$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft File: 56D494F5201C70B3C8FD0630664898D57A51A86F.mft (raw, json) Hash identifier: vItszkz97lOunmrPorNmPUU9PEebk4+EJxhDcLYVV0E= Subject key identifier: D3:2A:8A:9C:1B:78:85:6E:D4:8C:AA:DC:C4:E4:6D:5A:17:4C:CE:14 Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F Certificate serial: 339E14B67ADCBD5926ACD614D30BEDBDF960C30A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft Manifest number: 26 Signing time: Thu 07 Aug 2025 17:01:03 +0000 Manifest this update: Thu 07 Aug 2025 16:56:03 +0000 Manifest next update: Sun 10 Aug 2025 17:07:03 +0000 Files and hashes: 1: 56D494F5201C70B3C8FD0630664898D57A51A86F.crl (hash: W+PGfg/+34RTWVpU0CDNEp77KB4C6TgjcUyzimPIu2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 17:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:9e:14:b6:7a:dc:bd:59:26:ac:d6:14:d3:0b:ed:bd:f9:60:c3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F Validity Not Before: Aug 7 16:56:03 2025 GMT Not After : Aug 10 17:07:03 2025 GMT Subject: CN=D32A8A9C1B78856ED48CAADCC4E46D5A174CCE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f2:8e:74:db:c8:ad:15:71:d1:9c:56:97:4b: 64:e6:68:5f:26:0a:4f:70:af:06:48:9a:46:88:d4: 22:a1:a8:25:e2:be:82:28:e6:4e:7c:fd:c1:43:a3: 9b:dd:e2:fc:e7:16:05:21:80:d0:08:f3:67:f4:78: 8a:75:65:9c:b0:06:04:f6:d4:23:d9:d0:b7:aa:bb: d5:f7:01:ca:4b:e7:f4:35:11:da:a0:de:e9:47:fc: 97:7a:b3:dd:ef:82:27:c3:96:c5:12:f0:90:21:75: e7:f6:cf:5f:a8:6e:80:9f:db:08:f7:0c:d3:c2:e1: 4c:75:32:ec:8b:6a:33:b7:a3:af:3f:52:5b:52:5e: 3a:0d:14:b9:15:71:94:e4:83:c6:7c:f2:ef:f8:78: eb:fa:21:4a:a8:34:3d:77:8c:08:bb:99:fd:aa:7c: 08:65:aa:66:ae:77:73:68:b8:7e:36:6d:09:63:94: dd:b9:ff:96:2c:9a:6b:1f:18:52:82:0d:80:b8:f4: e6:17:29:1c:bc:14:6b:2a:e6:92:64:6a:7d:08:2d: b6:67:f0:aa:d4:07:5a:b2:cc:9b:3d:b8:f6:a2:bf: 28:b0:ac:b3:f1:ac:78:66:6e:1a:0c:ba:70:6e:0c: ee:56:f6:10:f1:fa:35:c6:21:24:26:20:e9:e2:51: 30:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2A:8A:9C:1B:78:85:6E:D4:8C:AA:DC:C4:E4:6D:5A:17:4C:CE:14 X509v3 Authority Key Identifier: keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:55:96:06:1f:bc:7c:c1:da:b4:14:ab:50:a6:04:6e:54:91: 9a:05:55:95:f8:75:9b:ee:6f:1e:b8:5c:45:5b:4e:82:84:55: 39:4e:bc:f4:6b:97:8b:44:db:da:6f:3d:58:90:e1:ef:11:34: b8:36:50:d4:6b:50:40:0b:50:64:54:44:29:6b:e8:c2:a4:7b: 0d:f0:d1:7f:cf:c0:17:ee:d9:bc:05:b9:43:7d:66:29:66:a5: 7d:ef:30:eb:b4:92:b7:c1:a1:42:71:af:15:a8:72:99:f9:88: 52:35:30:10:73:eb:3d:2a:d1:6a:08:dd:94:0d:69:41:e5:78: 8b:a9:b8:f0:a1:32:41:33:e6:e2:e3:28:e1:7e:a5:49:7a:c7: 24:f6:90:6d:c0:6f:1d:7f:c8:11:3c:24:4c:26:21:d8:be:39: b3:0e:58:65:c5:07:02:b8:f8:dc:06:5b:9b:7d:e8:4c:63:5a: 85:b7:ab:df:fa:d5:44:26:93:4d:a0:1a:85:91:b6:5b:89:96: c8:dc:40:7a:97:eb:66:bd:ac:d3:27:30:71:14:4e:2a:d8:eb: 24:65:6c:3c:85:a0:6c:86:27:ba:80:b5:38:08:19:53:5d:6d: f5:58:05:f7:1f:2d:53:3c:35:e6:60:bc:c1:2f:ad:13:a4:17: aa:0b:92:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM54UtnrcvVkmrNYU0wvtvflgwwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3 QTUxQTg2RjAeFw0yNTA4MDcxNjU2MDNaFw0yNTA4MTAxNzA3MDNaMDMxMTAvBgNV BAMTKEQzMkE4QTlDMUI3ODg1NkVENDhDQUFEQ0M0RTQ2RDVBMTc0Q0NFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8o5028itFXHRnFaXS2TmaF8m Ck9wrwZImkaI1CKhqCXivoIo5k58/cFDo5vd4vznFgUhgNAI82f0eIp1ZZywBgT2 1CPZ0Lequ9X3AcpL5/Q1Edqg3ulH/Jd6s93vgifDlsUS8JAhdef2z1+oboCf2wj3 DNPC4Ux1MuyLajO3o68/UltSXjoNFLkVcZTkg8Z88u/4eOv6IUqoND13jAi7mf2q fAhlqmaud3NouH42bQljlN25/5YsmmsfGFKCDYC49OYXKRy8FGsq5pJkan0ILbZn 8KrUB1qyzJs9uPaivyiwrLPxrHhmbhoMunBuDO5W9hDx+jXGISQmIOniUTALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0yqKnBt4hW7UjKrcxORtWhdMzhQwHwYDVR0j BBgwFoAUVtSU9SAccLPI/QYwZkiY1XpRqG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDVhZjIyYy03ZTNlLTQwYjUtYWM1MC02Mzc3NzJhOTVjMjEvMC81NkQ0OTRGNTIw MUM3MEIzQzhGRDA2MzA2NjQ4OThENTdBNTFBODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3QTUx QTg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4 RDU3QTUxQTg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdVlgYfvHzB2rQUq1CmBG5UkZoFVZX4dZvu bx64XEVbToKEVTlOvPRrl4tE29pvPViQ4e8RNLg2UNRrUEALUGRURClr6MKkew3w 0X/PwBfu2bwFuUN9ZilmpX3vMOu0krfBoUJxrxWocpn5iFI1MBBz6z0q0WoI3ZQN aUHleIupuPChMkEz5uLjKOF+pUl6xyT2kG3Abx1/yBE8JEwmIdi+ObMOWGXFBwK4 +NwGW5t96ExjWoW3q9/61UQmk02gGoWRtluJlsjcQHqX62a9rNMnMHEUTirY6yRl bDyFoGyGJ7qAtTgIGVNdbfVYBfcfLVM8NeZgvMEvrROkF6oLkis= -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:40 2025 by rpki-client