$ rpki-client -vvf repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft File: 556F35148B9935659C1FE70B505B1D8D79838EFA.mft (raw, json) Hash identifier: lDYXwS6aP9i0Ajkeu7V6WRIUeltsHWJHxQTlMt4MRgk= Subject key identifier: 50:89:2F:05:32:2B:A9:56:E7:8D:DC:D6:21:A1:9D:ED:C5:F6:5B:08 Authority key identifier: 55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA Certificate issuer: /CN=556F35148B9935659C1FE70B505B1D8D79838EFA Certificate serial: 18098623E55A9AFF51C8397E1E90F3025506EFB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft Manifest number: 01CB Signing time: Fri 17 Oct 2025 21:01:25 +0000 Manifest this update: Fri 17 Oct 2025 20:56:25 +0000 Manifest next update: Tue 21 Oct 2025 00:54:25 +0000 Files and hashes: 1: 556F35148B9935659C1FE70B505B1D8D79838EFA.crl (hash: o5VJ3adffBzfF8JLqLHYKfYXhjOWV7Lt5ZttQ+Aqk90=) 2: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: Rw+pxwTJP+hvGj9PdU0j+wE54RfccGnIIDVVcYYdmUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 00:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:09:86:23:e5:5a:9a:ff:51:c8:39:7e:1e:90:f3:02:55:06:ef:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556F35148B9935659C1FE70B505B1D8D79838EFA Validity Not Before: Oct 17 20:56:25 2025 GMT Not After : Oct 21 00:54:25 2025 GMT Subject: CN=50892F05322BA956E78DDCD621A19DEDC5F65B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:a6:92:f7:8a:0d:d5:36:b7:a0:79:ca:67: 36:63:4e:8c:25:13:5a:de:76:fb:e3:c1:97:a8:40: e1:09:b1:b9:eb:79:e4:26:b0:ec:fd:2b:63:08:9b: 41:7a:69:32:6d:0f:3d:fe:bb:55:02:4c:de:37:35: 27:15:d7:0d:c9:f6:78:21:a7:76:a8:f1:a1:d2:f5: fc:22:58:0e:d0:24:f5:98:b9:7d:e9:4c:f0:4a:d0: 05:ee:4f:03:e3:2c:91:26:63:18:fc:ce:87:61:16: 77:84:24:98:22:ce:08:9a:23:28:01:3d:7f:66:ae: 78:6e:f6:cc:f2:ce:e4:b7:be:57:13:0f:e0:11:03: 0f:77:bc:be:ed:d2:3d:3d:85:66:79:d9:cc:c5:10: c9:d8:b3:2e:98:61:23:86:b6:29:83:46:84:3c:17: 8f:89:f2:36:a6:59:75:cd:21:8f:e2:06:39:19:9a: 88:d5:3b:a9:c3:ec:77:e5:a7:13:58:c7:e0:8d:a6: 75:d6:dd:62:5c:66:1c:15:1c:fe:ef:a8:f0:24:08: 7c:0a:39:b9:66:38:83:5e:ca:3f:f9:8a:a2:cb:44: 7b:7a:03:5b:65:5d:48:5c:21:75:9c:7f:27:c1:7d: de:96:3b:83:6f:0c:fa:f0:92:ce:7b:07:93:12:76: 0a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:89:2F:05:32:2B:A9:56:E7:8D:DC:D6:21:A1:9D:ED:C5:F6:5B:08 X509v3 Authority Key Identifier: keyid:55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:85:7c:be:07:05:1c:ff:80:c7:a1:38:bb:09:49:de:41:8f: f6:d7:35:66:65:50:fc:9a:a7:c1:e3:87:52:5c:a7:05:f7:1e: f2:48:00:b7:45:ac:91:85:1f:ba:11:4d:d4:a9:11:e2:89:7b: 3f:3e:0f:b7:8b:22:9d:0d:be:eb:53:88:ad:40:d8:6e:81:22: 06:f2:5e:cc:38:2f:73:29:39:b2:55:ef:2d:70:85:9c:51:8c: 20:9f:37:da:a6:f6:db:33:2d:97:5a:6c:35:26:5f:d5:9a:2a: d6:d7:69:bd:97:af:3a:78:a4:14:b0:8d:25:72:c3:f2:3f:6c: 6d:17:ae:df:77:82:e1:fd:24:62:96:78:20:a7:b5:06:e2:b9: 92:ad:39:a5:f0:e8:c4:27:37:07:e9:3a:34:71:ed:eb:ee:29: 11:4d:96:aa:42:51:15:cd:5f:87:e2:05:0b:7c:99:aa:e3:d0: 9a:11:31:db:b1:51:2c:6e:05:d7:5d:42:e8:4b:d3:0b:90:fa: 6e:fb:24:34:91:e7:05:47:02:a0:3d:e2:50:81:6a:10:41:29: 27:28:c9:12:7c:22:26:78:f4:90:51:88:20:9a:c8:e7:23:c4: 1f:c2:66:3f:07:35:5c:33:ed:59:6b:3b:8d:19:b5:7d:7e:c4: f1:22:3a:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGAmGI+Vamv9RyDl+HpDzAlUG77AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3 OTgzOEVGQTAeFw0yNTEwMTcyMDU2MjVaFw0yNTEwMjEwMDU0MjVaMDMxMTAvBgNV BAMTKDUwODkyRjA1MzIyQkE5NTZFNzhERENENjIxQTE5REVEQzVGNjVCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHraaS94oN1Ta3oHnKZzZjTowl E1redvvjwZeoQOEJsbnreeQmsOz9K2MIm0F6aTJtDz3+u1UCTN43NScV1w3J9ngh p3ao8aHS9fwiWA7QJPWYuX3pTPBK0AXuTwPjLJEmYxj8zodhFneEJJgizgiaIygB PX9mrnhu9szyzuS3vlcTD+ARAw93vL7t0j09hWZ52czFEMnYsy6YYSOGtimDRoQ8 F4+J8jamWXXNIY/iBjkZmojVO6nD7HflpxNYx+CNpnXW3WJcZhwVHP7vqPAkCHwK OblmOINeyj/5iqLLRHt6A1tlXUhcIXWcfyfBfd6WO4NvDPrwks57B5MSdgrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUIkvBTIrqVbnjdzWIaGd7cX2WwgwHwYDVR0j BBgwFoAUVW81FIuZNWWcH+cLUFsdjXmDjvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzQyNDgwYS04ZTBmLTQ3N2EtYmQ0YS1hYTgwODk5MjdiYTgvMC81NTZGMzUxNDhC OTkzNTY1OUMxRkU3MEI1MDVCMUQ4RDc5ODM4RUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3OTgz OEVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM0MjQ4MGEtOGUwZi00NzdhLWJk NGEtYWE4MDg5OTI3YmE4LzAvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFE OEQ3OTgzOEVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqFfL4HBRz/gMehOLsJSd5Bj/bXNWZlUPya p8Hjh1JcpwX3HvJIALdFrJGFH7oRTdSpEeKJez8+D7eLIp0NvutTiK1A2G6BIgby Xsw4L3MpObJV7y1whZxRjCCfN9qm9tszLZdabDUmX9WaKtbXab2Xrzp4pBSwjSVy w/I/bG0Xrt93guH9JGKWeCCntQbiuZKtOaXw6MQnNwfpOjRx7evuKRFNlqpCURXN X4fiBQt8marj0JoRMduxUSxuBdddQuhL0wuQ+m77JDSR5wVHAqA94lCBahBBKSco yRJ8IiZ49JBRiCCayOcjxB/CZj8HNVwz7VlrO40ZtX1+xPEiOkg= -----END CERTIFICATE-----Generated at Sun Oct 19 18:07:50 2025 by rpki-client