$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft File: 755B61748263D4DD472C69CA7F1847254B03EBBC.mft (raw, json) Hash identifier: v1+dfEiAy84Lx4nwO1A3BqoD4ckGGVlorw6Sf+EZ47I= Subject key identifier: 96:52:05:E0:7F:36:03:BB:3B:65:9B:E0:EC:42:4E:92:32:35:46:53 Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC Certificate issuer: /CN=755B61748263D4DD472C69CA7F1847254B03EBBC Certificate serial: 35D36B47D61E82CA0B5D66B624FDB33CC8919957 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft Manifest number: 01CC Signing time: Thu 04 Sep 2025 09:31:11 +0000 Manifest this update: Thu 04 Sep 2025 09:26:11 +0000 Manifest next update: Sun 07 Sep 2025 17:06:11 +0000 Files and hashes: 1: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: xydWJV4FL+B55nYYX4HSLXqdjHeafDBY82XL44amtyo=) 2: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: DAvm8lRIaAY0XIz4SwbtJvL9yWurm8Bc/AdxnRRoc6w=) 3: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: X1fxET2zqe42Jssm0L2zWkWMpofWKObR83jJ1RUDeIA=) 4: 755B61748263D4DD472C69CA7F1847254B03EBBC.crl (hash: K00ySP8l5+b9mwbwjEQHafr21ACZE8iwRlZFt2roRgw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 17:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d3:6b:47:d6:1e:82:ca:0b:5d:66:b6:24:fd:b3:3c:c8:91:99:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC Validity Not Before: Sep 4 09:26:11 2025 GMT Not After : Sep 7 17:06:11 2025 GMT Subject: CN=965205E07F3603BB3B659BE0EC424E9232354653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:95:c7:84:34:36:e9:0d:18:3e:2d:a9:b0:1f: 75:98:f0:be:80:03:ca:92:5e:9d:a8:df:14:54:92: a3:a9:7c:e1:a0:ce:0d:a8:d8:10:76:49:37:cb:ab: 81:08:10:52:3f:cb:cd:0f:d8:e8:ee:a3:0b:2d:1d: b3:24:cd:b9:e3:64:7d:f4:ac:e1:74:4f:f5:74:cf: 2c:68:25:a4:cc:3f:8b:3e:b2:99:55:5f:54:ef:f8: 90:30:8e:cc:98:0b:02:ff:2a:57:65:f4:2a:f5:92: 33:21:79:f4:58:0b:79:d3:d5:d2:16:20:78:a4:a0: 6b:9e:f6:1f:de:83:90:67:a9:10:67:c3:a4:06:c7: db:b1:df:cf:9b:d2:c3:e4:ad:1f:e4:61:51:c4:71: b2:e8:d4:27:ef:08:47:a8:ff:cb:74:fe:50:35:7f: 6b:20:9b:cc:cb:bf:5a:91:00:b7:d6:bb:5f:8e:36: 6e:a9:81:fc:25:9c:0e:18:08:eb:f0:9c:28:c7:ff: 78:07:28:bd:27:fa:d8:39:02:e0:74:c9:a0:e8:9f: 70:68:99:9c:0a:03:f0:73:e8:57:96:51:88:17:2c: 22:e8:51:5c:54:66:e8:f5:19:58:ab:71:e3:8f:e5: e2:29:93:ea:92:c3:f6:37:5b:a3:e9:fd:6d:29:a3: 0e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:52:05:E0:7F:36:03:BB:3B:65:9B:E0:EC:42:4E:92:32:35:46:53 X509v3 Authority Key Identifier: keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4c:7b:ca:c3:37:26:5d:2e:a0:90:12:15:37:d2:01:66:43: 5d:96:9c:e3:fd:65:62:f3:ef:5a:66:4b:82:c4:84:19:86:bd: d8:f4:14:73:0d:73:54:0d:29:29:06:73:64:96:da:56:4a:a3: 72:51:a7:3b:71:7c:24:e6:ef:2e:54:3c:f7:1c:b5:55:e4:db: 75:a6:1d:66:30:c8:d6:a9:eb:7e:ab:b0:ce:ca:de:aa:bb:73: b3:98:3c:de:c6:61:4e:6c:f7:db:74:37:40:62:86:a1:33:66: 28:a5:97:cb:1f:03:a6:19:0c:9b:16:03:4f:0c:a2:47:dc:aa: ea:ff:15:c8:fb:53:9c:ed:b3:a5:dc:63:7a:d4:fe:f2:23:ec: 74:d9:31:74:40:f1:3f:1c:45:01:89:5f:bc:55:93:a7:36:96: 9a:37:4c:ec:ed:f7:9f:b0:2f:49:54:2e:3c:5e:15:7a:30:57: 8f:b2:31:ea:54:0b:df:3c:5b:f2:95:3c:25:8c:d0:29:39:9d: 03:7c:3a:cf:40:27:e4:d6:0d:6f:d3:5d:bb:f9:7a:60:73:24: 43:15:30:48:fe:5f:62:1b:c2:97:97:d7:6a:4e:d1:06:22:bf: da:c6:a2:8a:c6:44:dd:f1:eb:ea:f5:fd:16:0e:22:18:8f:dc: d8:9e:cb:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdNrR9YegsoLXWa2JP2zPMiRmVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0 QjAzRUJCQzAeFw0yNTA5MDQwOTI2MTFaFw0yNTA5MDcxNzA2MTFaMDMxMTAvBgNV BAMTKDk2NTIwNUUwN0YzNjAzQkIzQjY1OUJFMEVDNDI0RTkyMzIzNTQ2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjlceENDbpDRg+LamwH3WY8L6A A8qSXp2o3xRUkqOpfOGgzg2o2BB2STfLq4EIEFI/y80P2OjuowstHbMkzbnjZH30 rOF0T/V0zyxoJaTMP4s+splVX1Tv+JAwjsyYCwL/Kldl9Cr1kjMhefRYC3nT1dIW IHikoGue9h/eg5BnqRBnw6QGx9ux38+b0sPkrR/kYVHEcbLo1CfvCEeo/8t0/lA1 f2sgm8zLv1qRALfWu1+ONm6pgfwlnA4YCOvwnCjH/3gHKL0n+tg5AuB0yaDon3Bo mZwKA/Bz6FeWUYgXLCLoUVxUZuj1GVirceOP5eIpk+qSw/Y3W6Pp/W0pow53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUllIF4H82A7s7ZZvg7EJOkjI1RlMwHwYDVR0j BBgwFoAUdVthdIJj1N1HLGnKfxhHJUsD67wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTQ2MDdmMC0xNzAxLTQ5YjEtOTFmZi1iMWJlZDVjYmRlZDEvMC83NTVCNjE3NDgy NjNENERENDcyQzY5Q0E3RjE4NDcyNTRCMDNFQkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0QjAz RUJCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAtMTcwMS00OWIxLTkx ZmYtYjFiZWQ1Y2JkZWQxLzAvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3 MjU0QjAzRUJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1Me8rDNyZdLqCQEhU30gFmQ12WnOP9ZWLz 71pmS4LEhBmGvdj0FHMNc1QNKSkGc2SW2lZKo3JRpztxfCTm7y5UPPcctVXk23Wm HWYwyNap636rsM7K3qq7c7OYPN7GYU5s99t0N0BihqEzZiill8sfA6YZDJsWA08M okfcqur/Fcj7U5zts6XcY3rU/vIj7HTZMXRA8T8cRQGJX7xVk6c2lpo3TOzt95+w L0lULjxeFXowV4+yMepUC988W/KVPCWM0Ck5nQN8Os9AJ+TWDW/TXbv5emBzJEMV MEj+X2IbwpeX12pO0QYiv9rGoorGRN3x6+r1/RYOIhiP3Niey0I= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:21 2025 by rpki-client