$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.mft (raw, json) Hash identifier: HgNN36Cxw+UV7e+hoMyxUGRutVWrcsyNAafIk8sIYNA= Subject key identifier: F2:98:B5:C1:AD:3E:EC:AB:5E:78:12:4E:BF:41:83:4B:50:D6:70:A4 Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 Certificate issuer: /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Certificate serial: 14A59AA8AFA41270E7C412DD8635AF66C4B39E23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft Manifest number: 04C5 Signing time: Thu 21 Aug 2025 16:41:34 +0000 Manifest this update: Thu 21 Aug 2025 16:36:34 +0000 Manifest next update: Mon 25 Aug 2025 01:08:34 +0000 Files and hashes: 1: 1259FE91D21610D4BA487C60C804F66EB6591CA8.crl (hash: j8A7tvVnILuOFlO1g/xyshsYcPuiCDaEXpZafIJhSMs=) 2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: ybooJJfuCLWJ6Wkr2xd+dtjVGbG8gCLcuXzjWzkx1V0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a5:9a:a8:af:a4:12:70:e7:c4:12:dd:86:35:af:66:c4:b3:9e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Validity Not Before: Aug 21 16:36:34 2025 GMT Not After : Aug 25 01:08:34 2025 GMT Subject: CN=F298B5C1AD3EECAB5E78124EBF41834B50D670A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:01:45:ea:09:e4:d6:53:4d:86:77:65:28: f9:8b:1c:46:86:e6:c9:9c:92:18:06:16:be:15:c4: 1a:d1:5e:3d:bf:55:4d:8f:4b:57:9e:d7:b6:42:31: 68:df:62:49:2f:05:2e:9d:e3:bf:be:12:4b:4f:fa: ca:ea:ad:13:68:80:b2:b6:4f:1e:e5:88:f2:fc:b0: 2b:bd:28:e0:12:12:e9:de:07:11:ab:da:14:a0:34: a7:1b:86:12:4c:ba:f2:6a:21:0b:e9:14:35:9e:49: ab:57:d7:33:39:15:46:4b:ca:a7:e9:8b:00:eb:df: 89:11:cd:04:32:50:dd:56:cf:b5:29:1f:6f:30:1b: 49:9e:13:81:e5:8d:12:0e:84:fa:4c:d4:d8:bf:2c: c2:f7:61:8b:e0:f6:dc:00:36:d6:b4:43:bb:e4:fe: f2:da:6b:5d:d1:b8:ae:d0:f7:d1:f4:9a:65:6b:79: 25:dd:3e:8c:4e:e5:0e:26:cd:25:79:83:49:17:41: ac:ce:69:5a:a8:85:18:f5:d3:8a:1c:44:37:d5:0a: fe:0e:a3:65:3e:21:1c:01:dc:44:a8:d0:e1:aa:3a: 00:60:4a:ce:9f:5e:55:be:83:70:a3:9b:bd:eb:53: ba:74:9f:fc:40:a4:83:a2:38:52:e4:6f:a9:97:a6: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:98:B5:C1:AD:3E:EC:AB:5E:78:12:4E:BF:41:83:4B:50:D6:70:A4 X509v3 Authority Key Identifier: keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:47:92:c0:74:19:fb:38:63:af:e7:56:77:0d:21:13:01:85: 4b:03:68:d4:de:d2:3f:ba:9d:03:6d:fc:ee:bb:f3:0a:08:d7: fa:81:50:48:00:06:30:b6:3d:f1:34:ca:6b:60:55:f8:ef:93: 6a:89:1f:fe:e3:54:33:e8:ba:72:98:3a:ba:b8:b0:0b:a9:39: c2:52:03:45:ff:00:cc:76:49:96:bb:b2:45:f2:02:8f:4d:30: 00:c3:50:f1:e0:b6:b2:85:5f:38:fb:02:74:04:62:32:4f:ff: e0:28:cd:6c:6f:47:aa:a0:d7:74:9e:c9:6f:ee:0f:5e:53:df: ff:2a:c7:c6:09:ab:02:16:88:ed:01:2c:3c:bf:79:2f:3f:e4: 6c:08:fb:2f:37:f0:75:b4:cf:7d:ae:38:26:d3:c2:58:16:91: 58:d2:6a:ec:82:a2:27:8f:68:41:2a:cf:d9:2c:ad:08:bc:48: 72:80:20:65:87:11:66:e2:73:c7:88:4d:ff:e8:a3:16:44:36: 6f:23:9e:50:bc:d3:8d:40:96:99:0f:eb:d5:cd:76:fc:14:8b: 03:73:70:71:21:5c:f7:f4:43:8b:13:12:18:49:3c:58:84:8f: 56:4f:99:36:72:77:54:40:a2:20:ed:8f:fd:99:c1:84:6d:de: 8b:1f:25:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKWaqK+kEnDnxBLdhjWvZsSzniMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVC NjU5MUNBODAeFw0yNTA4MjExNjM2MzRaFw0yNTA4MjUwMTA4MzRaMDMxMTAvBgNV BAMTKEYyOThCNUMxQUQzRUVDQUI1RTc4MTI0RUJGNDE4MzRCNTBENjcwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hAFF6gnk1lNNhndlKPmLHEaG 5smckhgGFr4VxBrRXj2/VU2PS1ee17ZCMWjfYkkvBS6d47++EktP+srqrRNogLK2 Tx7liPL8sCu9KOASEuneBxGr2hSgNKcbhhJMuvJqIQvpFDWeSatX1zM5FUZLyqfp iwDr34kRzQQyUN1Wz7UpH28wG0meE4HljRIOhPpM1Ni/LML3YYvg9twANta0Q7vk /vLaa13RuK7Q99H0mmVreSXdPoxO5Q4mzSV5g0kXQazOaVqohRj104ocRDfVCv4O o2U+IRwB3ESo0OGqOgBgSs6fXlW+g3Cjm73rU7p0n/xApIOiOFLkb6mXpqCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8pi1wa0+7KteeBJOv0GDS1DWcKQwHwYDVR0j BBgwFoAUEln+kdIWENS6SHxgyAT2brZZHKgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzkwOTczNy0xNTY0LTQ2Y2EtOTAwOS04ZDI4YTU2ZTk4ZWUvMC8xMjU5RkU5MUQy MTYxMEQ0QkE0ODdDNjBDODA0RjY2RUI2NTkxQ0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVCNjU5 MUNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2 NkVCNjU5MUNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1HksB0Gfs4Y6/nVncNIRMBhUsDaNTe0j+6 nQNt/O678woI1/qBUEgABjC2PfE0ymtgVfjvk2qJH/7jVDPounKYOrq4sAupOcJS A0X/AMx2SZa7skXyAo9NMADDUPHgtrKFXzj7AnQEYjJP/+AozWxvR6qg13SeyW/u D15T3/8qx8YJqwIWiO0BLDy/eS8/5GwI+y838HW0z32uOCbTwlgWkVjSauyCoieP aEEqz9ksrQi8SHKAIGWHEWbic8eITf/ooxZENm8jnlC8041AlpkP69XNdvwUiwNz cHEhXPf0Q4sTEhhJPFiEj1ZPmTZyd1RAoiDtj/2ZwYRt3osfJUg= -----END CERTIFICATE-----Generated at Sat Aug 23 10:25:32 2025 by rpki-client