$ rpki-client -vvf repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft File: 556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft (raw, json) Hash identifier: LnFZfaIX/1CUnxJU9oIqQVTADi2tC0HBHYVoNt1hi7A= Subject key identifier: 05:D9:C1:BC:24:2E:EB:5F:8F:D8:C7:04:DB:16:08:AE:D3:68:22:97 Authority key identifier: 55:67:56:B0:E2:11:DD:26:2F:0D:5D:C9:EC:59:31:EF:A7:4C:AC:3C Certificate issuer: /CN=556756B0E211DD262F0D5DC9EC5931EFA74CAC3C Certificate serial: 167C1F4FCA538AC5197EA5DE584BB94BAD432AA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft Manifest number: 01A0 Signing time: Thu 21 Aug 2025 23:11:20 +0000 Manifest this update: Thu 21 Aug 2025 23:06:20 +0000 Manifest next update: Mon 25 Aug 2025 06:49:20 +0000 Files and hashes: 1: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: nJ4avaJc7tKIvi2FDv3N0xfVDNlPA5gXjwv3YNZeYwY=) 2: 556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl (hash: y6/c4lPx/fCcuktK0R6zduKREp0YOQldT2tmxgQ4qm8=) 3: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: lYUNkIkxLBup0UC10+QHTvZxJNXb61FqhfrGxpT26Yc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7c:1f:4f:ca:53:8a:c5:19:7e:a5:de:58:4b:b9:4b:ad:43:2a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556756B0E211DD262F0D5DC9EC5931EFA74CAC3C Validity Not Before: Aug 21 23:06:20 2025 GMT Not After : Aug 25 06:49:20 2025 GMT Subject: CN=05D9C1BC242EEB5F8FD8C704DB1608AED3682297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:2f:34:b0:e5:2c:12:43:7c:af:d1:38:85: ce:1f:70:8e:8a:ea:a5:f8:06:3a:5a:05:de:d4:ae: 5d:92:c3:d0:e7:b7:80:d1:f0:3f:96:ae:8a:5d:d5: 6e:c3:23:a4:4e:07:3c:88:4a:2a:40:d7:f2:eb:5f: 59:57:47:6e:eb:c6:13:e3:97:d4:65:e4:76:8e:9f: 29:2b:cc:02:87:4c:09:b4:87:61:83:b1:c1:d5:35: d7:7d:12:19:43:d3:96:cb:98:9a:68:d7:7b:fc:40: c7:43:6a:5c:44:cd:fc:5c:96:69:33:cd:8d:a6:62: 00:af:af:75:4d:54:80:70:2e:e6:b1:e8:d5:70:39: 4e:98:ed:9d:ec:fe:71:b2:09:cc:01:67:b5:47:67: 7c:9f:d2:ed:36:e1:77:bb:5e:be:9d:4a:ed:5b:ea: 55:b3:b4:16:83:01:f2:26:c1:ef:95:35:aa:21:d0: 56:8e:33:f7:b2:47:c0:1a:96:d4:bc:e1:19:e3:49: e3:06:10:e7:46:8d:1c:f0:ab:71:99:be:1c:01:a0: 79:10:1c:af:93:44:b6:de:4a:c0:6e:ef:e9:e6:ab: 90:cb:3a:f0:36:77:87:5c:ce:58:b8:d5:a0:27:b8: 42:e8:c9:66:de:fe:e1:bf:86:b0:52:ea:3f:0f:7d: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D9:C1:BC:24:2E:EB:5F:8F:D8:C7:04:DB:16:08:AE:D3:68:22:97 X509v3 Authority Key Identifier: keyid:55:67:56:B0:E2:11:DD:26:2F:0D:5D:C9:EC:59:31:EF:A7:4C:AC:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a9:8d:7a:12:4f:c5:22:c2:3d:38:6d:56:9e:63:ea:e3:bb: e4:fb:a7:3f:fe:79:63:87:93:b5:d3:53:dc:b0:96:41:71:cd: 89:44:5a:59:be:0e:86:42:eb:64:81:34:7d:9f:71:15:af:61: 83:c5:68:10:b9:8f:86:b8:dc:6e:4a:47:d8:3b:6b:1e:fe:ad: 6c:d0:0a:2f:1f:08:f0:d3:a9:14:17:0b:ab:80:65:ec:aa:d0: 42:c2:08:51:1b:f2:1e:a1:e6:de:79:51:67:58:10:8d:e1:d8: 1c:3d:de:fd:9b:b2:25:db:fe:4c:89:8d:e9:54:17:f9:2a:1d: 2b:33:f7:54:6f:5a:6d:a5:74:d2:06:1c:b3:03:f0:cf:f9:b8: 8c:2b:12:0c:ad:86:55:ac:74:f5:3a:e8:ac:02:ce:9b:b0:de: f9:b0:a5:61:75:64:3e:0b:82:aa:95:97:12:ee:e0:0f:56:4c: d3:d8:43:12:a7:d1:62:27:e9:96:a4:c3:e4:a0:2e:18:28:ec: 7d:fe:13:74:a4:72:1b:c1:86:70:3f:56:74:b6:d5:1d:fa:bf: b1:e0:28:2d:b7:5a:1f:88:67:5e:d7:5a:24:22:b2:ec:71:36: 97:bf:01:d4:ea:61:d5:48:9c:27:ca:d5:07:a2:c0:40:51:3d: e5:db:4f:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnwfT8pTisUZfqXeWEu5S61DKqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMxRUZB NzRDQUMzQzAeFw0yNTA4MjEyMzA2MjBaFw0yNTA4MjUwNjQ5MjBaMDMxMTAvBgNV BAMTKDA1RDlDMUJDMjQyRUVCNUY4RkQ4QzcwNERCMTYwOEFFRDM2ODIyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QS80sOUsEkN8r9E4hc4fcI6K 6qX4BjpaBd7Url2Sw9Dnt4DR8D+Wropd1W7DI6ROBzyISipA1/LrX1lXR27rxhPj l9Rl5HaOnykrzAKHTAm0h2GDscHVNdd9EhlD05bLmJpo13v8QMdDalxEzfxclmkz zY2mYgCvr3VNVIBwLuax6NVwOU6Y7Z3s/nGyCcwBZ7VHZ3yf0u024Xe7Xr6dSu1b 6lWztBaDAfImwe+VNaoh0FaOM/eyR8AaltS84RnjSeMGEOdGjRzwq3GZvhwBoHkQ HK+TRLbeSsBu7+nmq5DLOvA2d4dczli41aAnuELoyWbe/uG/hrBS6j8Pffo7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdnBvCQu61+P2McE2xYIrtNoIpcwHwYDVR0j BBgwFoAUVWdWsOIR3SYvDV3J7Fkx76dMrDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjRiMjBkOC01OTFiLTQxNTItOTc2OC05YzQyYjA2YzJmZTIvMC81NTY3NTZCMEUy MTFERDI2MkYwRDVEQzlFQzU5MzFFRkE3NENBQzNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMxRUZBNzRD QUMzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0YjIwZDgtNTkxYi00MTUyLTk3 NjgtOWM0MmIwNmMyZmUyLzAvNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMx RUZBNzRDQUMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2pjXoST8Uiwj04bVaeY+rju+T7pz/+eWOH k7XTU9ywlkFxzYlEWlm+DoZC62SBNH2fcRWvYYPFaBC5j4a43G5KR9g7ax7+rWzQ Ci8fCPDTqRQXC6uAZeyq0ELCCFEb8h6h5t55UWdYEI3h2Bw93v2bsiXb/kyJjelU F/kqHSsz91RvWm2ldNIGHLMD8M/5uIwrEgythlWsdPU66KwCzpuw3vmwpWF1ZD4L gqqVlxLu4A9WTNPYQxKn0WIn6Zakw+SgLhgo7H3+E3SkchvBhnA/VnS21R36v7Hg KC23Wh+IZ17XWiQisuxxNpe/AdTqYdVInCfK1QeiwEBRPeXbT8w= -----END CERTIFICATE-----Generated at Sat Aug 23 15:31:24 2025 by rpki-client