$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: nIaQntYMpEBn6SiQKsPPsBxHavb1QOF2mjosv+G6r7k= Subject key identifier: AA:80:E4:B2:22:89:B2:0B:D4:91:BD:35:C0:2B:AC:B2:55:9C:9A:E1 Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 0F1E2A7DB9E5918FCA99DD47473CE790B13FF318 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: 6D Signing time: Sun 19 Oct 2025 09:02:19 +0000 Manifest this update: Sun 19 Oct 2025 08:57:19 +0000 Manifest next update: Wed 22 Oct 2025 19:52:19 +0000 Files and hashes: 1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=) 2: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: 2WKiiY1yCUW+7rbTOtYm1vfAwiREU0Pr7uzj8MnBDp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:1e:2a:7d:b9:e5:91:8f:ca:99:dd:47:47:3c:e7:90:b1:3f:f3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Oct 19 08:57:19 2025 GMT Not After : Oct 22 19:52:19 2025 GMT Subject: CN=AA80E4B22289B20BD491BD35C02BACB2559C9AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:c2:47:38:8c:45:3d:2c:11:e8:cc:8c:a1: 2c:a3:3f:1e:52:3c:76:88:58:c8:95:a8:ea:1c:d8: a0:70:42:93:e7:7b:b0:b4:24:20:6c:58:31:30:32: 8b:68:59:ee:d7:bd:91:10:55:30:e9:83:da:2d:39: 7c:e9:1e:c4:bc:87:b4:58:fe:07:e8:1a:47:78:6e: 82:6f:3f:ce:5d:69:3b:2a:c7:53:b3:7f:7c:50:4a: 76:83:df:66:74:fa:a0:2c:08:d4:c0:b0:5d:9e:d6: 6c:99:41:40:5f:fd:ea:11:5f:17:ae:ef:33:79:23: 4a:6d:d2:8b:1b:b6:d8:61:f3:1b:33:9e:33:b9:dc: 59:8b:b7:f9:15:cf:76:8b:09:58:03:e1:d6:f2:ad: d8:85:b3:2e:1e:43:da:ae:62:93:d7:96:8e:6b:cd: 46:05:68:c0:88:2b:af:cd:f2:cd:35:b7:1e:ce:89: bb:3a:b0:6f:39:57:7a:75:ee:39:87:f6:74:e9:de: cb:4b:9e:a7:cd:af:56:d5:74:64:28:ea:67:42:99: b9:61:ee:f8:71:92:b0:f5:b6:f5:9e:7f:e2:56:4d: 77:93:8a:75:1d:1d:51:e8:fb:4b:6d:0a:72:69:0d: 25:80:17:34:9b:91:03:72:41:33:c3:88:f0:88:e5: 4b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:80:E4:B2:22:89:B2:0B:D4:91:BD:35:C0:2B:AC:B2:55:9C:9A:E1 X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5b:e9:16:8f:7a:75:18:1e:92:d3:b0:fa:43:23:5f:d5:66: e7:4d:84:c5:60:5b:ac:c0:9d:b0:6d:21:47:3f:b3:f3:0f:d4: 07:aa:f6:7d:d4:d2:d2:07:34:56:95:43:99:9a:fb:61:48:7e: 21:6b:a3:26:3f:8b:c0:42:21:f2:25:b8:9c:06:1c:e2:21:c6: 48:5f:ef:2a:7d:34:5a:b8:41:6c:8b:9c:aa:cb:22:63:52:07: d1:20:2d:4a:68:18:ab:36:c5:42:da:95:db:84:76:8b:31:ef: 84:28:5c:e2:8c:24:35:0d:63:34:5e:f0:7e:95:13:f0:0f:39: 23:de:91:b4:ec:67:13:2b:4d:b5:af:fb:b3:eb:21:07:d4:7c: 47:7b:84:8f:7a:48:b4:64:73:53:73:42:29:a8:1f:57:c4:fd: 1d:c4:74:b6:63:70:f1:5f:b7:56:51:47:a0:aa:97:e1:7c:93: 8b:cf:f7:95:3e:9a:60:19:67:b0:8f:07:ad:47:ef:d9:64:f9: db:90:99:5d:0a:93:4a:15:f5:30:60:29:78:a2:9d:05:33:b0: 0d:3f:5b:d7:4f:40:db:a8:24:cc:37:84:bb:f3:8c:51:73:cd: af:ae:a2:b1:a0:7c:e6:6c:f2:3e:7a:f5:35:ec:e4:a2:16:5c: 61:84:45:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDx4qfbnlkY/Kmd1HRzznkLE/8xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTEwMTkwODU3MTlaFw0yNTEwMjIxOTUyMTlaMDMxMTAvBgNV BAMTKEFBODBFNEIyMjI4OUIyMEJENDkxQkQzNUMwMkJBQ0IyNTU5QzlBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52sJHOIxFPSwR6MyMoSyjPx5S PHaIWMiVqOoc2KBwQpPne7C0JCBsWDEwMotoWe7XvZEQVTDpg9otOXzpHsS8h7RY /gfoGkd4boJvP85daTsqx1Ozf3xQSnaD32Z0+qAsCNTAsF2e1myZQUBf/eoRXxeu 7zN5I0pt0osbtthh8xsznjO53FmLt/kVz3aLCVgD4dbyrdiFsy4eQ9quYpPXlo5r zUYFaMCIK6/N8s01tx7Oibs6sG85V3p17jmH9nTp3stLnqfNr1bVdGQo6mdCmblh 7vhxkrD1tvWef+JWTXeTinUdHVHo+0ttCnJpDSWAFzSbkQNyQTPDiPCI5Us9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqoDksiKJsgvUkb01wCusslWcmuEwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5b6RaPenUYHpLTsPpDI1/VZudNhMVgW6zA nbBtIUc/s/MP1Aeq9n3U0tIHNFaVQ5ma+2FIfiFroyY/i8BCIfIluJwGHOIhxkhf 7yp9NFq4QWyLnKrLImNSB9EgLUpoGKs2xULalduEdosx74QoXOKMJDUNYzRe8H6V E/APOSPekbTsZxMrTbWv+7PrIQfUfEd7hI96SLRkc1NzQimoH1fE/R3EdLZjcPFf t1ZRR6Cql+F8k4vP95U+mmAZZ7CPB61H79lk+duQmV0Kk0oV9TBgKXiinQUzsA0/ W9dPQNuoJMw3hLvzjFFzza+uorGgfOZs8j569TXs5KIWXGGERTw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:16 2025 by rpki-client