$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft File: B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft (raw, json) Hash identifier: ZiL5ahBmdjAFokFlhQij4yXYqAodALJEKKoptT80oNE= Subject key identifier: 6D:87:12:87:FB:76:F9:8B:83:62:44:04:44:F7:D0:BC:6C:EB:08:D4 Authority key identifier: B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0 Certificate issuer: /CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0 Certificate serial: 664336A46DADD70643BFEE163E68D96FFA33024E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:28:05 +0000 Manifest this update: Tue 02 Jun 2026 22:23:05 +0000 Manifest next update: Thu 04 Jun 2026 02:12:05 +0000 Files and hashes: 1: B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl (hash: 76hlyTrZu5gn0E34iXpoN7p7rAbVcNCYGjhkQJGN7fE=) 2: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: 4neWrZ2U5Ifz5ZV+5kk+4b2Vcx4ltU0Zb9JXxN912Dk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 02:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:43:36:a4:6d:ad:d7:06:43:bf:ee:16:3e:68:d9:6f:fa:33:02:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0 Validity Not Before: Jun 2 22:23:05 2026 GMT Not After : Jun 4 02:12:05 2026 GMT Subject: CN=6D871287FB76F98B8362440444F7D0BC6CEB08D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a9:34:e3:58:eb:7b:43:67:c2:ad:5f:05:4f: 7a:f3:5a:f7:61:c3:a5:03:7d:4c:87:7c:76:28:2c: 26:f6:12:28:55:a8:5f:ca:f2:e2:d7:59:33:8f:77: 0e:75:12:5b:fd:5c:65:ae:16:77:94:04:66:c6:ac: 9e:b0:45:27:cd:1a:9a:9a:0f:2c:65:9a:ee:10:b4: a0:6b:62:91:e1:87:ed:cf:8c:0a:aa:d6:06:fd:60: 52:b1:de:53:36:51:e9:cb:7c:0e:aa:0f:11:e0:7b: 45:8c:27:3a:da:7c:c5:5a:0a:4b:72:28:f0:30:25: 75:87:76:d3:53:03:aa:f0:08:4e:b7:e1:11:46:44: 57:00:4f:9e:35:ad:e5:a9:34:78:94:32:f3:7a:76: 89:ad:3a:0e:9d:6b:31:da:58:94:00:f7:72:22:de: fa:9b:ae:c8:ef:d9:65:7a:2e:e6:36:69:d6:64:dc: 19:3e:f8:27:0a:d2:9a:d5:d1:28:59:68:f5:6a:09: b0:1a:8b:b2:18:ed:e0:bd:5d:99:5f:d4:b8:3a:1f: 38:f9:de:4f:4f:9e:cd:ae:63:98:66:d0:a2:68:c6: 34:23:47:9c:6f:5e:1b:c8:8c:58:a7:6b:78:4b:0c: 25:0e:c8:32:be:ff:33:e1:bc:64:d1:70:89:69:ff: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:87:12:87:FB:76:F9:8B:83:62:44:04:44:F7:D0:BC:6C:EB:08:D4 X509v3 Authority Key Identifier: keyid:B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f5:2a:ef:88:05:08:84:3f:92:d5:a9:6c:1e:08:dd:e0:cb: 79:e6:8e:53:fc:34:e4:a9:6c:33:f5:61:32:67:b2:3e:79:6d: e8:1d:b8:35:03:82:7f:ef:13:0b:a7:9c:80:c2:46:f0:50:cd: ce:67:ba:4d:d5:80:af:c7:8c:e3:98:cf:cf:be:43:7b:d9:88: 7f:35:e3:59:17:35:15:4b:1a:f4:9f:c6:19:69:aa:ae:48:7f: 04:98:f2:e8:b8:6e:16:65:e7:86:68:84:81:e1:2c:ef:d3:dd: 29:8b:4c:0a:8a:59:b8:08:89:b9:ec:04:c7:70:bd:95:a0:4f: 2d:c5:04:8f:5a:fe:51:32:10:8f:4a:5e:49:c3:d8:07:6a:f6: 47:69:ee:22:ef:e1:01:4d:e6:2c:b4:94:ad:53:da:85:df:d0: e3:2e:d3:89:be:6c:37:c2:5e:29:6e:fb:bd:d0:c1:93:76:9e: 3b:29:6d:b0:8c:3e:80:ef:d6:bc:66:bb:47:f7:a7:8b:8a:86: b4:58:2d:5d:a7:b2:0e:32:6c:b3:87:3b:ca:69:e2:7b:c5:74: d3:0b:dd:4c:32:6a:c6:78:36:8d:b7:14:96:3c:c2:9e:c4:a9: 54:17:5c:a5:d9:eb:d2:1d:db:74:8e:a7:ac:b4:90:b9:0a:2a: 7c:e2:3e:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZkM2pG2t1wZDv+4WPmjZb/ozAk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2QkE2NkFDQjZCMjhBNzVDRjhCOTI2MjlGMzg5ODhF NkJDRTVGMDAeFw0yNjA2MDIyMjIzMDVaFw0yNjA2MDQwMjEyMDVaMDMxMTAvBgNV BAMTKDZEODcxMjg3RkI3NkY5OEI4MzYyNDQwNDQ0RjdEMEJDNkNFQjA4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqTTjWOt7Q2fCrV8FT3rzWvdh w6UDfUyHfHYoLCb2EihVqF/K8uLXWTOPdw51Elv9XGWuFneUBGbGrJ6wRSfNGpqa Dyxlmu4QtKBrYpHhh+3PjAqq1gb9YFKx3lM2UenLfA6qDxHge0WMJzrafMVaCkty KPAwJXWHdtNTA6rwCE634RFGRFcAT541reWpNHiUMvN6domtOg6dazHaWJQA93Ii 3vqbrsjv2WV6LuY2adZk3Bk++CcK0prV0ShZaPVqCbAai7IY7eC9XZlf1Lg6Hzj5 3k9Pns2uY5hm0KJoxjQjR5xvXhvIjFina3hLDCUOyDK+/zPhvGTRcIlp/8fdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbYcSh/t2+YuDYkQERPfQvGzrCNQwHwYDVR0j BBgwFoAUtWumastrKKdc+LkmKfOJiOa85fAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZjE5MjAtODUyMy00ZWQ0LWIzNTctOWRlOWEwYzkxNzEwLzAvQjU2QkE2NkFD QjZCMjhBNzVDRjhCOTI2MjlGMzg5ODhFNkJDRTVGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNTZCQTY2QUNCNkIyOEE3NUNGOEI5MjYyOUYzODk4OEU2QkNF NUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZjE5MjAtODUyMy00ZWQ0LWIz NTctOWRlOWEwYzkxNzEwLzAvQjU2QkE2NkFDQjZCMjhBNzVDRjhCOTI2MjlGMzg5 ODhFNkJDRTVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACb1Ku+IBQiEP5LVqWweCN3gy3nmjlP8NOSp bDP1YTJnsj55begduDUDgn/vEwunnIDCRvBQzc5nuk3VgK/HjOOYz8++Q3vZiH81 41kXNRVLGvSfxhlpqq5IfwSY8ui4bhZl54ZohIHhLO/T3SmLTAqKWbgIibnsBMdw vZWgTy3FBI9a/lEyEI9KXknD2Adq9kdp7iLv4QFN5iy0lK1T2oXf0OMu04m+bDfC Xilu+73QwZN2njspbbCMPoDv1rxmu0f3p4uKhrRYLV2nsg4ybLOHO8pp4nvFdNML 3UwyasZ4No23FJY8wp7EqVQXXKXZ69Id23SOp6y0kLkKKnziPoQ= -----END CERTIFICATE-----Generated at Wed Jun 3 04:12:25 2026 by rpki-client