$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft File: 56D494F5201C70B3C8FD0630664898D57A51A86F.mft (raw, json) Hash identifier: R4JKGnMfiy+VTUxiOkk8OR8QhmqZKOZmhozphyPofLc= Subject key identifier: 67:A1:E8:EB:D4:4F:72:2B:4B:35:7C:D9:75:3A:88:94:09:5C:F9:98 Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F Certificate serial: 10CC9BD812EFD4B394AF00CEC2AA0A52ACCED603 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft Manifest number: 8D Signing time: Wed 25 Mar 2026 23:31:09 +0000 Manifest this update: Wed 25 Mar 2026 23:26:09 +0000 Manifest next update: Sun 29 Mar 2026 00:31:09 +0000 Files and hashes: 1: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: GVdqWRcuOnkA2VgxGew3ZoC+Kiaj3ZJ2ZKo75rljh74=) 2: 56D494F5201C70B3C8FD0630664898D57A51A86F.crl (hash: PGHqXDNl1GkK0bCPWSMBIY9398MVgOubJvmLLRpcAvs=) 3: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: NT8HD6L58UENSZIrvJ7kAsnU0xI/LlrvnmHZkgvxcbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cc:9b:d8:12:ef:d4:b3:94:af:00:ce:c2:aa:0a:52:ac:ce:d6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F Validity Not Before: Mar 25 23:26:09 2026 GMT Not After : Mar 29 00:31:09 2026 GMT Subject: CN=67A1E8EBD44F722B4B357CD9753A8894095CF998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:a9:9f:23:3e:50:9f:6c:52:81:67:59:2c: 8c:96:2d:05:3c:cb:7e:c2:c6:8d:dc:4a:ed:33:fd: 79:14:e0:5e:e3:bd:95:5a:c5:5a:8e:36:03:7b:b9: 3e:01:f2:03:c4:c5:e0:58:9a:54:5a:d8:10:08:35: ab:d5:c4:3b:e2:cd:94:7e:44:c0:bd:66:f8:fd:43: 62:89:a3:53:9d:30:75:c5:c2:b2:92:2e:c2:b9:16: af:1d:04:6d:e5:ce:9a:2b:9f:77:b3:91:a5:be:08: 58:c8:1f:b8:51:31:33:bd:77:4e:61:6b:bd:7a:b1: d9:31:7c:d4:78:5d:88:53:03:62:56:7b:97:21:80: cd:6a:39:f5:de:50:91:14:7f:7a:d0:34:03:90:29: 95:16:96:15:2d:6b:36:ff:9c:94:75:cf:0b:ae:d0: 26:01:83:e7:42:79:a2:61:68:63:10:98:f7:c4:65: 8f:52:a7:1c:73:b8:e7:d8:51:bf:bd:4a:9a:d1:dc: 47:d2:a8:22:25:03:13:c1:77:55:47:32:a7:88:f2: e4:32:74:d7:d9:05:fb:f1:6d:bd:ef:49:8f:a5:7c: a8:eb:f4:ea:39:ba:19:0c:06:4c:d8:67:0f:58:bf: 16:00:d6:c0:e8:2e:75:be:b4:52:eb:12:c4:b4:48: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A1:E8:EB:D4:4F:72:2B:4B:35:7C:D9:75:3A:88:94:09:5C:F9:98 X509v3 Authority Key Identifier: keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:92:d6:51:98:3d:1c:ff:a2:c7:2c:fc:7e:72:38:53:cf:dc: 65:34:87:d4:4f:32:e1:84:17:9e:fe:07:b7:c5:d8:45:aa:98: 90:98:84:24:30:42:5a:ab:db:73:49:d3:27:80:5f:ac:e9:ce: 49:77:08:28:3a:f0:b9:57:01:70:e1:6c:4f:0a:96:2d:74:61: 38:eb:11:84:1c:cc:33:d6:f2:34:b2:d9:16:87:16:7b:5d:6f: 28:57:23:49:7e:df:fa:0f:5d:0b:4e:12:37:8b:b4:6e:2b:31: 5e:87:ad:81:cf:1b:92:13:d1:18:a3:e1:c8:40:af:93:cc:bd: 83:ba:d4:c4:a0:ba:d7:27:40:09:af:c5:83:98:cb:75:2b:cd: be:94:59:b1:34:e8:2a:86:ff:a2:d8:2f:c4:f3:70:a3:52:e4: b0:78:da:d2:f4:73:7a:31:9f:ef:89:0b:45:5d:f9:1d:f4:00: 71:58:1e:c5:a7:68:c4:14:bf:0c:08:25:ec:9b:52:28:54:da: a4:b8:27:a8:97:99:5e:50:cd:b7:7c:79:ea:59:9b:c9:69:09: f7:31:ad:7c:35:4e:57:e3:ca:5c:1f:bc:fa:4b:1c:43:e4:1c: 2a:aa:37:3a:3b:b3:05:a8:f1:99:d2:7d:c3:a4:52:c9:fc:c8: 86:bf:19:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEMyb2BLv1LOUrwDOwqoKUqzO1gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3 QTUxQTg2RjAeFw0yNjAzMjUyMzI2MDlaFw0yNjAzMjkwMDMxMDlaMDMxMTAvBgNV BAMTKDY3QTFFOEVCRDQ0RjcyMkI0QjM1N0NEOTc1M0E4ODk0MDk1Q0Y5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5b6mfIz5Qn2xSgWdZLIyWLQU8 y37Cxo3cSu0z/XkU4F7jvZVaxVqONgN7uT4B8gPExeBYmlRa2BAINavVxDvizZR+ RMC9Zvj9Q2KJo1OdMHXFwrKSLsK5Fq8dBG3lzporn3ezkaW+CFjIH7hRMTO9d05h a716sdkxfNR4XYhTA2JWe5chgM1qOfXeUJEUf3rQNAOQKZUWlhUtazb/nJR1zwuu 0CYBg+dCeaJhaGMQmPfEZY9SpxxzuOfYUb+9SprR3EfSqCIlAxPBd1VHMqeI8uQy dNfZBfvxbb3vSY+lfKjr9Oo5uhkMBkzYZw9YvxYA1sDoLnW+tFLrEsS0SCZ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ6Ho69RPcitLNXzZdTqIlAlc+ZgwHwYDVR0j BBgwFoAUVtSU9SAccLPI/QYwZkiY1XpRqG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDVhZjIyYy03ZTNlLTQwYjUtYWM1MC02Mzc3NzJhOTVjMjEvMC81NkQ0OTRGNTIw MUM3MEIzQzhGRDA2MzA2NjQ4OThENTdBNTFBODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3QTUx QTg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4 RDU3QTUxQTg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaS1lGYPRz/oscs/H5yOFPP3GU0h9RPMuGE F57+B7fF2EWqmJCYhCQwQlqr23NJ0yeAX6zpzkl3CCg68LlXAXDhbE8Kli10YTjr EYQczDPW8jSy2RaHFntdbyhXI0l+3/oPXQtOEjeLtG4rMV6HrYHPG5IT0Rij4chA r5PMvYO61MSgutcnQAmvxYOYy3Urzb6UWbE06CqG/6LYL8TzcKNS5LB42tL0c3ox n++JC0Vd+R30AHFYHsWnaMQUvwwIJeybUihU2qS4J6iXmV5Qzbd8eepZm8lpCfcx rXw1TlfjylwfvPpLHEPkHCqqNzo7swWo8ZnSfcOkUsn8yIa/GfQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:56:01 2026 by rpki-client