$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: zqkrkWLwdPuOHHQ1s1awyBNe0paOLpkVmmeKvSqIOm8= Subject key identifier: CC:B9:30:72:DD:B9:76:97:2D:7F:5D:73:CA:17:FA:E4:0D:A3:93:1F Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 1F8E39C9714A2D88C0EEC415843592ABA2EA1138 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: 53 Signing time: Fri 22 Aug 2025 14:12:19 +0000 Manifest this update: Fri 22 Aug 2025 14:07:19 +0000 Manifest next update: Mon 25 Aug 2025 15:04:19 +0000 Files and hashes: 1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=) 2: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: UtsA2WQxccKkQ3Ai6VMY6rFQ5zW+4QbkinovwXzydP4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8e:39:c9:71:4a:2d:88:c0:ee:c4:15:84:35:92:ab:a2:ea:11:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Aug 22 14:07:19 2025 GMT Not After : Aug 25 15:04:19 2025 GMT Subject: CN=CCB93072DDB976972D7F5D73CA17FAE40DA3931F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:32:3c:32:17:42:bf:e9:5c:1a:63:62:b8: e7:ab:d3:d0:a7:84:e0:6f:16:14:b9:08:59:c0:72: ee:1c:69:43:a5:c1:7b:d0:24:a3:64:81:4c:69:d7: 6a:43:36:cb:7c:90:85:b9:05:31:72:f6:62:46:af: f3:69:e7:3d:7f:89:bc:79:fa:66:68:6f:dc:3c:36: 0a:88:16:12:62:54:d4:a1:33:c8:01:12:40:4b:4c: 28:d8:84:f4:e7:e4:48:20:c2:6c:4c:9f:25:f0:85: 3d:a5:a6:1a:44:5b:e6:2e:0b:b0:76:ab:fa:a9:a7: 46:0e:f3:47:6c:3c:6d:84:d8:e0:47:8f:50:c2:0f: 7f:1a:c8:fa:90:49:64:a4:d7:23:4f:46:52:14:8f: bc:8c:7d:4f:d0:ed:fa:8a:57:43:e3:fb:86:6b:dc: e4:cd:c9:cf:60:fa:d5:9e:a8:60:7f:9a:a1:4b:89: 6e:54:40:43:46:b4:e7:ce:52:03:6e:0e:c2:da:09: 73:bb:07:59:c3:f7:7a:e9:17:d9:58:cf:6d:c3:8b: 69:65:be:66:cf:31:f7:e7:6d:4d:6c:bb:95:9b:f9: 0e:db:a1:7d:af:a7:a8:84:0a:e1:43:5c:64:26:d7: 69:c0:f8:20:87:30:7c:08:26:fd:2d:c7:f0:ca:83: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B9:30:72:DD:B9:76:97:2D:7F:5D:73:CA:17:FA:E4:0D:A3:93:1F X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c6:ff:1f:3c:39:fa:85:ec:bb:b7:50:b1:b7:ff:e7:1f:7b: b8:66:bf:fd:25:a9:f6:6b:16:f2:44:07:61:52:0c:a2:6a:d2: c7:9f:c9:42:ca:82:4c:d8:26:b1:00:d9:51:f4:24:49:03:54: aa:9d:38:63:c3:9c:65:7d:19:db:5a:f9:cc:ab:21:eb:14:36: fa:58:de:09:80:7a:2d:d3:df:a5:bf:9a:06:43:b1:d3:7b:62: 31:b0:93:05:2b:3b:6f:cc:38:e3:29:9d:6b:f3:99:c2:0e:da: b0:98:ea:4d:50:18:8d:b3:03:9e:48:09:a6:c1:1f:23:df:e6: 4e:d3:76:11:5e:2f:34:f0:0b:de:5b:e8:e5:ec:80:cf:ea:ee: bc:4a:8d:58:a5:18:38:cf:6a:c8:b3:1b:a6:cd:0d:28:7b:46: 23:82:24:35:25:32:dd:95:54:36:26:cf:28:d0:4b:08:f0:10: a0:ca:94:2a:41:d5:e9:24:22:69:e9:35:e4:4d:5a:60:c0:74: a8:9d:4b:ba:11:f8:99:27:72:4e:36:81:1c:ee:27:4c:2c:ee: bc:0b:57:8d:ad:b9:aa:6b:0c:77:b8:81:5f:ca:4d:bc:04:8f: ed:57:d4:7a:74:af:ec:a7:ee:fb:3a:bc:4e:c3:c0:b1:fd:15: c1:45:e2:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH445yXFKLYjA7sQVhDWSq6LqETgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTA4MjIxNDA3MTlaFw0yNTA4MjUxNTA0MTlaMDMxMTAvBgNV BAMTKENDQjkzMDcyRERCOTc2OTcyRDdGNUQ3M0NBMTdGQUU0MERBMzkzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPizI8MhdCv+lcGmNiuOer09Cn hOBvFhS5CFnAcu4caUOlwXvQJKNkgUxp12pDNst8kIW5BTFy9mJGr/Np5z1/ibx5 +mZob9w8NgqIFhJiVNShM8gBEkBLTCjYhPTn5EggwmxMnyXwhT2lphpEW+YuC7B2 q/qpp0YO80dsPG2E2OBHj1DCD38ayPqQSWSk1yNPRlIUj7yMfU/Q7fqKV0Pj+4Zr 3OTNyc9g+tWeqGB/mqFLiW5UQENGtOfOUgNuDsLaCXO7B1nD93rpF9lYz23Di2ll vmbPMffnbU1su5Wb+Q7boX2vp6iECuFDXGQm12nA+CCHMHwIJv0tx/DKgxrDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzLkwct25dpctf11zyhf65A2jkx8wHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzG/x88OfqF7Lu3ULG3/+cfe7hmv/0lqfZr FvJEB2FSDKJq0sefyULKgkzYJrEA2VH0JEkDVKqdOGPDnGV9Gdta+cyrIesUNvpY 3gmAei3T36W/mgZDsdN7YjGwkwUrO2/MOOMpnWvzmcIO2rCY6k1QGI2zA55ICabB HyPf5k7TdhFeLzTwC95b6OXsgM/q7rxKjVilGDjPasizG6bNDSh7RiOCJDUlMt2V VDYmzyjQSwjwEKDKlCpB1ekkImnpNeRNWmDAdKidS7oR+Jknck42gRzuJ0ws7rwL V42tuaprDHe4gV/KTbwEj+1X1Hp0r+yn7vs6vE7DwLH9FcFF4n8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:54 2025 by rpki-client