$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: WmCwZ/yBdnxD2oqRemsV9Qv8a1jpvoQONCX6Nfk7wxw= Subject key identifier: D0:22:0F:1D:CB:6C:88:C8:46:33:D6:18:50:C7:82:FA:9F:4E:5B:93 Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 22D0FEB187F9742BB5F43A2398C8AE2CCF496D86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: 3B Signing time: Sun 29 Jun 2025 15:32:17 +0000 Manifest this update: Sun 29 Jun 2025 15:27:17 +0000 Manifest next update: Thu 03 Jul 2025 02:45:17 +0000 Files and hashes: 1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=) 2: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: w1wMFrY/BXaRwPI06PGkHK2s69qRhZt/ieHxh7cX/cc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d0:fe:b1:87:f9:74:2b:b5:f4:3a:23:98:c8:ae:2c:cf:49:6d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Jun 29 15:27:17 2025 GMT Not After : Jul 3 02:45:17 2025 GMT Subject: CN=D0220F1DCB6C88C84633D61850C782FA9F4E5B93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:bf:2d:71:26:49:d6:af:ef:08:10:9b:53: 21:e9:71:32:a2:5c:8d:68:8d:f3:0c:6b:cb:ac:2b: 70:ef:ca:61:50:ed:5c:45:86:15:5f:e1:cd:b8:d0: 77:dd:a2:04:93:1d:0a:92:51:9c:29:9c:91:68:d3: 00:ef:de:5f:16:f1:1d:40:e3:82:b9:03:3d:eb:a7: 7d:45:02:ec:d8:d3:e2:71:c6:08:75:d7:3a:56:8a: 8b:6d:4e:f1:5c:fd:78:40:c0:02:ce:e2:92:32:78: 31:6c:25:f6:e1:ca:78:ab:b1:fc:7c:bd:80:96:c2: 1d:c4:c0:e3:e7:9c:68:b0:36:15:54:89:31:a3:9d: ca:bc:4f:9d:cd:a8:40:82:34:34:4d:72:08:6e:7b: 10:89:19:bd:82:9a:ac:cc:e4:42:07:9e:3a:18:a4: 6e:91:f9:f1:54:05:8f:84:4e:98:40:71:1e:03:90: 1a:bc:c7:9f:a2:16:ac:44:72:ef:30:ea:fc:92:f3: ee:d9:83:08:ee:c2:d2:1f:4b:57:82:42:61:d9:ba: 7a:0f:73:ff:09:60:f7:4e:c0:bd:70:c5:05:97:e4: aa:59:f6:d4:32:55:66:bc:c2:92:61:13:6e:48:e9: 33:fc:35:bc:cb:50:16:7d:b9:ba:70:2f:fe:37:f2: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:22:0F:1D:CB:6C:88:C8:46:33:D6:18:50:C7:82:FA:9F:4E:5B:93 X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4c:4c:92:81:d2:67:94:a6:ae:90:82:8b:60:fe:8f:4d:52: 90:66:31:d3:c8:07:f7:db:0e:ff:8f:e7:bc:d0:da:a5:61:85: fb:6c:0b:e9:a2:44:12:83:12:a0:b3:3c:86:84:61:8c:ef:3b: f6:84:3f:13:d1:31:42:6f:72:24:8a:e0:26:71:3f:89:09:c9: 8f:e2:7a:df:a8:e8:fd:ea:49:95:ee:75:3d:c5:d5:1b:d5:5a: 61:d4:a3:84:d6:29:bf:cf:de:1a:3c:76:da:b1:28:63:b1:d7: 8b:6f:82:0d:b4:de:42:71:a3:3c:d3:2b:17:01:17:3a:6f:62: 4d:a5:90:d8:a5:9d:5b:69:27:4a:9b:51:cd:07:9e:6d:19:46: f5:57:41:a0:ae:f5:ed:83:c8:5f:07:8b:83:95:c4:37:e0:1f: df:4e:fe:33:f7:39:76:b7:11:7e:fa:81:c1:a6:03:d2:4d:ed: 18:e9:53:ee:30:83:39:80:1a:8a:62:fe:10:67:f9:91:f3:39: a0:6d:b1:2c:c2:51:30:a9:92:04:2e:fa:8d:ac:76:fb:56:24: 61:08:6d:4d:88:87:1a:2e:9f:cf:74:75:3c:60:cf:b4:ab:a6: 00:a2:ae:4c:77:c8:31:b6:11:cd:26:a3:bb:fe:b9:ed:df:0f: fc:70:db:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItD+sYf5dCu19DojmMiuLM9JbYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTA2MjkxNTI3MTdaFw0yNTA3MDMwMjQ1MTdaMDMxMTAvBgNV BAMTKEQwMjIwRjFEQ0I2Qzg4Qzg0NjMzRDYxODUwQzc4MkZBOUY0RTVCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Tb8tcSZJ1q/vCBCbUyHpcTKi XI1ojfMMa8usK3DvymFQ7VxFhhVf4c240HfdogSTHQqSUZwpnJFo0wDv3l8W8R1A 44K5Az3rp31FAuzY0+Jxxgh11zpWiottTvFc/XhAwALO4pIyeDFsJfbhynirsfx8 vYCWwh3EwOPnnGiwNhVUiTGjncq8T53NqECCNDRNcghuexCJGb2CmqzM5EIHnjoY pG6R+fFUBY+ETphAcR4DkBq8x5+iFqxEcu8w6vyS8+7ZgwjuwtIfS1eCQmHZunoP c/8JYPdOwL1wxQWX5KpZ9tQyVWa8wpJhE25I6TP8NbzLUBZ9ubpwL/438nJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0CIPHctsiMhGM9YYUMeC+p9OW5MwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5MTJKB0meUpq6Qgotg/o9NUpBmMdPIB/fb Dv+P57zQ2qVhhftsC+miRBKDEqCzPIaEYYzvO/aEPxPRMUJvciSK4CZxP4kJyY/i et+o6P3qSZXudT3F1RvVWmHUo4TWKb/P3ho8dtqxKGOx14tvgg203kJxozzTKxcB FzpvYk2lkNilnVtpJ0qbUc0Hnm0ZRvVXQaCu9e2DyF8Hi4OVxDfgH99O/jP3OXa3 EX76gcGmA9JN7RjpU+4wgzmAGopi/hBn+ZHzOaBtsSzCUTCpkgQu+o2sdvtWJGEI bU2Ihxoun890dTxgz7SrpgCirkx3yDG2Ec0mo7v+ue3fD/xw28M= -----END CERTIFICATE-----Generated at Mon Jun 30 08:43:03 2025 by rpki-client