$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft File: 56D494F5201C70B3C8FD0630664898D57A51A86F.mft (raw, json) Hash identifier: v3FdaR1oqK7zCLYtOTRadmbIrSiMuWYhVQKpEjW+euo= Subject key identifier: A3:75:EE:C2:64:77:CC:90:12:7E:1C:92:FC:01:D4:E3:24:2A:DD:B9 Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F Certificate serial: 06830DB6C81F12A0C921A417F9955BE035E7DAAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft Manifest number: 16 Signing time: Wed 02 Jul 2025 03:40:59 +0000 Manifest this update: Wed 02 Jul 2025 03:35:59 +0000 Manifest next update: Sat 05 Jul 2025 07:46:59 +0000 Files and hashes: 1: 56D494F5201C70B3C8FD0630664898D57A51A86F.crl (hash: ibF2+yjnOfyNnuFPM/JRb/gzhZ4j0Z/oRgMwinAH2M4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 07:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:83:0d:b6:c8:1f:12:a0:c9:21:a4:17:f9:95:5b:e0:35:e7:da:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F Validity Not Before: Jul 2 03:35:59 2025 GMT Not After : Jul 5 07:46:59 2025 GMT Subject: CN=A375EEC26477CC90127E1C92FC01D4E3242ADDB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0a:54:11:45:a1:2d:eb:9b:6a:d0:ea:6c:93: 67:0e:6d:34:73:a4:75:e9:0d:fb:5e:e5:46:da:5d: a8:af:18:23:65:ed:4f:89:c9:df:e3:9e:68:89:97: 61:8e:21:3d:72:0b:dd:7f:10:61:78:39:f4:0f:6c: 96:df:5a:e7:72:22:9f:24:b2:7e:81:79:bf:d1:11: 49:64:25:c3:d4:8c:e8:aa:1c:ab:e2:86:35:7e:d1: 2a:b2:3a:ed:93:06:59:1b:c8:8a:bb:61:67:a0:fd: 1b:fe:ba:53:9b:29:55:7c:9e:a7:12:d5:c8:5f:4f: 1e:ed:ed:29:91:12:14:89:64:6d:5e:98:0b:3a:6a: 7d:d4:c5:09:f1:44:31:84:31:e6:5c:05:d4:5f:11: db:e9:8c:c5:60:d8:34:c3:5f:ed:eb:35:f0:37:cf: 18:01:07:3a:e4:37:7f:92:16:51:38:56:9c:67:77: 82:fc:bc:2a:d1:91:96:9c:5b:c0:02:25:93:d2:c2: 32:64:4f:d0:49:4f:7a:69:12:d0:e7:95:e2:4d:c1: 85:54:8f:5f:fc:af:1a:7f:aa:42:61:23:66:ec:26: e8:a6:81:d3:e5:f1:b8:dd:7e:bd:62:57:ac:30:f0: 54:15:48:6c:b3:96:44:e8:68:c9:25:dd:ab:20:a7: 5e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:75:EE:C2:64:77:CC:90:12:7E:1C:92:FC:01:D4:E3:24:2A:DD:B9 X509v3 Authority Key Identifier: keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4c:c0:fe:c7:ce:ee:e0:69:9f:6b:04:5a:57:b9:01:49:14: 5f:5e:5d:6f:de:72:77:10:40:d7:90:ef:c9:78:c2:53:9b:7d: 0c:ea:3a:f0:ff:f9:72:eb:92:72:d1:26:ad:00:98:c3:bf:28: b9:c0:b1:39:2d:50:7b:e5:ee:54:4b:4e:1c:7a:a4:7a:a1:ac: aa:a1:99:ab:dc:79:62:6c:19:78:f0:a3:5e:37:de:fb:e0:35: d9:53:72:9f:46:15:cb:f9:b0:90:37:98:59:c5:3b:2c:81:9b: a8:3a:43:d5:0e:df:25:b6:a5:85:d6:4b:83:61:cc:bd:6c:88: ef:ee:cc:80:aa:84:de:0a:71:f7:13:f5:a7:b9:99:51:2d:e7: 53:7c:64:94:0c:be:83:ed:14:82:bc:74:6f:0f:f8:b8:ef:0d: f7:d5:ad:40:17:60:4e:a0:0b:38:ca:53:7d:27:be:17:15:20: 6f:0e:be:56:2b:c9:e3:51:3a:97:e2:7b:d4:14:25:65:67:58: ee:e3:fa:c7:f6:fd:e2:13:b2:74:c8:18:34:3c:cb:6a:8c:98: ed:85:71:dd:f9:13:28:c5:60:1f:27:e0:d3:a1:53:fa:eb:6d: 30:6d:4b:cb:44:f2:8c:99:c5:f3:0a:61:fc:ac:ca:b9:c9:d2: ec:bd:a2:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBoMNtsgfEqDJIaQX+ZVb4DXn2qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3 QTUxQTg2RjAeFw0yNTA3MDIwMzM1NTlaFw0yNTA3MDUwNzQ2NTlaMDMxMTAvBgNV BAMTKEEzNzVFRUMyNjQ3N0NDOTAxMjdFMUM5MkZDMDFENEUzMjQyQUREQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbClQRRaEt65tq0Opsk2cObTRz pHXpDfte5UbaXaivGCNl7U+Jyd/jnmiJl2GOIT1yC91/EGF4OfQPbJbfWudyIp8k sn6Beb/REUlkJcPUjOiqHKvihjV+0SqyOu2TBlkbyIq7YWeg/Rv+ulObKVV8nqcS 1chfTx7t7SmREhSJZG1emAs6an3UxQnxRDGEMeZcBdRfEdvpjMVg2DTDX+3rNfA3 zxgBBzrkN3+SFlE4Vpxnd4L8vCrRkZacW8ACJZPSwjJkT9BJT3ppEtDnleJNwYVU j1/8rxp/qkJhI2bsJuimgdPl8bjdfr1iV6ww8FQVSGyzlkToaMkl3asgp15RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo3XuwmR3zJASfhyS/AHU4yQq3bkwHwYDVR0j BBgwFoAUVtSU9SAccLPI/QYwZkiY1XpRqG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDVhZjIyYy03ZTNlLTQwYjUtYWM1MC02Mzc3NzJhOTVjMjEvMC81NkQ0OTRGNTIw MUM3MEIzQzhGRDA2MzA2NjQ4OThENTdBNTFBODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3QTUx QTg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4 RDU3QTUxQTg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9MwP7Hzu7gaZ9rBFpXuQFJFF9eXW/ecncQ QNeQ78l4wlObfQzqOvD/+XLrknLRJq0AmMO/KLnAsTktUHvl7lRLThx6pHqhrKqh mavceWJsGXjwo1433vvgNdlTcp9GFcv5sJA3mFnFOyyBm6g6Q9UO3yW2pYXWS4Nh zL1siO/uzICqhN4KcfcT9ae5mVEt51N8ZJQMvoPtFIK8dG8P+LjvDffVrUAXYE6g CzjKU30nvhcVIG8OvlYryeNROpfie9QUJWVnWO7j+sf2/eITsnTIGDQ8y2qMmO2F cd35EyjFYB8n4NOhU/rrbTBtS8tE8oyZxfMKYfysyrnJ0uy9ook= -----END CERTIFICATE-----Generated at Thu Jul 3 03:37:09 2025 by rpki-client