$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft File: 56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft (raw, json) Hash identifier: dFIRAk/atAWNCVFhMnifwXAlB9p+uf/bIGnNajIoM48= Subject key identifier: EA:59:56:BD:96:6E:4A:1B:83:D4:64:BE:D8:AA:79:82:3A:C3:09:7D Authority key identifier: 56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C Certificate issuer: /CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C Certificate serial: 6E39FC1F4D732E4042AC290457B37CE833290D48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 10:08:15 +0000 Manifest this update: Mon 09 Nov 2026 10:03:15 +0000 Manifest next update: Tue 10 Nov 2026 14:04:15 +0000 Files and hashes: 1: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: wt9Ra/tPcAxIL+26JpZjFnizoxFKjLikDqtb0PRy/D0=) 2: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: lmjjWgjg6JFV781/I03PASkaI491yTg94cYWOgkDO5Y=) 3: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: Mw0Zx/sSQWD0MgxT9iC938oEtx/GmaYcvCuMJEo7uW0=) 4: 56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl (hash: 22k3TYBlMGOlVi0x3sIl6mhDC3/fdNaDKLz1beE3i/U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:39:fc:1f:4d:73:2e:40:42:ac:29:04:57:b3:7c:e8:33:29:0d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C Validity Not Before: Nov 9 10:03:15 2026 GMT Not After : Nov 10 14:04:15 2026 GMT Subject: CN=EA5956BD966E4A1B83D464BED8AA79823AC3097D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:2e:a8:6c:1e:17:01:41:52:51:07:76:91: b8:8e:45:04:14:e6:88:c4:96:09:bd:2e:c5:c2:8b: 96:4a:7a:1e:f5:0a:cd:83:95:01:4d:0a:39:c1:14: 08:ad:31:13:bd:79:a1:84:ce:8b:22:af:b4:f5:d4: b2:9e:f6:3c:a6:d9:b9:ee:ec:22:db:9f:04:85:b0: cd:3e:56:d3:47:43:6b:4c:b9:93:11:b4:e6:0d:55: ee:bc:41:ea:2d:59:9c:40:45:55:59:a0:ea:9e:7e: 67:d3:f2:15:81:59:56:84:10:c5:de:56:cd:1b:50: 74:94:c8:fb:a7:5c:46:63:b5:fd:60:31:d3:bf:c8: 20:fe:f1:67:23:7f:9d:cc:6d:4a:21:ac:29:bc:44: 04:9d:bf:f0:35:66:f9:b9:13:57:ef:7d:59:bf:ba: 99:d2:89:6c:b8:c6:28:b5:c2:a2:aa:e6:f9:71:ac: 54:04:c2:13:18:77:33:c8:6e:77:ab:93:95:8f:4c: b5:59:5e:e1:f1:f8:a9:08:09:84:e6:e4:a4:77:ec: ab:b1:50:1b:1e:18:de:16:e0:cd:0f:30:c2:d5:83: 3b:2b:d9:6e:89:0c:b7:20:d5:be:cb:91:cd:28:aa: a7:c5:db:81:45:c0:81:6f:2b:56:66:77:d0:b4:54: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:59:56:BD:96:6E:4A:1B:83:D4:64:BE:D8:AA:79:82:3A:C3:09:7D X509v3 Authority Key Identifier: keyid:56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:89:67:01:5d:60:17:cc:fa:15:3d:fe:2d:30:a4:7d:e6:44: 34:ac:b0:0a:dd:c7:dc:72:19:97:21:57:2e:0f:8d:4a:93:49: 82:a3:57:80:67:27:19:6f:22:a5:38:36:bf:f5:c8:3a:1a:d4: f2:6d:73:c8:ed:5e:60:5a:3f:d4:37:e9:aa:38:e1:93:20:41: ea:5d:2e:7b:aa:0a:b5:bd:1c:72:8c:ad:80:0b:41:4b:c2:f1: 6e:f1:01:90:b4:c7:e2:fd:e0:1f:04:44:ad:ab:7f:2d:fe:09: b6:b1:47:af:01:9f:fb:04:12:af:1a:b7:2b:41:43:d6:f8:fd: 70:dd:3e:68:ea:5e:47:7b:ea:aa:78:08:80:1f:7f:3c:4a:5e: cf:2b:1e:22:8b:35:36:26:a4:e5:8f:0f:e5:1e:3a:e3:52:5a: 40:d0:40:b3:b2:08:45:25:5e:8e:97:e8:49:6e:59:10:0f:b6: 86:e9:89:4f:cf:14:8c:9a:c3:19:4b:2a:a3:e8:c8:65:ca:0f: 01:4c:40:98:2c:5c:ba:ab:d6:db:f7:27:78:6a:5b:8d:fc:48: 01:93:84:d5:04:b3:40:3f:dc:24:d1:d8:26:30:32:74:e5:35: 9c:c9:93:e7:4a:59:21:4b:50:92:5e:26:7a:83:f7:7b:27:fa: 8f:cb:a6:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjn8H01zLkBCrCkEV7N86DMpDUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZCNzY5RjJCMzY5RkYxRTIyQzNBRENEM0Q1MEVDMURD MDE1MjQ2QzAeFw0yNjExMDkxMDAzMTVaFw0yNjExMTAxNDA0MTVaMDMxMTAvBgNV BAMTKEVBNTk1NkJEOTY2RTRBMUI4M0Q0NjRCRUQ4QUE3OTgyM0FDMzA5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+C6obB4XAUFSUQd2kbiORQQU 5ojElgm9LsXCi5ZKeh71Cs2DlQFNCjnBFAitMRO9eaGEzosir7T11LKe9jym2bnu 7CLbnwSFsM0+VtNHQ2tMuZMRtOYNVe68QeotWZxARVVZoOqefmfT8hWBWVaEEMXe Vs0bUHSUyPunXEZjtf1gMdO/yCD+8Wcjf53MbUohrCm8RASdv/A1Zvm5E1fvfVm/ upnSiWy4xii1wqKq5vlxrFQEwhMYdzPIbnerk5WPTLVZXuHx+KkICYTm5KR37Kux UBseGN4W4M0PMMLVgzsr2W6JDLcg1b7Lkc0oqqfF24FFwIFvK1Zmd9C0VIYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6llWvZZuShuD1GS+2Kp5gjrDCX0wHwYDVR0j BBgwFoAUVrdp8rNp/x4iw63NPVDsHcAVJGwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZjM4OTAtNDQ1ZC00YjIzLThmYjMtYjMwMThhNzk5ZWNlLzAvNTZCNzY5RjJC MzY5RkYxRTIyQzNBRENEM0Q1MEVDMURDMDE1MjQ2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NkI3NjlGMkIzNjlGRjFFMjJDM0FEQ0QzRDUwRUMxREMwMTUy NDZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvNTZCNzY5RjJCMzY5RkYxRTIyQzNBRENEM0Q1MEVD MURDMDE1MjQ2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWJZwFdYBfM+hU9/i0wpH3mRDSssArdx9xy GZchVy4PjUqTSYKjV4BnJxlvIqU4Nr/1yDoa1PJtc8jtXmBaP9Q36ao44ZMgQepd LnuqCrW9HHKMrYALQUvC8W7xAZC0x+L94B8ERK2rfy3+CbaxR68Bn/sEEq8atytB Q9b4/XDdPmjqXkd76qp4CIAffzxKXs8rHiKLNTYmpOWPD+UeOuNSWkDQQLOyCEUl Xo6X6EluWRAPtobpiU/PFIyawxlLKqPoyGXKDwFMQJgsXLqr1tv3J3hqW438SAGT hNUEs0A/3CTR2CYwMnTlNZzJk+dKWSFLUJJeJnqD93sn+o/LpuA= -----END CERTIFICATE-----Generated at Mon Nov 9 23:31:50 2026 by rpki-client