$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: eU52up78sDRV57kIitk7SoCvHp/iaHmJZ4JCKl6oVYA= Subject key identifier: B7:73:43:86:A1:FF:42:45:E5:B3:A4:E5:45:1B:C2:FD:ED:B8:70:9F Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 7A2B45FB656D0A842AB1D7E340DE83CEBC23A89A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: F1 Signing time: Tue 04 Nov 2025 08:12:17 +0000 Manifest this update: Tue 04 Nov 2025 08:07:17 +0000 Manifest next update: Fri 07 Nov 2025 20:11:17 +0000 Files and hashes: 1: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) 2: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: LzBQUNCCTQr5jSlp7cUADAf4e4KWJ0QCQtaREb0eBJQ=) 3: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2b:45:fb:65:6d:0a:84:2a:b1:d7:e3:40:de:83:ce:bc:23:a8:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Nov 4 08:07:17 2025 GMT Not After : Nov 7 20:11:17 2025 GMT Subject: CN=B7734386A1FF4245E5B3A4E5451BC2FDEDB8709F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:40:b4:fc:67:21:94:65:41:bb:b3:f6:43: 28:c2:29:b2:2a:94:ae:6b:ff:7f:b9:fb:f6:14:93: 6f:2b:63:58:3f:a0:6b:5c:bf:3c:a5:14:08:c5:d5: 4d:cb:91:7b:eb:fd:ac:b3:fa:1f:71:c4:53:9e:b5: d9:82:6a:17:28:fb:8b:f2:4a:5d:1b:2f:fa:51:e5: 4f:54:c2:3d:ce:77:7e:e6:d0:bb:ae:38:3a:3d:b0: 14:a1:25:79:59:03:5d:c4:03:52:d5:a1:4e:db:56: cd:b1:d5:3f:ca:66:ba:f9:78:4a:25:a5:d2:ea:10: 82:93:b8:88:9a:9a:10:46:c3:fb:84:f4:6b:26:5f: a5:4b:ee:2e:d5:d2:9c:89:2a:1f:8b:1f:ac:a9:3c: 38:74:1d:b9:f5:76:71:5e:a4:57:d4:31:90:34:d5: f4:5f:e7:a9:17:f6:ae:30:a8:84:d9:50:d2:61:5b: 57:3a:43:33:df:e1:4f:16:cb:db:10:6b:7b:21:4f: 62:5c:aa:26:12:8d:0c:86:6c:dd:44:0a:65:00:89: c1:f6:eb:58:17:ae:c3:e6:04:a2:3b:e6:75:4a:ac: 5e:ba:60:e8:99:0a:23:c7:3c:b1:f1:08:cd:2d:f0: 2e:79:41:ff:36:bd:ce:43:bd:97:96:e7:ec:38:14: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:73:43:86:A1:FF:42:45:E5:B3:A4:E5:45:1B:C2:FD:ED:B8:70:9F X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:df:3a:f4:cc:0f:f7:38:6d:8d:cc:f7:63:0c:bf:ea:d9:13: b3:71:f9:43:db:ec:a3:99:e2:e0:7e:3b:31:13:67:1d:eb:93: af:91:b8:8a:9e:96:9d:52:c5:50:36:20:63:61:09:16:b4:22: 5e:d4:cc:17:cb:c8:c3:33:73:48:43:12:31:b3:45:15:43:df: 5e:a0:5e:46:9b:d8:e8:be:56:16:9f:f8:96:54:42:2c:ba:ea: 0e:79:d8:55:d5:fa:c9:a5:bc:6f:f5:39:eb:f7:19:78:d8:06: b7:54:50:86:76:01:0d:fd:c2:6e:b4:f5:b5:b4:ef:14:cc:79: 94:98:9d:af:b0:c1:fa:de:fb:e5:47:4a:0b:bd:2e:a2:b6:37: b6:d9:cb:19:f4:f7:0b:d3:31:94:50:1a:4d:da:7a:65:b9:d7: 97:1f:fa:50:fa:76:2c:8b:64:a5:68:0b:00:69:83:ad:fa:32: 10:12:51:f6:3e:7a:b7:d8:97:0a:2b:53:62:4c:65:c8:1a:19: c0:99:f5:35:3c:83:4f:d4:bc:23:f6:84:61:bc:57:38:a7:1a: 34:f9:9b:e1:44:1f:c3:27:51:da:ca:15:e3:0f:82:06:24:ed: 58:1b:e8:0c:8b:db:5b:2d:23:f3:cd:c7:f0:ac:11:19:6b:d3: e7:48:34:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeitF+2VtCoQqsdfjQN6DzrwjqJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNTExMDQwODA3MTdaFw0yNTExMDcyMDExMTdaMDMxMTAvBgNV BAMTKEI3NzM0Mzg2QTFGRjQyNDVFNUIzQTRFNTQ1MUJDMkZERURCODcwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kkC0/GchlGVBu7P2QyjCKbIq lK5r/3+5+/YUk28rY1g/oGtcvzylFAjF1U3LkXvr/ayz+h9xxFOetdmCahco+4vy Sl0bL/pR5U9Uwj3Od37m0LuuODo9sBShJXlZA13EA1LVoU7bVs2x1T/KZrr5eEol pdLqEIKTuIiamhBGw/uE9GsmX6VL7i7V0pyJKh+LH6ypPDh0Hbn1dnFepFfUMZA0 1fRf56kX9q4wqITZUNJhW1c6QzPf4U8Wy9sQa3shT2JcqiYSjQyGbN1ECmUAicH2 61gXrsPmBKI75nVKrF66YOiZCiPHPLHxCM0t8C55Qf82vc5DvZeW5+w4FKwlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt3NDhqH/QkXls6TlRRvC/e24cJ8wHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjfOvTMD/c4bY3M92MMv+rZE7Nx+UPb7KOZ 4uB+OzETZx3rk6+RuIqelp1SxVA2IGNhCRa0Il7UzBfLyMMzc0hDEjGzRRVD316g Xkab2Oi+Vhaf+JZUQiy66g552FXV+smlvG/1Oev3GXjYBrdUUIZ2AQ39wm609bW0 7xTMeZSYna+wwfre++VHSgu9LqK2N7bZyxn09wvTMZRQGk3aemW515cf+lD6diyL ZKVoCwBpg636MhASUfY+erfYlworU2JMZcgaGcCZ9TU8g0/UvCP2hGG8VzinGjT5 m+FEH8MnUdrKFeMPggYk7Vgb6AyL21stI/PNx/CsERlr0+dINIw= -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:26 2025 by rpki-client