$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft File: 56302D09256688774B85DCD3BAEEB0CB17E8884D.mft (raw, json) Hash identifier: ZJAgsFLLHEDcO8kO1xRtL0kvPA4cAHcDC+kb6x14r6s= Subject key identifier: 4E:0C:ED:C2:BB:DA:D7:43:1F:86:A6:79:E5:EE:93:24:8F:37:5F:25 Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Certificate serial: 59A06D0230282E869EE0839BA78CC6A8073AC106 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft Manifest number: A3 Signing time: Fri 22 Aug 2025 09:54:39 +0000 Manifest this update: Fri 22 Aug 2025 09:49:39 +0000 Manifest next update: Mon 25 Aug 2025 18:52:39 +0000 Files and hashes: 1: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: narOg/Y+HQu36n1a+2Amx/Ji0/PrZsxnYg1qBFxyHaM=) 2: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: aFVZHS7nINB+JL7AEdDHRgxQQpnHeECBqD4GE79htH4=) 3: 56302D09256688774B85DCD3BAEEB0CB17E8884D.crl (hash: lQoqqY+qFHrJ1uA6N+IqYEZmefMV+Ul0DblTTe4nZ64=) 4: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: gVISUrC0w0h01G2FHy4AG7111ikLnz8RrJKjXJHpEPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a0:6d:02:30:28:2e:86:9e:e0:83:9b:a7:8c:c6:a8:07:3a:c1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Validity Not Before: Aug 22 09:49:39 2025 GMT Not After : Aug 25 18:52:39 2025 GMT Subject: CN=4E0CEDC2BBDAD7431F86A679E5EE93248F375F25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f1:f4:7e:34:d8:00:f3:3f:3e:c3:ab:41:d8: 37:02:0f:8b:18:ab:7d:ac:67:ec:0e:05:62:4a:76: 38:69:6c:37:f2:fb:3d:71:5f:e2:6e:0a:18:a0:9f: 24:67:0b:df:7a:f2:e0:24:57:bc:04:14:62:4b:66: d4:76:d4:5b:40:a7:cc:56:75:46:08:60:0a:8b:e1: 5a:0a:e3:dc:5a:d7:ee:6a:4e:e7:85:1b:81:85:1b: 74:67:ca:ac:73:51:68:37:f9:05:ea:21:a2:89:ef: 9d:26:ed:55:3d:e1:4a:c7:1d:ec:08:b1:4f:72:7c: d6:55:e2:72:1f:f4:d4:61:f0:3c:57:75:88:30:3f: 51:bd:a9:db:69:cc:98:c0:30:be:77:a5:6a:e2:83: 77:a3:83:f2:d6:00:f8:40:ba:e8:29:db:12:c8:a9: 3e:5b:0f:b8:71:a5:27:3b:f1:71:af:3d:76:60:3d: 0c:9f:5c:bd:a6:f7:90:58:7f:80:30:34:a0:8b:92: 82:92:82:8f:84:30:65:9c:68:69:16:71:19:63:68: 88:a4:5d:0d:43:81:be:62:dc:3d:08:45:ef:96:5d: c8:65:3a:ea:54:01:65:eb:e9:65:f9:ee:f8:2a:d7: ed:6b:b5:3c:83:5c:98:be:4c:cb:cd:0f:d3:7f:cf: 2a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0C:ED:C2:BB:DA:D7:43:1F:86:A6:79:E5:EE:93:24:8F:37:5F:25 X509v3 Authority Key Identifier: keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:bc:cb:16:76:8a:c1:70:72:69:71:4f:dd:2a:59:60:d2:f3: 56:1f:34:94:fa:20:fc:5e:98:de:09:f3:06:f5:ed:cc:66:31: 17:c6:11:b1:3c:d2:60:e1:a3:da:60:94:e4:ed:f5:bb:83:06: 54:61:d2:23:2a:85:ed:b2:0b:9a:ae:bf:d7:2e:04:86:9c:cc: f9:46:3b:e5:82:b9:ab:58:fa:0a:56:22:33:1e:6e:ce:c4:c1: 39:97:b9:94:80:77:e9:55:b0:c6:46:40:0c:05:92:31:13:9b: c0:22:38:fb:14:53:e4:b3:60:5a:ed:9e:13:b6:12:1c:65:c0: d3:d9:38:17:fe:13:e7:72:ba:f0:e6:ca:f6:fa:28:d8:1f:e3: fa:88:a9:a8:73:16:cb:bb:28:22:8c:33:84:25:86:7d:f3:a8: 81:89:88:7a:79:f9:4d:53:47:bb:41:72:0f:80:d7:d0:36:06: be:53:bb:da:0f:f9:fb:f9:78:ed:be:bb:33:ce:7c:0f:6c:1e: 06:6e:77:68:0a:8c:16:74:5a:6d:e7:c3:e8:e9:7a:0e:65:c9: 11:cb:e9:b2:c1:dc:a2:77:41:13:4d:55:05:5d:03:13:e1:25: 0c:99:bf:2b:b2:72:90:d8:5a:5c:99:4c:b7:0f:37:18:7b:3c: c2:c7:8b:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWaBtAjAoLoae4IObp4zGqAc6wQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0Ix N0U4ODg0RDAeFw0yNTA4MjIwOTQ5MzlaFw0yNTA4MjUxODUyMzlaMDMxMTAvBgNV BAMTKDRFMENFREMyQkJEQUQ3NDMxRjg2QTY3OUU1RUU5MzI0OEYzNzVGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ8fR+NNgA8z8+w6tB2DcCD4sY q32sZ+wOBWJKdjhpbDfy+z1xX+JuChignyRnC9968uAkV7wEFGJLZtR21FtAp8xW dUYIYAqL4VoK49xa1+5qTueFG4GFG3RnyqxzUWg3+QXqIaKJ750m7VU94UrHHewI sU9yfNZV4nIf9NRh8DxXdYgwP1G9qdtpzJjAML53pWrig3ejg/LWAPhAuugp2xLI qT5bD7hxpSc78XGvPXZgPQyfXL2m95BYf4AwNKCLkoKSgo+EMGWcaGkWcRljaIik XQ1Dgb5i3D0IRe+WXchlOupUAWXr6WX57vgq1+1rtTyDXJi+TMvND9N/zyq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgztwrva10MfhqZ55e6TJI83XyUwHwYDVR0j BBgwFoAUVjAtCSVmiHdLhdzTuu6wyxfoiE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjA2ZGVmYS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC81NjMwMkQwOTI1 NjY4ODc3NEI4NURDRDNCQUVFQjBDQjE3RTg4ODRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0IxN0U4 ODg0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIw Q0IxN0U4ODg0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+8yxZ2isFwcmlxT90qWWDS81YfNJT6IPxe mN4J8wb17cxmMRfGEbE80mDho9pglOTt9buDBlRh0iMqhe2yC5quv9cuBIaczPlG O+WCuatY+gpWIjMebs7EwTmXuZSAd+lVsMZGQAwFkjETm8AiOPsUU+SzYFrtnhO2 EhxlwNPZOBf+E+dyuvDmyvb6KNgf4/qIqahzFsu7KCKMM4Qlhn3zqIGJiHp5+U1T R7tBcg+A19A2Br5Tu9oP+fv5eO2+uzPOfA9sHgZud2gKjBZ0Wm3nw+jpeg5lyRHL 6bLB3KJ3QRNNVQVdAxPhJQyZvyuycpDYWlyZTLcPNxh7PMLHi0w= -----END CERTIFICATE-----Generated at Sat Aug 23 17:32:25 2025 by rpki-client