$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft File: 56302D09256688774B85DCD3BAEEB0CB17E8884D.mft (raw, json) Hash identifier: qILhfL8+TDuDyLH8FjtIO6Bye6fQ0J0Pu/wnMm5vycs= Subject key identifier: EE:1D:16:37:23:BB:D9:13:AA:DB:47:07:65:A9:E9:B7:3E:97:8F:06 Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Certificate serial: A5A37FCD3DB43E6936B0A4BA03BD2447EE1D5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft Manifest number: 010E Signing time: Tue 21 Apr 2026 03:42:39 +0000 Manifest this update: Tue 21 Apr 2026 03:37:39 +0000 Manifest next update: Fri 24 Apr 2026 09:09:39 +0000 Files and hashes: 1: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: aFVZHS7nINB+JL7AEdDHRgxQQpnHeECBqD4GE79htH4=) 2: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: narOg/Y+HQu36n1a+2Amx/Ji0/PrZsxnYg1qBFxyHaM=) 3: 56302D09256688774B85DCD3BAEEB0CB17E8884D.crl (hash: KFymTkaY40kz8TxfcX6ARFrSmosqyGpcVW0DmcOltQc=) 4: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: gVISUrC0w0h01G2FHy4AG7111ikLnz8RrJKjXJHpEPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 09:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a5:a3:7f:cd:3d:b4:3e:69:36:b0:a4:ba:03:bd:24:47:ee:1d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Validity Not Before: Apr 21 03:37:39 2026 GMT Not After : Apr 24 09:09:39 2026 GMT Subject: CN=EE1D163723BBD913AADB470765A9E9B73E978F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:02:05:d1:bf:16:70:06:b6:10:c0:68:81:a2: 4d:e0:91:c7:17:a8:87:d5:40:00:ad:82:01:b8:30: 4d:fd:10:09:f4:91:b9:aa:c4:bf:aa:e6:f9:80:85: bf:1d:cd:89:86:a5:47:fc:70:2d:b5:d7:4c:83:8c: 9c:ec:0b:89:89:65:d1:3a:3b:15:3f:8d:35:ab:54: b2:2b:4c:2c:54:05:f9:5b:39:c8:d7:6e:ba:4c:59: 4d:18:79:b9:28:90:a0:e9:06:4f:03:7a:4a:9a:7f: 95:b2:fe:0e:0a:97:98:a1:98:7a:eb:48:c1:78:5b: c7:b7:1b:69:26:54:95:23:2b:30:cf:7d:d7:1a:c2: 7c:8c:b3:dd:06:44:ff:02:b9:58:fe:17:ef:5d:e0: 88:7e:94:dd:2b:ce:25:f8:e1:1e:f6:0e:f0:19:80: d4:c8:fb:f4:6c:8d:e8:a9:de:88:89:34:e8:57:bc: 46:f5:3a:19:cc:84:81:66:e7:8c:02:af:77:ea:97: fb:d4:36:d6:5f:46:d9:d5:ff:a4:d3:04:f2:7e:37: 8a:38:f3:ff:1b:d6:a7:79:56:c7:af:5c:e4:69:e2: 14:3c:ab:8c:62:c2:d3:79:eb:05:4b:1d:27:cb:06: 66:36:fe:6a:7b:6e:ef:9d:ac:d3:13:46:2f:8b:e3: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1D:16:37:23:BB:D9:13:AA:DB:47:07:65:A9:E9:B7:3E:97:8F:06 X509v3 Authority Key Identifier: keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:00:94:6d:13:54:fb:b6:7e:2d:55:6b:71:21:79:e0:e2:f6: 1c:1c:12:cf:c5:a3:70:78:8b:a7:76:23:40:d4:9e:ab:82:ce: 65:99:5d:c0:0d:c1:7d:d1:9e:09:64:8d:7d:c2:3e:7c:55:d7: 6b:ed:91:47:73:e8:32:a7:53:61:4f:e2:5c:2a:5e:65:75:85: 6c:bc:25:b1:9f:c7:95:f1:92:f1:eb:ff:12:66:10:ef:10:46: 97:2a:c9:b4:fb:da:55:93:78:1d:cf:17:ee:8e:36:0d:7d:82: d2:74:05:3d:36:54:eb:d8:7d:6e:8c:36:90:67:3c:16:bc:8b: ee:3f:e8:77:da:7f:eb:9d:af:33:b3:b4:13:08:f0:e3:a1:ea: 67:aa:60:04:65:f2:4b:6b:d8:8c:c7:49:db:b4:eb:7f:f0:e4: 72:54:50:b2:36:5d:e2:b9:14:01:4c:5a:84:52:11:c1:c3:2f: 94:1b:53:5a:27:ea:2b:d7:15:bd:b5:bc:04:42:35:2d:d6:d8: 44:d3:88:b2:72:2f:27:08:81:28:3a:36:2f:ae:44:07:f8:4b: 0e:b0:ee:39:3c:69:4f:19:a2:59:61:a1:15:54:47:25:a8:85: f1:af:dd:ff:9b:e9:d5:b1:ce:7e:0c:f3:6c:b2:ce:11:36:6e: be:bf:b9:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKWjf809tD5pNrCkugO9JEfuHV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0Ix N0U4ODg0RDAeFw0yNjA0MjEwMzM3MzlaFw0yNjA0MjQwOTA5MzlaMDMxMTAvBgNV BAMTKEVFMUQxNjM3MjNCQkQ5MTNBQURCNDcwNzY1QTlFOUI3M0U5NzhGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdAgXRvxZwBrYQwGiBok3gkccX qIfVQACtggG4ME39EAn0kbmqxL+q5vmAhb8dzYmGpUf8cC2110yDjJzsC4mJZdE6 OxU/jTWrVLIrTCxUBflbOcjXbrpMWU0YebkokKDpBk8Dekqaf5Wy/g4Kl5ihmHrr SMF4W8e3G2kmVJUjKzDPfdcawnyMs90GRP8CuVj+F+9d4Ih+lN0rziX44R72DvAZ gNTI+/Rsjeip3oiJNOhXvEb1OhnMhIFm54wCr3fql/vUNtZfRtnV/6TTBPJ+N4o4 8/8b1qd5VsevXORp4hQ8q4xiwtN56wVLHSfLBmY2/mp7bu+drNMTRi+L46o3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7h0WNyO72ROq20cHZanptz6XjwYwHwYDVR0j BBgwFoAUVjAtCSVmiHdLhdzTuu6wyxfoiE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjA2ZGVmYS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC81NjMwMkQwOTI1 NjY4ODc3NEI4NURDRDNCQUVFQjBDQjE3RTg4ODRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0IxN0U4 ODg0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIw Q0IxN0U4ODg0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMwAlG0TVPu2fi1Va3EheeDi9hwcEs/Fo3B4 i6d2I0DUnquCzmWZXcANwX3RnglkjX3CPnxV12vtkUdz6DKnU2FP4lwqXmV1hWy8 JbGfx5XxkvHr/xJmEO8QRpcqybT72lWTeB3PF+6ONg19gtJ0BT02VOvYfW6MNpBn PBa8i+4/6Hfaf+udrzOztBMI8OOh6meqYARl8ktr2IzHSdu063/w5HJUULI2XeK5 FAFMWoRSEcHDL5QbU1on6ivXFb21vARCNS3W2ETTiLJyLycIgSg6Ni+uRAf4Sw6w 7jk8aU8ZollhoRVURyWohfGv3f+b6dWxzn4M82yyzhE2br6/uaU= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:04 2026 by rpki-client