$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft File: 56D494F5201C70B3C8FD0630664898D57A51A86F.mft (raw, json) Hash identifier: 7cgm7ovs9fGr3tkZyE1zAWNHnF3i7omsXydL0Y4twRA= Subject key identifier: 59:0B:71:0F:85:13:B2:2E:1B:BE:F9:D6:81:AD:9C:76:C5:A4:72:85 Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F Certificate serial: 15F50303F89032AE9047AC980564707A400832F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft Manifest number: 1F Signing time: Tue 22 Jul 2025 15:20:59 +0000 Manifest this update: Tue 22 Jul 2025 15:15:59 +0000 Manifest next update: Fri 25 Jul 2025 23:34:59 +0000 Files and hashes: 1: 56D494F5201C70B3C8FD0630664898D57A51A86F.crl (hash: i19VFViFfsA22/3shoBpjSCUw6OQ7nNXLW7UWryM4fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f5:03:03:f8:90:32:ae:90:47:ac:98:05:64:70:7a:40:08:32:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F Validity Not Before: Jul 22 15:15:59 2025 GMT Not After : Jul 25 23:34:59 2025 GMT Subject: CN=590B710F8513B22E1BBEF9D681AD9C76C5A47285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:8b:5b:71:df:9a:f8:d0:36:78:06:b9:c0: aa:37:d7:38:60:3d:47:1b:6b:7b:f2:4a:86:b0:d9: 4c:07:47:98:8c:d0:03:71:19:88:b4:5f:59:27:a2: 75:95:0a:ca:68:63:02:71:be:9a:9e:1f:4c:f5:33: e7:50:61:d5:fc:3a:d8:c9:9d:48:be:16:77:b0:ee: 22:67:2c:b8:52:24:10:97:63:05:1f:ff:cc:87:21: fb:30:a0:b4:b0:92:59:aa:c2:64:32:1e:e7:9a:4d: 41:9b:78:77:c7:a8:5d:2a:e6:aa:4b:fb:0d:2b:7a: b0:5b:ed:44:55:ce:fd:18:a8:92:9a:df:e4:18:0c: f2:aa:b3:5f:79:6e:6f:68:00:38:79:75:ec:13:04: d1:5e:96:51:6a:30:9f:b4:71:31:ba:72:77:0f:84: 6b:1d:26:92:f0:43:fc:61:07:a9:fa:14:38:fe:52: 15:db:ca:41:69:5f:3a:71:1f:af:19:b3:b5:02:1d: f7:29:24:3b:a9:10:c4:2a:65:b8:3b:81:da:2e:6b: c3:b2:39:d0:56:1b:9a:ad:6a:59:ff:6c:00:8f:ee: e3:64:d2:d7:48:eb:c6:30:d0:53:e8:76:28:c5:a3: 2d:93:5f:76:f3:4d:c8:b7:13:5f:1e:c1:6d:2c:31: e4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0B:71:0F:85:13:B2:2E:1B:BE:F9:D6:81:AD:9C:76:C5:A4:72:85 X509v3 Authority Key Identifier: keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3a:4d:54:bb:b2:46:d9:bb:0e:fd:fd:b5:fc:e8:19:25:ab: 6b:03:63:9b:f9:25:ed:b3:79:9d:20:0c:46:a0:db:60:d9:d3: 9c:30:6b:8f:87:d6:b6:2b:44:cf:62:6d:d0:d2:4c:d8:be:92: 39:cc:a7:62:67:52:fb:7f:e3:f7:df:67:0e:0e:9f:0e:93:95: 32:14:97:ee:58:0f:f2:3a:7e:fc:37:8d:4a:36:60:c8:aa:d5: 44:16:35:65:bb:24:a7:13:c0:c3:53:5d:73:73:ca:4e:68:1f: 3a:41:02:99:0d:c7:55:6c:f0:02:ea:b6:6c:56:be:8e:d2:09: 19:74:a2:15:e9:fc:11:ec:4d:f8:fb:b3:4e:e3:56:de:53:c0: 99:3d:75:98:26:fa:df:8b:b0:01:87:86:51:67:5c:9e:96:fa: 6d:56:a7:02:af:2a:d0:8e:68:d2:71:f8:4c:e6:ef:f7:34:0b: 49:b2:5a:93:64:33:c5:a6:fc:f6:c0:de:37:e1:fc:73:ac:21: 4d:c0:32:c0:64:60:ba:16:f6:80:6a:14:71:06:6f:5b:55:89: cf:a9:20:d8:b5:f3:16:93:05:f5:b1:bf:2b:d8:7e:3a:8b:8f: 54:13:ea:9e:2f:be:23:54:ca:f7:83:7a:c0:91:aa:50:0b:76: 8b:d7:e7:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfUDA/iQMq6QR6yYBWRwekAIMvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3 QTUxQTg2RjAeFw0yNTA3MjIxNTE1NTlaFw0yNTA3MjUyMzM0NTlaMDMxMTAvBgNV BAMTKDU5MEI3MTBGODUxM0IyMkUxQkJFRjlENjgxQUQ5Qzc2QzVBNDcyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aItbcd+a+NA2eAa5wKo31zhg PUcba3vySoaw2UwHR5iM0ANxGYi0X1knonWVCspoYwJxvpqeH0z1M+dQYdX8OtjJ nUi+Fnew7iJnLLhSJBCXYwUf/8yHIfswoLSwklmqwmQyHueaTUGbeHfHqF0q5qpL +w0rerBb7URVzv0YqJKa3+QYDPKqs195bm9oADh5dewTBNFellFqMJ+0cTG6cncP hGsdJpLwQ/xhB6n6FDj+UhXbykFpXzpxH68Zs7UCHfcpJDupEMQqZbg7gdoua8Oy OdBWG5qtaln/bACP7uNk0tdI68Yw0FPodijFoy2TX3bzTci3E18ewW0sMeRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWQtxD4UTsi4bvvnWga2cdsWkcoUwHwYDVR0j BBgwFoAUVtSU9SAccLPI/QYwZkiY1XpRqG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDVhZjIyYy03ZTNlLTQwYjUtYWM1MC02Mzc3NzJhOTVjMjEvMC81NkQ0OTRGNTIw MUM3MEIzQzhGRDA2MzA2NjQ4OThENTdBNTFBODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3QTUx QTg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4 RDU3QTUxQTg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk6TVS7skbZuw79/bX86Bklq2sDY5v5Je2z eZ0gDEag22DZ05wwa4+H1rYrRM9ibdDSTNi+kjnMp2JnUvt/4/ffZw4Onw6TlTIU l+5YD/I6fvw3jUo2YMiq1UQWNWW7JKcTwMNTXXNzyk5oHzpBApkNx1Vs8ALqtmxW vo7SCRl0ohXp/BHsTfj7s07jVt5TwJk9dZgm+t+LsAGHhlFnXJ6W+m1WpwKvKtCO aNJx+Ezm7/c0C0myWpNkM8Wm/PbA3jfh/HOsIU3AMsBkYLoW9oBqFHEGb1tVic+p INi18xaTBfWxvyvYfjqLj1QT6p4vviNUyveDesCRqlALdovX594= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:17 2025 by rpki-client