$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft File: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft (raw, json) Hash identifier: gv1Bmnkjlq+4skGA4SeLekUcFrjz4ol6/31WhEseijI= Subject key identifier: 32:D4:8A:8D:27:E5:B6:23:D9:07:DA:1A:C5:1E:1E:B3:59:8A:40:9F Authority key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 Certificate issuer: /CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Certificate serial: 74D90595C7899EA76D4F001B187A5CCAA62CD7E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft Manifest number: 051B Signing time: Wed 05 Nov 2025 00:12:17 +0000 Manifest this update: Wed 05 Nov 2025 00:07:17 +0000 Manifest next update: Sat 08 Nov 2025 09:31:17 +0000 Files and hashes: 1: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl (hash: tLdSOajdvkVWhiFHNwdUPWINwMRiKmJ5Islczt516P4=) 2: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: aezyzCcGyqe7zpkvtIU/eZ/H5lzYV15JrdWQKNqGiws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 09:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d9:05:95:c7:89:9e:a7:6d:4f:00:1b:18:7a:5c:ca:a6:2c:d7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92 Validity Not Before: Nov 5 00:07:17 2025 GMT Not After : Nov 8 09:31:17 2025 GMT Subject: CN=32D48A8D27E5B623D907DA1AC51E1EB3598A409F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:f5:dd:41:55:5c:75:c7:d7:68:44:8f:1c: bc:88:8b:22:8e:b5:05:68:96:6d:a3:90:e3:5b:63: 96:fd:5c:06:d8:42:d2:df:02:67:62:4b:9f:78:c5: 73:f0:40:7a:fb:73:0e:02:0f:8d:4a:de:26:0a:34: e6:db:5b:28:50:41:32:42:6e:25:60:e6:b4:5c:94: 34:9e:ff:ab:76:aa:6e:db:08:bf:ec:29:ae:85:89: ec:03:1c:e6:32:07:cf:da:1f:e2:8b:6e:07:28:55: 1b:25:21:66:c3:0c:78:f6:0f:65:26:ca:2d:43:d7: 64:ac:dd:d9:f1:84:1c:5e:82:8e:00:17:86:1a:4c: fe:60:90:16:04:56:2f:38:cf:92:de:5a:68:c0:de: a2:8d:82:25:48:0c:62:6e:79:43:2e:67:1a:31:d0: 0c:0f:09:c1:9b:9b:58:63:b8:03:b3:5d:91:fd:d7: be:28:c8:e8:7e:f8:87:53:41:bf:fa:d3:ea:47:40: 85:b4:e5:15:b6:03:8e:c8:3e:a2:f4:7d:51:e9:03: 70:a4:2d:9f:97:af:a0:2b:b9:35:70:af:0a:e8:38: 04:e8:1f:df:b7:b4:4f:f6:6a:92:c9:19:7f:2f:7d: dc:7e:35:b5:24:ec:64:7e:03:30:c1:b7:00:4b:a9: a9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D4:8A:8D:27:E5:B6:23:D9:07:DA:1A:C5:1E:1E:B3:59:8A:40:9F X509v3 Authority Key Identifier: keyid:55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:5c:c1:1f:d0:59:09:90:75:fa:fe:49:fa:de:02:32:04:13: a0:18:f2:23:1f:e7:a7:17:4d:27:d5:88:7c:ad:47:a9:dc:5f: 1c:99:ca:f0:b2:39:74:3d:9b:f4:26:9d:cb:c3:b5:c8:69:43: 33:16:0a:fc:31:4d:c1:14:04:92:5c:c1:a7:0d:56:6f:a8:8f: af:16:da:77:9c:7c:cc:c6:42:05:48:d8:da:65:b7:8d:3d:40: 0b:6c:ac:82:b8:2f:98:57:09:cd:90:e3:90:84:c6:b2:3e:6c: fe:e4:bb:a6:6d:b1:d6:99:ad:06:db:13:bb:c8:c2:02:25:6e: 99:c6:90:9d:46:85:06:a3:82:b2:b6:6a:22:63:59:b1:c9:4e: 1f:d5:5f:36:2f:ff:7d:7a:0f:be:21:74:fb:53:62:a6:a4:4e: b9:96:2b:29:3f:f8:76:9f:0c:1e:1d:47:53:53:1f:a2:3a:26: e0:94:62:4e:6d:11:81:78:90:3d:c6:2a:90:5d:97:12:e3:3e: 8e:5d:66:27:a3:d3:db:45:0c:4e:25:a0:5b:e8:fc:ed:29:98: ed:9e:27:7e:0b:0e:5c:88:81:96:2e:2a:b7:ab:47:0a:1b:9e: a5:00:9d:29:55:98:f8:57:ae:a3:a4:68:20:28:94:2a:5e:6d: 63:56:a1:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNkFlceJnqdtTwAbGHpcyqYs1+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2 MEQ0Q0Y5MjAeFw0yNTExMDUwMDA3MTdaFw0yNTExMDgwOTMxMTdaMDMxMTAvBgNV BAMTKDMyRDQ4QThEMjdFNUI2MjNEOTA3REExQUM1MUUxRUIzNTk4QTQwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcd/XdQVVcdcfXaESPHLyIiyKO tQVolm2jkONbY5b9XAbYQtLfAmdiS594xXPwQHr7cw4CD41K3iYKNObbWyhQQTJC biVg5rRclDSe/6t2qm7bCL/sKa6FiewDHOYyB8/aH+KLbgcoVRslIWbDDHj2D2Um yi1D12Ss3dnxhBxego4AF4YaTP5gkBYEVi84z5LeWmjA3qKNgiVIDGJueUMuZxox 0AwPCcGbm1hjuAOzXZH9174oyOh++IdTQb/60+pHQIW05RW2A47IPqL0fVHpA3Ck LZ+Xr6AruTVwrwroOAToH9+3tE/2apLJGX8vfdx+NbUk7GR+AzDBtwBLqamjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMtSKjSfltiPZB9oaxR4es1mKQJ8wHwYDVR0j BBgwFoAUVeecHWCxLljRIbJlymfAvWDUz5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMS81NUU3OUMxRDYw QjEyRTU4RDEyMUIyNjVDQTY3QzBCRDYwRDRDRjkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0MwQkQ2MEQ0 Q0Y5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvNTVFNzlDMUQ2MEIxMkU1OEQxMjFCMjY1Q0E2N0Mw QkQ2MEQ0Q0Y5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdcwR/QWQmQdfr+SfreAjIEE6AY8iMf56cX TSfViHytR6ncXxyZyvCyOXQ9m/QmncvDtchpQzMWCvwxTcEUBJJcwacNVm+oj68W 2necfMzGQgVI2Nplt409QAtsrIK4L5hXCc2Q45CExrI+bP7ku6ZtsdaZrQbbE7vI wgIlbpnGkJ1GhQajgrK2aiJjWbHJTh/VXzYv/316D74hdPtTYqakTrmWKyk/+Haf DB4dR1NTH6I6JuCUYk5tEYF4kD3GKpBdlxLjPo5dZiej09tFDE4loFvo/O0pmO2e J34LDlyIgZYuKrerRwobnqUAnSlVmPhXrqOkaCAolCpebWNWoQ8= -----END CERTIFICATE-----Generated at Wed Nov 5 18:06:20 2025 by rpki-client