$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: 3Rp090U1rsXs19l9/hxTjDv8KiKD1LSDn9lb5xJVGfE= Subject key identifier: 3B:D4:AC:E7:C3:FD:9D:38:2E:E2:87:24:36:CD:17:1F:F2:13:7B:20 Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 6A68561EA813D26F66E1C7E84B32A6DB3E29AD90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: D8 Signing time: Sun 07 Sep 2025 14:52:13 +0000 Manifest this update: Sun 07 Sep 2025 14:47:13 +0000 Manifest next update: Wed 10 Sep 2025 20:47:13 +0000 Files and hashes: 1: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: xh9emAz3lN5wqe9x+ofUOYa01o9vktBMNISb8+MRhf4=) 2: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) 3: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 20:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:68:56:1e:a8:13:d2:6f:66:e1:c7:e8:4b:32:a6:db:3e:29:ad:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Sep 7 14:47:13 2025 GMT Not After : Sep 10 20:47:13 2025 GMT Subject: CN=3BD4ACE7C3FD9D382EE2872436CD171FF2137B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:45:ca:7b:78:c6:59:8d:8c:f5:98:c4:26: a7:4c:3d:09:ee:ae:68:25:b1:32:6b:90:ae:74:83: e1:94:0c:50:17:28:8f:d6:e4:13:9d:29:53:6b:be: 55:4b:70:d6:cc:b0:f3:0e:a7:fa:b3:ba:48:ed:c4: 8a:d7:58:83:ca:fe:ad:49:8a:db:16:c5:3b:b4:9e: ee:7f:3f:d4:6a:4b:37:b5:b6:37:bc:22:cb:30:62: a2:27:28:6f:0b:93:97:57:d4:17:9a:29:dd:39:fe: d6:b5:77:c1:86:c1:14:b5:b3:9d:18:46:c1:bf:be: 24:a4:fe:52:c1:4d:20:0b:0d:69:ff:88:90:9b:20: 35:59:17:c2:4a:f5:87:cc:c3:3e:31:2d:80:6c:5c: 9c:39:88:08:e0:3d:20:c0:80:d7:8c:b7:b2:f5:69: ff:a1:30:46:19:3a:09:bd:3a:71:08:f3:f5:30:28: da:6a:b2:ef:92:a5:6c:7c:27:26:b7:44:53:c7:61: ae:3e:d9:fb:03:b7:63:7e:3a:07:2c:53:92:84:41: 4e:dc:f4:e8:10:f6:ca:5d:29:35:cb:26:3e:be:6a: cd:63:6a:d2:5c:74:48:fa:2c:8e:22:5b:92:86:18: 38:72:36:90:e5:42:41:b7:b2:fb:80:51:0a:ea:d0: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D4:AC:E7:C3:FD:9D:38:2E:E2:87:24:36:CD:17:1F:F2:13:7B:20 X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ef:e3:9b:9f:ab:29:af:da:59:3a:db:ee:f4:e9:32:83:0d: 02:df:06:e8:c0:56:6a:4b:59:6b:9e:19:f7:53:df:db:68:57: 4f:6a:9b:b3:53:c3:01:b9:8d:13:4b:ee:14:27:7e:52:b1:b5: d5:ff:75:8e:8e:f5:ed:79:97:61:00:f9:d6:83:5e:82:1b:6f: b3:fe:cf:33:40:1f:14:7c:78:af:3e:4e:cd:7d:a1:06:14:41: a7:c9:18:64:b3:4e:22:ef:e1:b7:bd:47:0f:1b:9e:d8:3e:90: d5:a2:81:bc:0a:75:e6:c4:84:e4:01:d1:de:4e:5a:b2:53:be: bb:b6:61:38:4d:10:6e:23:d2:73:2b:2f:55:99:1c:29:cc:1a: 7f:82:54:d5:9a:c2:8c:9a:a4:da:a9:09:3b:76:28:ae:0b:8f: fb:67:78:cc:2d:ae:09:ef:ed:56:55:b0:49:3a:7e:3c:a2:69: 6e:6a:ba:3f:c4:f8:73:dd:87:d6:e6:21:97:03:4a:65:cd:b6: 9e:63:ce:9a:03:c6:20:8e:61:b0:45:f2:92:bf:9f:0b:16:85: 9a:a3:19:fe:2f:91:bd:85:f1:24:90:af:48:0e:bd:09:3b:2d: 33:69:8e:ca:bd:9d:e8:0d:26:fc:07:0e:5f:fe:b2:3a:67:3a: 67:04:d3:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamhWHqgT0m9m4cfoSzKm2z4prZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNTA5MDcxNDQ3MTNaFw0yNTA5MTAyMDQ3MTNaMDMxMTAvBgNV BAMTKDNCRDRBQ0U3QzNGRDlEMzgyRUUyODcyNDM2Q0QxNzFGRjIxMzdCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PUXKe3jGWY2M9ZjEJqdMPQnu rmglsTJrkK50g+GUDFAXKI/W5BOdKVNrvlVLcNbMsPMOp/qzukjtxIrXWIPK/q1J itsWxTu0nu5/P9RqSze1tje8IsswYqInKG8Lk5dX1BeaKd05/ta1d8GGwRS1s50Y RsG/viSk/lLBTSALDWn/iJCbIDVZF8JK9YfMwz4xLYBsXJw5iAjgPSDAgNeMt7L1 af+hMEYZOgm9OnEI8/UwKNpqsu+SpWx8Jya3RFPHYa4+2fsDt2N+OgcsU5KEQU7c 9OgQ9spdKTXLJj6+as1jatJcdEj6LI4iW5KGGDhyNpDlQkG3svuAUQrq0LmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO9Ss58P9nTgu4ockNs0XH/ITeyAwHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArv45ufqymv2lk62+706TKDDQLfBujAVmpL WWueGfdT39toV09qm7NTwwG5jRNL7hQnflKxtdX/dY6O9e15l2EA+daDXoIbb7P+ zzNAHxR8eK8+Ts19oQYUQafJGGSzTiLv4be9Rw8bntg+kNWigbwKdebEhOQB0d5O WrJTvru2YThNEG4j0nMrL1WZHCnMGn+CVNWawoyapNqpCTt2KK4Lj/tneMwtrgnv 7VZVsEk6fjyiaW5quj/E+HPdh9bmIZcDSmXNtp5jzpoDxiCOYbBF8pK/nwsWhZqj Gf4vkb2F8SSQr0gOvQk7LTNpjsq9negNJvwHDl/+sjpnOmcE068= -----END CERTIFICATE-----Generated at Mon Sep 8 05:43:25 2025 by rpki-client