$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft File: 56D494F5201C70B3C8FD0630664898D57A51A86F.mft (raw, json) Hash identifier: RLneGov949pFl94Z78iNxJ0LuEleXRuTN7RSFIskrxE= Subject key identifier: 40:0D:0E:6F:3A:D0:45:B3:F1:EB:40:D4:61:27:59:14:85:7D:7B:48 Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F Certificate serial: 206094683AC9080DAD05DDAF52C1885DE931A3FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft Manifest number: 97 Signing time: Thu 16 Apr 2026 13:51:10 +0000 Manifest this update: Thu 16 Apr 2026 13:46:10 +0000 Manifest next update: Sun 19 Apr 2026 21:16:10 +0000 Files and hashes: 1: 56D494F5201C70B3C8FD0630664898D57A51A86F.crl (hash: 1K132eF5fffsoEd5Vm70qOeNHZplV00MGEUXvTeMz5E=) 2: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: GVdqWRcuOnkA2VgxGew3ZoC+Kiaj3ZJ2ZKo75rljh74=) 3: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: NT8HD6L58UENSZIrvJ7kAsnU0xI/LlrvnmHZkgvxcbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 21:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:60:94:68:3a:c9:08:0d:ad:05:dd:af:52:c1:88:5d:e9:31:a3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F Validity Not Before: Apr 16 13:46:10 2026 GMT Not After : Apr 19 21:16:10 2026 GMT Subject: CN=400D0E6F3AD045B3F1EB40D461275914857D7B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:07:65:68:09:0c:c1:df:4e:9b:5e:7d:b4: 5e:89:1f:f4:31:03:4c:44:c3:a8:5b:e3:29:93:cd: 70:22:56:46:c0:21:4e:2a:07:43:14:44:28:10:cb: b5:5f:2d:f3:15:6f:ee:b2:49:22:6d:30:dc:ff:0a: 34:4c:ad:4b:b3:39:b6:68:da:fd:2b:d7:e8:c5:bb: 9f:58:90:6b:5e:b2:be:30:23:67:4b:e0:0a:f2:8e: d5:d1:87:37:e3:0b:76:a4:ce:d2:37:f3:97:44:42: fe:34:6e:38:71:dc:18:3e:15:8d:b8:08:f5:3e:75: 34:90:8d:f3:d5:f4:df:f0:ca:f4:4c:5e:d1:8a:50: 4a:6f:78:e8:e5:25:69:7c:12:3e:34:c7:02:0a:cd: 5f:38:de:20:72:ac:cc:e5:5d:a4:cd:87:97:59:5b: ed:1f:72:3b:25:00:97:23:41:82:34:77:63:c9:c4: bf:58:b6:c0:85:b2:88:6c:5e:33:d5:9f:1e:7f:97: be:10:26:b4:86:d5:17:06:23:19:3e:62:21:bb:7e: f6:c9:4b:94:27:dc:7b:e2:6e:cf:b0:09:fb:17:46: 49:b0:c6:ae:7e:69:8a:5d:ee:b9:1e:6d:55:11:10: af:ce:32:43:02:74:9a:a3:d6:7a:73:14:d8:3f:7c: 2c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0D:0E:6F:3A:D0:45:B3:F1:EB:40:D4:61:27:59:14:85:7D:7B:48 X509v3 Authority Key Identifier: keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:20:57:d7:1b:0e:1e:71:cc:e2:4b:eb:92:77:72:bd:1a:84: 5e:0f:8f:fb:2b:f4:ed:4d:df:9b:66:fb:d2:da:57:26:19:2e: 40:e4:7a:3c:eb:06:d4:59:2f:a6:39:19:d0:95:df:41:32:1b: c0:5a:1f:61:a0:de:91:66:ea:7d:4c:d5:76:89:bf:56:18:5c: f9:0f:5f:5c:36:5d:16:0f:e3:fa:25:79:17:fa:a9:f7:02:16: 2f:90:e2:08:d9:6c:b4:13:b9:bc:e3:f0:6d:00:82:70:b7:ed: 35:7a:a6:dd:8e:44:9c:90:4c:1c:44:5a:ad:f2:c6:42:ef:63: 4e:7b:99:7f:de:68:6f:99:bb:f1:94:03:9d:2c:0a:b4:c5:9f: cc:8a:1d:f1:66:ef:dc:78:48:e0:08:0b:a0:af:82:d9:df:2a: f8:4f:30:9c:9d:96:8e:9c:33:38:02:38:11:87:46:76:06:74: 23:f0:1a:c0:73:29:d2:aa:34:87:d0:7e:14:c6:91:8b:b8:72: f6:e9:7b:eb:eb:a2:9e:88:f0:b9:6b:61:5f:53:45:fe:99:73: 06:8a:94:ed:e4:a8:9f:84:aa:eb:ed:9a:7c:f4:c2:f1:9c:7c: f8:3d:2a:32:2c:38:fe:9e:9d:bb:30:d7:2f:0d:5a:2c:fe:a7: 54:ea:09:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGCUaDrJCA2tBd2vUsGIXekxo/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3 QTUxQTg2RjAeFw0yNjA0MTYxMzQ2MTBaFw0yNjA0MTkyMTE2MTBaMDMxMTAvBgNV BAMTKDQwMEQwRTZGM0FEMDQ1QjNGMUVCNDBENDYxMjc1OTE0ODU3RDdCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgAdlaAkMwd9Om159tF6JH/Qx A0xEw6hb4ymTzXAiVkbAIU4qB0MURCgQy7VfLfMVb+6ySSJtMNz/CjRMrUuzObZo 2v0r1+jFu59YkGtesr4wI2dL4AryjtXRhzfjC3akztI385dEQv40bjhx3Bg+FY24 CPU+dTSQjfPV9N/wyvRMXtGKUEpveOjlJWl8Ej40xwIKzV843iByrMzlXaTNh5dZ W+0fcjslAJcjQYI0d2PJxL9YtsCFsohsXjPVnx5/l74QJrSG1RcGIxk+YiG7fvbJ S5Qn3Hvibs+wCfsXRkmwxq5+aYpd7rkebVUREK/OMkMCdJqj1npzFNg/fCyvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQA0ObzrQRbPx60DUYSdZFIV9e0gwHwYDVR0j BBgwFoAUVtSU9SAccLPI/QYwZkiY1XpRqG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDVhZjIyYy03ZTNlLTQwYjUtYWM1MC02Mzc3NzJhOTVjMjEvMC81NkQ0OTRGNTIw MUM3MEIzQzhGRDA2MzA2NjQ4OThENTdBNTFBODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3QTUx QTg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4 RDU3QTUxQTg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQgV9cbDh5xzOJL65J3cr0ahF4Pj/sr9O1N 35tm+9LaVyYZLkDkejzrBtRZL6Y5GdCV30EyG8BaH2Gg3pFm6n1M1XaJv1YYXPkP X1w2XRYP4/oleRf6qfcCFi+Q4gjZbLQTubzj8G0AgnC37TV6pt2ORJyQTBxEWq3y xkLvY057mX/eaG+Zu/GUA50sCrTFn8yKHfFm79x4SOAIC6CvgtnfKvhPMJydlo6c MzgCOBGHRnYGdCPwGsBzKdKqNIfQfhTGkYu4cvbpe+vrop6I8LlrYV9TRf6ZcwaK lO3kqJ+Equvtmnz0wvGcfPg9KjIsOP6enbsw1y8NWiz+p1TqCTw= -----END CERTIFICATE-----Generated at Fri Apr 17 19:46:15 2026 by rpki-client