$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: zjfnd58b86i2FyA/q+YQ+wv3y8FCwspgGTWGF6P6EH8= Subject key identifier: A8:A6:5F:9C:23:59:26:D5:5F:A3:D5:9B:46:F1:32:C9:CC:FC:0E:C4 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 79ED6299C4576A7E1EF290C4AD3B007B1ED52DFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 04E6 Signing time: Mon 30 Jun 2025 13:41:00 +0000 Manifest this update: Mon 30 Jun 2025 13:36:00 +0000 Manifest next update: Thu 03 Jul 2025 19:11:00 +0000 Files and hashes: 1: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: G0VeuaYXS/KgF8/ez14lbGq6IneUYgvcmaO4bAZiGEU=) 2: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: ZsxuBQnoy4ZDQmcsd79iUmbpnFTKsmoT7lht0vL0Wvs=) 3: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: 1EZSjvRP2SRnr2FbtmEkuDAZWdhz/ERYDxYK2+TR5jA=) 4: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: zYQUx+ql30PPLkUcmDWdEwPKMJFZU5b5VUJfAZqzXL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 18:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ed:62:99:c4:57:6a:7e:1e:f2:90:c4:ad:3b:00:7b:1e:d5:2d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Jun 30 13:36:00 2025 GMT Not After : Jul 3 19:11:00 2025 GMT Subject: CN=A8A65F9C235926D55FA3D59B46F132C9CCFC0EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:e4:a3:5a:48:a3:5f:ff:15:d8:83:bb:f8: 45:4f:e0:85:14:d8:0d:7a:31:5d:e1:a3:43:bf:74: 46:68:a4:ad:a4:2b:6c:3b:67:f1:3b:47:4f:1b:8e: bf:1a:4e:28:3f:34:fa:16:74:a2:c2:7d:e4:4d:f2: 63:d5:17:db:e2:9a:9d:e5:ce:35:2a:cc:80:b0:6e: f4:a9:ee:af:93:01:d4:5e:3f:1c:b1:17:b4:67:8b: c0:4d:53:41:14:a6:b2:61:f5:df:76:55:9f:1e:cb: 7c:66:2c:85:ac:3b:b4:9f:a0:b6:a0:b7:f4:39:49: 8c:35:2c:72:a1:c0:49:10:b1:5a:41:5b:67:d6:03: 9b:a5:fd:2d:df:70:74:d3:c8:8d:d5:04:b2:aa:cb: ad:f4:af:3d:d6:c4:ec:12:32:19:0a:fd:65:a1:8b: 79:e6:7c:53:64:aa:42:24:55:ae:bb:9d:49:50:c5: de:31:35:80:0b:1c:12:da:63:a4:94:b5:97:9d:d5: 13:ff:bf:ae:ca:df:d2:46:19:d1:bd:cd:80:d6:52: e4:0d:ea:96:a9:74:a3:66:41:b5:fe:78:72:24:83: 61:bd:2d:91:3e:42:59:e8:4d:7a:ba:06:bc:99:ca: 1e:ee:c3:9f:09:40:7b:63:3a:e7:03:30:5f:0a:ad: 91:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A6:5F:9C:23:59:26:D5:5F:A3:D5:9B:46:F1:32:C9:CC:FC:0E:C4 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d7:a2:75:b9:46:ed:f8:26:2d:20:bd:60:43:da:23:54:51: c9:37:5c:10:74:58:d5:72:68:e1:b9:f9:0d:d4:ec:0a:9b:bb: 1f:4c:3f:f4:cf:f0:8a:44:c0:0d:33:f7:ca:29:63:3b:9c:c7: 4d:63:e3:ac:51:b7:9c:06:ae:cc:3c:82:cf:50:95:bb:b0:0c: 26:32:fb:8b:0a:f9:da:d2:b4:40:c3:3e:6a:bf:5b:8b:ab:8f: ca:d6:63:47:5e:9c:4f:c6:d9:de:9b:45:c1:85:30:16:75:26: c7:c9:58:d6:ef:a1:69:7f:29:3a:4b:f4:c7:c6:39:1d:16:4a: 1b:08:77:75:a0:e9:63:0d:aa:5c:26:d1:c6:53:89:51:77:29: 54:3d:da:33:8b:2c:21:3a:0b:a9:5a:61:72:da:9c:9b:29:70: 7a:1c:ea:98:9a:b0:47:8d:90:c3:02:fe:fa:96:12:dd:fc:e9: 05:03:67:3c:a2:fe:fd:b4:38:52:98:71:de:0e:5d:dc:c4:8c: c0:f6:77:8d:65:43:c3:25:d5:10:38:61:c3:65:c9:c2:f0:78: 0b:60:04:de:04:cb:c2:d6:9c:d9:af:95:72:6c:13:30:e7:58: 5e:70:b3:2b:5a:56:bd:b4:60:cc:68:0a:38:b0:94:4a:2e:f2: e1:d1:46:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUee1imcRXan4e8pDErTsAex7VLfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNTA2MzAxMzM2MDBaFw0yNTA3MDMxOTExMDBaMDMxMTAvBgNV BAMTKEE4QTY1RjlDMjM1OTI2RDU1RkEzRDU5QjQ2RjEzMkM5Q0NGQzBFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAuSjWkijX/8V2IO7+EVP4IUU 2A16MV3ho0O/dEZopK2kK2w7Z/E7R08bjr8aTig/NPoWdKLCfeRN8mPVF9vimp3l zjUqzICwbvSp7q+TAdRePxyxF7Rni8BNU0EUprJh9d92VZ8ey3xmLIWsO7SfoLag t/Q5SYw1LHKhwEkQsVpBW2fWA5ul/S3fcHTTyI3VBLKqy630rz3WxOwSMhkK/WWh i3nmfFNkqkIkVa67nUlQxd4xNYALHBLaY6SUtZed1RP/v67K39JGGdG9zYDWUuQN 6papdKNmQbX+eHIkg2G9LZE+QlnoTXq6BryZyh7uw58JQHtjOucDMF8KrZHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqKZfnCNZJtVfo9WbRvEyycz8DsQwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDXonW5Ru34Ji0gvWBD2iNUUck3XBB0WNVy aOG5+Q3U7Aqbux9MP/TP8IpEwA0z98opYzucx01j46xRt5wGrsw8gs9QlbuwDCYy +4sK+drStEDDPmq/W4urj8rWY0denE/G2d6bRcGFMBZ1JsfJWNbvoWl/KTpL9MfG OR0WShsId3Wg6WMNqlwm0cZTiVF3KVQ92jOLLCE6C6laYXLanJspcHoc6piasEeN kMMC/vqWEt386QUDZzyi/v20OFKYcd4OXdzEjMD2d41lQ8Ml1RA4YcNlycLweAtg BN4Ey8LWnNmvlXJsEzDnWF5wsytaVr20YMxoCjiwlEou8uHRRmU= -----END CERTIFICATE-----Generated at Mon Jun 30 18:38:24 2025 by rpki-client