$ rpki-client -vvf repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft File: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft (raw, json) Hash identifier: PCgj124yoIQ4sU5u6lSx2/OicW/PuLJweVjtSxn8Buc= Subject key identifier: B5:68:B4:82:A1:82:C9:45:3F:61:F9:05:2C:F7:AA:37:D8:E1:98:63 Authority key identifier: 56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36 Certificate issuer: /CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36 Certificate serial: 23A5851968D3F8E85B6AD34571C219E0CFF5C7EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft Manifest number: 03C2 Signing time: Sun 01 Mar 2026 09:32:05 +0000 Manifest this update: Sun 01 Mar 2026 09:27:05 +0000 Manifest next update: Wed 04 Mar 2026 11:20:05 +0000 Files and hashes: 1: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: bKELrvkygew/puVSCxFVERwd18KUv2pchNnSXhErods=) 2: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl (hash: WJqYowkyfTVgV8OwYM3H/Vsxr3xnGxNUWpeVRMnavFg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a5:85:19:68:d3:f8:e8:5b:6a:d3:45:71:c2:19:e0:cf:f5:c7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36 Validity Not Before: Mar 1 09:27:05 2026 GMT Not After : Mar 4 11:20:05 2026 GMT Subject: CN=B568B482A182C9453F61F9052CF7AA37D8E19863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:d5:2d:ae:b2:b9:4e:46:f7:a5:91:95:e0: 17:99:e5:c4:2e:d9:e6:ea:1c:b0:c5:6f:37:76:c0: bf:52:44:ab:ce:5f:66:02:cc:42:00:72:bd:ad:00: 0d:db:cc:df:d9:0f:ea:48:5c:de:d7:c9:78:df:46: a3:86:c5:70:89:0f:00:e9:b8:b1:37:44:08:66:24: 9e:a8:b1:ac:2d:49:44:ba:7a:bf:35:9b:55:e9:0b: dc:25:91:84:e3:6c:33:c1:d6:1d:df:80:b5:1d:08: 7a:b5:66:25:b2:b6:a2:dc:6c:ab:60:c0:d6:5c:37: 6b:14:8d:91:67:ca:b9:a2:d4:d2:45:f4:56:db:fb: 48:e7:5b:fc:41:7f:f1:50:87:a2:87:4d:8f:84:2a: df:8f:9f:55:18:00:57:a2:4d:4b:19:5e:98:48:ab: c4:00:d1:86:41:60:b5:92:7c:a5:3b:ad:68:d1:23: 8d:d2:dc:02:5d:20:58:88:72:ec:f5:ff:c5:a1:67: 7a:e3:e2:4e:05:d6:f2:65:5c:3a:e3:9b:59:4c:0e: 6b:d7:b9:9d:18:f8:b9:80:50:6e:fd:f5:68:66:41: 61:78:8f:44:fc:b4:a9:ba:be:cf:97:a6:6b:df:9a: a4:52:43:f0:e1:f2:73:b0:bc:db:3f:cf:54:0c:02: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:68:B4:82:A1:82:C9:45:3F:61:F9:05:2C:F7:AA:37:D8:E1:98:63 X509v3 Authority Key Identifier: keyid:56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9d:6c:b7:e9:79:d5:64:bd:21:64:e3:72:cf:40:1a:7b:45: 22:f6:bb:fa:f7:c8:b6:f8:95:82:6e:30:27:9b:b6:4c:74:3d: af:50:54:ba:e5:09:8a:ff:6c:65:ac:86:61:e2:9b:78:fc:0c: 8c:93:c2:0d:f1:11:74:f7:b6:cd:1e:2a:fb:5a:13:44:73:6b: 3e:d3:d8:58:f0:78:53:d8:0b:04:73:10:e7:50:4d:92:ac:f6: 22:33:22:5b:9a:7d:1a:53:56:51:d6:a5:d6:96:de:aa:24:63: 9d:9d:f8:90:85:82:ae:37:ba:a6:10:e1:fd:86:54:df:dc:03: d3:12:49:e2:ce:75:49:fc:b9:8b:73:f1:65:99:42:ba:7d:c5: 78:89:ff:67:a0:15:e4:d0:69:e7:df:c1:90:97:14:80:98:e8: d2:38:94:9c:5b:66:3c:bf:d0:e9:8d:9b:43:17:27:8e:ea:f7: a8:4d:83:8e:b9:c6:48:f6:28:e4:bf:5a:ac:3c:49:3a:77:58: f5:da:37:84:20:dc:7d:29:f7:70:1c:0a:32:6b:8b:4e:c3:86: 31:9c:84:7c:e4:f7:3b:7b:20:46:2b:85:78:d9:fb:3f:0f:1d: 5f:c9:73:54:e2:c7:46:8a:c2:55:10:c9:12:03:a3:a0:9b:79: f4:14:84:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6WFGWjT+OhbatNFccIZ4M/1x+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2N0JC QzNDNUUzNjAeFw0yNjAzMDEwOTI3MDVaFw0yNjAzMDQxMTIwMDVaMDMxMTAvBgNV BAMTKEI1NjhCNDgyQTE4MkM5NDUzRjYxRjkwNTJDRjdBQTM3RDhFMTk4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpNUtrrK5Tkb3pZGV4BeZ5cQu 2ebqHLDFbzd2wL9SRKvOX2YCzEIAcr2tAA3bzN/ZD+pIXN7XyXjfRqOGxXCJDwDp uLE3RAhmJJ6osawtSUS6er81m1XpC9wlkYTjbDPB1h3fgLUdCHq1ZiWytqLcbKtg wNZcN2sUjZFnyrmi1NJF9Fbb+0jnW/xBf/FQh6KHTY+EKt+Pn1UYAFeiTUsZXphI q8QA0YZBYLWSfKU7rWjRI43S3AJdIFiIcuz1/8WhZ3rj4k4F1vJlXDrjm1lMDmvX uZ0Y+LmAUG799WhmQWF4j0T8tKm6vs+XpmvfmqRSQ/Dh8nOwvNs/z1QMAtpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtWi0gqGCyUU/YfkFLPeqN9jhmGMwHwYDVR0j BBgwFoAUVjaf27zeaFtEQEKaIreWe7w8XjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjIxYWQ2Ny1kMzVjLTQ1NTktOWE3My03Yzc0ZjUwZGNmZmEvMC81NjM2OUZEQkJD REU2ODVCNDQ0MDQyOUEyMkI3OTY3QkJDM0M1RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2N0JCQzND NUUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIyMWFkNjctZDM1Yy00NTU5LTlh NzMtN2M3NGY1MGRjZmZhLzAvNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2 N0JCQzNDNUUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6dbLfpedVkvSFk43LPQBp7RSL2u/r3yLb4 lYJuMCebtkx0Pa9QVLrlCYr/bGWshmHim3j8DIyTwg3xEXT3ts0eKvtaE0Rzaz7T 2FjweFPYCwRzEOdQTZKs9iIzIluafRpTVlHWpdaW3qokY52d+JCFgq43uqYQ4f2G VN/cA9MSSeLOdUn8uYtz8WWZQrp9xXiJ/2egFeTQaeffwZCXFICY6NI4lJxbZjy/ 0OmNm0MXJ47q96hNg465xkj2KOS/Wqw8STp3WPXaN4Qg3H0p93AcCjJri07DhjGc hHzk9zt7IEYrhXjZ+z8PHV/Jc1Tix0aKwlUQyRIDo6CbefQUhMU= -----END CERTIFICATE-----Generated at Mon Mar 2 12:26:30 2026 by rpki-client