$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft File: 56302D09256688774B85DCD3BAEEB0CB17E8884D.mft (raw, json) Hash identifier: nKxbHE9AVxcCzX7bTkNv+wWXLVbGFYqN64ExyxQE4Bc= Subject key identifier: 6B:AF:2E:F1:D2:4B:09:80:FC:3A:01:A5:DB:F8:3D:99:A5:96:7B:48 Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Certificate serial: 499F4EA84760BBFE3C097E6C1F6BD2451DC75EE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft Manifest number: 0102 Signing time: Tue 24 Mar 2026 22:02:31 +0000 Manifest this update: Tue 24 Mar 2026 21:57:31 +0000 Manifest next update: Sat 28 Mar 2026 07:03:31 +0000 Files and hashes: 1: 56302D09256688774B85DCD3BAEEB0CB17E8884D.crl (hash: 6PXK4AyaPKhR+uKWB3qThwaxH0jWkHb0/KTUsJtCYEI=) 2: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: aFVZHS7nINB+JL7AEdDHRgxQQpnHeECBqD4GE79htH4=) 3: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: narOg/Y+HQu36n1a+2Amx/Ji0/PrZsxnYg1qBFxyHaM=) 4: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: gVISUrC0w0h01G2FHy4AG7111ikLnz8RrJKjXJHpEPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:9f:4e:a8:47:60:bb:fe:3c:09:7e:6c:1f:6b:d2:45:1d:c7:5e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Validity Not Before: Mar 24 21:57:31 2026 GMT Not After : Mar 28 07:03:31 2026 GMT Subject: CN=6BAF2EF1D24B0980FC3A01A5DBF83D99A5967B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:e8:83:4a:19:1a:c8:ba:48:be:17:8a:99: 1e:a3:60:ed:6e:b9:84:e2:9a:3e:db:02:c5:9d:5b: da:2c:ff:f1:6a:17:2e:d2:26:50:04:c7:6c:35:6c: 4f:a0:66:ac:19:b4:44:17:c3:b3:b4:46:bf:c5:1f: d9:d8:95:65:7d:cc:a4:7e:f7:c9:51:bc:44:61:97: 7e:fe:9e:4d:1f:a5:f7:bf:cf:b5:76:48:1d:55:47: 5e:df:ae:20:77:16:46:e5:05:a3:42:a8:f3:e8:e2: a0:ab:8b:00:d6:e1:e9:03:e3:85:59:37:0e:65:c2: 5f:f6:68:20:34:4c:d2:09:fd:93:8b:33:c7:ed:6c: af:2c:15:2c:3f:3b:67:ee:42:fa:fd:08:b6:a1:43: d9:b5:cd:ff:59:dd:17:1d:f8:e6:b9:a4:83:29:4d: 8f:bc:d9:95:cd:25:66:6e:c0:49:34:da:bb:4c:a5: b3:5f:64:e5:0e:22:48:bb:9d:14:2f:92:2e:24:7e: 5b:c7:68:1d:e6:38:d2:1c:eb:a8:8c:3f:b6:6c:eb: fb:c2:0e:4d:74:5f:75:10:ef:49:20:35:fa:54:99: 47:2d:37:07:ee:48:d7:bb:85:a7:a5:f3:3a:8e:cb: e3:e1:1b:cc:db:6f:1f:78:b7:6c:71:02:c6:d3:57: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AF:2E:F1:D2:4B:09:80:FC:3A:01:A5:DB:F8:3D:99:A5:96:7B:48 X509v3 Authority Key Identifier: keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:12:46:9b:55:7c:71:76:31:ff:8d:b4:ac:72:a6:7a:f5:c8: df:b7:bc:6d:76:31:09:a2:1b:a9:c4:e3:27:33:f1:c9:b3:a7: ea:88:f1:8a:a6:26:55:8c:e3:50:c5:5e:0d:c5:e7:17:ba:17: 2b:82:5b:a0:ed:86:b3:0c:73:8c:0a:09:44:11:58:29:e2:09: f3:12:d0:bc:45:b2:f6:46:6e:4a:0e:f5:68:48:45:61:85:44: 80:17:5e:b1:de:87:9a:e2:35:b1:42:03:6f:a6:04:f2:d1:b4: 7d:f7:19:f9:0e:b1:23:1b:a7:21:b8:e2:33:f0:88:3b:fe:af: da:24:e7:03:97:16:17:80:c8:c9:47:53:0e:d3:15:41:df:15: 5b:22:9d:1c:51:58:61:72:92:07:4f:46:e1:34:85:48:7e:bd: 18:b6:7a:c4:fb:eb:d8:d7:18:53:54:82:da:db:e5:50:5e:6b: d7:e4:fe:11:93:6a:0c:e4:22:b1:d6:04:fe:fa:8b:71:bd:f8: d3:7e:84:93:72:11:d1:16:3f:29:1e:73:44:45:f9:f6:32:83: d1:6d:ca:fe:88:98:54:4d:a3:b3:da:14:fc:60:9f:25:1d:68: c4:a7:a8:2f:b7:f1:ac:5d:f8:6b:b5:a7:c3:17:4b:57:90:8c: 79:d9:f5:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZ9OqEdgu/48CX5sH2vSRR3HXuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0Ix N0U4ODg0RDAeFw0yNjAzMjQyMTU3MzFaFw0yNjAzMjgwNzAzMzFaMDMxMTAvBgNV BAMTKDZCQUYyRUYxRDI0QjA5ODBGQzNBMDFBNURCRjgzRDk5QTU5NjdCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwpeiDShkayLpIvheKmR6jYO1u uYTimj7bAsWdW9os//FqFy7SJlAEx2w1bE+gZqwZtEQXw7O0Rr/FH9nYlWV9zKR+ 98lRvERhl37+nk0fpfe/z7V2SB1VR17friB3FkblBaNCqPPo4qCriwDW4ekD44VZ Nw5lwl/2aCA0TNIJ/ZOLM8ftbK8sFSw/O2fuQvr9CLahQ9m1zf9Z3Rcd+Oa5pIMp TY+82ZXNJWZuwEk02rtMpbNfZOUOIki7nRQvki4kflvHaB3mONIc66iMP7Zs6/vC Dk10X3UQ70kgNfpUmUctNwfuSNe7hael8zqOy+PhG8zbbx94t2xxAsbTV5ZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa68u8dJLCYD8OgGl2/g9maWWe0gwHwYDVR0j BBgwFoAUVjAtCSVmiHdLhdzTuu6wyxfoiE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjA2ZGVmYS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC81NjMwMkQwOTI1 NjY4ODc3NEI4NURDRDNCQUVFQjBDQjE3RTg4ODRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0IxN0U4 ODg0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIw Q0IxN0U4ODg0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUSRptVfHF2Mf+NtKxypnr1yN+3vG12MQmi G6nE4ycz8cmzp+qI8YqmJlWM41DFXg3F5xe6FyuCW6DthrMMc4wKCUQRWCniCfMS 0LxFsvZGbkoO9WhIRWGFRIAXXrHeh5riNbFCA2+mBPLRtH33GfkOsSMbpyG44jPw iDv+r9ok5wOXFheAyMlHUw7TFUHfFVsinRxRWGFykgdPRuE0hUh+vRi2esT769jX GFNUgtrb5VBea9fk/hGTagzkIrHWBP76i3G9+NN+hJNyEdEWPykec0RF+fYyg9Ft yv6ImFRNo7PaFPxgnyUdaMSnqC+38axd+Gu1p8MXS1eQjHnZ9RA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:45:25 2026 by rpki-client