$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft File: 56D494F5201C70B3C8FD0630664898D57A51A86F.mft (raw, json) Hash identifier: Alfs93y0stelxYDJBlYtkaqpt/HdFzwK67KMx0bYPvE= Subject key identifier: 54:93:01:F1:BA:D1:90:CB:C7:00:36:F5:37:8F:31:E0:D6:05:F8:E2 Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F Certificate serial: 4593C973A18983083143E0607EBE07BF63FBC215 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft Manifest number: 2C Signing time: Thu 21 Aug 2025 12:41:00 +0000 Manifest this update: Thu 21 Aug 2025 12:36:00 +0000 Manifest next update: Sun 24 Aug 2025 20:15:00 +0000 Files and hashes: 1: 56D494F5201C70B3C8FD0630664898D57A51A86F.crl (hash: 1wrDppQS6WdncVphfABDnVOb3k8x519PwHTcfaffwwQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:93:c9:73:a1:89:83:08:31:43:e0:60:7e:be:07:bf:63:fb:c2:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F Validity Not Before: Aug 21 12:36:00 2025 GMT Not After : Aug 24 20:15:00 2025 GMT Subject: CN=549301F1BAD190CBC70036F5378F31E0D605F8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:a1:7c:e4:43:5e:41:87:44:a1:98:f6:64: bc:56:11:a1:13:76:e0:47:6c:12:d7:67:ca:23:0f: 7e:bc:eb:4b:66:0c:3a:84:32:a6:73:38:94:f0:7f: b7:c9:a0:22:35:aa:0f:06:7d:b1:d2:51:a5:b5:0b: e5:59:db:9d:55:85:85:aa:d9:25:b7:b1:f1:4b:3d: 62:28:0f:fd:bb:30:32:c5:be:b0:15:13:a7:d2:b2: df:69:21:c0:cd:4c:56:86:00:5a:95:f2:ca:7d:a8: 93:8f:c9:59:8f:84:f8:0f:f9:f8:c7:42:a8:2e:94: e6:70:39:d0:58:27:79:e7:b7:48:b6:85:5a:d8:f3: c0:15:16:59:26:10:a1:ee:64:4d:cd:72:6e:2b:16: 22:4e:4e:2e:9e:5b:93:51:da:13:9b:74:e5:5d:02: 5e:f2:65:06:1e:4b:47:c5:a2:a7:b6:b1:75:b8:6f: b9:95:7b:d0:be:cd:38:dd:bd:3d:25:1a:be:bd:f0: c5:42:f9:37:19:40:6e:e4:5c:8c:11:3a:bc:2a:cb: cf:81:d0:d4:28:06:52:03:dc:cd:3b:17:13:01:ff: ec:dc:0b:3a:d6:70:95:f5:f3:c5:ee:bd:73:a4:cc: 85:ba:d8:5c:61:15:16:75:f9:4f:85:07:9f:7a:7f: 4d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:93:01:F1:BA:D1:90:CB:C7:00:36:F5:37:8F:31:E0:D6:05:F8:E2 X509v3 Authority Key Identifier: keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ec:dc:ab:e0:a6:f6:3e:49:1f:52:39:24:ac:8e:93:c8:70: b0:ca:bf:3f:7d:71:9d:eb:33:6b:11:87:e0:dc:c3:a1:e0:4d: e8:a5:d6:2a:69:3e:9a:88:bf:75:6c:0d:49:99:a0:46:0b:fc: e5:bb:cb:a0:e0:6d:09:1c:d4:5d:62:5a:90:9a:2f:01:fd:1a: 41:75:37:aa:d4:6f:6e:6c:44:42:87:94:f8:6e:ad:c0:4a:25: 8f:23:fc:7b:7a:17:ac:cd:fb:a4:8e:61:37:df:62:01:02:7f: 1d:ab:dd:83:38:02:8c:16:a7:5e:2b:07:60:aa:15:a6:28:bb: 88:d7:91:38:a1:d4:55:cb:5e:39:93:f9:b9:3d:6b:59:d3:35: 80:d8:1e:8e:b0:79:f1:25:f4:b5:27:a7:35:eb:e1:04:26:9f: 4f:25:eb:db:f3:3a:e6:49:c4:06:59:fc:bc:03:52:98:00:06: 3a:db:35:cd:79:e4:7b:30:ad:dd:29:94:4c:2a:89:c3:7e:a7: 1e:12:5d:24:5a:a7:03:89:d1:3b:77:96:2c:d3:27:97:cd:29: 65:72:42:c1:6e:96:2b:98:4b:30:68:08:67:43:fe:82:4e:1b: 38:dc:e3:c0:7a:e5:be:43:a6:72:84:06:58:ca:d0:b4:12:c0: da:e9:43:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZPJc6GJgwgxQ+Bgfr4Hv2P7whUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3 QTUxQTg2RjAeFw0yNTA4MjExMjM2MDBaFw0yNTA4MjQyMDE1MDBaMDMxMTAvBgNV BAMTKDU0OTMwMUYxQkFEMTkwQ0JDNzAwMzZGNTM3OEYzMUUwRDYwNUY4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jqF85ENeQYdEoZj2ZLxWEaET duBHbBLXZ8ojD36860tmDDqEMqZzOJTwf7fJoCI1qg8GfbHSUaW1C+VZ251VhYWq 2SW3sfFLPWIoD/27MDLFvrAVE6fSst9pIcDNTFaGAFqV8sp9qJOPyVmPhPgP+fjH QqgulOZwOdBYJ3nnt0i2hVrY88AVFlkmEKHuZE3Ncm4rFiJOTi6eW5NR2hObdOVd Al7yZQYeS0fFoqe2sXW4b7mVe9C+zTjdvT0lGr698MVC+TcZQG7kXIwROrwqy8+B 0NQoBlID3M07FxMB/+zcCzrWcJX188XuvXOkzIW62FxhFRZ1+U+FB596f00XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVJMB8brRkMvHADb1N48x4NYF+OIwHwYDVR0j BBgwFoAUVtSU9SAccLPI/QYwZkiY1XpRqG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDVhZjIyYy03ZTNlLTQwYjUtYWM1MC02Mzc3NzJhOTVjMjEvMC81NkQ0OTRGNTIw MUM3MEIzQzhGRDA2MzA2NjQ4OThENTdBNTFBODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3QTUx QTg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4 RDU3QTUxQTg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLs3KvgpvY+SR9SOSSsjpPIcLDKvz99cZ3r M2sRh+Dcw6HgTeil1ippPpqIv3VsDUmZoEYL/OW7y6DgbQkc1F1iWpCaLwH9GkF1 N6rUb25sREKHlPhurcBKJY8j/Ht6F6zN+6SOYTffYgECfx2r3YM4AowWp14rB2Cq FaYou4jXkTih1FXLXjmT+bk9a1nTNYDYHo6wefEl9LUnpzXr4QQmn08l69vzOuZJ xAZZ/LwDUpgABjrbNc155Hswrd0plEwqicN+px4SXSRapwOJ0Tt3lizTJ5fNKWVy QsFuliuYSzBoCGdD/oJOGzjc48B65b5DpnKEBljK0LQSwNrpQ7g= -----END CERTIFICATE-----Generated at Sat Aug 23 14:05:05 2025 by rpki-client