$ rpki-client -vvf repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft File: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft (raw, json) Hash identifier: 3P6o9l2fV5nqZCwpqdE+cgMWwO85e8JhPG98zdEGhTs= Subject key identifier: CC:C7:53:C3:11:D8:2B:5E:4C:A7:44:8B:8B:9F:20:DD:10:B1:1A:25 Authority key identifier: 56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36 Certificate issuer: /CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36 Certificate serial: 50113037C1B1163BE2D54919D92CC2F6C0D58A41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft Manifest number: 038E Signing time: Sun 02 Nov 2025 09:11:53 +0000 Manifest this update: Sun 02 Nov 2025 09:06:53 +0000 Manifest next update: Wed 05 Nov 2025 18:34:53 +0000 Files and hashes: 1: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: bKELrvkygew/puVSCxFVERwd18KUv2pchNnSXhErods=) 2: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl (hash: k5O9sxWNfjbJwhsbX6D3GjM6wV1aDMU/hOdkP22Ek5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:11:30:37:c1:b1:16:3b:e2:d5:49:19:d9:2c:c2:f6:c0:d5:8a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36 Validity Not Before: Nov 2 09:06:53 2025 GMT Not After : Nov 5 18:34:53 2025 GMT Subject: CN=CCC753C311D82B5E4CA7448B8B9F20DD10B11A25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:1d:0c:2f:f1:ba:5f:a4:90:bf:32:40:1a: 2b:b3:9d:91:80:9c:ea:cf:54:3c:de:9d:56:e4:6f: e7:63:8d:49:22:9c:6f:9d:5d:69:28:6e:45:8a:32: fa:db:ca:4e:5c:20:a0:5e:6f:d2:ab:6e:ff:18:21: e5:ac:99:3a:8a:24:29:15:ab:50:0a:22:64:5e:4b: a2:33:fc:ca:38:dc:dd:9d:d2:c9:c6:7b:fb:24:d3: 48:e1:96:d9:1a:fb:c5:65:fc:5e:18:56:a7:66:2a: db:ff:8f:05:af:21:a6:a9:c4:ce:22:d4:12:fe:b1: 41:5e:8f:b6:7b:2e:28:7e:2d:d2:25:38:8b:85:04: 8b:ef:cc:a5:99:4f:39:56:83:cc:71:7a:97:1b:a6: a5:74:9a:16:7f:99:b3:c8:b1:bb:f7:c8:2a:e9:76: 47:44:8a:18:3b:41:17:82:31:a1:53:bc:db:f3:c4: eb:69:69:96:79:50:f9:03:bc:1a:10:c3:13:b3:3c: d5:6e:5a:90:d4:c3:9c:b8:a6:2e:26:a2:a2:4a:c2: 99:da:7f:45:ab:83:24:ae:ad:e8:3c:1a:62:21:e1: d0:a4:3b:2c:a5:18:a5:d1:df:64:ac:25:c5:85:d6: 30:5d:f1:09:fa:9a:54:ae:ea:bb:88:17:56:61:f6: b4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C7:53:C3:11:D8:2B:5E:4C:A7:44:8B:8B:9F:20:DD:10:B1:1A:25 X509v3 Authority Key Identifier: keyid:56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d1:a9:ab:a4:17:e4:ef:ad:8d:dd:06:f1:ca:d0:c5:d4:28: 33:19:b1:e5:d2:2b:38:d1:72:e6:0a:1a:b5:a5:b4:86:c1:92: 2f:26:2b:5a:90:68:f0:98:97:7d:9f:ea:3c:39:33:f5:e8:c5: bf:d2:a5:de:4f:4a:1b:fa:f6:83:58:3e:a5:f3:3b:03:26:a8: 12:80:fb:ad:f4:5d:b4:f9:a9:c3:3a:5c:84:43:5a:43:f9:7f: cb:f2:f5:a7:86:75:49:19:ad:2e:7c:44:d0:d2:4c:2c:8e:ed: 1c:eb:4c:2d:8e:11:3c:57:66:6c:84:95:7d:46:13:06:4e:cc: c4:b2:fc:74:a7:e9:7c:76:d1:46:be:18:48:77:00:b1:66:f3: 00:36:ea:a9:cb:b6:95:8b:e0:a8:67:1d:c4:49:80:7f:f7:00: 3c:e7:d3:f2:42:48:c2:6a:67:64:a0:dd:a7:97:d7:f6:1f:0f: e8:44:22:5a:f2:65:54:a6:2c:39:5d:56:c6:51:5d:25:5e:a2: a3:62:f9:3a:0f:60:76:33:1d:43:d6:0e:11:86:26:a6:82:c5: 6c:35:b8:b9:ee:d8:ce:01:4d:19:0f:1f:b4:ae:bc:a8:ba:a7: 73:78:d8:c9:52:80:9c:fd:79:a8:f2:f5:bf:08:7f:2f:7a:39: 58:d8:00:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBEwN8GxFjvi1UkZ2SzC9sDVikEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2N0JC QzNDNUUzNjAeFw0yNTExMDIwOTA2NTNaFw0yNTExMDUxODM0NTNaMDMxMTAvBgNV BAMTKENDQzc1M0MzMTFEODJCNUU0Q0E3NDQ4QjhCOUYyMEREMTBCMTFBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8R0ML/G6X6SQvzJAGiuznZGA nOrPVDzenVbkb+djjUkinG+dXWkobkWKMvrbyk5cIKBeb9Krbv8YIeWsmTqKJCkV q1AKImReS6Iz/Mo43N2d0snGe/sk00jhltka+8Vl/F4YVqdmKtv/jwWvIaapxM4i 1BL+sUFej7Z7Lih+LdIlOIuFBIvvzKWZTzlWg8xxepcbpqV0mhZ/mbPIsbv3yCrp dkdEihg7QReCMaFTvNvzxOtpaZZ5UPkDvBoQwxOzPNVuWpDUw5y4pi4moqJKwpna f0WrgySureg8GmIh4dCkOyylGKXR32SsJcWF1jBd8Qn6mlSu6ruIF1Zh9rThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMdTwxHYK15Mp0SLi58g3RCxGiUwHwYDVR0j BBgwFoAUVjaf27zeaFtEQEKaIreWe7w8XjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjIxYWQ2Ny1kMzVjLTQ1NTktOWE3My03Yzc0ZjUwZGNmZmEvMC81NjM2OUZEQkJD REU2ODVCNDQ0MDQyOUEyMkI3OTY3QkJDM0M1RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2N0JCQzND NUUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIyMWFkNjctZDM1Yy00NTU5LTlh NzMtN2M3NGY1MGRjZmZhLzAvNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2 N0JCQzNDNUUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvRqaukF+TvrY3dBvHK0MXUKDMZseXSKzjR cuYKGrWltIbBki8mK1qQaPCYl32f6jw5M/Xoxb/Spd5PShv69oNYPqXzOwMmqBKA +630XbT5qcM6XIRDWkP5f8vy9aeGdUkZrS58RNDSTCyO7RzrTC2OETxXZmyElX1G EwZOzMSy/HSn6Xx20Ua+GEh3ALFm8wA26qnLtpWL4KhnHcRJgH/3ADzn0/JCSMJq Z2Sg3aeX1/YfD+hEIlryZVSmLDldVsZRXSVeoqNi+ToPYHYzHUPWDhGGJqaCxWw1 uLnu2M4BTRkPH7SuvKi6p3N42MlSgJz9eajy9b8Ify96OVjYALE= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:28 2025 by rpki-client