$ rpki-client -vvf repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft File: 55E6BB135AC9BBBAE2176BD965557D56603814B9.mft (raw, json) Hash identifier: MJGHva3SDP0NGHjf7/obaO6/E597mMY0sPHFPGYGLnk= Subject key identifier: 0E:3C:E9:43:DA:53:80:73:1B:3B:6E:D4:A1:8F:80:86:02:64:AF:18 Authority key identifier: 55:E6:BB:13:5A:C9:BB:BA:E2:17:6B:D9:65:55:7D:56:60:38:14:B9 Certificate issuer: /CN=55E6BB135AC9BBBAE2176BD965557D56603814B9 Certificate serial: 238ED2B302E6C7866413C877E272A0D63D2C8A32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55E6BB135AC9BBBAE2176BD965557D56603814B9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft Manifest number: 0258 Signing time: Sat 18 Oct 2025 21:51:25 +0000 Manifest this update: Sat 18 Oct 2025 21:46:25 +0000 Manifest next update: Wed 22 Oct 2025 09:31:25 +0000 Files and hashes: 1: 55E6BB135AC9BBBAE2176BD965557D56603814B9.crl (hash: Uddr/2oNn74nQym0Jivj6WLdroJvc9LeYqMn5gQGwOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.crl rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55E6BB135AC9BBBAE2176BD965557D56603814B9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:8e:d2:b3:02:e6:c7:86:64:13:c8:77:e2:72:a0:d6:3d:2c:8a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E6BB135AC9BBBAE2176BD965557D56603814B9 Validity Not Before: Oct 18 21:46:25 2025 GMT Not After : Oct 22 09:31:25 2025 GMT Subject: CN=0E3CE943DA5380731B3B6ED4A18F80860264AF18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:d6:fd:a6:69:7e:ac:80:26:1b:f2:b5:05: 82:eb:4d:49:7d:50:20:91:59:e0:ff:10:ef:3b:05: b7:00:63:c0:43:74:e8:4f:73:57:91:95:62:b5:c4: 1d:2d:4d:b9:40:90:df:65:b0:44:79:82:be:c8:de: 94:25:3e:29:3e:42:fd:2a:77:67:86:45:e3:47:f3: 55:cf:5c:dc:5b:4f:b0:bc:29:94:99:bd:9e:ce:f5: f0:51:57:30:18:89:74:28:fc:97:f1:45:a9:94:f1: 85:c3:94:03:0a:3a:2e:3e:bc:f6:c6:0d:26:91:9f: 2d:2d:b4:90:25:66:9c:e9:05:4d:aa:6d:3c:cb:a4: 08:4d:86:5e:25:b5:1d:20:a1:c5:cf:3b:b4:4e:88: 1b:77:d5:30:c5:28:ca:21:ec:ed:80:42:c9:2d:4d: c6:a4:20:5a:e0:ea:3d:ea:ad:19:3c:5b:23:af:5e: cc:ba:b3:46:d1:1a:54:d1:71:a4:58:30:03:40:09: 44:b7:e9:cb:0f:7a:15:1c:90:1a:82:b9:d8:31:cf: c0:b3:20:9a:e7:55:a2:4f:81:25:0c:e8:47:31:b9: c4:35:20:5b:a4:fa:13:0a:65:c4:6f:a4:66:58:dc: 92:f4:97:0f:23:be:1d:bf:4e:bd:69:9b:9b:d8:dd: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3C:E9:43:DA:53:80:73:1B:3B:6E:D4:A1:8F:80:86:02:64:AF:18 X509v3 Authority Key Identifier: keyid:55:E6:BB:13:5A:C9:BB:BA:E2:17:6B:D9:65:55:7D:56:60:38:14:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55E6BB135AC9BBBAE2176BD965557D56603814B9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:da:54:0f:d8:ae:13:6a:50:13:38:08:bf:29:0a:4d:f4:6a: 3a:5f:04:32:f1:6a:32:b0:e2:69:84:92:a9:5b:35:c2:ec:a1: 87:19:54:45:e9:9d:22:6b:e7:86:3f:b4:d0:39:b2:1a:ee:a9: a1:73:9d:19:ad:b9:d3:36:a7:45:ce:be:23:1e:67:91:0b:eb: d4:66:7e:86:b3:4a:38:c5:59:09:f9:3e:b0:6d:31:72:41:0c: f6:72:d3:fa:12:4b:f3:b9:a9:a1:70:8a:f7:f2:7f:f0:47:e9: 43:0c:44:5a:ad:d7:cf:b7:3a:df:a1:93:0a:e6:bd:6a:5b:23: ef:0d:21:62:32:2b:16:16:a3:c4:df:aa:15:e8:85:92:e5:21: ef:88:3b:67:ba:a0:c3:2d:df:cc:3b:dc:e2:58:86:3f:dd:b8: 9a:dd:18:d4:18:20:62:65:a9:84:54:e3:11:69:ff:05:6e:df: a3:e6:0e:2d:7d:bf:12:15:39:9f:be:41:30:9a:4a:62:82:2a: ec:4c:74:ca:0b:06:d6:48:8a:3e:30:e7:97:97:4a:f5:78:a4: 55:eb:98:c0:c6:02:87:da:9b:51:45:8f:51:10:db:35:3e:81: 62:38:9d:58:82:c4:09:7d:00:a7:18:28:79:66:ca:c2:c4:e1: 2d:a1:ec:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI47SswLmx4ZkE8h34nKg1j0sijIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNkJCMTM1QUM5QkJCQUUyMTc2QkQ5NjU1NTdENTY2 MDM4MTRCOTAeFw0yNTEwMTgyMTQ2MjVaFw0yNTEwMjIwOTMxMjVaMDMxMTAvBgNV BAMTKDBFM0NFOTQzREE1MzgwNzMxQjNCNkVENEExOEY4MDg2MDI2NEFGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSFdb9pml+rIAmG/K1BYLrTUl9 UCCRWeD/EO87BbcAY8BDdOhPc1eRlWK1xB0tTblAkN9lsER5gr7I3pQlPik+Qv0q d2eGReNH81XPXNxbT7C8KZSZvZ7O9fBRVzAYiXQo/JfxRamU8YXDlAMKOi4+vPbG DSaRny0ttJAlZpzpBU2qbTzLpAhNhl4ltR0gocXPO7ROiBt31TDFKMoh7O2AQskt TcakIFrg6j3qrRk8WyOvXsy6s0bRGlTRcaRYMANACUS36csPehUckBqCudgxz8Cz IJrnVaJPgSUM6EcxucQ1IFuk+hMKZcRvpGZY3JL0lw8jvh2/Tr1pm5vY3bTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDjzpQ9pTgHMbO27UoY+AhgJkrxgwHwYDVR0j BBgwFoAUVea7E1rJu7riF2vZZVV9VmA4FLkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTQ0YTcyNi03MDdjLTQ5ZTItYmZjZS05YjVlZWYxZWVkNGUvMC81NUU2QkIxMzVB QzlCQkJBRTIxNzZCRDk2NTU1N0Q1NjYwMzgxNEI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTVFNkJCMTM1QUM5QkJCQUUyMTc2QkQ5NjU1NTdENTY2MDM4 MTRCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0NGE3MjYtNzA3Yy00OWUyLWJm Y2UtOWI1ZWVmMWVlZDRlLzAvNTVFNkJCMTM1QUM5QkJCQUUyMTc2QkQ5NjU1NTdE NTY2MDM4MTRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETaVA/YrhNqUBM4CL8pCk30ajpfBDLxajKw 4mmEkqlbNcLsoYcZVEXpnSJr54Y/tNA5shruqaFznRmtudM2p0XOviMeZ5EL69Rm foazSjjFWQn5PrBtMXJBDPZy0/oSS/O5qaFwivfyf/BH6UMMRFqt18+3Ot+hkwrm vWpbI+8NIWIyKxYWo8TfqhXohZLlIe+IO2e6oMMt38w73OJYhj/duJrdGNQYIGJl qYRU4xFp/wVu36PmDi19vxIVOZ++QTCaSmKCKuxMdMoLBtZIij4w55eXSvV4pFXr mMDGAofam1FFj1EQ2zU+gWI4nViCxAl9AKcYKHlmysLE4S2h7DU= -----END CERTIFICATE-----Generated at Mon Oct 20 20:17:55 2025 by rpki-client