$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft File: 56302D09256688774B85DCD3BAEEB0CB17E8884D.mft (raw, json) Hash identifier: idYwECCrC/AywW44vhgeFWxgiGWgrn8HwYIIZ9iL8ks= Subject key identifier: 18:07:5F:EA:C9:95:D2:83:34:7B:C3:36:9C:E4:92:65:8C:C2:5D:60 Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Certificate serial: 76C6BED4596F908244F6E93C1106199D56D14C55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft Manifest number: 9B Signing time: Mon 04 Aug 2025 03:12:13 +0000 Manifest this update: Mon 04 Aug 2025 03:07:13 +0000 Manifest next update: Thu 07 Aug 2025 10:50:13 +0000 Files and hashes: 1: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: narOg/Y+HQu36n1a+2Amx/Ji0/PrZsxnYg1qBFxyHaM=) 2: 56302D09256688774B85DCD3BAEEB0CB17E8884D.crl (hash: XWvhJ7Eyb7fO1HF6G1FdCFhLlFADbul6KtkFFrQkxNg=) 3: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: gVISUrC0w0h01G2FHy4AG7111ikLnz8RrJKjXJHpEPg=) 4: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: aFVZHS7nINB+JL7AEdDHRgxQQpnHeECBqD4GE79htH4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 10:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c6:be:d4:59:6f:90:82:44:f6:e9:3c:11:06:19:9d:56:d1:4c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Validity Not Before: Aug 4 03:07:13 2025 GMT Not After : Aug 7 10:50:13 2025 GMT Subject: CN=18075FEAC995D283347BC3369CE492658CC25D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:60:23:ff:e1:93:14:97:96:52:4f:3b:6f: f4:a7:1f:17:ea:0d:36:89:77:95:5b:ed:58:ed:cc: 68:5e:f9:78:89:59:a6:df:9e:c6:31:89:2a:0f:55: 85:43:a9:d1:16:97:d0:0e:37:81:3d:e9:cc:94:2e: 8e:e6:17:3e:1b:99:75:74:66:eb:09:b5:54:cf:de: 86:20:a5:c0:af:2e:4a:98:3d:36:0b:ac:2b:11:2e: 27:b1:52:5d:23:22:8e:e9:e7:46:0c:72:59:cc:fb: 0f:e9:42:b8:ea:31:86:9f:16:b4:4a:ac:ba:b6:76: 02:92:a3:c1:cc:41:90:a4:64:a1:fe:ec:ff:00:5a: c2:5e:e1:0c:a1:6b:d4:57:19:36:21:62:92:a8:08: c0:83:37:42:eb:b7:21:1b:d4:4e:fe:40:21:89:aa: 13:29:f2:c8:af:af:6c:4a:b6:83:1c:16:5e:49:a0: 88:53:98:b6:32:37:4c:1d:30:c5:59:d3:f2:2a:5b: 30:b6:49:b1:85:2e:66:28:68:fb:0b:48:b2:de:0b: 93:8e:42:e9:3a:f7:64:60:95:60:91:1e:b4:81:de: 63:19:ce:33:a5:73:b1:ee:79:66:20:1c:11:17:fa: f4:5c:b3:47:85:68:99:ab:5e:dc:f7:fe:53:68:0d: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:07:5F:EA:C9:95:D2:83:34:7B:C3:36:9C:E4:92:65:8C:C2:5D:60 X509v3 Authority Key Identifier: keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3b:2a:83:54:00:b0:2f:cc:6f:c9:d1:33:6f:90:02:c0:22: e7:5f:ed:c2:72:3c:02:2d:c0:13:18:ea:dc:d3:71:25:8e:07: 4f:ba:16:28:c7:8f:98:e7:54:56:61:bf:16:9a:3c:13:0f:c9: e4:60:d2:28:f1:de:23:1e:fd:f4:eb:82:43:94:43:ae:05:ea: 39:94:41:f6:a8:a0:e3:92:e9:5d:27:3b:61:a6:c7:ae:bb:0b: 0b:53:55:c0:e2:36:98:9d:89:1d:9c:dc:7a:76:12:d3:f8:f1: 34:de:b1:d0:04:fd:5f:03:fa:ea:9d:98:15:73:e4:d3:cd:e0: 57:91:9d:71:2e:2d:4e:1f:93:e1:8f:27:6d:39:ae:b5:4f:1a: d1:e3:0c:fb:44:15:d9:91:61:03:97:8d:aa:88:91:4d:e8:91: 16:16:ec:4f:f1:f1:25:b8:6b:94:23:73:a0:70:9f:dc:e1:92: 5c:35:08:0e:fb:c8:42:34:3b:2c:9c:4c:13:92:11:4a:3d:25: aa:5f:a4:a2:72:f1:34:0f:2d:d0:b7:9c:b1:bf:69:cc:82:1f: bb:43:61:f2:05:ea:fe:42:6c:b2:8e:c3:a5:42:9d:a4:b7:13: 0d:70:71:3f:ce:9d:96:c6:98:f5:7d:85:f1:28:91:dc:35:6d: 32:48:4e:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdsa+1FlvkIJE9uk8EQYZnVbRTFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0Ix N0U4ODg0RDAeFw0yNTA4MDQwMzA3MTNaFw0yNTA4MDcxMDUwMTNaMDMxMTAvBgNV BAMTKDE4MDc1RkVBQzk5NUQyODMzNDdCQzMzNjlDRTQ5MjY1OENDMjVENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cmAj/+GTFJeWUk87b/SnHxfq DTaJd5Vb7VjtzGhe+XiJWabfnsYxiSoPVYVDqdEWl9AON4E96cyULo7mFz4bmXV0 ZusJtVTP3oYgpcCvLkqYPTYLrCsRLiexUl0jIo7p50YMclnM+w/pQrjqMYafFrRK rLq2dgKSo8HMQZCkZKH+7P8AWsJe4Qyha9RXGTYhYpKoCMCDN0LrtyEb1E7+QCGJ qhMp8sivr2xKtoMcFl5JoIhTmLYyN0wdMMVZ0/IqWzC2SbGFLmYoaPsLSLLeC5OO Quk692RglWCRHrSB3mMZzjOlc7HueWYgHBEX+vRcs0eFaJmrXtz3/lNoDaeVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGAdf6smV0oM0e8M2nOSSZYzCXWAwHwYDVR0j BBgwFoAUVjAtCSVmiHdLhdzTuu6wyxfoiE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjA2ZGVmYS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC81NjMwMkQwOTI1 NjY4ODc3NEI4NURDRDNCQUVFQjBDQjE3RTg4ODRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0IxN0U4 ODg0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIw Q0IxN0U4ODg0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw7KoNUALAvzG/J0TNvkALAIudf7cJyPAIt wBMY6tzTcSWOB0+6FijHj5jnVFZhvxaaPBMPyeRg0ijx3iMe/fTrgkOUQ64F6jmU QfaooOOS6V0nO2Gmx667CwtTVcDiNpidiR2c3Hp2EtP48TTesdAE/V8D+uqdmBVz 5NPN4FeRnXEuLU4fk+GPJ205rrVPGtHjDPtEFdmRYQOXjaqIkU3okRYW7E/x8SW4 a5Qjc6Bwn9zhklw1CA77yEI0OyycTBOSEUo9JapfpKJy8TQPLdC3nLG/acyCH7tD YfIF6v5CbLKOw6VCnaS3Ew1wcT/OnZbGmPV9hfEokdw1bTJITr4= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:11 2025 by rpki-client