$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft File: 1FA59BCEE428AFC03264229113A5539024697A14.mft (raw, json) Hash identifier: mSCXDUj6ChE1CcD/8pEeOQE033sd0eJjLderNMIQHr4= Subject key identifier: 88:D8:53:BD:EF:67:FD:6A:EC:63:2C:7B:97:BA:35:7C:A0:95:C4:79 Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 Certificate issuer: /CN=1FA59BCEE428AFC03264229113A5539024697A14 Certificate serial: 198BC5400C77A0A0F7E6D62350357427E7A43FA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft Manifest number: 04FE Signing time: Fri 22 Aug 2025 11:00:05 +0000 Manifest this update: Fri 22 Aug 2025 10:55:05 +0000 Manifest next update: Mon 25 Aug 2025 16:14:05 +0000 Files and hashes: 1: 1FA59BCEE428AFC03264229113A5539024697A14.crl (hash: sSEgfzy4cy9mVekjKf2796rSIvprEYoR4EaWQTg3C7k=) 2: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: pJwvm882Mg2XhUmsTwO4kQV+vaRmkryt9jvtdZPqIks=) 3: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: nRE7xahMjMVa2flPv3xh8lSxkHzcuvl44NR7lfyUvFs=) 4: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: GvgldOQCXz+vUN0l5dc2pbWfnQQKd7ihZyYtPpd8mRM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8b:c5:40:0c:77:a0:a0:f7:e6:d6:23:50:35:74:27:e7:a4:3f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14 Validity Not Before: Aug 22 10:55:05 2025 GMT Not After : Aug 25 16:14:05 2025 GMT Subject: CN=88D853BDEF67FD6AEC632C7B97BA357CA095C479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:2d:5f:3d:6c:0c:60:a8:1c:48:f1:fd:a4: 1a:55:57:fd:58:1c:ab:54:fa:b4:fd:64:39:3e:11: 12:17:c5:f9:48:72:6c:50:89:89:aa:71:f8:26:bc: 61:bf:85:a7:23:e1:e3:c3:49:fe:24:9b:bf:fd:7a: 59:57:98:1f:c3:d5:8a:59:7e:e4:47:f2:50:29:74: e1:84:ae:b9:32:0b:de:d2:d4:46:91:c1:82:5d:2c: 1a:76:bc:9a:cd:de:53:a9:58:b9:57:05:62:23:61: 02:83:ca:94:88:ad:9e:dd:55:65:ba:1e:a7:34:bf: 01:23:69:41:0c:ef:7c:39:e7:44:61:d7:28:48:6c: ed:20:4e:2a:e2:eb:b4:d9:ee:2e:85:63:5a:d8:49: 39:a9:3b:a3:8e:c0:86:4a:cb:ce:b4:fa:0f:9c:4c: 51:aa:fb:ba:c5:be:8c:b1:c9:d7:bd:ba:4e:6d:3a: 3f:3a:88:a1:53:8a:3e:14:7c:70:dc:4a:8b:ed:c5: af:f0:fd:01:df:e3:89:6c:b7:76:5c:06:89:db:53: 7c:16:77:80:58:e9:c5:e2:93:e5:92:09:4f:40:22: 51:5d:47:98:fd:bd:c5:db:c5:f8:bf:e4:19:f6:34: 8c:ee:fe:41:09:7b:79:1a:f8:d9:f7:96:29:b6:11: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D8:53:BD:EF:67:FD:6A:EC:63:2C:7B:97:BA:35:7C:A0:95:C4:79 X509v3 Authority Key Identifier: keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5a:1c:c1:4b:73:f1:b5:66:48:81:42:db:33:f3:b0:8d:0e: c9:78:40:17:f9:21:5a:06:6b:7f:bf:5b:29:08:7f:9e:3c:b4: a8:af:fe:cb:50:32:6e:63:53:51:83:9f:96:a2:ba:84:75:10: 28:f9:51:bc:3f:d7:cc:af:74:92:ec:ca:11:2c:8c:10:09:df: 35:62:37:ce:8a:5c:dc:7a:24:fb:7b:93:fc:9f:1d:10:89:a6: 17:39:aa:f3:ad:c0:32:f2:3c:ef:93:1b:45:97:a8:c4:0d:f8: 35:d0:08:7e:78:25:e8:e6:cd:ab:54:7a:05:3b:0b:80:bc:17: 1e:35:12:10:b5:fe:31:ed:0b:2c:32:bd:e3:da:55:91:5b:0c: 46:7c:c2:22:bc:95:0e:94:56:72:58:db:06:1a:cd:04:d3:e9: 13:db:2b:20:ac:f5:dc:79:f0:1b:aa:04:8a:9c:01:41:a3:56: 44:11:58:27:9d:42:05:99:24:53:f2:b1:43:2b:55:0f:69:b9: 5f:92:78:86:34:89:43:5f:97:ef:55:c7:85:bc:71:00:31:f0: a3:76:b3:18:06:77:9a:98:77:e4:32:8b:4f:48:9e:0b:d1:d3: 55:4e:2e:c3:ed:e5:d8:73:ce:ab:c0:d8:5d:9e:ed:0f:3e:3d: 31:31:8d:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYvFQAx3oKD35tYjUDV0J+ekP6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAy NDY5N0ExNDAeFw0yNTA4MjIxMDU1MDVaFw0yNTA4MjUxNjE0MDVaMDMxMTAvBgNV BAMTKDg4RDg1M0JERUY2N0ZENkFFQzYzMkM3Qjk3QkEzNTdDQTA5NUM0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkS1fPWwMYKgcSPH9pBpVV/1Y HKtU+rT9ZDk+ERIXxflIcmxQiYmqcfgmvGG/hacj4ePDSf4km7/9ellXmB/D1YpZ fuRH8lApdOGErrkyC97S1EaRwYJdLBp2vJrN3lOpWLlXBWIjYQKDypSIrZ7dVWW6 Hqc0vwEjaUEM73w550Rh1yhIbO0gTiri67TZ7i6FY1rYSTmpO6OOwIZKy860+g+c TFGq+7rFvoyxyde9uk5tOj86iKFTij4UfHDcSovtxa/w/QHf44lst3ZcBonbU3wW d4BY6cXik+WSCU9AIlFdR5j9vcXbxfi/5Bn2NIzu/kEJe3ka+Nn3lim2EQiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNhTve9n/WrsYyx7l7o1fKCVxHkwHwYDVR0j BBgwFoAUH6WbzuQor8AyZCKRE6VTkCRpehQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDQ0MjA0My0yNDRlLTRiODctYjAwYy1lNTdmNDg3MWQwZWYvMC8xRkE1OUJDRUU0 MjhBRkMwMzI2NDIyOTExM0E1NTM5MDI0Njk3QTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAyNDY5 N0ExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUz OTAyNDY5N0ExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItaHMFLc/G1ZkiBQtsz87CNDsl4QBf5IVoG a3+/WykIf548tKiv/stQMm5jU1GDn5aiuoR1ECj5Ubw/18yvdJLsyhEsjBAJ3zVi N86KXNx6JPt7k/yfHRCJphc5qvOtwDLyPO+TG0WXqMQN+DXQCH54JejmzatUegU7 C4C8Fx41EhC1/jHtCywyvePaVZFbDEZ8wiK8lQ6UVnJY2wYazQTT6RPbKyCs9dx5 8BuqBIqcAUGjVkQRWCedQgWZJFPysUMrVQ9puV+SeIY0iUNfl+9Vx4W8cQAx8KN2 sxgGd5qYd+Qyi09IngvR01VOLsPt5dhzzqvA2F2e7Q8+PTExjR4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:14 2025 by rpki-client