$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft File: 56302D09256688774B85DCD3BAEEB0CB17E8884D.mft (raw, json) Hash identifier: d2ze3NmeJ0IhX24WQwNdCdoFtmaMPk5UKhOQy5WQMBE= Subject key identifier: 7B:5D:50:1A:02:29:C4:F6:FE:51:83:77:CD:82:60:FC:20:EF:DF:F8 Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Certificate serial: 2DCE4298737C2A7C5261CDBFAFDBD01C1C23A5AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft Manifest number: F8 Signing time: Mon 02 Mar 2026 08:22:29 +0000 Manifest this update: Mon 02 Mar 2026 08:17:29 +0000 Manifest next update: Thu 05 Mar 2026 14:30:29 +0000 Files and hashes: 1: 56302D09256688774B85DCD3BAEEB0CB17E8884D.crl (hash: BZCReuymFnzc+Gz06t/MsVp5RJyoDcJO1czw4rT/ZTY=) 2: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: gVISUrC0w0h01G2FHy4AG7111ikLnz8RrJKjXJHpEPg=) 3: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: narOg/Y+HQu36n1a+2Amx/Ji0/PrZsxnYg1qBFxyHaM=) 4: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: aFVZHS7nINB+JL7AEdDHRgxQQpnHeECBqD4GE79htH4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ce:42:98:73:7c:2a:7c:52:61:cd:bf:af:db:d0:1c:1c:23:a5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Validity Not Before: Mar 2 08:17:29 2026 GMT Not After : Mar 5 14:30:29 2026 GMT Subject: CN=7B5D501A0229C4F6FE518377CD8260FC20EFDFF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:e6:65:26:50:a4:ae:5b:36:08:a6:2d:09: 98:84:38:4b:5f:09:2b:af:87:fd:a9:74:0b:c3:81: b1:40:46:38:06:f5:0a:c2:07:1a:ba:c6:2f:80:28: 6f:99:fe:bb:fd:ef:c3:1f:54:ec:5b:64:8e:f5:24: 71:5d:37:44:a4:db:0b:27:66:2b:a2:2f:a9:5a:5f: 6a:90:a6:2d:53:e2:0e:8f:ee:c6:d4:d3:19:4f:6e: 61:e5:b0:27:36:fb:a2:3c:c0:c6:3d:0b:3b:f7:13: 04:97:16:a2:79:cc:cf:9a:7e:0b:c9:dc:bc:af:17: 89:8a:0b:22:92:1c:72:5c:cd:01:1b:c5:ac:d1:15: 26:dd:dd:50:1f:13:ed:cd:fa:14:71:0c:1c:e7:0f: 28:48:13:7c:52:4d:14:90:22:62:ba:d7:74:c1:42: 96:ff:6f:41:94:68:d7:8c:9a:94:7d:6d:0f:9e:c3: 69:9b:ff:55:92:42:e1:9b:7c:24:8e:4f:f9:1c:3f: ed:f9:c1:17:9b:a8:81:c0:07:99:31:77:1e:1a:d0: cc:75:cd:36:f0:de:7c:17:46:88:57:60:c3:53:bd: 53:d1:67:8e:77:87:c2:eb:4d:0e:cc:4b:ba:5f:66: 68:0c:66:93:e1:4c:b9:ac:8d:2e:5d:b9:22:1a:a7: 3a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5D:50:1A:02:29:C4:F6:FE:51:83:77:CD:82:60:FC:20:EF:DF:F8 X509v3 Authority Key Identifier: keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4f:c7:f8:7e:bb:03:b6:95:4e:9d:d9:e3:2d:ed:40:77:a6: d6:79:81:25:7e:27:ec:55:ee:8f:55:85:02:da:d2:48:b5:7c: a9:b5:f4:78:4a:c1:7f:c1:7b:f9:f0:96:6b:db:8d:fd:1a:60: 5b:77:f5:d8:71:72:3b:4b:1d:ef:ef:54:20:82:8c:55:b9:ec: ca:cb:3f:42:5b:08:c0:88:81:d7:23:73:5d:92:62:85:d4:1f: 79:3c:82:2d:bb:e5:20:3d:ee:fc:a0:8b:08:95:9a:f7:2a:c8: 88:85:30:6a:e8:00:fb:f5:24:c9:c2:42:e9:4c:ab:b7:67:44: 59:7e:cc:55:da:42:4f:47:cf:71:2f:be:71:db:f7:b6:7c:43: 47:52:b5:8e:79:53:1b:d5:2f:46:22:45:cc:1b:da:f3:13:f8: 22:6d:83:d8:76:b3:b9:f2:71:10:91:ad:7f:74:c4:87:f0:37: 88:8e:06:08:82:32:e0:97:66:82:25:15:7a:17:fe:25:0a:c1: d5:00:9f:b9:16:8b:e5:24:e3:7f:35:7a:6b:61:36:73:c1:f5: 3e:82:a7:e9:85:ed:5d:16:8a:00:cc:ce:23:e9:23:f9:bd:9c: 83:ff:34:b1:00:5f:33:26:56:7a:f5:43:c4:a4:70:7e:3f:79: e4:62:f3:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULc5CmHN8KnxSYc2/r9vQHBwjpaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0Ix N0U4ODg0RDAeFw0yNjAzMDIwODE3MjlaFw0yNjAzMDUxNDMwMjlaMDMxMTAvBgNV BAMTKDdCNUQ1MDFBMDIyOUM0RjZGRTUxODM3N0NEODI2MEZDMjBFRkRGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7beZlJlCkrls2CKYtCZiEOEtf CSuvh/2pdAvDgbFARjgG9QrCBxq6xi+AKG+Z/rv978MfVOxbZI71JHFdN0Sk2wsn ZiuiL6laX2qQpi1T4g6P7sbU0xlPbmHlsCc2+6I8wMY9Czv3EwSXFqJ5zM+afgvJ 3LyvF4mKCyKSHHJczQEbxazRFSbd3VAfE+3N+hRxDBznDyhIE3xSTRSQImK613TB Qpb/b0GUaNeMmpR9bQ+ew2mb/1WSQuGbfCSOT/kcP+35wRebqIHAB5kxdx4a0Mx1 zTbw3nwXRohXYMNTvVPRZ453h8LrTQ7MS7pfZmgMZpPhTLmsjS5duSIapzoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe11QGgIpxPb+UYN3zYJg/CDv3/gwHwYDVR0j BBgwFoAUVjAtCSVmiHdLhdzTuu6wyxfoiE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjA2ZGVmYS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC81NjMwMkQwOTI1 NjY4ODc3NEI4NURDRDNCQUVFQjBDQjE3RTg4ODRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0IxN0U4 ODg0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIw Q0IxN0U4ODg0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtPx/h+uwO2lU6d2eMt7UB3ptZ5gSV+J+xV 7o9VhQLa0ki1fKm19HhKwX/Be/nwlmvbjf0aYFt39dhxcjtLHe/vVCCCjFW57MrL P0JbCMCIgdcjc12SYoXUH3k8gi275SA97vygiwiVmvcqyIiFMGroAPv1JMnCQulM q7dnRFl+zFXaQk9Hz3EvvnHb97Z8Q0dStY55UxvVL0YiRcwb2vMT+CJtg9h2s7ny cRCRrX90xIfwN4iOBgiCMuCXZoIlFXoX/iUKwdUAn7kWi+Uk4381emthNnPB9T6C p+mF7V0WigDMziPpI/m9nIP/NLEAXzMmVnr1Q8SkcH4/eeRi8+k= -----END CERTIFICATE-----Generated at Mon Mar 2 18:26:48 2026 by rpki-client