$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: vljHPLUxjxSmkZYcuuPAXHrPN3WGLuNW2TS/Opdm9RU= Subject key identifier: 4E:01:80:E1:24:9C:86:A2:EA:6C:98:41:68:95:76:70:3D:F6:0A:65 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 3E09AECC84C90EDB7582BEDD52179C7EDB41F9D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 04CE Signing time: Thu 08 May 2025 16:51:00 +0000 Manifest this update: Thu 08 May 2025 16:46:00 +0000 Manifest next update: Mon 12 May 2025 01:36:00 +0000 Files and hashes: 1: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: qPS8xKAd+OEoPiw823JeNuFRgtnbcr/zsGdhoHxrFbI=) 2: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: SMYYurY0SEO2jZThWJbzWbXaP4HTkeYhENGpVK8uUQA=) 3: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: x48RZie0/oYbGzj1kIT+aUkxT6LfFYhJDQ9pQpC6TKQ=) 4: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: MUfVq8flNGOivhnl4jjR14qjwu6GNOjMW+mPbMeDTjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 01:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:09:ae:cc:84:c9:0e:db:75:82:be:dd:52:17:9c:7e:db:41:f9:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: May 8 16:46:00 2025 GMT Not After : May 12 01:36:00 2025 GMT Subject: CN=4E0180E1249C86A2EA6C9841689576703DF60A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ae:5c:99:92:9a:66:0b:0c:30:b1:1c:9b:ee: d8:3e:af:1a:4b:59:b2:5d:1b:ee:93:e3:f8:0e:5a: 70:69:6e:ff:26:4d:ea:73:c5:8d:75:c3:88:43:f9: e3:b8:f5:c7:6d:a4:9e:78:e8:34:14:10:fb:5f:fd: 23:bc:fd:c2:c1:8a:68:57:21:a8:4f:46:d9:09:63: 85:59:75:dc:44:d0:13:39:39:6e:bd:5d:fd:d1:c5: 55:15:a6:8d:23:b3:f9:20:6b:ae:51:50:20:8b:86: e1:91:3f:8a:73:f6:9f:fe:5b:81:87:16:17:9e:b9: a2:53:e3:3d:8e:25:25:a0:e6:f2:10:66:fd:85:6d: 47:92:27:52:03:30:96:23:a1:13:eb:50:fd:fb:29: 0e:1e:f4:29:54:58:d6:b5:73:a4:c3:72:b8:fa:ac: 8b:11:a5:26:f7:47:f4:90:ca:ff:15:61:f6:97:b3: f8:c3:ca:9d:b3:05:18:8c:c6:49:bf:08:b5:a6:d8: 65:ef:f6:c2:d3:38:58:75:7f:7c:df:d3:87:27:73: b6:50:d4:3d:2e:fa:14:12:f0:2a:f9:94:30:92:4e: c1:dd:7d:63:7e:ab:94:a9:8c:c8:37:af:79:45:f4: 31:72:4c:b4:9c:dd:37:55:13:5d:a0:3b:91:b2:51: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:01:80:E1:24:9C:86:A2:EA:6C:98:41:68:95:76:70:3D:F6:0A:65 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:bc:ce:e8:0a:f6:5a:4c:be:d5:ec:bf:47:e3:f6:92:96:2c: e4:fd:b1:39:fd:9b:36:37:f3:75:6b:17:a7:f6:a7:59:cc:48: cb:74:dd:09:d0:f3:3f:2b:45:57:7f:0e:ce:be:32:bb:1c:86: d9:7e:b5:2c:f3:f2:0e:be:db:82:b3:e8:78:da:56:d6:9d:6b: 0e:1c:76:0b:24:21:af:38:90:59:6f:52:25:f2:c8:6a:da:5d: 0c:73:e2:5c:91:59:58:0a:0d:f6:46:df:4a:44:ed:39:32:19: b9:8a:c3:f3:99:1f:e8:3f:08:53:5d:ba:14:a3:de:59:6a:ae: 40:7b:84:d7:74:84:83:cd:b6:bc:ea:26:80:97:08:91:20:26: d8:47:7a:20:d9:e9:f8:20:b7:93:57:98:9d:67:35:28:af:40: 2d:d0:71:ce:45:38:f3:fe:71:0b:65:de:f5:b3:c1:90:55:f9: 65:59:e9:25:eb:8a:85:4f:3a:45:bc:5a:ae:cf:de:01:70:38: 26:11:9c:a8:15:e9:8a:91:94:b5:14:ce:67:b6:e7:c6:7e:44: ff:44:9a:9f:cb:d4:90:ac:89:6f:09:69:d2:6d:e7:4c:a9:4b: 59:e0:8d:60:aa:d2:61:5a:f5:05:8f:23:e8:40:2b:2c:96:83: 49:45:b4:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgmuzITJDtt1gr7dUhecfttB+dkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNTA1MDgxNjQ2MDBaFw0yNTA1MTIwMTM2MDBaMDMxMTAvBgNV BAMTKDRFMDE4MEUxMjQ5Qzg2QTJFQTZDOTg0MTY4OTU3NjcwM0RGNjBBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfrlyZkppmCwwwsRyb7tg+rxpL WbJdG+6T4/gOWnBpbv8mTepzxY11w4hD+eO49cdtpJ546DQUEPtf/SO8/cLBimhX IahPRtkJY4VZddxE0BM5OW69Xf3RxVUVpo0js/kga65RUCCLhuGRP4pz9p/+W4GH FheeuaJT4z2OJSWg5vIQZv2FbUeSJ1IDMJYjoRPrUP37KQ4e9ClUWNa1c6TDcrj6 rIsRpSb3R/SQyv8VYfaXs/jDyp2zBRiMxkm/CLWm2GXv9sLTOFh1f3zf04cnc7ZQ 1D0u+hQS8Cr5lDCSTsHdfWN+q5SpjMg3r3lF9DFyTLSc3TdVE12gO5GyUSdLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgGA4SSchqLqbJhBaJV2cD32CmUwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALW8zugK9lpMvtXsv0fj9pKWLOT9sTn9mzY3 83VrF6f2p1nMSMt03QnQ8z8rRVd/Ds6+Mrschtl+tSzz8g6+24Kz6HjaVtadaw4c dgskIa84kFlvUiXyyGraXQxz4lyRWVgKDfZG30pE7TkyGbmKw/OZH+g/CFNduhSj 3llqrkB7hNd0hIPNtrzqJoCXCJEgJthHeiDZ6fggt5NXmJ1nNSivQC3Qcc5FOPP+ cQtl3vWzwZBV+WVZ6SXrioVPOkW8Wq7P3gFwOCYRnKgV6YqRlLUUzme258Z+RP9E mp/L1JCsiW8JadJt50ypS1ngjWCq0mFa9QWPI+hAKyyWg0lFtAg= -----END CERTIFICATE-----Generated at Sat May 10 16:43:23 2025 by rpki-client