$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.mft File: 56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.mft (raw, json) Hash identifier: G2XEqvvRQbFBh1AJydGZBkcsIl3b8FApxxG9ARmnr7M= Subject key identifier: 1A:9F:CA:89:84:E0:1D:E5:A8:B7:BF:57:61:B0:4C:4E:36:71:9D:FE Authority key identifier: 56:DB:54:1E:BF:E1:0F:1F:3E:3B:60:3A:BB:D1:61:2F:05:91:D3:1D Certificate issuer: /CN=56DB541EBFE10F1F3E3B603ABBD1612F0591D31D Certificate serial: 28994FAEA2CA7C13C16CF7B5EA2DD09CFDA95738 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:27:38 +0000 Manifest this update: Wed 23 Sep 2026 21:22:38 +0000 Manifest next update: Thu 24 Sep 2026 21:48:38 +0000 Files and hashes: 1: 56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.crl (hash: 4lTbiX5XU09kYIB6RYQR4O532tMKcyzC12dfektuFWA=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: K6VGpUzpPJUCTZHdvgUeS/XrMGF4d7bqHd7S+ohIF1g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.crl rsync://rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:99:4f:ae:a2:ca:7c:13:c1:6c:f7:b5:ea:2d:d0:9c:fd:a9:57:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56DB541EBFE10F1F3E3B603ABBD1612F0591D31D Validity Not Before: Sep 23 21:22:38 2026 GMT Not After : Sep 24 21:48:38 2026 GMT Subject: CN=1A9FCA8984E01DE5A8B7BF5761B04C4E36719DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:27:d6:16:0b:55:65:ba:af:40:1c:7d:86:f0: d9:dd:9a:8d:79:06:1a:06:a1:8e:2d:b9:27:fe:28: 07:89:fa:6f:0a:45:7e:3a:4c:6f:ae:08:9e:25:82: 4a:a7:55:e9:d0:8f:03:0f:d0:3b:90:93:f0:c5:7d: 16:62:aa:5f:f0:dd:d6:5c:2a:7f:17:62:70:60:60: e0:17:b0:c7:e1:58:51:d7:c4:6d:06:9a:0d:70:86: 14:e6:4d:6f:38:c1:d2:04:64:73:a4:9e:54:ae:c3: 7a:91:2b:ae:47:3a:eb:b9:46:90:16:ed:c0:8e:9e: ca:24:9e:e6:19:6a:a1:a6:9d:ab:a8:bf:e7:bc:f1: e7:f5:30:46:df:28:21:4f:f3:5a:d2:b5:6a:96:6a: 9f:78:fd:72:56:61:48:20:0e:a1:79:a0:01:c6:bd: 34:f4:44:2e:77:5b:33:4a:e1:e1:97:cc:81:bd:fb: 65:cf:0f:06:bc:04:7f:41:2d:20:fc:04:29:d1:f4: 49:24:8a:1a:1c:39:fc:4f:46:95:3c:3e:69:57:51: fb:a9:56:27:ae:67:17:a5:f6:dc:b2:f5:6d:d8:df: cc:93:c9:3f:db:02:40:ca:1b:22:92:ae:8c:5c:f8: 01:fb:7e:64:2d:ee:90:cf:c2:0f:22:e3:22:ca:b9: 65:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9F:CA:89:84:E0:1D:E5:A8:B7:BF:57:61:B0:4C:4E:36:71:9D:FE X509v3 Authority Key Identifier: keyid:56:DB:54:1E:BF:E1:0F:1F:3E:3B:60:3A:BB:D1:61:2F:05:91:D3:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/56DB541EBFE10F1F3E3B603ABBD1612F0591D31D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e9:57:ec:a5:b0:32:08:0e:1d:58:e2:d0:70:0d:bd:e3:22: ad:ad:52:b0:7a:73:a0:a7:f5:f8:73:3d:62:00:5a:a6:08:64: e4:5a:92:46:5f:0b:01:eb:e0:5b:1a:62:31:05:bc:f5:93:66: d1:4c:ee:69:f1:c5:7b:1d:59:70:f8:1e:ef:2b:69:cd:c0:67: 6b:43:e8:da:de:d6:d4:da:8d:c8:7c:e4:5a:04:f7:b5:5a:9f: e3:5b:21:26:73:7c:f3:a0:4a:45:62:85:6f:3a:92:34:17:6b: 44:d6:1e:3a:ec:03:ce:af:f7:75:68:c7:62:6b:40:b9:ea:d3: ba:d7:d3:a8:d7:cd:3a:89:fa:43:f3:bf:98:96:9a:20:6c:a1: 05:c7:d3:d8:f4:1f:02:c8:1d:a6:b8:e3:51:c3:61:31:39:fb: fc:6f:33:65:93:80:f5:d7:72:9d:5b:4e:0e:9e:a3:a9:f8:e1: f6:03:5c:0c:1e:2f:89:65:d2:be:c7:64:0e:74:be:2c:cc:96: a2:3f:d6:9d:ab:47:a0:54:be:8e:ce:93:4f:a5:59:ec:df:42: c8:a4:55:4a:1a:49:46:a9:3e:09:0f:a7:b2:5f:e8:67:16:5f: a4:dd:be:ee:cc:f2:33:fc:0c:0c:5e:68:fe:42:25:40:9b:18: c2:3b:c4:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJlPrqLKfBPBbPe16i3QnP2pVzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZEQjU0MUVCRkUxMEYxRjNFM0I2MDNBQkJEMTYxMkYw NTkxRDMxRDAeFw0yNjA5MjMyMTIyMzhaFw0yNjA5MjQyMTQ4MzhaMDMxMTAvBgNV BAMTKDFBOUZDQTg5ODRFMDFERTVBOEI3QkY1NzYxQjA0QzRFMzY3MTlERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJ9YWC1Vluq9AHH2G8Nndmo15 BhoGoY4tuSf+KAeJ+m8KRX46TG+uCJ4lgkqnVenQjwMP0DuQk/DFfRZiql/w3dZc Kn8XYnBgYOAXsMfhWFHXxG0Gmg1whhTmTW84wdIEZHOknlSuw3qRK65HOuu5RpAW 7cCOnsoknuYZaqGmnauov+e88ef1MEbfKCFP81rStWqWap94/XJWYUggDqF5oAHG vTT0RC53WzNK4eGXzIG9+2XPDwa8BH9BLSD8BCnR9EkkihocOfxPRpU8PmlXUfup VieuZxel9tyy9W3Y38yTyT/bAkDKGyKSroxc+AH7fmQt7pDPwg8i4yLKuWXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGp/KiYTgHeWot79XYbBMTjZxnf4wHwYDVR0j BBgwFoAUVttUHr/hDx8+O2A6u9FhLwWR0x0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTI1NmJiYmEtMTgyNi00ZDg2LWI4NzMtMmY2ZGQ2MzI1NzcxLzEvNTZEQjU0MUVC RkUxMEYxRjNFM0I2MDNBQkJEMTYxMkYwNTkxRDMxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NkRCNTQxRUJGRTEwRjFGM0UzQjYwM0FCQkQxNjEyRjA1OTFE MzFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTI1NmJiYmEtMTgyNi00ZDg2LWI4 NzMtMmY2ZGQ2MzI1NzcxLzEvNTZEQjU0MUVCRkUxMEYxRjNFM0I2MDNBQkJEMTYx MkYwNTkxRDMxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDpV+ylsDIIDh1Y4tBwDb3jIq2tUrB6c6Cn 9fhzPWIAWqYIZORakkZfCwHr4FsaYjEFvPWTZtFM7mnxxXsdWXD4Hu8rac3AZ2tD 6Nre1tTajch85FoE97Van+NbISZzfPOgSkVihW86kjQXa0TWHjrsA86v93Vox2Jr QLnq07rX06jXzTqJ+kPzv5iWmiBsoQXH09j0HwLIHaa441HDYTE5+/xvM2WTgPXX cp1bTg6eo6n44fYDXAweL4ll0r7HZA50vizMlqI/1p2rR6BUvo7Ok0+lWezfQsik VUoaSUapPgkPp7Jf6GcWX6Tdvu7M8jP8DAxeaP5CJUCbGMI7xH4= -----END CERTIFICATE-----Generated at Thu Sep 24 12:00:54 2026 by rpki-client