$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: dJD9VT6sTBDy8xhrf0NQ4R9Qt53AXZMezlxf2AcqG64= Subject key identifier: 69:62:60:15:45:DF:FA:11:57:18:1A:E6:84:6E:48:1B:B7:16:19:12 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 7B24F425B3AEE5BF1434D2BF60F6E35FFA1A39F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 0518 Signing time: Mon 20 Oct 2025 09:51:02 +0000 Manifest this update: Mon 20 Oct 2025 09:46:02 +0000 Manifest next update: Thu 23 Oct 2025 14:36:02 +0000 Files and hashes: 1: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: 1EZSjvRP2SRnr2FbtmEkuDAZWdhz/ERYDxYK2+TR5jA=) 2: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: G0VeuaYXS/KgF8/ez14lbGq6IneUYgvcmaO4bAZiGEU=) 3: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: TKWrKPkJJOU7Zhu7ouEzoo84HNrm24EmO/PpgFTvTUE=) 4: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: zYQUx+ql30PPLkUcmDWdEwPKMJFZU5b5VUJfAZqzXL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:24:f4:25:b3:ae:e5:bf:14:34:d2:bf:60:f6:e3:5f:fa:1a:39:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Oct 20 09:46:02 2025 GMT Not After : Oct 23 14:36:02 2025 GMT Subject: CN=6962601545DFFA1157181AE6846E481BB7161912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:0e:12:74:1b:b9:8b:aa:e2:ac:b0:4c:d4: b9:0d:42:af:d7:23:29:97:78:bc:3e:5d:87:4d:c1: b1:3e:e3:ca:44:6f:dd:a1:37:6c:4c:4a:f4:23:1c: 92:60:17:07:68:6a:ca:58:ec:80:67:bd:18:52:dd: 5a:74:98:0e:3c:73:fb:a4:33:89:ad:a0:c1:53:52: 4f:ee:45:08:3f:e1:a3:b8:0c:3d:80:b6:63:1d:e7: 3f:a9:ec:de:69:55:4a:87:fd:77:7e:a1:7d:2a:8b: 32:43:60:74:44:44:a6:0b:c0:85:2f:ea:8b:aa:9b: 7b:25:c4:16:88:66:38:6c:e7:f8:fc:38:46:b7:92: 15:16:ee:84:aa:11:90:be:59:6a:4d:d5:9e:cc:28: b7:e4:36:1b:1e:31:ec:4e:c2:f2:fb:23:28:da:96: 99:01:31:2e:66:e3:b7:a4:53:f5:76:d9:32:16:b6: a4:4f:eb:95:f6:88:be:a7:8a:65:96:89:ad:34:37: 90:92:16:e7:ab:c2:cc:ad:db:26:9c:50:20:bc:19: 41:d9:38:1f:88:06:59:37:ec:df:4a:11:e0:77:6c: ca:97:42:7c:36:1d:ed:19:15:5e:21:18:3a:09:9a: e2:e2:f1:14:0d:d3:91:04:9b:35:2f:03:86:03:c1: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:62:60:15:45:DF:FA:11:57:18:1A:E6:84:6E:48:1B:B7:16:19:12 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:4e:7d:01:fd:1d:79:3b:50:d2:f7:a3:1a:52:b6:a2:38:fa: 92:3a:a3:1f:b7:b1:31:fb:2c:ec:4f:ec:42:f2:f6:f8:d8:3e: 80:61:9a:4b:16:0a:75:4f:09:c3:fc:d3:9f:49:da:24:b8:07: 5b:9f:0a:c7:da:3c:8d:93:c3:61:4a:f1:e5:f6:b1:b6:0e:94: 7c:c0:40:6a:c8:f9:f9:ca:30:6f:6f:23:bc:de:af:f4:ba:d9: fb:dd:f7:a9:25:d8:c6:6f:48:6f:58:92:0b:03:89:07:7c:26: df:6e:5b:a9:96:42:37:8b:99:ba:41:3a:70:e9:40:7a:b6:ba: a6:7f:76:3d:b5:b9:16:83:94:30:35:56:4f:3a:a4:f4:04:40: 2a:1a:ab:01:5e:5b:c4:18:93:db:34:79:03:c7:8e:0c:81:ad: 25:fc:9a:c3:b8:78:d9:d9:ec:c9:f6:83:6a:69:2f:8e:56:f9: ca:b1:34:de:d6:20:f8:0e:5c:b4:43:f0:5d:79:ef:75:93:35: 6e:b8:bf:bc:70:81:7a:e6:ad:50:67:c0:b6:e8:7f:e3:9f:77: 5e:9f:31:2b:04:bc:2d:f8:e8:71:8a:3b:7d:dd:c6:d3:fd:36: 2d:52:19:a6:1d:f1:d3:49:c8:9c:23:fc:28:2d:bd:df:1b:36: 72:8d:f7:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeyT0JbOu5b8UNNK/YPbjX/oaOfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNTEwMjAwOTQ2MDJaFw0yNTEwMjMxNDM2MDJaMDMxMTAvBgNV BAMTKDY5NjI2MDE1NDVERkZBMTE1NzE4MUFFNjg0NkU0ODFCQjcxNjE5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkg4SdBu5i6rirLBM1LkNQq/X IymXeLw+XYdNwbE+48pEb92hN2xMSvQjHJJgFwdoaspY7IBnvRhS3Vp0mA48c/uk M4mtoMFTUk/uRQg/4aO4DD2AtmMd5z+p7N5pVUqH/Xd+oX0qizJDYHRERKYLwIUv 6ouqm3slxBaIZjhs5/j8OEa3khUW7oSqEZC+WWpN1Z7MKLfkNhseMexOwvL7Iyja lpkBMS5m47ekU/V22TIWtqRP65X2iL6nimWWia00N5CSFuerwsyt2yacUCC8GUHZ OB+IBlk37N9KEeB3bMqXQnw2He0ZFV4hGDoJmuLi8RQN05EEmzUvA4YDwbJRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaWJgFUXf+hFXGBrmhG5IG7cWGRIwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANROfQH9HXk7UNL3oxpStqI4+pI6ox+3sTH7 LOxP7ELy9vjYPoBhmksWCnVPCcP8059J2iS4B1ufCsfaPI2Tw2FK8eX2sbYOlHzA QGrI+fnKMG9vI7zer/S62fvd96kl2MZvSG9YkgsDiQd8Jt9uW6mWQjeLmbpBOnDp QHq2uqZ/dj21uRaDlDA1Vk86pPQEQCoaqwFeW8QYk9s0eQPHjgyBrSX8msO4eNnZ 7Mn2g2ppL45W+cqxNN7WIPgOXLRD8F1573WTNW64v7xwgXrmrVBnwLbof+Ofd16f MSsEvC346HGKO33dxtP9Ni1SGaYd8dNJyJwj/Cgtvd8bNnKN96I= -----END CERTIFICATE-----Generated at Mon Oct 20 11:15:03 2025 by rpki-client