$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft File: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft (raw, json) Hash identifier: clkpOxN+QG2CGX+dJoqel8HpejdlyiC6kzZ2xvF1I6I= Subject key identifier: 3C:C5:14:1D:B3:10:3E:A4:C6:B8:DB:80:82:CA:D9:62:B6:1D:EA:78 Authority key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 Certificate issuer: /CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Certificate serial: 7A3840257839FC14CF3CF0898865A5F279648172 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft Manifest number: 0513 Signing time: Fri 17 Oct 2025 23:42:11 +0000 Manifest this update: Fri 17 Oct 2025 23:37:11 +0000 Manifest next update: Tue 21 Oct 2025 04:05:11 +0000 Files and hashes: 1: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: aezyzCcGyqe7zpkvtIU/eZ/H5lzYV15JrdWQKNqGiws=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl (hash: sXCSwBoAqsR0ccbnHTpBaFVjTYMlWJzYrKVZGORkOOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 04:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:38:40:25:78:39:fc:14:cf:3c:f0:89:88:65:a5:f2:79:64:81:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Validity Not Before: Oct 17 23:37:11 2025 GMT Not After : Oct 21 04:05:11 2025 GMT Subject: CN=3CC5141DB3103EA4C6B8DB8082CAD962B61DEA78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:fe:df:d8:fd:6f:d8:ce:a4:b7:e5:20:4a: 3a:21:a0:b8:8d:16:6c:ba:06:7a:84:ce:9a:27:57: e8:28:2b:0b:7d:39:a2:ff:5e:fa:d3:1f:a3:8e:b8: ec:c3:0a:f7:0c:3b:e6:6c:81:6f:73:91:9c:0a:49: fe:8c:aa:3b:14:2b:33:88:1b:ea:c1:88:ed:55:e8: 4f:b6:a1:b1:76:75:72:d0:f6:52:ab:c3:74:56:54: 88:d0:bd:86:6b:5f:72:7e:5c:2f:df:2e:8a:e9:76: 68:4b:88:9f:93:5f:6f:70:c9:39:7c:d5:03:44:55: ab:0b:7d:c7:46:9d:8a:a5:69:76:de:9a:3a:fe:84: ec:01:bb:a2:ca:6f:5e:13:fc:cb:c9:bf:24:96:96: fe:d2:19:c0:d6:31:3d:34:23:08:f5:04:d2:14:b1: 43:95:f2:a8:a1:d9:5c:a2:45:b5:44:73:f7:d1:4a: de:3d:a8:0b:98:aa:e0:f1:47:f2:82:35:4c:68:68: 83:35:60:3a:ec:54:d1:55:a7:b7:d6:85:3b:1b:34: 7f:2a:23:87:e1:34:e6:f2:6a:44:ef:83:a4:2b:a8: 42:28:c5:de:20:8a:f7:15:b8:00:58:0c:0c:d6:94: 07:de:3b:cc:48:10:45:a6:2a:e5:be:d7:29:0f:49: 8b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C5:14:1D:B3:10:3E:A4:C6:B8:DB:80:82:CA:D9:62:B6:1D:EA:78 X509v3 Authority Key Identifier: keyid:55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:25:31:a4:42:6d:e4:a4:fe:2f:c2:8d:6b:7c:30:c9:5d:f4: ce:d3:4f:b4:b6:d3:bf:a8:6c:bb:99:e6:b0:3b:97:a4:58:c8: bc:f5:5f:fe:75:4e:93:22:86:d0:10:e8:e5:1e:1f:aa:b3:34: 05:b4:f8:68:8b:39:e3:71:ce:1d:71:1f:0b:7d:c2:8c:98:2b: ca:a0:d7:2a:0d:a3:7f:a6:87:80:27:a3:d8:b0:fb:ca:bb:18: a2:f6:ff:77:ea:fd:76:33:f6:91:ab:04:36:c2:ec:64:d2:fe: ad:d7:bc:39:75:32:8a:7e:89:a1:a1:49:03:f7:14:55:40:4a: e1:c0:a8:00:36:54:e0:9f:6f:f3:a4:3f:94:e9:be:b0:05:6f: a6:74:cd:9f:f4:a3:a5:94:43:b4:5f:37:4e:56:b7:db:3c:e5: 7a:5e:42:48:94:58:2f:16:be:11:95:ed:18:ae:ae:8e:24:3f: 64:a3:32:fb:e3:1a:a6:3e:bd:69:3b:f1:4d:a7:24:20:65:0f: 72:cf:79:84:0e:3e:da:b1:7b:45:65:89:65:6d:85:de:a9:ee: 88:aa:6b:b7:85:8d:43:27:20:45:80:a8:56:af:00:8b:e6:ec: ed:37:56:44:40:4d:29:7e:d3:7f:9b:a6:a8:29:90:22:fb:1b: d8:87:24:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejhAJXg5/BTPPPCJiGWl8nlkgXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2 MEQ0Q0Y5MjAeFw0yNTEwMTcyMzM3MTFaFw0yNTEwMjEwNDA1MTFaMDMxMTAvBgNV BAMTKDNDQzUxNDFEQjMxMDNFQTRDNkI4REI4MDgyQ0FEOTYyQjYxREVBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiJf7f2P1v2M6kt+UgSjohoLiN Fmy6BnqEzponV+goKwt9OaL/XvrTH6OOuOzDCvcMO+ZsgW9zkZwKSf6MqjsUKzOI G+rBiO1V6E+2obF2dXLQ9lKrw3RWVIjQvYZrX3J+XC/fLorpdmhLiJ+TX29wyTl8 1QNEVasLfcdGnYqlaXbemjr+hOwBu6LKb14T/MvJvySWlv7SGcDWMT00Iwj1BNIU sUOV8qih2VyiRbVEc/fRSt49qAuYquDxR/KCNUxoaIM1YDrsVNFVp7fWhTsbNH8q I4fhNObyakTvg6QrqEIoxd4givcVuABYDAzWlAfeO8xIEEWmKuW+1ykPSYunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPMUUHbMQPqTGuNuAgsrZYrYd6ngwHwYDVR0j BBgwFoAUVeecHWCxLljRIbJlymfAvWDUz5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMS81NUU3OUMxRDYw QjEyRTU4RDEyMUIyNjVDQTY3QzBCRDYwRDRDRjkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2MEQ0 Q0Y5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0Mw QkQ2MEQ0Q0Y5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQlMaRCbeSk/i/CjWt8MMld9M7TT7S207+o bLuZ5rA7l6RYyLz1X/51TpMihtAQ6OUeH6qzNAW0+GiLOeNxzh1xHwt9woyYK8qg 1yoNo3+mh4Ano9iw+8q7GKL2/3fq/XYz9pGrBDbC7GTS/q3XvDl1Mop+iaGhSQP3 FFVASuHAqAA2VOCfb/OkP5TpvrAFb6Z0zZ/0o6WUQ7RfN05Wt9s85XpeQkiUWC8W vhGV7Riuro4kP2SjMvvjGqY+vWk78U2nJCBlD3LPeYQOPtqxe0VliWVthd6p7oiq a7eFjUMnIEWAqFavAIvm7O03VkRATSl+03+bpqgpkCL7G9iHJFk= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:32 2025 by rpki-client