$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft File: 1FA59BCEE428AFC03264229113A5539024697A14.mft (raw, json) Hash identifier: nfVUgq8dO9SAnZdxCV0ELMJGHpDZqBWKxYqzmI1dgFo= Subject key identifier: E8:5B:E4:2F:F4:A9:81:A6:73:AE:86:23:D7:1E:C9:A3:BF:2B:35:E6 Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 Certificate issuer: /CN=1FA59BCEE428AFC03264229113A5539024697A14 Certificate serial: 0EA334B1BB84639ED5374CC1D4BF8178065BB0DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft Manifest number: 04E6 Signing time: Sun 29 Jun 2025 11:50:05 +0000 Manifest this update: Sun 29 Jun 2025 11:45:05 +0000 Manifest next update: Wed 02 Jul 2025 16:31:05 +0000 Files and hashes: 1: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: pJwvm882Mg2XhUmsTwO4kQV+vaRmkryt9jvtdZPqIks=) 2: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: nRE7xahMjMVa2flPv3xh8lSxkHzcuvl44NR7lfyUvFs=) 3: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: GvgldOQCXz+vUN0l5dc2pbWfnQQKd7ihZyYtPpd8mRM=) 4: 1FA59BCEE428AFC03264229113A5539024697A14.crl (hash: EUBiAUcihTSpLS86NTP7T60+nY0ZZ5wf+RYpZ8muZL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 16:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a3:34:b1:bb:84:63:9e:d5:37:4c:c1:d4:bf:81:78:06:5b:b0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14 Validity Not Before: Jun 29 11:45:05 2025 GMT Not After : Jul 2 16:31:05 2025 GMT Subject: CN=E85BE42FF4A981A673AE8623D71EC9A3BF2B35E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:6c:50:57:19:73:f2:7e:86:35:ab:16:da: fa:6d:38:2d:78:a9:ef:4d:8a:53:28:e6:21:5f:0a: 82:dc:67:b3:fa:3a:c5:d3:cb:8b:f1:5a:9a:17:ed: 0e:ce:87:58:5a:99:dc:33:c0:c7:f2:5e:19:56:77: 03:23:ea:61:10:5e:d9:07:a4:14:2d:81:0c:29:60: 67:bf:37:06:44:b0:18:91:9a:42:15:f7:e0:59:bc: 68:64:ef:b9:5e:7e:0e:d7:31:25:35:3e:59:9f:fd: 8c:15:78:9c:5c:5b:83:56:1c:94:3c:4f:5e:44:4e: 07:6c:4a:cb:b7:6d:3c:6d:2f:bd:48:a8:aa:57:af: 9e:29:d6:3b:7a:63:b2:cb:16:0f:7b:7f:94:cc:c7: 6c:c5:38:c3:7e:e0:cf:96:62:a9:30:72:51:31:6b: 08:36:b5:3e:53:d6:0a:10:c7:2d:28:59:ed:ca:8d: 38:42:30:d6:fe:c5:98:8e:34:8f:ba:2d:a8:93:c7: 8c:85:c9:b9:81:bc:0a:01:01:d6:7a:db:4e:d4:0c: f1:99:24:3f:ca:bf:d7:e3:12:45:4c:3d:4b:e2:9f: ca:7e:60:40:0b:66:d9:50:b3:3f:c0:2f:87:0e:17: c4:29:ad:13:a6:1f:6c:47:6c:9c:d7:2b:e5:ee:e5: 5c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5B:E4:2F:F4:A9:81:A6:73:AE:86:23:D7:1E:C9:A3:BF:2B:35:E6 X509v3 Authority Key Identifier: keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f4:5e:92:88:d2:1c:13:d1:62:53:d0:eb:96:5d:0f:82:2a: 21:03:7a:1e:80:13:83:83:2f:66:48:c3:e5:41:0b:5a:20:bd: 15:80:73:8a:03:4a:c7:f3:02:c5:ae:3c:2b:7a:c3:d0:f4:66: 41:ab:a6:9d:e4:6c:03:2f:51:f5:61:51:42:83:a1:84:95:bf: 96:f9:3e:7e:05:a4:28:b8:d9:16:ef:29:d3:55:a4:1b:ad:03: 89:8a:d1:f6:6d:89:9e:6d:dd:d1:24:77:9d:e5:fc:29:fb:cb: 9d:e5:d8:fa:0d:59:12:c0:e8:28:70:68:7b:e3:ff:74:01:a4: 51:65:bf:d8:8d:38:c6:ac:c8:72:15:da:1b:b5:6b:7e:97:12: 55:4e:0b:0e:ec:d3:57:27:7c:05:2b:5e:e2:dd:0c:82:da:3c: 01:4f:05:e4:25:c4:6a:d5:44:ec:41:c8:6f:1c:56:1b:46:20: 37:15:ec:a7:ce:60:e7:66:23:9b:de:6f:52:25:04:ff:af:b0: dd:26:e5:f4:6c:4f:1c:b6:4c:cc:0c:10:b0:19:dc:2a:bf:ec: c9:31:6e:6e:56:06:01:02:fb:a8:18:8c:91:af:8a:57:62:6a: 22:ed:ac:a0:01:55:54:d6:a1:41:41:24:cf:2d:b3:4f:02:69: 97:39:6e:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDqM0sbuEY57VN0zB1L+BeAZbsN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAy NDY5N0ExNDAeFw0yNTA2MjkxMTQ1MDVaFw0yNTA3MDIxNjMxMDVaMDMxMTAvBgNV BAMTKEU4NUJFNDJGRjRBOTgxQTY3M0FFODYyM0Q3MUVDOUEzQkYyQjM1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Z2xQVxlz8n6GNasW2vptOC14 qe9NilMo5iFfCoLcZ7P6OsXTy4vxWpoX7Q7Oh1hamdwzwMfyXhlWdwMj6mEQXtkH pBQtgQwpYGe/NwZEsBiRmkIV9+BZvGhk77lefg7XMSU1Plmf/YwVeJxcW4NWHJQ8 T15ETgdsSsu3bTxtL71IqKpXr54p1jt6Y7LLFg97f5TMx2zFOMN+4M+WYqkwclEx awg2tT5T1goQxy0oWe3KjThCMNb+xZiONI+6LaiTx4yFybmBvAoBAdZ6207UDPGZ JD/Kv9fjEkVMPUvin8p+YEALZtlQsz/AL4cOF8QprROmH2xHbJzXK+Xu5VwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6FvkL/SpgaZzroYj1x7Jo78rNeYwHwYDVR0j BBgwFoAUH6WbzuQor8AyZCKRE6VTkCRpehQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDQ0MjA0My0yNDRlLTRiODctYjAwYy1lNTdmNDg3MWQwZWYvMC8xRkE1OUJDRUU0 MjhBRkMwMzI2NDIyOTExM0E1NTM5MDI0Njk3QTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAyNDY5 N0ExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUz OTAyNDY5N0ExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAv0XpKI0hwT0WJT0OuWXQ+CKiEDeh6AE4OD L2ZIw+VBC1ogvRWAc4oDSsfzAsWuPCt6w9D0ZkGrpp3kbAMvUfVhUUKDoYSVv5b5 Pn4FpCi42RbvKdNVpButA4mK0fZtiZ5t3dEkd53l/Cn7y53l2PoNWRLA6ChwaHvj /3QBpFFlv9iNOMasyHIV2hu1a36XElVOCw7s01cnfAUrXuLdDILaPAFPBeQlxGrV ROxByG8cVhtGIDcV7KfOYOdmI5veb1IlBP+vsN0m5fRsTxy2TMwMELAZ3Cq/7Mkx bm5WBgEC+6gYjJGvildiaiLtrKABVVTWoUFBJM8ts08CaZc5bg4= -----END CERTIFICATE-----Generated at Mon Jun 30 08:42:58 2025 by rpki-client