$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft File: 56302D09256688774B85DCD3BAEEB0CB17E8884D.mft (raw, json) Hash identifier: mMlidv3bHazQJwcdpU51vEKZin+oW2qxhiIhHUDai3k= Subject key identifier: 7D:3A:A8:09:6C:DD:E2:AB:DA:D4:3C:BC:B3:DD:C4:91:05:B9:7B:B0 Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Certificate serial: 35D6D1F44144E83E8DEB05AFFEBA8A6AB34D8517 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft Manifest number: BC Signing time: Sat 18 Oct 2025 05:22:12 +0000 Manifest this update: Sat 18 Oct 2025 05:17:12 +0000 Manifest next update: Tue 21 Oct 2025 12:24:12 +0000 Files and hashes: 1: 56302D09256688774B85DCD3BAEEB0CB17E8884D.crl (hash: 7TYi9oBP7CC1vxy/9GJev50nzxG8mFz54lVPlTN6uQE=) 2: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: aFVZHS7nINB+JL7AEdDHRgxQQpnHeECBqD4GE79htH4=) 3: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: gVISUrC0w0h01G2FHy4AG7111ikLnz8RrJKjXJHpEPg=) 4: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: narOg/Y+HQu36n1a+2Amx/Ji0/PrZsxnYg1qBFxyHaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d6:d1:f4:41:44:e8:3e:8d:eb:05:af:fe:ba:8a:6a:b3:4d:85:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Validity Not Before: Oct 18 05:17:12 2025 GMT Not After : Oct 21 12:24:12 2025 GMT Subject: CN=7D3AA8096CDDE2ABDAD43CBCB3DDC49105B97BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:61:2b:4c:1c:99:2a:09:5c:fa:cb:35:16:44: cc:1b:3e:61:57:d9:0a:20:dc:e8:8b:d3:00:8a:cb: 96:25:cd:2e:88:9c:3a:67:74:7b:0c:8a:26:a4:c8: e0:af:7d:a5:6e:9c:f2:ed:97:49:48:d7:1f:f9:7b: ee:92:d3:2c:a9:84:68:f1:b7:d7:04:8f:fc:9b:ad: cf:2d:3b:ad:79:2c:85:b3:5c:7a:49:ab:23:08:c3: 53:7c:e9:06:1e:a2:ca:d8:b0:6f:94:f7:4d:15:67: 0d:37:84:d0:6c:39:6d:0d:50:18:8b:67:b2:65:1e: 86:be:e9:86:72:d4:69:2c:62:91:18:05:58:01:ac: 7f:12:a6:8b:e6:0a:e9:b5:1c:1a:3e:f3:57:13:14: 9e:e6:84:03:ee:9b:d9:aa:d0:59:de:0c:fe:ca:ba: 9d:63:42:05:a0:dd:0c:21:36:20:d2:55:ff:d1:31: 0c:e4:b6:1f:d8:5a:7b:2a:30:be:98:e7:de:4c:a3: 4c:81:b1:a0:3e:6c:9c:b0:4a:5d:2e:8d:24:9b:a9: 81:ab:75:70:1d:02:18:8b:c9:10:14:c9:d9:26:e9: dd:4a:56:cd:3c:27:b8:07:26:c5:cc:0a:28:65:9a: 45:f1:aa:3c:19:98:72:39:7a:a3:91:52:87:03:c2: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3A:A8:09:6C:DD:E2:AB:DA:D4:3C:BC:B3:DD:C4:91:05:B9:7B:B0 X509v3 Authority Key Identifier: keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:bc:a2:57:e5:40:d3:44:6e:ee:eb:21:ab:e7:09:83:2b:64: ac:43:f9:c5:06:04:e3:7a:0b:ed:6e:e3:b2:b4:d0:7a:e2:66: b3:4c:1c:3e:43:4f:f6:cb:04:f1:bd:fa:b4:94:2e:4d:68:fd: 4f:5b:e5:ee:bb:4d:57:ff:1c:56:e2:0c:29:a6:80:fb:6d:84: de:46:5a:15:52:b4:76:34:c7:2c:ce:87:7b:1c:1a:eb:bc:ab: 60:45:77:6a:7d:fb:ab:ad:20:f7:8a:c7:1c:54:82:33:e2:fe: a0:96:c8:f4:00:d4:43:ca:d4:24:ab:b2:4b:e4:6f:d9:26:de: 08:97:a6:ff:9a:7f:f7:66:f3:3b:cb:12:21:02:66:3e:7b:26: 58:b9:b3:69:6a:c6:ef:55:0f:dc:0c:cf:ce:87:59:00:3d:15: f7:f0:e9:69:1d:8e:b0:5d:fc:5c:5f:a4:0b:b2:ef:e9:7e:0b: fd:06:be:04:93:36:f4:4c:d0:a2:ee:db:22:f5:f4:4c:07:95: 66:fc:7c:43:63:8d:0a:fa:31:23:a9:a1:69:2d:b3:c2:c9:e5: 63:22:d5:8d:aa:68:5c:46:6a:f8:8f:fb:c9:3b:a1:31:c2:64: 96:20:f3:b5:95:8b:7a:2e:85:e0:db:d9:9f:97:80:43:57:94: f4:de:92:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdbR9EFE6D6N6wWv/rqKarNNhRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0Ix N0U4ODg0RDAeFw0yNTEwMTgwNTE3MTJaFw0yNTEwMjExMjI0MTJaMDMxMTAvBgNV BAMTKDdEM0FBODA5NkNEREUyQUJEQUQ0M0NCQ0IzRERDNDkxMDVCOTdCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYYStMHJkqCVz6yzUWRMwbPmFX 2Qog3OiL0wCKy5YlzS6InDpndHsMiiakyOCvfaVunPLtl0lI1x/5e+6S0yyphGjx t9cEj/ybrc8tO615LIWzXHpJqyMIw1N86QYeosrYsG+U900VZw03hNBsOW0NUBiL Z7JlHoa+6YZy1GksYpEYBVgBrH8SpovmCum1HBo+81cTFJ7mhAPum9mq0FneDP7K up1jQgWg3QwhNiDSVf/RMQzkth/YWnsqML6Y595Mo0yBsaA+bJywSl0ujSSbqYGr dXAdAhiLyRAUydkm6d1KVs08J7gHJsXMCihlmkXxqjwZmHI5eqORUocDwqfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfTqoCWzd4qva1Dy8s93EkQW5e7AwHwYDVR0j BBgwFoAUVjAtCSVmiHdLhdzTuu6wyxfoiE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjA2ZGVmYS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC81NjMwMkQwOTI1 NjY4ODc3NEI4NURDRDNCQUVFQjBDQjE3RTg4ODRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0IxN0U4 ODg0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIw Q0IxN0U4ODg0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHG8olflQNNEbu7rIavnCYMrZKxD+cUGBON6 C+1u47K00HriZrNMHD5DT/bLBPG9+rSULk1o/U9b5e67TVf/HFbiDCmmgPtthN5G WhVStHY0xyzOh3scGuu8q2BFd2p9+6utIPeKxxxUgjPi/qCWyPQA1EPK1CSrskvk b9km3giXpv+af/dm8zvLEiECZj57Jli5s2lqxu9VD9wMz86HWQA9Fffw6WkdjrBd /FxfpAuy7+l+C/0GvgSTNvRM0KLu2yL19EwHlWb8fENjjQr6MSOpoWkts8LJ5WMi 1Y2qaFxGaviP+8k7oTHCZJYg87WVi3ouheDb2Z+XgENXlPTekmM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:05 2025 by rpki-client