$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft File: B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft (raw, json) Hash identifier: 2YUV3xNSZZIuXuRpLXglWw2YM5f1xKwCb9eP/m1t6NA= Subject key identifier: FC:70:AB:36:E4:D6:A4:33:76:A6:F3:5F:8D:3C:BA:81:09:38:B8:FC Authority key identifier: B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0 Certificate issuer: /CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0 Certificate serial: 6A76AA8342747FA1D577BAB94BA344909DCEAF42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 21:01:36 +0000 Manifest this update: Fri 25 Sep 2026 20:56:36 +0000 Manifest next update: Sat 26 Sep 2026 22:03:36 +0000 Files and hashes: 1: B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl (hash: ZX2cFHjjiDSIQH5GshOBm8PZFJbbiygMrAnv5hrFMgg=) 2: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: 4neWrZ2U5Ifz5ZV+5kk+4b2Vcx4ltU0Zb9JXxN912Dk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:76:aa:83:42:74:7f:a1:d5:77:ba:b9:4b:a3:44:90:9d:ce:af:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0 Validity Not Before: Sep 25 20:56:36 2026 GMT Not After : Sep 26 22:03:36 2026 GMT Subject: CN=FC70AB36E4D6A43376A6F35F8D3CBA810938B8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:dc:b0:c2:75:42:38:5d:a2:dd:0d:7b:ce: 24:67:33:e1:d3:0b:fd:e5:df:b9:5a:54:73:21:7a: bb:52:07:60:a9:80:e5:42:51:39:7c:aa:96:e4:4a: 17:d3:08:e5:03:69:68:17:38:dd:69:55:07:b4:5a: 83:72:06:8a:e2:4c:df:64:07:37:75:2a:bb:d9:7f: 10:21:ac:3d:40:fb:55:a7:6c:64:a8:a8:2e:74:b3: 15:34:61:9d:e6:32:fb:e1:22:fa:d8:fb:49:53:b3: b6:d9:d3:21:ad:b2:3e:17:f9:df:9e:28:91:39:cc: d6:10:c7:80:8a:24:04:6c:2d:32:cf:f1:a9:9b:5d: bf:a8:be:be:40:90:74:6b:60:5f:c5:d9:70:ae:b3: 1d:e0:9c:fd:3d:ba:16:6c:02:e4:87:48:b9:d1:85: a8:01:df:e1:aa:05:32:15:c1:68:0f:cf:05:7c:d8: 48:75:c7:8f:d7:49:38:bb:19:07:20:11:74:4a:2b: 0f:29:62:e0:38:2a:03:40:eb:bf:5e:f8:46:76:08: 2b:5f:44:9d:db:12:64:cc:5c:de:aa:e0:10:51:d9: c6:6b:e0:8b:ee:c3:01:a7:4a:48:b1:82:73:6b:c6: 84:93:38:35:de:f5:ea:42:d1:05:21:8a:1e:7e:40: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:70:AB:36:E4:D6:A4:33:76:A6:F3:5F:8D:3C:BA:81:09:38:B8:FC X509v3 Authority Key Identifier: keyid:B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:49:89:39:c2:a4:71:ab:ef:f5:69:90:7e:63:8d:f1:e3:bb: ba:0e:07:7c:2b:f9:94:fb:1a:16:03:a9:94:59:c8:d6:93:83: d7:58:fa:f7:a7:96:e3:1b:68:2e:ff:94:36:68:b5:9b:0f:55: 65:8b:74:ad:cc:ee:3d:50:fa:7a:8f:32:50:7d:38:ee:58:c3: 95:1f:c1:f1:41:e9:dd:af:8f:73:6d:46:fd:39:d5:c1:8d:84: e8:1d:c8:0c:25:ea:b2:a8:4b:d1:64:d8:02:7b:ce:03:8f:d8: d6:ca:66:c8:13:fd:b4:1e:a6:48:80:6e:bd:55:9b:dc:26:e7: bd:ba:f9:bf:27:ce:dd:af:38:59:43:01:02:a7:7a:8d:17:36: 43:30:31:23:5d:17:2f:10:84:96:74:f5:7d:f0:5a:f7:f9:35: db:9f:22:93:a8:73:99:45:88:5a:ce:35:90:ec:94:03:da:45: 81:de:74:3b:cc:6f:40:ff:4f:ba:f7:01:2d:0f:cc:e5:99:d7: f3:86:a1:29:41:9a:55:1e:f1:d6:47:01:a2:18:40:37:27:d9: b2:7b:91:39:5f:60:bd:22:ab:dc:17:b2:29:00:68:6b:07:25: df:82:bf:a6:66:2b:81:7f:f6:dd:94:38:6f:2b:a5:64:09:61: ed:51:01:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanaqg0J0f6HVd7q5S6NEkJ3Or0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2QkE2NkFDQjZCMjhBNzVDRjhCOTI2MjlGMzg5ODhF NkJDRTVGMDAeFw0yNjA5MjUyMDU2MzZaFw0yNjA5MjYyMjAzMzZaMDMxMTAvBgNV BAMTKEZDNzBBQjM2RTRENkE0MzM3NkE2RjM1RjhEM0NCQTgxMDkzOEI4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9dywwnVCOF2i3Q17ziRnM+HT C/3l37laVHMhertSB2CpgOVCUTl8qpbkShfTCOUDaWgXON1pVQe0WoNyBoriTN9k Bzd1KrvZfxAhrD1A+1WnbGSoqC50sxU0YZ3mMvvhIvrY+0lTs7bZ0yGtsj4X+d+e KJE5zNYQx4CKJARsLTLP8ambXb+ovr5AkHRrYF/F2XCusx3gnP09uhZsAuSHSLnR hagB3+GqBTIVwWgPzwV82Eh1x4/XSTi7GQcgEXRKKw8pYuA4KgNA679e+EZ2CCtf RJ3bEmTMXN6q4BBR2cZr4IvuwwGnSkixgnNrxoSTODXe9epC0QUhih5+QLZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/HCrNuTWpDN2pvNfjTy6gQk4uPwwHwYDVR0j BBgwFoAUtWumastrKKdc+LkmKfOJiOa85fAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZjE5MjAtODUyMy00ZWQ0LWIzNTctOWRlOWEwYzkxNzEwLzAvQjU2QkE2NkFD QjZCMjhBNzVDRjhCOTI2MjlGMzg5ODhFNkJDRTVGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNTZCQTY2QUNCNkIyOEE3NUNGOEI5MjYyOUYzODk4OEU2QkNF NUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZjE5MjAtODUyMy00ZWQ0LWIz NTctOWRlOWEwYzkxNzEwLzAvQjU2QkE2NkFDQjZCMjhBNzVDRjhCOTI2MjlGMzg5 ODhFNkJDRTVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9JiTnCpHGr7/VpkH5jjfHju7oOB3wr+ZT7 GhYDqZRZyNaTg9dY+venluMbaC7/lDZotZsPVWWLdK3M7j1Q+nqPMlB9OO5Yw5Uf wfFB6d2vj3NtRv051cGNhOgdyAwl6rKoS9Fk2AJ7zgOP2NbKZsgT/bQepkiAbr1V m9wm5726+b8nzt2vOFlDAQKneo0XNkMwMSNdFy8QhJZ09X3wWvf5NdufIpOoc5lF iFrONZDslAPaRYHedDvMb0D/T7r3AS0PzOWZ1/OGoSlBmlUe8dZHAaIYQDcn2bJ7 kTlfYL0iq9wXsikAaGsHJd+Cv6ZmK4F/9t2UOG8rpWQJYe1RAe4= -----END CERTIFICATE-----Generated at Sat Sep 26 02:43:43 2026 by rpki-client