$ rpki-client -vvf repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft File: 556F35148B9935659C1FE70B505B1D8D79838EFA.mft (raw, json) Hash identifier: 7Rrgf6As/AxJwq7foldOc8mMAM4oV2CN/nOHCFdhskM= Subject key identifier: 07:86:D2:DF:4D:47:FA:B1:E8:97:74:E8:DA:50:5B:2D:94:98:FC:24 Authority key identifier: 55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA Certificate issuer: /CN=556F35148B9935659C1FE70B505B1D8D79838EFA Certificate serial: 578744B22A9BB8991947E59E51C4489E1B03DC60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft Manifest number: 019B Signing time: Wed 02 Jul 2025 06:31:23 +0000 Manifest this update: Wed 02 Jul 2025 06:26:23 +0000 Manifest next update: Sat 05 Jul 2025 08:43:23 +0000 Files and hashes: 1: 556F35148B9935659C1FE70B505B1D8D79838EFA.crl (hash: U86YseP1H1Lxezjb/KMRt4r+XZAwn0ObsPfMME9YILg=) 2: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: 1bjKbvUqG5BCn/NVvztyzNwID5OVDvMyI+PwBlSda/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 08:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:87:44:b2:2a:9b:b8:99:19:47:e5:9e:51:c4:48:9e:1b:03:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556F35148B9935659C1FE70B505B1D8D79838EFA Validity Not Before: Jul 2 06:26:23 2025 GMT Not After : Jul 5 08:43:23 2025 GMT Subject: CN=0786D2DF4D47FAB1E89774E8DA505B2D9498FC24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:b6:f2:9c:7b:44:b4:eb:bf:8c:c0:32:7b: 5a:51:1f:b4:81:c4:c9:e2:fc:23:d9:bb:cd:44:6f: c6:31:dc:a3:ad:02:de:53:c8:2b:ec:cb:e7:8a:3e: 47:dd:20:55:1b:5c:c0:ac:73:9e:cc:e6:71:e9:96: 91:8d:fc:92:fb:6b:c6:08:6d:cf:9b:eb:2e:e6:18: 76:82:86:42:7c:f4:c8:9d:be:65:72:ac:fa:60:40: 67:5f:47:cf:82:fc:77:ab:db:45:fc:2f:83:37:fd: 6d:37:00:56:cb:5c:4c:06:25:a3:54:0a:ed:ec:1b: 32:97:6e:f5:10:90:de:3d:3f:a4:03:ca:28:c7:d9: ca:f7:6f:09:c0:55:a1:7e:91:98:fd:89:66:42:19: a4:ae:1e:b4:a9:32:e6:1d:47:8d:91:34:61:ee:db: e3:1a:61:72:bd:26:eb:39:02:8a:05:ee:69:cd:02: 5c:bd:92:62:1f:1d:1e:c1:ad:8c:73:6b:ab:be:d1: 08:e6:c5:1b:52:69:f9:75:8d:a9:3d:3c:d8:6f:36: 89:18:e6:b0:ff:5b:65:f6:8d:2c:ce:61:5f:e5:a9: 9e:1c:7d:e1:7d:7e:21:f0:89:5c:e4:83:02:58:3d: 06:0d:13:d8:ad:36:96:0f:6b:77:23:3b:3a:81:51: eb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:86:D2:DF:4D:47:FA:B1:E8:97:74:E8:DA:50:5B:2D:94:98:FC:24 X509v3 Authority Key Identifier: keyid:55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d2:98:9d:79:ff:57:64:64:aa:8d:79:cc:5e:03:d3:8d:bd: 6d:e1:99:16:d4:e2:93:71:64:0a:69:1f:48:c1:db:a2:4e:a7: 72:31:f5:9e:cd:ee:96:e7:28:7f:91:74:0f:75:81:b5:d5:9b: a3:16:73:59:25:be:87:ba:f8:6b:8d:93:1c:c3:d0:cd:3d:09: d2:ff:92:c6:2c:36:53:3a:2b:1b:0d:9f:6c:dc:37:88:aa:ab: 7e:51:3a:32:0e:ed:8a:0a:34:79:89:ff:9a:07:9f:dd:a9:6f: 18:19:12:34:ac:a4:b3:d7:68:87:6d:50:2f:40:d4:cd:b9:cc: c8:11:21:68:cd:f7:7c:25:35:f3:6e:f1:54:08:0e:a7:80:0a: 34:50:87:a8:43:17:45:98:1a:88:01:69:c8:b5:83:30:fe:b4: 78:44:19:0e:57:ac:6f:0a:40:b1:7e:7a:8c:bb:9f:c1:ae:22: c8:4b:a8:83:2a:cd:16:ec:ce:96:e0:7c:7c:e6:59:f6:f5:8a: fc:18:33:f1:7a:50:ce:66:6b:b5:3b:92:04:11:74:f6:b8:49: aa:a5:8f:77:af:23:f3:e5:66:02:87:d8:64:fe:d7:4e:2e:e9: 3c:69:f4:16:5d:70:26:ba:19:23:c1:02:fe:8a:25:3c:7a:9a: 58:20:6d:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV4dEsiqbuJkZR+WeUcRInhsD3GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3 OTgzOEVGQTAeFw0yNTA3MDIwNjI2MjNaFw0yNTA3MDUwODQzMjNaMDMxMTAvBgNV BAMTKDA3ODZEMkRGNEQ0N0ZBQjFFODk3NzRFOERBNTA1QjJEOTQ5OEZDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPLbynHtEtOu/jMAye1pRH7SB xMni/CPZu81Eb8Yx3KOtAt5TyCvsy+eKPkfdIFUbXMCsc57M5nHplpGN/JL7a8YI bc+b6y7mGHaChkJ89MidvmVyrPpgQGdfR8+C/Her20X8L4M3/W03AFbLXEwGJaNU Cu3sGzKXbvUQkN49P6QDyijH2cr3bwnAVaF+kZj9iWZCGaSuHrSpMuYdR42RNGHu 2+MaYXK9Jus5AooF7mnNAly9kmIfHR7BrYxza6u+0QjmxRtSafl1jak9PNhvNokY 5rD/W2X2jSzOYV/lqZ4cfeF9fiHwiVzkgwJYPQYNE9itNpYPa3cjOzqBUev5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB4bS301H+rHol3To2lBbLZSY/CQwHwYDVR0j BBgwFoAUVW81FIuZNWWcH+cLUFsdjXmDjvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzQyNDgwYS04ZTBmLTQ3N2EtYmQ0YS1hYTgwODk5MjdiYTgvMC81NTZGMzUxNDhC OTkzNTY1OUMxRkU3MEI1MDVCMUQ4RDc5ODM4RUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3OTgz OEVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM0MjQ4MGEtOGUwZi00NzdhLWJk NGEtYWE4MDg5OTI3YmE4LzAvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFE OEQ3OTgzOEVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTSmJ15/1dkZKqNecxeA9ONvW3hmRbU4pNx ZAppH0jB26JOp3Ix9Z7N7pbnKH+RdA91gbXVm6MWc1klvoe6+GuNkxzD0M09CdL/ ksYsNlM6KxsNn2zcN4iqq35ROjIO7YoKNHmJ/5oHn92pbxgZEjSspLPXaIdtUC9A 1M25zMgRIWjN93wlNfNu8VQIDqeACjRQh6hDF0WYGogBaci1gzD+tHhEGQ5XrG8K QLF+eoy7n8GuIshLqIMqzRbszpbgfHzmWfb1ivwYM/F6UM5ma7U7kgQRdPa4Saql j3evI/PlZgKH2GT+104u6Txp9BZdcCa6GSPBAv6KJTx6mlggbTk= -----END CERTIFICATE-----Generated at Thu Jul 3 07:12:24 2025 by rpki-client