$ rpki-client -vvf repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft File: 556F35148B9935659C1FE70B505B1D8D79838EFA.mft (raw, json) Hash identifier: UfvAwtv9BDRRq2CItVo2G8peC+H7N76Z7Go13X9/HzQ= Subject key identifier: 35:2B:32:90:AB:AE:59:96:F3:3B:57:9B:FC:A8:12:8E:5B:71:0C:CF Authority key identifier: 55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA Certificate issuer: /CN=556F35148B9935659C1FE70B505B1D8D79838EFA Certificate serial: 10B802687B5B3DDC9D3F3805798885926071DD4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft Manifest number: 01D3 Signing time: Wed 05 Nov 2025 04:01:25 +0000 Manifest this update: Wed 05 Nov 2025 03:56:25 +0000 Manifest next update: Sat 08 Nov 2025 11:44:25 +0000 Files and hashes: 1: 556F35148B9935659C1FE70B505B1D8D79838EFA.crl (hash: ZJzcPZGNF4xgYgi/GyvgKhl7AgQpssfHmT6SoAZQvrE=) 2: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: Rw+pxwTJP+hvGj9PdU0j+wE54RfccGnIIDVVcYYdmUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 11:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b8:02:68:7b:5b:3d:dc:9d:3f:38:05:79:88:85:92:60:71:dd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556F35148B9935659C1FE70B505B1D8D79838EFA Validity Not Before: Nov 5 03:56:25 2025 GMT Not After : Nov 8 11:44:25 2025 GMT Subject: CN=352B3290ABAE5996F33B579BFCA8128E5B710CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9b:fd:da:65:ba:33:ec:8c:43:1c:46:25:72: 79:ab:d3:e0:63:96:b9:a8:17:dc:c9:cb:54:f3:fc: e4:58:dd:42:13:4d:74:85:21:85:2f:f2:52:c8:8b: 44:23:e6:ee:6b:92:e5:12:c1:c4:0c:b1:6e:de:ac: 6c:fd:72:ca:32:96:7e:e1:e0:a7:70:47:e3:ff:5b: 49:3b:fb:82:6b:69:64:c8:db:76:db:53:84:06:0c: f3:f9:f2:db:8b:d2:42:ea:8e:e0:10:75:4f:5b:a6: 98:c1:cc:15:fa:3f:8f:cd:aa:51:2e:2f:9d:0f:64: aa:4e:d8:b1:ca:67:69:03:a5:7d:df:23:b0:a8:52: a9:e6:cd:0b:af:63:01:f0:0e:1c:62:dd:a1:81:97: 8c:96:4f:da:da:4e:11:ea:09:df:b5:f2:a6:cd:6f: 59:2b:6c:dc:c4:bc:09:43:39:fe:d5:cb:b5:01:5e: a0:2a:26:55:2e:07:40:1d:c6:54:21:a0:ae:ff:97: 63:e1:3d:d0:c6:78:cd:f5:10:f5:6f:b1:4e:74:4d: e9:dc:09:3a:95:9e:73:6d:cf:79:fc:fc:28:31:4d: 74:8a:de:02:3a:5b:ce:ad:75:bc:71:f8:ad:fc:b0: 8b:29:2b:cb:e7:4e:aa:a7:39:03:46:89:c9:64:15: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:32:90:AB:AE:59:96:F3:3B:57:9B:FC:A8:12:8E:5B:71:0C:CF X509v3 Authority Key Identifier: keyid:55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:64:05:88:fd:7a:c3:83:2f:f1:4d:fa:41:da:c3:99:45:e0: 62:7f:bd:b8:1a:48:48:cc:43:62:9a:61:46:0c:09:f2:92:7b: 6d:4a:6c:b5:f9:b8:ca:bb:6c:fb:d2:0c:1b:c4:ff:d3:0c:1d: 97:1c:bc:a7:ad:e0:d1:66:f1:78:84:fc:0c:ac:de:ef:e3:71: 62:8c:2d:99:02:d0:a8:7f:93:6a:85:9a:eb:a9:e1:fa:50:94: e2:49:ad:e3:97:35:f9:4a:4c:23:73:90:30:19:13:6c:b0:bb: 2a:52:60:b7:e9:83:83:21:10:bf:01:b5:0b:2a:44:c7:17:0d: 2e:9c:c6:bb:86:d8:b3:a0:62:fe:18:00:e5:60:0e:7b:1c:03: 4f:3e:6b:a2:10:37:85:f0:60:65:45:32:50:4f:ba:d6:6f:63: 39:00:75:9a:46:c5:18:6c:f3:93:43:d4:d7:cb:e0:f0:e1:f9: 0b:f9:11:33:fb:d4:e3:8a:7f:5e:da:3d:84:6d:0b:db:e1:9c: 39:7f:25:04:0d:af:32:99:aa:7e:68:0a:f4:0f:9a:0b:b2:ac: 3e:20:1d:4f:26:06:b9:54:08:00:f0:f9:b4:ea:4a:ea:5e:b4: d5:ab:b4:e0:8e:67:92:ab:54:ab:fb:e1:22:8b:70:23:83:11: 54:70:aa:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELgCaHtbPdydPzgFeYiFkmBx3UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3 OTgzOEVGQTAeFw0yNTExMDUwMzU2MjVaFw0yNTExMDgxMTQ0MjVaMDMxMTAvBgNV BAMTKDM1MkIzMjkwQUJBRTU5OTZGMzNCNTc5QkZDQTgxMjhFNUI3MTBDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYm/3aZboz7IxDHEYlcnmr0+Bj lrmoF9zJy1Tz/ORY3UITTXSFIYUv8lLIi0Qj5u5rkuUSwcQMsW7erGz9csoyln7h 4KdwR+P/W0k7+4JraWTI23bbU4QGDPP58tuL0kLqjuAQdU9bppjBzBX6P4/NqlEu L50PZKpO2LHKZ2kDpX3fI7CoUqnmzQuvYwHwDhxi3aGBl4yWT9raThHqCd+18qbN b1krbNzEvAlDOf7Vy7UBXqAqJlUuB0AdxlQhoK7/l2PhPdDGeM31EPVvsU50Tenc CTqVnnNtz3n8/CgxTXSK3gI6W86tdbxx+K38sIspK8vnTqqnOQNGiclkFdtxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNSsykKuuWZbzO1eb/KgSjltxDM8wHwYDVR0j BBgwFoAUVW81FIuZNWWcH+cLUFsdjXmDjvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzQyNDgwYS04ZTBmLTQ3N2EtYmQ0YS1hYTgwODk5MjdiYTgvMC81NTZGMzUxNDhC OTkzNTY1OUMxRkU3MEI1MDVCMUQ4RDc5ODM4RUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3OTgz OEVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM0MjQ4MGEtOGUwZi00NzdhLWJk NGEtYWE4MDg5OTI3YmE4LzAvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFE OEQ3OTgzOEVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlkBYj9esODL/FN+kHaw5lF4GJ/vbgaSEjM Q2KaYUYMCfKSe21KbLX5uMq7bPvSDBvE/9MMHZccvKet4NFm8XiE/Ays3u/jcWKM LZkC0Kh/k2qFmuup4fpQlOJJreOXNflKTCNzkDAZE2ywuypSYLfpg4MhEL8BtQsq RMcXDS6cxruG2LOgYv4YAOVgDnscA08+a6IQN4XwYGVFMlBPutZvYzkAdZpGxRhs 85ND1NfL4PDh+Qv5ETP71OOKf17aPYRtC9vhnDl/JQQNrzKZqn5oCvQPmguyrD4g HU8mBrlUCADw+bTqSupetNWrtOCOZ5KrVKv74SKLcCODEVRwqo8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:27:01 2025 by rpki-client