$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: 27+/p+vlfQuCvSPZPS7UH962/o6iYA2umqK2OWLpdM8= Subject key identifier: 9B:E6:5E:1D:CC:DC:FF:C7:FC:AD:70:3B:F7:FD:00:92:E3:A1:B1:6E Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 210B2A6171057BFB3B1AEA7819E7A752AF46E232 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: EC Signing time: Thu 23 Oct 2025 18:22:14 +0000 Manifest this update: Thu 23 Oct 2025 18:17:14 +0000 Manifest next update: Mon 27 Oct 2025 02:06:14 +0000 Files and hashes: 1: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: rTXQtLGfloR0+rljEGa+iUOTI/Kew7tUKwjGCsYmVSI=) 2: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) 3: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 02:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0b:2a:61:71:05:7b:fb:3b:1a:ea:78:19:e7:a7:52:af:46:e2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Oct 23 18:17:14 2025 GMT Not After : Oct 27 02:06:14 2025 GMT Subject: CN=9BE65E1DCCDCFFC7FCAD703BF7FD0092E3A1B16E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:43:be:c1:f9:28:57:e9:90:ef:1b:75:96: 15:72:1d:0d:52:10:cc:e8:58:97:d8:7c:62:ab:9f: 6c:f3:1d:f8:73:ec:34:b0:e3:5d:9c:c4:66:8e:c9: 20:62:17:1a:67:82:a1:cb:98:f5:09:6b:4d:96:71: 65:27:3c:d3:d3:94:a5:1b:87:99:13:3a:79:8e:dd: 38:ac:48:01:b6:a0:7a:df:c5:b3:1c:b1:90:58:46: 7c:e3:51:6a:9f:83:c4:c8:e4:fe:77:e2:c3:f8:e2: 7c:33:6c:bb:2c:d7:b3:da:d6:23:f7:74:f8:6d:9f: c1:a9:7b:ff:24:3c:6f:30:9e:11:78:32:10:e5:3e: ea:19:da:ef:a7:94:c3:f5:f8:3e:11:09:b6:f9:85: b5:aa:9b:05:12:7c:e1:1b:f3:73:84:d7:69:f1:45: 26:5e:04:22:4b:93:4a:27:d4:e3:2f:2b:00:1f:b0: 45:d8:6d:82:43:a0:b4:21:06:d6:60:e2:e7:76:34: 5b:e1:5e:21:5d:a6:44:13:ca:08:c6:19:b8:14:29: c6:12:66:04:19:4d:cc:20:df:e7:44:90:7c:79:78: 7c:0c:d5:11:01:da:50:6d:9f:79:8f:47:fe:56:5d: 2d:c5:23:69:0c:7d:79:ab:45:26:c1:2d:6b:a2:86: d7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E6:5E:1D:CC:DC:FF:C7:FC:AD:70:3B:F7:FD:00:92:E3:A1:B1:6E X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:23:03:87:b1:1f:04:71:14:7b:92:80:77:2c:d0:60:54:43: ed:04:8f:d5:4f:2a:bd:c0:32:b0:90:3f:e8:04:1b:f5:23:88: 9c:08:7c:b5:cf:32:99:4b:53:9d:0a:01:1c:9a:93:81:2b:1e: be:92:c4:3c:d6:93:47:3a:11:6a:fe:c4:ef:48:e7:53:e1:13: e6:9e:35:e0:5e:59:89:b0:0d:62:ae:0c:69:f6:81:b9:8f:b5: 1a:32:f3:e6:4f:49:24:fe:bc:89:f0:89:ca:f2:29:be:b1:fb: c5:ff:e7:12:64:f6:7d:ab:5d:6f:88:cb:8d:cc:99:d2:55:19: 5b:44:9f:85:48:0b:46:fe:9c:07:d7:9b:e4:7d:d1:6b:8c:2f: 99:d4:90:46:90:1e:ec:c9:83:59:b8:ca:e6:94:3e:54:66:9b: d6:a5:7a:1d:b6:df:53:af:3c:99:3b:34:2d:26:66:41:49:c1: 90:ca:c3:74:6a:77:61:3d:4e:e2:c5:e3:87:28:d5:5b:4a:1c: cf:9f:03:85:a9:b0:06:5e:f7:8b:b0:1d:a1:0f:da:e0:80:84: 4b:5c:95:49:23:0c:36:f3:3e:5f:1c:77:b3:1a:32:d0:2a:35: 1d:2a:47:e4:54:b9:4a:e0:94:9a:78:a5:cf:f3:5b:07:e0:c3: 19:63:73:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQsqYXEFe/s7Gup4GeenUq9G4jIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNTEwMjMxODE3MTRaFw0yNTEwMjcwMjA2MTRaMDMxMTAvBgNV BAMTKDlCRTY1RTFEQ0NEQ0ZGQzdGQ0FENzAzQkY3RkQwMDkyRTNBMUIxNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMUO+wfkoV+mQ7xt1lhVyHQ1S EMzoWJfYfGKrn2zzHfhz7DSw412cxGaOySBiFxpngqHLmPUJa02WcWUnPNPTlKUb h5kTOnmO3TisSAG2oHrfxbMcsZBYRnzjUWqfg8TI5P534sP44nwzbLss17Pa1iP3 dPhtn8Gpe/8kPG8wnhF4MhDlPuoZ2u+nlMP1+D4RCbb5hbWqmwUSfOEb83OE12nx RSZeBCJLk0on1OMvKwAfsEXYbYJDoLQhBtZg4ud2NFvhXiFdpkQTygjGGbgUKcYS ZgQZTcwg3+dEkHx5eHwM1REB2lBtn3mPR/5WXS3FI2kMfXmrRSbBLWuihteVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+ZeHczc/8f8rXA79/0AkuOhsW4wHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0jA4exHwRxFHuSgHcs0GBUQ+0Ej9VPKr3A MrCQP+gEG/UjiJwIfLXPMplLU50KARyak4ErHr6SxDzWk0c6EWr+xO9I51PhE+ae NeBeWYmwDWKuDGn2gbmPtRoy8+ZPSST+vInwicryKb6x+8X/5xJk9n2rXW+Iy43M mdJVGVtEn4VIC0b+nAfXm+R90WuML5nUkEaQHuzJg1m4yuaUPlRmm9aleh2231Ov PJk7NC0mZkFJwZDKw3Rqd2E9TuLF44co1VtKHM+fA4WpsAZe94uwHaEP2uCAhEtc lUkjDDbzPl8cd7MaMtAqNR0qR+RUuUrglJp4pc/zWwfgwxljcwY= -----END CERTIFICATE-----Generated at Sat Oct 25 11:24:17 2025 by rpki-client