$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft File: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft (raw, json) Hash identifier: 02h+WzjcvwCFYzCW+HX9cBsCigBthDyPEfZrekOjRL8= Subject key identifier: DD:53:6F:A6:E7:25:C8:40:D1:FA:AD:D4:C5:9F:4C:47:2F:D8:27:F0 Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A Certificate issuer: /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A Certificate serial: 30070271303C707DCF6772476F5CBD2B4D00ECBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft Manifest number: 043F Signing time: Sat 05 Apr 2025 11:11:07 +0000 Manifest this update: Sat 05 Apr 2025 11:06:07 +0000 Manifest next update: Tue 08 Apr 2025 18:21:07 +0000 Files and hashes: 1: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: gKmQTrWRo0dtB24OlQ8EekvtiPKnerSJt10iLt7klno=) 2: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl (hash: FKQ/mV/dLssSAzLNfSS1MjuJQ7AabupTEF3ws7yEYJk=) 3: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: +KsulcGmzY5dFop1na/DJHsp4FRDwglwGImpeIWhxmc=) 4: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: V4+uMp+kL6Ok5NlGN/qGqFTl05WfU95J3Z2zO7N/wfg=) 5: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: 35cfCojRdavaReCbKBt9CxVqgNx4F/Pdz0/aY/vnfQA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:07:02:71:30:3c:70:7d:cf:67:72:47:6f:5c:bd:2b:4d:00:ec:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A Validity Not Before: Apr 5 11:06:07 2025 GMT Not After : Apr 8 18:21:07 2025 GMT Subject: CN=DD536FA6E725C840D1FAADD4C59F4C472FD827F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:3c:e7:18:e8:bc:87:e6:6a:42:51:11:76: d2:84:9b:0a:8d:42:f3:67:57:66:37:46:7e:46:8f: 10:16:09:bb:e6:81:22:6c:b7:59:e2:3b:07:fe:ad: 3f:ea:61:0f:fc:d1:e0:95:54:46:1b:ce:e7:4e:a7: 52:40:38:2d:bf:ec:70:81:09:c8:13:56:37:5c:a7: 19:bf:6a:fa:b4:12:82:a0:b0:94:9a:d9:36:7b:65: 21:71:75:00:1b:06:c5:e0:1d:b1:31:35:58:96:06: 59:27:78:4c:49:e8:87:71:85:69:6c:8c:85:0e:61: 54:d3:97:c7:2a:34:52:4f:05:71:be:62:26:fe:b7: 61:9b:39:fb:3e:7c:a6:d0:be:6d:07:ed:d3:6d:12: 36:84:fb:5b:c0:6c:00:bb:7b:4a:6f:bf:d0:f8:41: f7:48:e8:eb:b8:c0:63:c4:de:ab:e0:80:1f:76:0c: b4:28:42:03:a2:22:a5:88:78:f4:09:e3:36:cc:f3: b1:9a:16:f8:01:fe:87:93:a3:8c:d3:7d:80:41:c6: 5d:93:48:a7:00:61:4a:59:bf:b9:34:54:ee:e4:6f: 75:7c:61:c6:09:35:36:fb:d7:f6:56:ea:51:17:d0: 89:af:08:91:a9:50:71:68:69:cc:9c:4f:5d:66:4a: 05:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:6F:A6:E7:25:C8:40:D1:FA:AD:D4:C5:9F:4C:47:2F:D8:27:F0 X509v3 Authority Key Identifier: keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f7:84:b7:63:b3:71:67:62:6c:7e:64:25:ef:c1:cb:8d:81: 1f:71:88:e7:80:db:24:e8:7c:17:1a:40:27:e7:89:69:62:73: 5a:8a:c5:44:10:c2:30:b9:9f:4a:96:3a:9c:1a:6f:92:b2:77: b3:7c:68:f5:b7:dd:f0:32:8a:6d:c6:08:14:1b:e4:4f:d1:18: 55:97:85:b2:27:67:a9:3d:1d:6f:b3:5a:62:e5:7b:79:7a:d0: 5f:eb:8b:34:59:88:03:eb:c8:00:27:ff:7c:8b:80:58:33:ab: b3:b5:1b:82:70:1d:c8:5d:cd:e4:ff:52:de:8f:fd:ce:80:55: 58:00:72:e7:78:8c:19:7e:7d:7f:fe:7a:a9:35:0c:2c:6c:ae: 53:53:bc:f7:6f:7f:43:18:fb:ce:35:dd:b7:cc:0d:c2:e5:26: c5:82:9f:67:3f:2f:8b:d0:23:10:01:a0:bc:8b:2c:ae:09:84: 93:74:9d:8e:b2:86:a8:19:f2:26:9e:b2:82:c0:3a:cf:a8:22: 29:7a:e0:6a:32:f4:13:64:b0:39:2c:66:20:ef:a4:68:9e:74: a7:72:5c:99:fd:96:05:32:b8:b4:64:ce:f9:1c:84:06:cb:27: db:e9:b9:00:6a:33:a9:0d:98:2d:0f:45:5f:4f:f0:8f:e5:86: 43:0b:d0:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAcCcTA8cH3PZ3JHb1y9K00A7L8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZD RTM4MTAyQTAeFw0yNTA0MDUxMTA2MDdaFw0yNTA0MDgxODIxMDdaMDMxMTAvBgNV BAMTKERENTM2RkE2RTcyNUM4NDBEMUZBQURENEM1OUY0QzQ3MkZEODI3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJIDznGOi8h+ZqQlERdtKEmwqN QvNnV2Y3Rn5GjxAWCbvmgSJst1niOwf+rT/qYQ/80eCVVEYbzudOp1JAOC2/7HCB CcgTVjdcpxm/avq0EoKgsJSa2TZ7ZSFxdQAbBsXgHbExNViWBlkneExJ6IdxhWls jIUOYVTTl8cqNFJPBXG+Yib+t2GbOfs+fKbQvm0H7dNtEjaE+1vAbAC7e0pvv9D4 QfdI6Ou4wGPE3qvggB92DLQoQgOiIqWIePQJ4zbM87GaFvgB/oeTo4zTfYBBxl2T SKcAYUpZv7k0VO7kb3V8YcYJNTb71/ZW6lEX0ImvCJGpUHFoacycT11mSgVBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3VNvpuclyEDR+q3UxZ9MRy/YJ/AwHwYDVR0j BBgwFoAUVcel1WzsExbP5mDHnALBb844ECowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjllMDYzNi0xZmUyLTRkM2ItOGMzOC0yZGJiOTkxNGU5MTMvMC81NUM3QTVENTZD RUMxMzE2Q0ZFNjYwQzc5QzAyQzE2RkNFMzgxMDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZDRTM4 MTAyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj MzgtMmRiYjk5MTRlOTEzLzAvNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMx NkZDRTM4MTAyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKT3hLdjs3FnYmx+ZCXvwcuNgR9xiOeA2yTo fBcaQCfniWlic1qKxUQQwjC5n0qWOpwab5Kyd7N8aPW33fAyim3GCBQb5E/RGFWX hbInZ6k9HW+zWmLle3l60F/rizRZiAPryAAn/3yLgFgzq7O1G4JwHchdzeT/Ut6P /c6AVVgAcud4jBl+fX/+eqk1DCxsrlNTvPdvf0MY+8413bfMDcLlJsWCn2c/L4vQ IxABoLyLLK4JhJN0nY6yhqgZ8iaesoLAOs+oIil64Goy9BNksDksZiDvpGiedKdy XJn9lgUyuLRkzvkchAbLJ9vpuQBqM6kNmC0PRV9P8I/lhkML0Lo= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:28 2025 by rpki-client