$ rpki-client -vvf repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft File: 556F35148B9935659C1FE70B505B1D8D79838EFA.mft (raw, json) Hash identifier: YGQlzpN4JqHJURpUwtrNKebzCh0cuT+0w8RbYJXF4Qw= Subject key identifier: F2:17:38:86:79:C6:54:8C:19:D6:7E:69:52:84:96:B0:ED:75:51:A3 Authority key identifier: 55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA Certificate issuer: /CN=556F35148B9935659C1FE70B505B1D8D79838EFA Certificate serial: 4DF81B0506461FFCD009D924692DD12BAFF3F5C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft Manifest number: 01CC Signing time: Mon 20 Oct 2025 01:01:26 +0000 Manifest this update: Mon 20 Oct 2025 00:56:26 +0000 Manifest next update: Thu 23 Oct 2025 11:13:26 +0000 Files and hashes: 1: 556F35148B9935659C1FE70B505B1D8D79838EFA.crl (hash: 2O1TmtpNOa1s5AswEk7zinorfAoMvHn1m+XxHB9NqbE=) 2: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: Rw+pxwTJP+hvGj9PdU0j+wE54RfccGnIIDVVcYYdmUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f8:1b:05:06:46:1f:fc:d0:09:d9:24:69:2d:d1:2b:af:f3:f5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556F35148B9935659C1FE70B505B1D8D79838EFA Validity Not Before: Oct 20 00:56:26 2025 GMT Not After : Oct 23 11:13:26 2025 GMT Subject: CN=F217388679C6548C19D67E69528496B0ED7551A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:16:f4:5e:f8:76:b7:6b:04:bc:ac:9f:bc: 15:f4:ff:18:3d:5b:14:17:20:87:b0:90:a5:be:dc: e7:ab:9c:bd:1b:2f:2b:42:58:db:74:8a:0a:65:6c: 58:79:56:b4:79:da:a6:e7:2d:a8:6a:d4:bf:61:35: 2d:8f:8e:0a:f2:14:27:8c:3e:e2:40:00:7c:0f:89: 8e:76:cd:26:59:be:a1:cb:71:35:57:db:af:6d:78: 4a:81:5b:ec:70:11:4a:7f:66:2f:91:64:4d:bf:13: 3c:a2:dc:82:fa:2d:d7:62:99:7f:de:0c:ed:24:83: 39:63:a7:a0:ca:3c:ca:d1:f1:bd:d6:b6:d6:c6:41: ac:78:09:da:96:49:eb:95:da:dd:e3:b3:4a:05:10: 07:a8:ab:f8:ee:59:d4:7a:27:70:41:34:f8:32:f8: 66:f7:08:9c:79:55:39:12:74:49:76:bd:94:e1:3c: 93:f8:fc:62:10:c4:eb:85:96:3b:5b:ae:04:12:72: 9b:5f:ab:13:bc:1d:ff:80:37:fd:8f:ab:f0:d1:b1: 74:1d:eb:08:14:53:06:0f:5b:4b:4e:f6:3b:21:47: a9:68:6e:7d:71:0c:9c:d1:98:d7:1c:a6:fa:53:03: a2:48:40:2c:4b:b3:ba:50:b0:b3:ec:8d:61:c5:fc: 55:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:17:38:86:79:C6:54:8C:19:D6:7E:69:52:84:96:B0:ED:75:51:A3 X509v3 Authority Key Identifier: keyid:55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:8a:f2:85:23:f4:b2:df:6e:66:40:6f:47:f7:7a:4f:7e:bd: 0f:4b:9c:14:e6:3b:24:43:3b:2c:16:27:3f:03:72:5b:ca:82: 46:14:4e:aa:7a:01:1f:b3:97:0c:50:02:74:c8:04:47:ad:8c: fb:85:18:32:c0:91:d2:0d:4f:ca:fb:78:1b:81:0b:5b:66:b8: af:31:c5:32:a5:d0:81:0f:22:48:0e:eb:69:14:31:16:55:ea: 4e:f1:c4:9a:1d:1b:4a:2e:c5:6e:95:2f:2d:7a:bb:fd:82:e3: 20:5b:ba:ef:00:44:08:d4:70:9e:d8:20:c3:4d:6a:c4:3d:33: c8:7f:ab:8d:99:96:83:9e:2e:4c:f2:58:94:e5:5d:11:8c:53: 5f:e5:15:a2:59:48:ea:09:2e:f9:15:44:28:81:3d:3e:6f:60: 6f:48:ba:e3:2c:81:5a:af:44:63:97:ad:7d:72:c9:eb:1c:74: 6b:aa:7c:fe:ed:7c:b9:19:5f:fc:65:6a:a9:97:87:2a:a6:4e: a4:f5:5d:a3:b8:b6:d3:62:e5:9f:90:9a:86:22:06:27:85:bc: d9:7e:06:f0:3c:e9:0c:f2:c2:f5:34:7f:08:06:4c:7c:ff:4b: 3f:13:19:89:1f:b9:86:e8:0d:ea:dd:f1:48:51:3e:4a:ad:05: 8b:ef:fd:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTfgbBQZGH/zQCdkkaS3RK6/z9cUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3 OTgzOEVGQTAeFw0yNTEwMjAwMDU2MjZaFw0yNTEwMjMxMTEzMjZaMDMxMTAvBgNV BAMTKEYyMTczODg2NzlDNjU0OEMxOUQ2N0U2OTUyODQ5NkIwRUQ3NTUxQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6hb0Xvh2t2sEvKyfvBX0/xg9 WxQXIIewkKW+3OernL0bLytCWNt0igplbFh5VrR52qbnLahq1L9hNS2PjgryFCeM PuJAAHwPiY52zSZZvqHLcTVX269teEqBW+xwEUp/Zi+RZE2/Ezyi3IL6LddimX/e DO0kgzljp6DKPMrR8b3WttbGQax4CdqWSeuV2t3js0oFEAeoq/juWdR6J3BBNPgy +Gb3CJx5VTkSdEl2vZThPJP4/GIQxOuFljtbrgQScptfqxO8Hf+AN/2Pq/DRsXQd 6wgUUwYPW0tO9jshR6lobn1xDJzRmNccpvpTA6JIQCxLs7pQsLPsjWHF/FVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8hc4hnnGVIwZ1n5pUoSWsO11UaMwHwYDVR0j BBgwFoAUVW81FIuZNWWcH+cLUFsdjXmDjvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzQyNDgwYS04ZTBmLTQ3N2EtYmQ0YS1hYTgwODk5MjdiYTgvMC81NTZGMzUxNDhC OTkzNTY1OUMxRkU3MEI1MDVCMUQ4RDc5ODM4RUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3OTgz OEVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM0MjQ4MGEtOGUwZi00NzdhLWJk NGEtYWE4MDg5OTI3YmE4LzAvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFE OEQ3OTgzOEVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKK8oUj9LLfbmZAb0f3ek9+vQ9LnBTmOyRD OywWJz8DclvKgkYUTqp6AR+zlwxQAnTIBEetjPuFGDLAkdINT8r7eBuBC1tmuK8x xTKl0IEPIkgO62kUMRZV6k7xxJodG0ouxW6VLy16u/2C4yBbuu8ARAjUcJ7YIMNN asQ9M8h/q42ZloOeLkzyWJTlXRGMU1/lFaJZSOoJLvkVRCiBPT5vYG9IuuMsgVqv RGOXrX1yyescdGuqfP7tfLkZX/xlaqmXhyqmTqT1XaO4ttNi5Z+QmoYiBieFvNl+ BvA86QzywvU0fwgGTHz/Sz8TGYkfuYboDerd8UhRPkqtBYvv/QY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:35:15 2025 by rpki-client