$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft File: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft (raw, json) Hash identifier: MK5PrFyizIDRaB0h5H+uhIk7QB150H8ybq+9FteSLsk= Subject key identifier: B7:5E:64:3A:60:5D:EA:FD:F9:A3:36:87:10:9F:F9:49:B5:BB:E8:DA Authority key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 Certificate issuer: /CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Certificate serial: 6D742935DEF5CD245CA6DD1EC2DAF3C225E93F43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft Manifest number: 0514 Signing time: Mon 20 Oct 2025 04:12:14 +0000 Manifest this update: Mon 20 Oct 2025 04:07:14 +0000 Manifest next update: Thu 23 Oct 2025 10:41:14 +0000 Files and hashes: 1: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: aezyzCcGyqe7zpkvtIU/eZ/H5lzYV15JrdWQKNqGiws=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl (hash: NBnSF4lC8esANgnmWmEtERyaetB8NoSfh41WUOBAOC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:74:29:35:de:f5:cd:24:5c:a6:dd:1e:c2:da:f3:c2:25:e9:3f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Validity Not Before: Oct 20 04:07:14 2025 GMT Not After : Oct 23 10:41:14 2025 GMT Subject: CN=B75E643A605DEAFDF9A33687109FF949B5BBE8DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:04:63:84:36:5a:96:42:95:fd:b9:67:b8:6d: d3:d0:82:84:5e:b9:bd:bf:28:f0:22:bf:6c:9e:ed: c4:4e:b9:0b:31:c7:e0:2e:57:50:d1:6f:83:3f:2f: d1:7b:b3:52:b3:04:89:54:cc:40:72:7f:b1:ac:b4: 3d:54:26:09:f6:c4:a3:a7:a4:c3:5b:9e:aa:0f:a7: d8:6b:55:d3:d0:cb:bb:1b:5b:91:a2:69:db:9c:73: 85:6c:c4:3a:2f:06:27:84:a0:67:ab:dc:64:6d:06: 81:91:52:94:11:b0:40:ee:b1:88:fb:dc:18:16:51: a3:5f:96:fd:99:ac:c3:09:f1:70:bc:b4:50:c2:e9: 80:3d:59:2b:19:b5:e0:8f:ad:a0:6c:6f:33:93:c9: 0f:2b:66:c1:a2:eb:ec:f8:7b:e1:5a:89:0e:d0:a7: 03:b7:f0:03:5a:79:a7:a8:71:e4:3d:93:30:26:c7: 31:4b:2a:b4:bd:25:eb:e3:7a:81:6e:fb:d7:80:ae: 48:ad:71:df:d6:cb:96:a9:d5:5d:8c:73:59:50:94: 71:28:7a:b6:5c:26:de:2c:86:f8:b8:c6:fe:44:20: 27:35:6f:8f:52:a7:2a:20:b0:11:cb:5c:ba:b6:fd: 1a:ac:65:62:87:e8:54:16:58:84:93:97:f0:b5:e9: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5E:64:3A:60:5D:EA:FD:F9:A3:36:87:10:9F:F9:49:B5:BB:E8:DA X509v3 Authority Key Identifier: keyid:55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c1:d2:46:1f:a6:85:2d:df:24:51:0d:c9:46:a0:c2:7b:36: 04:d8:7a:0d:1e:a4:95:f6:3f:78:c6:6b:d0:6e:0d:a0:dd:15: 2e:da:49:87:98:81:36:4c:4d:55:20:b1:bd:89:57:79:3b:ea: 12:af:b7:38:f9:08:79:dc:01:67:18:ec:46:00:e7:1a:cf:e4: 08:d8:38:70:25:47:38:0c:52:20:53:9a:b1:06:bc:e2:86:c0: 73:54:18:04:a4:ae:e6:12:7e:b5:9f:ff:c4:96:3c:9b:7c:f0: 05:2e:22:8c:89:c4:ee:6e:ab:c7:8f:b8:4d:77:00:02:c8:83: 16:86:ff:59:df:df:c6:c5:37:a5:e0:4a:09:e3:9f:4c:f1:91: a5:02:54:15:08:a1:b7:29:07:de:87:6d:79:4a:30:ff:07:21: 14:fb:49:97:87:9f:3c:f0:07:eb:89:aa:b7:b0:82:f9:90:73: ed:76:fe:f3:7c:dc:18:58:9d:bd:31:88:ea:29:6a:21:10:78: f2:d0:0a:2a:6d:6f:e6:be:f7:ab:88:9a:a8:23:16:97:82:8e: 4f:77:04:b2:b4:a0:8e:94:c8:61:15:9d:3d:4d:02:ab:63:67: 7f:25:de:e5:16:cc:8c:d3:51:64:88:5b:bd:de:f9:c0:7f:a7: 88:a1:23:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXQpNd71zSRcpt0ewtrzwiXpP0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2 MEQ0Q0Y5MjAeFw0yNTEwMjAwNDA3MTRaFw0yNTEwMjMxMDQxMTRaMDMxMTAvBgNV BAMTKEI3NUU2NDNBNjA1REVBRkRGOUEzMzY4NzEwOUZGOTQ5QjVCQkU4REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBGOENlqWQpX9uWe4bdPQgoRe ub2/KPAiv2ye7cROuQsxx+AuV1DRb4M/L9F7s1KzBIlUzEByf7GstD1UJgn2xKOn pMNbnqoPp9hrVdPQy7sbW5Giaducc4VsxDovBieEoGer3GRtBoGRUpQRsEDusYj7 3BgWUaNflv2ZrMMJ8XC8tFDC6YA9WSsZteCPraBsbzOTyQ8rZsGi6+z4e+FaiQ7Q pwO38ANaeaeoceQ9kzAmxzFLKrS9JevjeoFu+9eArkitcd/Wy5ap1V2Mc1lQlHEo erZcJt4shvi4xv5EICc1b49SpyogsBHLXLq2/RqsZWKH6FQWWISTl/C16SkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt15kOmBd6v35ozaHEJ/5SbW76NowHwYDVR0j BBgwFoAUVeecHWCxLljRIbJlymfAvWDUz5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMS81NUU3OUMxRDYw QjEyRTU4RDEyMUIyNjVDQTY3QzBCRDYwRDRDRjkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2MEQ0 Q0Y5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0Mw QkQ2MEQ0Q0Y5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfB0kYfpoUt3yRRDclGoMJ7NgTYeg0epJX2 P3jGa9BuDaDdFS7aSYeYgTZMTVUgsb2JV3k76hKvtzj5CHncAWcY7EYA5xrP5AjY OHAlRzgMUiBTmrEGvOKGwHNUGASkruYSfrWf/8SWPJt88AUuIoyJxO5uq8ePuE13 AALIgxaG/1nf38bFN6XgSgnjn0zxkaUCVBUIobcpB96HbXlKMP8HIRT7SZeHnzzw B+uJqrewgvmQc+12/vN83BhYnb0xiOopaiEQePLQCiptb+a+96uImqgjFpeCjk93 BLK0oI6UyGEVnT1NAqtjZ38l3uUWzIzTUWSIW73e+cB/p4ihIz0= -----END CERTIFICATE-----Generated at Tue Oct 21 12:01:02 2025 by rpki-client