$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft File: 56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft (raw, json) Hash identifier: m8+KE//gSobHgweXdc4fzXoRl7GWo+1H+PI2BAwYOkA= Subject key identifier: 9C:E7:96:D2:BE:23:FE:97:AE:23:BC:D3:56:D0:01:32:9A:2D:08:1D Authority key identifier: 56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C Certificate issuer: /CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C Certificate serial: 70BB48CFD084C14235622A418C5CE0CA1DC4A21C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 08:22:48 +0000 Manifest this update: Thu 03 Sep 2026 08:17:48 +0000 Manifest next update: Fri 04 Sep 2026 10:46:48 +0000 Files and hashes: 1: 56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl (hash: GSmTp54iy+AieVz2tYkRtrw9txHpgm5Zay21KhJxlMU=) 2: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: wt9Ra/tPcAxIL+26JpZjFnizoxFKjLikDqtb0PRy/D0=) 3: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: lmjjWgjg6JFV781/I03PASkaI491yTg94cYWOgkDO5Y=) 4: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: Mw0Zx/sSQWD0MgxT9iC938oEtx/GmaYcvCuMJEo7uW0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 10:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:bb:48:cf:d0:84:c1:42:35:62:2a:41:8c:5c:e0:ca:1d:c4:a2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C Validity Not Before: Sep 3 08:17:48 2026 GMT Not After : Sep 4 10:46:48 2026 GMT Subject: CN=9CE796D2BE23FE97AE23BCD356D001329A2D081D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:41:7c:59:8d:d5:19:c1:4f:c9:a4:fb:e2:39: 65:07:aa:26:e6:45:13:66:31:72:b1:aa:17:5c:2d: 58:80:af:76:de:38:59:c7:3b:61:21:a2:c4:05:dd: 14:4b:9b:ff:90:3d:af:e9:39:9a:12:35:a0:48:b2: 62:00:35:85:3f:df:4d:1c:e8:65:06:df:e0:53:03: 78:0a:98:89:58:d9:2a:2b:51:d6:27:a7:ef:45:5c: 2f:57:7c:67:da:91:e3:b1:fc:b4:be:3e:7b:e2:52: 79:c2:50:eb:51:10:93:4b:c6:6c:ff:ac:ca:b0:eb: d8:9b:86:d2:d1:b6:d2:1c:08:4c:7e:65:c7:3a:e5: 92:db:47:1b:0c:71:1d:ff:e3:99:64:7a:c5:84:50: 49:f8:53:5c:80:1c:41:d6:41:8e:b5:87:2f:37:a6: ae:2d:10:16:a8:e7:34:94:e3:a1:c8:dd:c2:a8:13: 09:78:74:51:84:21:2a:f4:f3:26:37:fe:de:74:2a: 50:3b:47:ef:ab:3f:49:6d:04:d9:45:63:9e:d0:7d: 8a:0b:e6:1a:0e:50:33:01:e6:9d:9e:60:a6:db:fc: b0:30:7c:7f:0d:1a:98:93:e2:45:26:38:e2:eb:21: 1e:83:35:ea:b3:aa:df:ba:f9:df:fb:c3:e0:95:ad: 03:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E7:96:D2:BE:23:FE:97:AE:23:BC:D3:56:D0:01:32:9A:2D:08:1D X509v3 Authority Key Identifier: keyid:56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:74:0c:ac:a9:1f:7d:9e:2d:7d:28:62:06:44:23:aa:f9:38: 8c:61:88:63:e0:95:18:42:ea:c0:77:71:80:2a:ed:5b:57:f2: b6:a2:8e:d3:f0:62:79:bc:30:89:0d:ec:b1:ec:bf:18:ef:e1: 23:eb:4f:b0:2a:04:ae:e1:4f:58:86:78:68:ac:9d:68:bd:d8: cf:84:b5:df:9a:27:f8:3b:3b:e3:98:20:a7:6c:7c:d8:34:95: d9:ed:96:81:4f:1c:3c:dd:d0:22:bd:4d:8c:13:84:62:9e:bb: a9:aa:95:e7:98:17:4d:f4:6b:3d:e3:7f:dd:4e:fa:2f:5e:cb: 3d:33:ab:7a:1f:4e:cd:00:e5:ef:ab:54:22:a1:f3:ef:61:8a: 27:d9:34:0f:9d:24:84:eb:74:97:e3:71:60:a8:83:da:a0:f6: eb:10:6d:e9:23:70:94:32:f0:28:0c:ac:0b:c8:13:2b:57:81: 5a:87:92:64:60:be:69:bb:d9:2d:d1:06:15:92:33:11:65:d6: 30:0d:91:ad:7e:e9:fc:b2:02:2f:66:88:6b:59:d5:e2:2d:ca: 61:d6:d4:fc:3e:35:1f:76:56:94:5d:f6:65:1b:cc:44:5a:17: 67:34:a2:d7:4f:59:d9:e2:2b:2f:1d:1f:4c:70:fb:1c:05:51: 0d:93:ad:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLtIz9CEwUI1YipBjFzgyh3EohwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZCNzY5RjJCMzY5RkYxRTIyQzNBRENEM0Q1MEVDMURD MDE1MjQ2QzAeFw0yNjA5MDMwODE3NDhaFw0yNjA5MDQxMDQ2NDhaMDMxMTAvBgNV BAMTKDlDRTc5NkQyQkUyM0ZFOTdBRTIzQkNEMzU2RDAwMTMyOUEyRDA4MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQXxZjdUZwU/JpPviOWUHqibm RRNmMXKxqhdcLViAr3beOFnHO2EhosQF3RRLm/+QPa/pOZoSNaBIsmIANYU/300c 6GUG3+BTA3gKmIlY2SorUdYnp+9FXC9XfGfakeOx/LS+PnviUnnCUOtREJNLxmz/ rMqw69ibhtLRttIcCEx+Zcc65ZLbRxsMcR3/45lkesWEUEn4U1yAHEHWQY61hy83 pq4tEBao5zSU46HI3cKoEwl4dFGEISr08yY3/t50KlA7R++rP0ltBNlFY57QfYoL 5hoOUDMB5p2eYKbb/LAwfH8NGpiT4kUmOOLrIR6DNeqzqt+6+d/7w+CVrQPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnOeW0r4j/peuI7zTVtABMpotCB0wHwYDVR0j BBgwFoAUVrdp8rNp/x4iw63NPVDsHcAVJGwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZjM4OTAtNDQ1ZC00YjIzLThmYjMtYjMwMThhNzk5ZWNlLzAvNTZCNzY5RjJC MzY5RkYxRTIyQzNBRENEM0Q1MEVDMURDMDE1MjQ2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NkI3NjlGMkIzNjlGRjFFMjJDM0FEQ0QzRDUwRUMxREMwMTUy NDZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvNTZCNzY5RjJCMzY5RkYxRTIyQzNBRENEM0Q1MEVD MURDMDE1MjQ2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE90DKypH32eLX0oYgZEI6r5OIxhiGPglRhC 6sB3cYAq7VtX8raijtPwYnm8MIkN7LHsvxjv4SPrT7AqBK7hT1iGeGisnWi92M+E td+aJ/g7O+OYIKdsfNg0ldntloFPHDzd0CK9TYwThGKeu6mqleeYF030az3jf91O +i9eyz0zq3ofTs0A5e+rVCKh8+9hiifZNA+dJITrdJfjcWCog9qg9usQbekjcJQy 8CgMrAvIEytXgVqHkmRgvmm72S3RBhWSMxFl1jANka1+6fyyAi9miGtZ1eItymHW 1Pw+NR92VpRd9mUbzERaF2c0otdPWdniKy8dH0xw+xwFUQ2TrTw= -----END CERTIFICATE-----Generated at Thu Sep 3 12:35:42 2026 by rpki-client