$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft File: 56302D09256688774B85DCD3BAEEB0CB17E8884D.mft (raw, json) Hash identifier: M1++NiGAivT9XMrDLTeVUr7ixXlJBhHjwj8VtkAJNZA= Subject key identifier: A5:4F:23:A1:D1:43:01:0E:C0:EB:8E:05:67:CC:BD:8F:54:2F:D1:1F Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Certificate serial: 5FAC872970A9BEBB00FA30453A8293A2148F8609 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft Manifest number: C3 Signing time: Mon 03 Nov 2025 03:22:14 +0000 Manifest this update: Mon 03 Nov 2025 03:17:14 +0000 Manifest next update: Thu 06 Nov 2025 05:59:14 +0000 Files and hashes: 1: 56302D09256688774B85DCD3BAEEB0CB17E8884D.crl (hash: najGcRjE/1GB6OeIjfaPE5jt8BM4EpOk/3NHnVlNLHo=) 2: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: narOg/Y+HQu36n1a+2Amx/Ji0/PrZsxnYg1qBFxyHaM=) 3: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: aFVZHS7nINB+JL7AEdDHRgxQQpnHeECBqD4GE79htH4=) 4: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: gVISUrC0w0h01G2FHy4AG7111ikLnz8RrJKjXJHpEPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ac:87:29:70:a9:be:bb:00:fa:30:45:3a:82:93:a2:14:8f:86:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Validity Not Before: Nov 3 03:17:14 2025 GMT Not After : Nov 6 05:59:14 2025 GMT Subject: CN=A54F23A1D143010EC0EB8E0567CCBD8F542FD11F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:3b:cc:10:08:05:51:c5:90:bc:de:52:ee: c2:95:65:ae:f6:77:76:40:ae:3b:11:ab:19:cf:ed: b9:bd:fb:14:d3:a0:e6:8f:f6:ae:75:46:1b:7d:21: 06:57:06:52:5c:fd:7b:75:27:93:d9:b4:9e:7a:3f: 80:29:5a:1d:b1:f8:07:bf:6e:e1:d5:39:47:54:83: b5:0c:2b:5a:42:a7:34:03:b1:56:fd:5b:e1:c4:67: ad:f6:13:d3:65:b3:93:9b:dc:31:08:47:5c:75:be: 75:26:97:8b:c4:49:e3:a9:39:79:2b:df:56:d7:6c: dd:b1:1e:ff:49:c1:b2:2f:f4:89:56:ed:19:e4:c1: fb:98:f6:94:66:49:9f:7c:1a:48:48:3b:06:cb:3b: 9e:24:bc:d6:b1:70:e2:88:e6:bf:ad:5b:29:69:15: 01:97:ae:8d:de:bc:b4:82:1e:1c:cb:0e:e5:2a:e0: c7:bf:2c:00:38:96:15:36:2d:63:13:9c:d9:dc:79: 35:2e:a8:52:46:9c:0a:15:de:7a:e3:89:ad:de:14: 1a:a4:86:52:d1:45:17:4b:ce:47:ba:fb:cb:fd:d1: 26:1f:9f:fe:e9:f7:1b:a3:f9:93:2e:c0:27:da:9c: 95:ad:93:8a:fc:70:b0:94:ff:1b:dc:56:29:58:e1: a0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4F:23:A1:D1:43:01:0E:C0:EB:8E:05:67:CC:BD:8F:54:2F:D1:1F X509v3 Authority Key Identifier: keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:80:a7:a9:66:9e:6b:42:0d:a3:22:73:dd:f9:1b:04:a5:0c: 91:45:fe:2d:30:49:11:a6:0d:f7:34:27:19:d9:a3:af:30:b5: 3e:2d:0b:e9:57:f0:0d:67:6b:13:d7:e9:12:04:40:f3:dc:1f: f8:20:f3:cf:91:1e:de:c0:50:fd:1a:b3:aa:d2:a0:b7:80:92: c5:a2:5c:74:ac:24:ef:41:50:f7:2e:36:65:1c:d6:0d:9f:d6: 5e:98:20:2d:17:28:e6:f8:d2:e1:04:d2:71:8f:98:14:e5:62: 64:ef:f3:fe:cc:ec:24:71:ac:ff:66:bb:00:83:c3:17:84:22: 16:1e:ed:ae:0d:a9:2a:17:d0:61:18:b9:b4:32:bd:f8:29:7b: 4f:ce:e8:9e:08:02:35:50:08:f4:3e:ca:30:ad:7d:42:a2:0f: 4f:5a:35:25:e0:dd:bd:2d:9f:71:f9:db:33:96:2f:47:60:f5: b3:ae:52:1f:93:a4:1a:80:29:2a:63:20:81:13:fb:21:cb:fb: af:8d:a0:bb:86:ed:0d:b9:72:ab:19:0d:17:03:d7:06:40:3a: 9c:8f:b1:b5:1e:bd:aa:32:f8:f3:f5:b8:48:95:58:e8:dc:c7: 13:71:bf:15:42:23:1a:a3:65:ad:86:6d:a3:8a:5d:66:d5:1f: e7:48:21:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6yHKXCpvrsA+jBFOoKTohSPhgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0Ix N0U4ODg0RDAeFw0yNTExMDMwMzE3MTRaFw0yNTExMDYwNTU5MTRaMDMxMTAvBgNV BAMTKEE1NEYyM0ExRDE0MzAxMEVDMEVCOEUwNTY3Q0NCRDhGNTQyRkQxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXqjvMEAgFUcWQvN5S7sKVZa72 d3ZArjsRqxnP7bm9+xTToOaP9q51Rht9IQZXBlJc/Xt1J5PZtJ56P4ApWh2x+Ae/ buHVOUdUg7UMK1pCpzQDsVb9W+HEZ632E9Nls5Ob3DEIR1x1vnUml4vESeOpOXkr 31bXbN2xHv9JwbIv9IlW7RnkwfuY9pRmSZ98GkhIOwbLO54kvNaxcOKI5r+tWylp FQGXro3evLSCHhzLDuUq4Me/LAA4lhU2LWMTnNnceTUuqFJGnAoV3nrjia3eFBqk hlLRRRdLzke6+8v90SYfn/7p9xuj+ZMuwCfanJWtk4r8cLCU/xvcVilY4aBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpU8jodFDAQ7A644FZ8y9j1Qv0R8wHwYDVR0j BBgwFoAUVjAtCSVmiHdLhdzTuu6wyxfoiE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjA2ZGVmYS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC81NjMwMkQwOTI1 NjY4ODc3NEI4NURDRDNCQUVFQjBDQjE3RTg4ODRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0IxN0U4 ODg0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIw Q0IxN0U4ODg0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCAp6lmnmtCDaMic935GwSlDJFF/i0wSRGm Dfc0JxnZo68wtT4tC+lX8A1naxPX6RIEQPPcH/gg88+RHt7AUP0as6rSoLeAksWi XHSsJO9BUPcuNmUc1g2f1l6YIC0XKOb40uEE0nGPmBTlYmTv8/7M7CRxrP9muwCD wxeEIhYe7a4NqSoX0GEYubQyvfgpe0/O6J4IAjVQCPQ+yjCtfUKiD09aNSXg3b0t n3H52zOWL0dg9bOuUh+TpBqAKSpjIIET+yHL+6+NoLuG7Q25cqsZDRcD1wZAOpyP sbUevaoy+PP1uEiVWOjcxxNxvxVCIxqjZa2GbaOKXWbVH+dIIQI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:27 2025 by rpki-client