$ rpki-client -vvf repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft File: 556F35148B9935659C1FE70B505B1D8D79838EFA.mft (raw, json) Hash identifier: zok5kM+MpDvMoFKgfnj5Bk+IgGFfBhe6NQ8nHTxLDSc= Subject key identifier: 89:9C:05:BB:D2:88:CA:B6:3F:29:03:1F:11:CE:D0:92:40:9B:6F:C4 Authority key identifier: 55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA Certificate issuer: /CN=556F35148B9935659C1FE70B505B1D8D79838EFA Certificate serial: 643E59DC36C62595AF8A7E74D88C105AAE3B9B36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft Manifest number: 021B Signing time: Wed 15 Apr 2026 20:31:39 +0000 Manifest this update: Wed 15 Apr 2026 20:26:39 +0000 Manifest next update: Sun 19 Apr 2026 03:07:39 +0000 Files and hashes: 1: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: Rw+pxwTJP+hvGj9PdU0j+wE54RfccGnIIDVVcYYdmUc=) 2: 556F35148B9935659C1FE70B505B1D8D79838EFA.crl (hash: tEv5NXM5lraJ/ypfY9UGz3l44mEmoZ9m6zYLzicfHnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3e:59:dc:36:c6:25:95:af:8a:7e:74:d8:8c:10:5a:ae:3b:9b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556F35148B9935659C1FE70B505B1D8D79838EFA Validity Not Before: Apr 15 20:26:39 2026 GMT Not After : Apr 19 03:07:39 2026 GMT Subject: CN=899C05BBD288CAB63F29031F11CED092409B6FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:49:d6:35:dd:99:df:56:35:e4:65:90:9a: 3c:3c:c7:6e:2e:9a:d6:7b:e4:78:df:a9:c2:07:7e: 11:53:6d:3b:72:46:80:e0:1e:52:31:2a:6b:98:4a: c9:5f:73:32:07:6d:d2:6d:e6:34:f3:6b:c2:d1:81: e6:a5:74:4a:a6:e0:64:88:c1:6c:ad:4e:cc:09:02: fb:9d:86:ed:35:7d:a7:b5:eb:28:bb:b1:36:3a:f8: 27:32:d8:b6:a6:d8:1c:6c:6a:7b:b7:75:03:c4:9a: 5c:4f:7f:77:9d:83:27:92:3d:92:b7:be:0b:64:71: 1b:23:71:33:ff:78:99:fe:ce:df:7c:46:0c:49:1c: 1a:99:cb:e2:d2:cb:59:cf:9b:a3:09:7e:3b:ef:19: 86:26:f4:0c:dd:c4:a1:51:86:5b:58:50:03:11:43: ad:cd:d2:b7:47:28:ab:b0:31:ca:40:16:c7:a4:28: 88:a9:c9:1d:86:af:9e:2b:59:cd:05:8b:9d:97:6e: ca:9c:ac:5a:dc:92:7d:2f:c2:0d:55:dc:b7:1d:e4: 1a:f7:f7:8a:55:19:c1:e5:ed:61:b7:7e:bd:39:42: d2:e1:34:d3:73:44:2d:e8:99:51:55:cc:2a:4e:f7: d7:27:cb:58:43:ec:fa:c8:b6:26:99:81:9e:57:2b: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9C:05:BB:D2:88:CA:B6:3F:29:03:1F:11:CE:D0:92:40:9B:6F:C4 X509v3 Authority Key Identifier: keyid:55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:cd:3c:57:07:89:fa:ab:6d:61:d0:6b:52:c5:e5:4e:4d:f6: 9e:dd:f7:db:4b:d2:a0:9a:7c:14:65:9d:73:b8:89:dd:cf:6a: 3a:73:fe:5c:b6:d7:6d:07:21:19:10:e7:06:19:d6:10:f8:82: 07:51:83:64:dd:20:e4:9f:b4:c0:ea:10:8f:ed:a0:14:4c:9d: 77:20:9f:47:10:37:ff:a5:ba:19:1a:1a:db:2f:48:95:91:01: 0e:4e:77:4f:92:a0:5e:37:cc:5f:ce:5f:01:f2:16:c2:89:6a: 78:cd:48:54:19:1d:16:1c:f2:fa:7c:d1:84:dd:19:9c:0c:e3: cf:d5:45:d7:80:4d:92:e4:3d:61:bf:06:63:02:df:ef:d5:5f: ff:53:15:6f:2e:60:f7:fa:10:35:00:bf:9e:00:cf:2d:c0:9f: eb:dd:be:f1:b7:9b:9e:0f:00:ff:56:38:d9:7f:8e:9e:6f:17: b7:c8:c6:41:c1:dd:18:2c:8a:79:84:5f:89:51:3a:fa:83:61: 8b:9c:5f:d6:2d:06:15:fb:ac:c1:00:9f:aa:f7:06:bd:74:ff: 72:5c:c5:92:2c:28:7a:2e:52:6a:7c:2c:15:04:f2:0c:f1:81: 1b:2d:89:4d:bc:f7:e3:af:6a:6e:d6:f9:df:c7:ec:12:8e:c2: 30:6a:9f:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZD5Z3DbGJZWvin502IwQWq47mzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3 OTgzOEVGQTAeFw0yNjA0MTUyMDI2MzlaFw0yNjA0MTkwMzA3MzlaMDMxMTAvBgNV BAMTKDg5OUMwNUJCRDI4OENBQjYzRjI5MDMxRjExQ0VEMDkyNDA5QjZGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7AknWNd2Z31Y15GWQmjw8x24u mtZ75HjfqcIHfhFTbTtyRoDgHlIxKmuYSslfczIHbdJt5jTza8LRgealdEqm4GSI wWytTswJAvudhu01fae16yi7sTY6+Ccy2Lam2Bxsanu3dQPEmlxPf3edgyeSPZK3 vgtkcRsjcTP/eJn+zt98RgxJHBqZy+LSy1nPm6MJfjvvGYYm9AzdxKFRhltYUAMR Q63N0rdHKKuwMcpAFsekKIipyR2Gr54rWc0Fi52XbsqcrFrckn0vwg1V3Lcd5Br3 94pVGcHl7WG3fr05QtLhNNNzRC3omVFVzCpO99cny1hD7PrItiaZgZ5XKyszAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiZwFu9KIyrY/KQMfEc7QkkCbb8QwHwYDVR0j BBgwFoAUVW81FIuZNWWcH+cLUFsdjXmDjvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzQyNDgwYS04ZTBmLTQ3N2EtYmQ0YS1hYTgwODk5MjdiYTgvMC81NTZGMzUxNDhC OTkzNTY1OUMxRkU3MEI1MDVCMUQ4RDc5ODM4RUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3OTgz OEVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM0MjQ4MGEtOGUwZi00NzdhLWJk NGEtYWE4MDg5OTI3YmE4LzAvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFE OEQ3OTgzOEVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbNPFcHifqrbWHQa1LF5U5N9p7d99tL0qCa fBRlnXO4id3Pajpz/ly2120HIRkQ5wYZ1hD4ggdRg2TdIOSftMDqEI/toBRMnXcg n0cQN/+luhkaGtsvSJWRAQ5Od0+SoF43zF/OXwHyFsKJanjNSFQZHRYc8vp80YTd GZwM48/VRdeATZLkPWG/BmMC3+/VX/9TFW8uYPf6EDUAv54Azy3An+vdvvG3m54P AP9WONl/jp5vF7fIxkHB3RgsinmEX4lROvqDYYucX9YtBhX7rMEAn6r3Br10/3Jc xZIsKHouUmp8LBUE8gzxgRstiU289+Ovam7W+d/H7BKOwjBqn8s= -----END CERTIFICATE-----Generated at Sat Apr 18 00:05:25 2026 by rpki-client