$ rpki-client -vvf repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft File: 556F35148B9935659C1FE70B505B1D8D79838EFA.mft (raw, json) Hash identifier: 4P1cxy7PaLqczQF0Z0UAocCoCzGN7ggG9uaYNlkxYgw= Subject key identifier: D8:B9:F6:C0:0A:46:C0:03:A0:BB:84:7F:EF:F1:91:A7:EE:78:ED:65 Authority key identifier: 55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA Certificate issuer: /CN=556F35148B9935659C1FE70B505B1D8D79838EFA Certificate serial: 0F2447954AB5D42A18330C54DB04AD0C7D54E302 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft Manifest number: 01A4 Signing time: Tue 22 Jul 2025 22:21:23 +0000 Manifest this update: Tue 22 Jul 2025 22:16:23 +0000 Manifest next update: Sat 26 Jul 2025 07:27:23 +0000 Files and hashes: 1: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: 1bjKbvUqG5BCn/NVvztyzNwID5OVDvMyI+PwBlSda/M=) 2: 556F35148B9935659C1FE70B505B1D8D79838EFA.crl (hash: 7Q2Ncun1JJ6T6RF3F1UZuWtSN0F6hBmaDVCN/Au/CiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:24:47:95:4a:b5:d4:2a:18:33:0c:54:db:04:ad:0c:7d:54:e3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556F35148B9935659C1FE70B505B1D8D79838EFA Validity Not Before: Jul 22 22:16:23 2025 GMT Not After : Jul 26 07:27:23 2025 GMT Subject: CN=D8B9F6C00A46C003A0BB847FEFF191A7EE78ED65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b7:41:c2:7d:1a:1a:11:aa:56:e1:14:4f:7e: 96:54:8c:83:8e:23:9b:96:d2:f8:2f:1f:7a:2e:9a: e2:91:02:43:ac:2e:80:c1:a7:fc:24:3f:e0:12:78: 4e:4c:99:90:20:a8:6c:7d:e6:53:92:7c:41:70:39: f2:e4:90:43:98:48:e8:75:76:39:31:72:8a:e6:5d: 6c:8d:76:cd:05:ca:ec:4a:d3:2c:82:06:5e:12:f6: 53:45:24:8d:72:9b:c1:77:50:27:6a:66:bc:7a:b4: 05:54:15:1b:2c:7b:ec:48:8d:5c:71:91:03:4c:1a: dc:7f:16:8b:b2:2f:57:14:91:2d:e1:7f:ef:a7:14: de:f4:4e:1d:e2:87:35:7e:12:e2:99:08:a2:85:03: 9d:0f:df:3e:18:d7:86:c0:be:6a:1e:6b:b4:2a:13: bc:f5:13:37:22:f1:d5:33:ca:f2:77:c6:50:25:39: 86:cb:ed:eb:4c:30:64:23:18:ce:c4:68:84:07:32: cb:e6:1b:e7:22:86:e6:f4:41:5d:9d:4d:71:70:91: df:76:5b:3d:0f:64:52:27:0e:5b:80:c0:9c:70:14: 0b:44:d8:78:ad:fb:ee:0b:a3:b5:6c:38:48:8b:0a: a2:f2:e5:d9:5e:cc:34:d8:8b:61:b1:c8:a4:1b:2c: 0f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B9:F6:C0:0A:46:C0:03:A0:BB:84:7F:EF:F1:91:A7:EE:78:ED:65 X509v3 Authority Key Identifier: keyid:55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:65:44:40:f6:da:23:7a:03:62:45:8c:6f:5c:eb:65:a0:21: 93:b1:3f:10:7c:95:7b:ae:57:42:c5:73:68:e7:98:93:c9:54: 7b:75:fa:3e:e2:90:6a:63:28:51:79:7c:76:21:88:34:79:b3: a4:26:fa:bc:79:cd:7c:ff:4c:e2:02:c6:b6:e1:9d:43:4d:72: 36:74:65:a3:4c:0b:e9:0a:02:b5:95:56:3b:5b:fc:cd:eb:90: 60:9d:a3:d2:70:f2:ec:f4:49:bc:c7:47:bc:dd:35:2a:a7:e1: 9a:e1:59:2e:c9:79:18:de:1b:30:c1:1d:0c:4d:2e:f2:8d:8e: 13:11:89:90:dc:f2:33:97:52:85:82:22:51:d4:0b:3b:f5:d3: 83:ac:1d:8d:92:f1:43:bc:15:ca:b0:4b:8a:5a:09:33:6e:b9: 29:12:f0:2a:e6:9b:06:5d:d8:59:19:c0:54:bf:1c:c2:50:49: 1c:75:a4:e6:ea:78:d9:70:92:ad:ce:74:7c:19:7e:b4:f5:f3: e1:89:71:66:f7:ab:8d:62:74:44:11:06:35:c2:53:b1:c5:fb: 99:e3:c3:44:aa:cb:0a:6d:62:96:78:82:c5:de:bb:82:f5:b0: 7e:51:23:48:9e:a4:77:eb:82:f1:13:54:ca:f3:02:8c:57:fe: 74:c1:db:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDyRHlUq11CoYMwxU2wStDH1U4wIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3 OTgzOEVGQTAeFw0yNTA3MjIyMjE2MjNaFw0yNTA3MjYwNzI3MjNaMDMxMTAvBgNV BAMTKEQ4QjlGNkMwMEE0NkMwMDNBMEJCODQ3RkVGRjE5MUE3RUU3OEVENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQt0HCfRoaEapW4RRPfpZUjIOO I5uW0vgvH3oumuKRAkOsLoDBp/wkP+ASeE5MmZAgqGx95lOSfEFwOfLkkEOYSOh1 djkxcormXWyNds0FyuxK0yyCBl4S9lNFJI1ym8F3UCdqZrx6tAVUFRsse+xIjVxx kQNMGtx/FouyL1cUkS3hf++nFN70Th3ihzV+EuKZCKKFA50P3z4Y14bAvmoea7Qq E7z1Ezci8dUzyvJ3xlAlOYbL7etMMGQjGM7EaIQHMsvmG+cihub0QV2dTXFwkd92 Wz0PZFInDluAwJxwFAtE2Hit++4Lo7VsOEiLCqLy5dlezDTYi2GxyKQbLA/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Ln2wApGwAOgu4R/7/GRp+547WUwHwYDVR0j BBgwFoAUVW81FIuZNWWcH+cLUFsdjXmDjvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzQyNDgwYS04ZTBmLTQ3N2EtYmQ0YS1hYTgwODk5MjdiYTgvMC81NTZGMzUxNDhC OTkzNTY1OUMxRkU3MEI1MDVCMUQ4RDc5ODM4RUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3OTgz OEVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM0MjQ4MGEtOGUwZi00NzdhLWJk NGEtYWE4MDg5OTI3YmE4LzAvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFE OEQ3OTgzOEVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxlRED22iN6A2JFjG9c62WgIZOxPxB8lXuu V0LFc2jnmJPJVHt1+j7ikGpjKFF5fHYhiDR5s6Qm+rx5zXz/TOICxrbhnUNNcjZ0 ZaNMC+kKArWVVjtb/M3rkGCdo9Jw8uz0SbzHR7zdNSqn4ZrhWS7JeRjeGzDBHQxN LvKNjhMRiZDc8jOXUoWCIlHUCzv104OsHY2S8UO8FcqwS4paCTNuuSkS8CrmmwZd 2FkZwFS/HMJQSRx1pObqeNlwkq3OdHwZfrT18+GJcWb3q41idEQRBjXCU7HF+5nj w0SqywptYpZ4gsXeu4L1sH5RI0iepHfrgvETVMrzAoxX/nTB290= -----END CERTIFICATE-----Generated at Thu Jul 24 17:59:31 2025 by rpki-client