$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft File: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft (raw, json) Hash identifier: a8dx45VvbehLFrr2muDNh0SPL618OZUZFkcA3oZpEa8= Subject key identifier: 1D:7D:76:F5:DF:AB:9E:75:0D:CE:5C:00:EB:D9:86:70:C7:80:90:82 Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A Certificate issuer: /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A Certificate serial: 4232BD82EF120870C66CB47F9BC71745DE20A526 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft Manifest number: 0498 Signing time: Thu 23 Oct 2025 06:41:10 +0000 Manifest this update: Thu 23 Oct 2025 06:36:10 +0000 Manifest next update: Sun 26 Oct 2025 07:55:10 +0000 Files and hashes: 1: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: cp5DLnNWi9w3KmvCMrojjqhOWr4wL8E6xAvIA2F2SV4=) 2: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: iNZ3zu9tO0qa+gSNjTNjVY0ck8jJgMDSV+32JZtPZic=) 3: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: g5hlJx5VxwLWFsZdGKqn9r2RuteLPSgtrh1sr6LNmhM=) 4: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: q9l5WC1lZSRDDfD6k6bjS5S0ZVdtq7f+RpluQ9hh5F0=) 5: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl (hash: n9hHLFtuPcnA2NxkVzCpkJljFMeqJX2UGSk5wBWCswY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:32:bd:82:ef:12:08:70:c6:6c:b4:7f:9b:c7:17:45:de:20:a5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A Validity Not Before: Oct 23 06:36:10 2025 GMT Not After : Oct 26 07:55:10 2025 GMT Subject: CN=1D7D76F5DFAB9E750DCE5C00EBD98670C7809082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:9a:c5:04:67:60:38:49:a7:a1:dd:c1:bb: fc:31:ac:08:31:eb:31:1b:f6:59:72:d1:1a:3f:52: 47:c4:87:ec:20:ff:c7:dd:3b:18:5d:d7:39:7e:e7: 8b:30:81:d9:23:fe:6a:b6:fa:8c:a5:a4:53:eb:9d: 2b:4b:0b:0d:58:b9:47:34:a7:b9:c4:7b:15:73:97: b5:b8:de:82:40:5c:ce:d3:9f:c7:54:b1:51:bd:78: 49:2d:3b:1d:6f:4d:ac:4f:df:47:24:27:7e:fe:2d: 82:fa:d8:56:d6:11:23:7f:b4:73:5a:07:f9:63:a6: a2:57:e0:cf:cc:1f:f7:d5:91:3b:5e:df:f0:0b:84: 91:3e:f5:52:f9:5a:57:7f:61:ef:8e:ef:39:52:3a: 6e:39:92:de:95:46:a7:c2:2b:ae:b9:65:8e:78:6a: 52:95:d0:a9:d3:df:84:b8:58:cc:37:53:c7:51:3a: 25:c7:7c:1f:9c:56:69:b0:c3:a1:a7:5b:37:87:ff: bc:34:d2:8b:57:c6:aa:bd:c6:e2:61:92:01:db:31: 57:bf:13:11:0d:30:b0:fc:d9:4c:8a:fb:1b:0a:38: d3:22:24:f3:46:7c:39:77:8a:a9:f6:1c:8a:63:ad: 10:d1:3b:25:ef:57:d1:ea:c1:c3:40:76:4b:83:92: 93:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7D:76:F5:DF:AB:9E:75:0D:CE:5C:00:EB:D9:86:70:C7:80:90:82 X509v3 Authority Key Identifier: keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:3b:16:ff:76:b1:13:87:72:53:62:7f:e0:f0:71:ba:76:cb: 07:89:a6:77:bb:81:60:4d:ef:8f:9b:15:19:fa:4f:d0:ab:26: 13:1b:f1:63:e0:ae:59:2e:05:e7:6d:89:fb:0b:c0:e4:75:cd: 71:39:30:81:35:f3:d8:16:3e:c7:c0:e1:60:1c:38:51:64:24: 97:ba:21:51:7f:da:03:de:10:46:2c:d8:cc:f8:9c:1e:c4:54: d3:7c:87:a0:83:c3:3c:b2:4f:c2:20:01:e3:a4:c0:40:d8:c2: 89:0a:e9:de:22:6b:8f:a2:b2:7d:49:d3:1b:2a:dd:db:ac:72: f2:74:3e:f7:f8:0a:c3:a2:78:ec:8a:28:8c:b1:23:92:55:1e: c7:91:fc:4a:ce:f2:44:e7:12:00:b2:96:e1:23:5f:18:b2:40: 3b:e8:ae:63:01:9e:27:c1:1c:f7:ee:53:5e:c2:94:a9:54:8b: 90:9a:69:4f:d4:a6:e8:31:1c:11:5d:1f:1e:ff:7b:08:fc:af: af:7f:cc:83:dc:f0:9b:98:1b:6e:b9:cd:b6:d2:27:40:80:13: 0f:64:08:da:b3:0f:fa:99:4b:31:b1:64:18:46:fa:ee:1d:73: 49:e6:75:11:5b:9e:7b:23:06:1e:9d:4e:99:f9:ec:d7:d7:66: 5e:72:16:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQjK9gu8SCHDGbLR/m8cXRd4gpSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZD RTM4MTAyQTAeFw0yNTEwMjMwNjM2MTBaFw0yNTEwMjYwNzU1MTBaMDMxMTAvBgNV BAMTKDFEN0Q3NkY1REZBQjlFNzUwRENFNUMwMEVCRDk4NjcwQzc4MDkwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpprFBGdgOEmnod3Bu/wxrAgx 6zEb9lly0Ro/UkfEh+wg/8fdOxhd1zl+54swgdkj/mq2+oylpFPrnStLCw1YuUc0 p7nEexVzl7W43oJAXM7Tn8dUsVG9eEktOx1vTaxP30ckJ37+LYL62FbWESN/tHNa B/ljpqJX4M/MH/fVkTte3/ALhJE+9VL5Wld/Ye+O7zlSOm45kt6VRqfCK665ZY54 alKV0KnT34S4WMw3U8dROiXHfB+cVmmww6GnWzeH/7w00otXxqq9xuJhkgHbMVe/ ExENMLD82UyK+xsKONMiJPNGfDl3iqn2HIpjrRDROyXvV9HqwcNAdkuDkpPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHX129d+rnnUNzlwA69mGcMeAkIIwHwYDVR0j BBgwFoAUVcel1WzsExbP5mDHnALBb844ECowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjllMDYzNi0xZmUyLTRkM2ItOGMzOC0yZGJiOTkxNGU5MTMvMC81NUM3QTVENTZD RUMxMzE2Q0ZFNjYwQzc5QzAyQzE2RkNFMzgxMDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZDRTM4 MTAyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj MzgtMmRiYjk5MTRlOTEzLzAvNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMx NkZDRTM4MTAyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMM7Fv92sROHclNif+Dwcbp2yweJpne7gWBN 74+bFRn6T9CrJhMb8WPgrlkuBedtifsLwOR1zXE5MIE189gWPsfA4WAcOFFkJJe6 IVF/2gPeEEYs2Mz4nB7EVNN8h6CDwzyyT8IgAeOkwEDYwokK6d4ia4+isn1J0xsq 3duscvJ0Pvf4CsOieOyKKIyxI5JVHseR/ErO8kTnEgCyluEjXxiyQDvormMBnifB HPfuU17ClKlUi5CaaU/UpugxHBFdHx7/ewj8r69/zIPc8JuYG265zbbSJ0CAEw9k CNqzD/qZSzGxZBhG+u4dc0nmdRFbnnsjBh6dTpn57NfXZl5yFhY= -----END CERTIFICATE-----Generated at Thu Oct 23 23:31:59 2025 by rpki-client