFw0yNTA3MDMxNzA3MDhaFw0yNTA3MDYyMDE0MDhaMDMxMTAvBgNV BAMTKEEwQkZFMkZDMTk0QTJCNTVGQkM3RkE2QUYyQzBGQTMxMDlCRkNFOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RI1NomweDzujsjW6AkHsd/44 b9+W7evMn+5eHLvb+upJJLaQqUFILINg1YouUb8uhMJ0yt1d/xXnUJd3wK5H1zs7 AbiYdLb2Ub3pXIFDn2H2PtzzHIIDqq2wzC1Qb09sU03iiUdJJGSr4l3e9ReuOt0U xrR6aYNwsVs4XT+77Qcrbn/P+kyVoe1NfE3c/P9VCnqiR6AKUc/vvHKJT+5bQc4A +DUIL5E3Z+JfMUxm5On5XgdOUNUzJzHLxi75OGC0ZgET/gl1qCTrFdJJlHaRrbF9 gOwswiSbBsX6puy4fG/8z0kcYoiXmaix5Cb12wBL6ea5m/m8y2p8EXOi8GyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoL/i/BlKK1X7x/pq8sD6MQm/zpkwHwYDVR0j BBgwFoAUVeecHWCxLljRIbJlymfAvWDUz5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMS81NUU3OUMxRDYw QjEyRTU4RDEyMUIyNjVDQTY3QzBCRDYwRDRDRjkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2MEQ0 Q0Y5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0Mw QkQ2MEQ0Q0Y5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1u5YPt+KG9tPbGg9KRJH4iWKDxD0NR6ojM 0PzLjS8fmrsQUpipvfTuqKZW7hvqJhZQTmgcJsTVA+h+nBf4KrOfZhCjcg6pMH6w t5sNcBO1lzN0EXPRBbt8QdQvJlfBgH2yGCXrVsaaQ80e3RKImBQAwwv3565kls29 h3+OeMd/bR5Xqb3nxH9G58j+PpQ4gaRWRfU5FnKGYMplVEIVIc5oB0VxYBInSedP 43YPxvhBNvHcQEnjcNECR4/44VRqeiEUxscBLbFEMilgqQbDp2VEz2bqAPVazjlj TFeg1XaXIOpkpI6ZDlpOHV77Ju2cRpEcuHLqnrat/xr7sDAebkU= -----END CERTIFICATE-----Generated at Fri Jul 4 09:53:45 2025 by rpki-client