$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft File: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft (raw, json) Hash identifier: e5RThg/c0Vl0Wpp8pMCZ+R2JVjUT/a6FPRus6lfuBdk= Subject key identifier: E2:A0:6F:FA:4F:5B:E3:F7:6A:32:00:BD:11:9C:DE:2E:B5:87:BC:CA Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A Certificate issuer: /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A Certificate serial: 59FD8A637B644DD05E82E9F412DCBEDEA2D63750 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft Manifest number: 0482 Signing time: Wed 03 Sep 2025 21:31:08 +0000 Manifest this update: Wed 03 Sep 2025 21:26:08 +0000 Manifest next update: Sat 06 Sep 2025 23:38:08 +0000 Files and hashes: 1: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: q9l5WC1lZSRDDfD6k6bjS5S0ZVdtq7f+RpluQ9hh5F0=) 2: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: iNZ3zu9tO0qa+gSNjTNjVY0ck8jJgMDSV+32JZtPZic=) 3: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: cp5DLnNWi9w3KmvCMrojjqhOWr4wL8E6xAvIA2F2SV4=) 4: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl (hash: 0N7mBA4r7A0AeM4Av1weUtCS+ucAv9nznC1jZ5wILL0=) 5: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: g5hlJx5VxwLWFsZdGKqn9r2RuteLPSgtrh1sr6LNmhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 23:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:fd:8a:63:7b:64:4d:d0:5e:82:e9:f4:12:dc:be:de:a2:d6:37:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A Validity Not Before: Sep 3 21:26:08 2025 GMT Not After : Sep 6 23:38:08 2025 GMT Subject: CN=E2A06FFA4F5BE3F76A3200BD119CDE2EB587BCCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:35:a2:66:5c:90:9d:03:4e:b2:38:9d:e6: e6:41:84:96:51:0b:a9:03:5e:ce:88:de:cd:6e:74: 9c:ae:ac:db:a6:c8:02:e7:0a:31:3f:50:26:8d:0e: 6f:25:f1:1e:66:46:e3:90:ed:8c:0e:ed:52:7d:45: 84:ac:3d:7f:92:88:9f:ee:e2:aa:a5:87:7c:7c:75: ee:1f:75:8b:6b:60:aa:79:52:bc:47:8a:a0:6d:07: 0c:30:91:90:22:1f:47:9c:5e:4b:ea:67:3d:ce:85: f3:19:f9:64:6b:c7:1c:d5:8a:2c:53:01:3d:c5:da: d2:1b:88:63:11:3d:b4:c6:95:9c:b8:cd:87:e4:82: 9b:16:e5:1b:14:72:31:55:ca:f3:1a:75:6e:5f:11: bd:20:87:72:df:03:f4:83:2c:13:f2:0d:7a:1d:b1: 80:cd:79:ec:a2:ae:d7:49:c0:c8:e5:23:8c:32:e4: d2:da:99:9d:20:1c:9f:30:9b:7a:3d:74:3a:b5:d1: dd:7a:ce:5a:6f:1a:42:a9:44:ee:65:5e:08:86:f3: f4:f5:d1:a7:b9:45:48:f0:11:bc:03:4e:4b:9e:14: a4:2d:d5:3f:b5:41:2d:23:4c:f9:a4:85:5e:0f:2d: ad:1f:b1:d1:18:ac:f0:7f:66:ee:a7:34:80:8b:2b: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A0:6F:FA:4F:5B:E3:F7:6A:32:00:BD:11:9C:DE:2E:B5:87:BC:CA X509v3 Authority Key Identifier: keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:40:aa:ac:f6:d9:8d:7f:fc:9e:3e:36:3f:4f:d9:f3:94:60: 7e:67:1d:c1:06:90:74:28:b8:16:11:31:81:38:dc:bf:ed:54: b1:ba:6f:b0:39:04:5b:b9:7e:69:8d:c2:e7:32:4c:68:f3:1e: 3a:0c:7b:d6:18:d8:34:83:70:b0:2e:9b:7f:f3:df:03:37:b5: 97:f0:40:5f:c0:66:62:3c:db:93:bb:56:0d:09:6f:0a:e6:8c: 0d:3f:dd:01:c9:7b:be:6c:94:52:06:8b:b4:2c:d6:4d:ae:d6: 26:7e:c9:70:90:b9:8c:72:22:00:60:63:1b:48:04:95:c7:c0: 0a:87:df:b2:9f:65:7b:5b:76:c0:cd:0e:11:b2:f5:46:07:f7: d5:ab:58:2d:2d:be:62:14:46:dc:37:fb:b5:2a:a5:27:a6:e6: 33:82:73:b1:a7:86:45:84:c6:30:5d:34:b6:de:c3:19:e3:df: a9:92:70:be:2c:9d:1d:14:f2:77:42:4b:bf:51:1b:75:42:b7: af:c4:6c:f3:f5:8c:72:1e:9e:f4:42:c2:9a:19:e8:e6:91:5b: 2c:53:77:07:1a:46:b2:21:e1:7f:ad:dc:bd:0f:b7:da:b0:bb: f4:45:5e:81:7a:c2:9f:35:6f:73:fc:88:69:59:59:e5:30:10: c5:2e:9d:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWf2KY3tkTdBegun0Ety+3qLWN1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZD RTM4MTAyQTAeFw0yNTA5MDMyMTI2MDhaFw0yNTA5MDYyMzM4MDhaMDMxMTAvBgNV BAMTKEUyQTA2RkZBNEY1QkUzRjc2QTMyMDBCRDExOUNERTJFQjU4N0JDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCytzWiZlyQnQNOsjid5uZBhJZR C6kDXs6I3s1udJyurNumyALnCjE/UCaNDm8l8R5mRuOQ7YwO7VJ9RYSsPX+SiJ/u 4qqlh3x8de4fdYtrYKp5UrxHiqBtBwwwkZAiH0ecXkvqZz3OhfMZ+WRrxxzViixT AT3F2tIbiGMRPbTGlZy4zYfkgpsW5RsUcjFVyvMadW5fEb0gh3LfA/SDLBPyDXod sYDNeeyirtdJwMjlI4wy5NLamZ0gHJ8wm3o9dDq10d16zlpvGkKpRO5lXgiG8/T1 0ae5RUjwEbwDTkueFKQt1T+1QS0jTPmkhV4PLa0fsdEYrPB/Zu6nNICLK3jTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4qBv+k9b4/dqMgC9EZzeLrWHvMowHwYDVR0j BBgwFoAUVcel1WzsExbP5mDHnALBb844ECowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjllMDYzNi0xZmUyLTRkM2ItOGMzOC0yZGJiOTkxNGU5MTMvMC81NUM3QTVENTZD RUMxMzE2Q0ZFNjYwQzc5QzAyQzE2RkNFMzgxMDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZDRTM4 MTAyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj MzgtMmRiYjk5MTRlOTEzLzAvNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMx NkZDRTM4MTAyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRAqqz22Y1//J4+Nj9P2fOUYH5nHcEGkHQo uBYRMYE43L/tVLG6b7A5BFu5fmmNwucyTGjzHjoMe9YY2DSDcLAum3/z3wM3tZfw QF/AZmI825O7Vg0JbwrmjA0/3QHJe75slFIGi7Qs1k2u1iZ+yXCQuYxyIgBgYxtI BJXHwAqH37KfZXtbdsDNDhGy9UYH99WrWC0tvmIURtw3+7UqpSem5jOCc7GnhkWE xjBdNLbewxnj36mScL4snR0U8ndCS79RG3VCt6/EbPP1jHIenvRCwpoZ6OaRWyxT dwcaRrIh4X+t3L0Pt9qwu/RFXoF6wp81b3P8iGlZWeUwEMUunRE= -----END CERTIFICATE-----Generated at Fri Sep 5 12:03:32 2025 by rpki-client