$ rpki-client -vvf repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft File: 55E6BB135AC9BBBAE2176BD965557D56603814B9.mft (raw, json) Hash identifier: hJ1KjQHUfJwsbFPlJj8LrJvqtpS1m6E5JIemVonX0gc= Subject key identifier: F1:25:AC:6B:A0:9D:4E:3F:12:D2:BB:68:E3:8A:1A:71:95:25:6E:CD Authority key identifier: 55:E6:BB:13:5A:C9:BB:BA:E2:17:6B:D9:65:55:7D:56:60:38:14:B9 Certificate issuer: /CN=55E6BB135AC9BBBAE2176BD965557D56603814B9 Certificate serial: 22FB5A79F0D8633E27BD97B6B0F5BCB87CE4B55C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55E6BB135AC9BBBAE2176BD965557D56603814B9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft Manifest number: 0231 Signing time: Tue 22 Jul 2025 09:11:24 +0000 Manifest this update: Tue 22 Jul 2025 09:06:24 +0000 Manifest next update: Fri 25 Jul 2025 14:52:24 +0000 Files and hashes: 1: 55E6BB135AC9BBBAE2176BD965557D56603814B9.crl (hash: iPSVsceJFrvxBgshDlEnh8rIR5XvXcepwX5yRgLHkuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.crl rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55E6BB135AC9BBBAE2176BD965557D56603814B9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fb:5a:79:f0:d8:63:3e:27:bd:97:b6:b0:f5:bc:b8:7c:e4:b5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E6BB135AC9BBBAE2176BD965557D56603814B9 Validity Not Before: Jul 22 09:06:24 2025 GMT Not After : Jul 25 14:52:24 2025 GMT Subject: CN=F125AC6BA09D4E3F12D2BB68E38A1A7195256ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:05:09:97:81:e6:1d:4e:a6:1d:6e:b9:1b: 3e:74:66:1d:40:ed:24:59:e2:d3:b3:cf:17:a6:17: 41:74:81:20:fa:f3:cb:96:ba:b0:db:55:81:c5:1c: ed:99:26:93:22:a2:d4:ab:4a:8a:30:bc:b1:12:b3: 02:b0:fa:a2:ae:17:f7:1c:e3:92:a6:7d:da:62:bb: 44:d8:a5:0a:57:37:73:2e:85:dd:66:f4:37:ab:b8: 02:0b:b5:8b:76:97:a4:92:f3:21:13:0a:09:b0:59: 91:ce:20:ff:f2:6a:39:9d:06:4e:3c:24:a9:56:b7: 2c:4f:ca:48:84:59:da:07:6d:1e:17:7c:be:02:9d: 0b:02:33:aa:d9:91:d7:ae:aa:a1:17:8d:30:8b:a7: 21:e2:9f:94:cc:2b:ba:33:cf:c6:8a:54:d6:d7:e6: 35:7c:ce:dc:68:bd:7e:cc:71:e4:6e:9e:35:63:fb: 27:d4:fa:79:01:f2:c3:a8:2d:88:19:ad:49:6b:2f: 28:4d:e9:7f:4a:94:e1:5f:f3:6b:85:84:a1:5e:ca: 9d:ae:de:8a:08:5d:3d:f8:77:3e:5b:4c:aa:cc:95: 2a:aa:3f:38:1e:1d:ee:5a:31:1e:7e:d9:03:10:29: 29:e0:bb:9b:d9:f2:00:b6:bd:22:20:c0:20:13:8f: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:25:AC:6B:A0:9D:4E:3F:12:D2:BB:68:E3:8A:1A:71:95:25:6E:CD X509v3 Authority Key Identifier: keyid:55:E6:BB:13:5A:C9:BB:BA:E2:17:6B:D9:65:55:7D:56:60:38:14:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55E6BB135AC9BBBAE2176BD965557D56603814B9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/55E6BB135AC9BBBAE2176BD965557D56603814B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2f:72:35:14:a1:46:4c:08:11:38:19:a6:18:28:b3:5f:ed: c9:b8:7d:a8:d7:91:c2:3b:79:9a:b9:b5:d2:7a:c2:30:4e:de: 18:2f:11:64:ea:d7:30:d9:38:f3:79:09:d4:c2:e7:cb:8c:48: 91:f1:1d:ac:bd:57:ad:7c:6a:c5:a9:64:b5:d5:b3:67:8c:7b: 8c:c1:87:85:bf:c1:0c:c9:6d:72:ff:dd:92:f5:75:ce:59:45: c1:d3:b8:ae:1f:a3:42:6a:d4:82:85:82:57:23:cb:01:3a:be: dc:9b:2c:82:ce:0f:ce:6d:16:94:8f:37:c2:6e:2f:a6:e3:98: fe:15:f5:d8:3d:38:93:13:b3:fd:73:7c:0a:bf:78:cd:d7:e6: 3b:7e:11:9f:0e:0f:cc:31:de:1d:4a:82:64:be:91:14:75:b1: 94:d6:7d:ef:43:c3:3f:4f:19:ec:d1:5a:24:3c:d2:27:ad:cb: 95:b8:17:1a:c3:28:19:e1:77:dc:f3:a3:e9:23:f6:e4:a5:66: 61:bb:4b:53:56:ba:07:7b:d1:ba:8a:04:fe:9d:4d:6a:cb:ef: ea:08:d1:84:2f:35:ad:dc:51:4a:4c:a3:9a:52:cb:04:19:d0: bd:3e:74:81:82:0f:37:bf:f1:e3:3a:38:aa:bc:fc:e9:de:bb: 4b:17:47:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvtaefDYYz4nvZe2sPW8uHzktVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNkJCMTM1QUM5QkJCQUUyMTc2QkQ5NjU1NTdENTY2 MDM4MTRCOTAeFw0yNTA3MjIwOTA2MjRaFw0yNTA3MjUxNDUyMjRaMDMxMTAvBgNV BAMTKEYxMjVBQzZCQTA5RDRFM0YxMkQyQkI2OEUzOEExQTcxOTUyNTZFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXvAUJl4HmHU6mHW65Gz50Zh1A 7SRZ4tOzzxemF0F0gSD688uWurDbVYHFHO2ZJpMiotSrSoowvLESswKw+qKuF/cc 45Kmfdpiu0TYpQpXN3Muhd1m9DeruAILtYt2l6SS8yETCgmwWZHOIP/yajmdBk48 JKlWtyxPykiEWdoHbR4XfL4CnQsCM6rZkdeuqqEXjTCLpyHin5TMK7ozz8aKVNbX 5jV8ztxovX7MceRunjVj+yfU+nkB8sOoLYgZrUlrLyhN6X9KlOFf82uFhKFeyp2u 3ooIXT34dz5bTKrMlSqqPzgeHe5aMR5+2QMQKSngu5vZ8gC2vSIgwCATj7dZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8SWsa6CdTj8S0rto44oacZUlbs0wHwYDVR0j BBgwFoAUVea7E1rJu7riF2vZZVV9VmA4FLkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTQ0YTcyNi03MDdjLTQ5ZTItYmZjZS05YjVlZWYxZWVkNGUvMC81NUU2QkIxMzVB QzlCQkJBRTIxNzZCRDk2NTU1N0Q1NjYwMzgxNEI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTVFNkJCMTM1QUM5QkJCQUUyMTc2QkQ5NjU1NTdENTY2MDM4 MTRCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0NGE3MjYtNzA3Yy00OWUyLWJm Y2UtOWI1ZWVmMWVlZDRlLzAvNTVFNkJCMTM1QUM5QkJCQUUyMTc2QkQ5NjU1NTdE NTY2MDM4MTRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8vcjUUoUZMCBE4GaYYKLNf7cm4fajXkcI7 eZq5tdJ6wjBO3hgvEWTq1zDZOPN5CdTC58uMSJHxHay9V618asWpZLXVs2eMe4zB h4W/wQzJbXL/3ZL1dc5ZRcHTuK4fo0Jq1IKFglcjywE6vtybLILOD85tFpSPN8Ju L6bjmP4V9dg9OJMTs/1zfAq/eM3X5jt+EZ8OD8wx3h1KgmS+kRR1sZTWfe9Dwz9P GezRWiQ80iety5W4FxrDKBnhd9zzo+kj9uSlZmG7S1NWugd70bqKBP6dTWrL7+oI 0YQvNa3cUUpMo5pSywQZ0L0+dIGCDze/8eM6OKq8/Oneu0sXR0c= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:50 2025 by rpki-client