$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: Re5cA/ny00S+pO4gDcdbL1yHrb0CTp+TfNJ09lekg28= Subject key identifier: FC:6F:60:35:F2:30:57:58:9B:61:7E:3C:26:66:3B:D2:F1:13:B5:7D Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 732684DDF7B3A49A9CAC5A5112B5E9DC29BDC5B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: CA Signing time: Wed 06 Aug 2025 18:32:15 +0000 Manifest this update: Wed 06 Aug 2025 18:27:15 +0000 Manifest next update: Sun 10 Aug 2025 03:33:15 +0000 Files and hashes: 1: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) 2: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: GVl1GF6xANiUBn1XAcEL9Pwc/qddrdZGE2V0t2SpKY0=) 3: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:26:84:dd:f7:b3:a4:9a:9c:ac:5a:51:12:b5:e9:dc:29:bd:c5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Aug 6 18:27:15 2025 GMT Not After : Aug 10 03:33:15 2025 GMT Subject: CN=FC6F6035F23057589B617E3C26663BD2F113B57D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:97:c9:05:2f:99:bd:a3:f9:1e:7a:09:d3: d7:9e:fc:e5:fa:c9:66:99:94:71:b3:ff:65:48:c0: aa:ab:93:87:01:0c:1d:e4:14:6c:20:21:e6:4c:50: a9:a4:89:9d:2d:a2:e4:c9:6f:ae:f4:cb:7d:5e:db: 6e:13:b1:c5:93:87:20:89:d1:14:f9:92:02:31:29: c9:7e:79:7f:10:6a:64:88:89:a4:64:eb:ad:c3:5c: d8:38:68:ba:39:59:29:63:eb:30:a5:dc:d9:96:02: 58:31:4d:be:ca:90:37:43:65:9c:e8:e0:20:2b:2e: 55:48:9b:56:2c:6d:e0:eb:d3:23:e7:ca:37:f1:09: 4b:0f:51:ef:35:a0:4d:b3:d5:ca:bc:5c:ae:46:7c: 96:21:67:ae:1c:84:d8:60:06:95:bb:15:7f:8d:f3: b5:45:55:91:bd:fe:0e:26:78:ad:d7:91:cc:39:3f: 3e:f0:f4:f8:55:ba:1e:d0:d5:4a:32:17:47:fe:64: e6:99:18:9a:4c:31:39:fe:28:0a:7b:98:89:5b:a7: 6b:91:f6:83:a2:0d:06:62:74:68:fe:b6:c8:21:0a: 9b:cb:6a:5c:ab:64:64:d1:42:3e:50:94:2d:f1:ee: 15:5d:5c:21:e4:55:85:f9:de:d9:e8:3f:7b:b7:06: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6F:60:35:F2:30:57:58:9B:61:7E:3C:26:66:3B:D2:F1:13:B5:7D X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bf:62:16:53:a3:b0:bb:a8:b5:51:4e:70:42:16:5b:c6:2c: 0b:53:da:22:40:26:15:ce:72:d0:0f:d3:23:ba:20:b4:46:5e: 9a:03:30:e0:69:56:05:97:c8:c7:23:ae:cf:d9:e7:f7:49:88: 2c:f4:ab:f8:f8:bc:55:5f:30:2b:ac:00:ab:20:ed:1e:c2:57: 96:59:fd:56:a7:27:13:5a:27:54:ef:7f:31:c9:f8:72:4b:b0: 99:e8:56:2b:0e:7e:74:1b:64:8a:40:b4:68:ba:69:03:d6:1e: 87:a3:12:b0:3d:52:a0:fb:d7:3a:18:08:25:5b:26:a8:97:5b: 36:46:2a:9e:10:9d:cb:ba:8d:95:75:17:72:d0:df:ba:83:e4: f7:b5:8e:22:42:37:a9:db:17:8b:0b:15:ff:a8:fe:64:1c:0c: 26:e9:d1:99:90:ce:3b:5e:21:6e:18:cc:c9:41:de:52:a3:8c: 3d:dd:0c:a9:e2:54:f9:9e:52:32:b4:e3:b6:2c:5e:bf:a5:a9: c5:f2:63:5e:b2:59:ad:12:97:7b:e4:4c:e7:e6:ed:a8:7e:c3: bb:b0:9a:c8:07:d2:cb:cf:2e:d3:18:72:68:81:a8:be:df:be: 23:f7:d1:b2:ed:b9:43:bb:35:80:f0:b4:3d:3b:ca:03:da:f9: 34:54:51:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyaE3fezpJqcrFpRErXp3Cm9xbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNTA4MDYxODI3MTVaFw0yNTA4MTAwMzMzMTVaMDMxMTAvBgNV BAMTKEZDNkY2MDM1RjIzMDU3NTg5QjYxN0UzQzI2NjYzQkQyRjExM0I1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/ZfJBS+ZvaP5HnoJ09ee/OX6 yWaZlHGz/2VIwKqrk4cBDB3kFGwgIeZMUKmkiZ0touTJb670y31e224TscWThyCJ 0RT5kgIxKcl+eX8QamSIiaRk663DXNg4aLo5WSlj6zCl3NmWAlgxTb7KkDdDZZzo 4CArLlVIm1YsbeDr0yPnyjfxCUsPUe81oE2z1cq8XK5GfJYhZ64chNhgBpW7FX+N 87VFVZG9/g4meK3Xkcw5Pz7w9PhVuh7Q1UoyF0f+ZOaZGJpMMTn+KAp7mIlbp2uR 9oOiDQZidGj+tsghCpvLalyrZGTRQj5QlC3x7hVdXCHkVYX53tnoP3u3BmxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/G9gNfIwV1ibYX48JmY70vETtX0wHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIq/YhZTo7C7qLVRTnBCFlvGLAtT2iJAJhXO ctAP0yO6ILRGXpoDMOBpVgWXyMcjrs/Z5/dJiCz0q/j4vFVfMCusAKsg7R7CV5ZZ /VanJxNaJ1TvfzHJ+HJLsJnoVisOfnQbZIpAtGi6aQPWHoejErA9UqD71zoYCCVb JqiXWzZGKp4Qncu6jZV1F3LQ37qD5Pe1jiJCN6nbF4sLFf+o/mQcDCbp0ZmQzjte IW4YzMlB3lKjjD3dDKniVPmeUjK047YsXr+lqcXyY16yWa0Sl3vkTOfm7ah+w7uw msgH0svPLtMYcmiBqL7fviP30bLtuUO7NYDwtD07ygPa+TRUUTE= -----END CERTIFICATE-----Generated at Sat Aug 9 03:02:12 2025 by rpki-client