$ rpki-client -vvf repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft (raw, json) Hash identifier: HN+/Kax6AlxlP7vBAR5sBHCSNfYPIGldXalFU9V9C1Q= Subject key identifier: 59:DA:76:99:4E:DE:35:0A:41:5C:CA:91:6F:10:43:77:3E:08:67:3D Authority key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 Certificate issuer: /CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Certificate serial: 53F38F1FB18E663DE701815A4EC78A4847D6BE40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft Manifest number: 04FD Signing time: Sat 23 Aug 2025 06:01:21 +0000 Manifest this update: Sat 23 Aug 2025 05:56:21 +0000 Manifest next update: Tue 26 Aug 2025 11:03:21 +0000 Files and hashes: 1: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl (hash: zjmvwQoicbpIjNeJeU5CGN9yJTrJ1cdI7wKAR3BfXWc=) 2: 3130332e3135332e33342e302f32342d3234203d3e20313430343532.roa (hash: L+WYyxtBJBb4IPQAp+Phpn95Mr1s/ocDbq38zQ6JLtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f3:8f:1f:b1:8e:66:3d:e7:01:81:5a:4e:c7:8a:48:47:d6:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Validity Not Before: Aug 23 05:56:21 2025 GMT Not After : Aug 26 11:03:21 2025 GMT Subject: CN=59DA76994EDE350A415CCA916F1043773E08673D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:4e:f0:e8:7c:6b:99:bf:1d:f4:73:eb:4b: bb:fb:cf:e3:22:0d:89:ad:6b:cb:51:da:40:93:6a: a8:03:cd:5f:da:75:0b:d3:a5:e3:ba:0c:56:9b:e4: ee:0b:d4:c8:c1:98:b7:30:c7:67:4e:95:3a:20:62: 28:f6:ef:d6:5b:4b:c7:49:3f:94:0d:e6:b9:f6:5e: cc:7c:a4:31:a1:17:1b:a4:e2:0e:5b:90:46:10:f0: 92:22:01:94:2e:e8:43:f9:cb:fd:24:ec:6a:08:a5: b8:be:49:08:21:be:4a:f0:11:0c:24:e4:a5:e7:4c: 31:d1:e6:52:ac:32:7c:8c:82:2e:de:4d:6a:17:d3: 35:c3:55:cd:66:d2:08:ec:ed:5f:f7:e6:a3:1e:e8: 7b:b9:29:d8:66:b6:7c:83:d7:e3:63:92:c5:87:0a: 56:f7:f1:3f:66:04:f6:49:7e:82:43:05:7c:d5:52: c5:5b:f1:78:71:77:c3:da:63:45:df:40:b2:df:e0: 86:a7:f9:aa:02:3f:e2:44:63:c6:23:be:5c:33:da: 40:89:21:5d:e8:9e:87:51:f2:30:99:b6:7f:af:ec: 88:f2:6f:33:68:3a:7b:90:70:72:26:8b:32:e6:bb: c6:4e:e7:c7:6f:21:30:aa:74:a7:4a:d4:31:f8:21: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DA:76:99:4E:DE:35:0A:41:5C:CA:91:6F:10:43:77:3E:08:67:3D X509v3 Authority Key Identifier: keyid:B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b0:51:0a:0d:31:30:d4:56:7f:fb:92:e6:20:64:c9:0d:77: 12:82:96:98:f7:45:a3:14:77:f3:a8:6f:6d:97:ea:ba:b4:5d: 24:f2:3e:58:4e:96:2a:d6:5a:1b:6b:60:53:8b:12:0e:9c:c6: 9f:eb:81:e4:41:a1:76:10:b5:98:c4:56:f1:b3:7d:8b:bb:4e: a5:f1:3b:95:49:f8:df:6c:a3:3e:a6:8e:f6:cd:d6:ca:bc:bd: 0f:0e:32:60:5f:c5:f7:01:d2:1c:24:3a:25:2d:5a:e6:1c:8a: 61:0b:5f:28:a9:c3:5d:6e:c4:b4:8d:5d:57:8d:a3:ca:a7:58: f1:69:d0:20:db:64:70:8a:c9:61:22:de:ea:48:ed:f5:ff:da: 76:05:46:aa:e9:23:6c:59:6f:e1:27:6d:41:26:e0:5c:3c:d5: 5d:64:97:07:34:bb:18:43:98:3e:93:96:40:d8:bb:0c:5a:4e: c2:7c:d5:e4:c7:ea:9c:f9:05:a6:4e:52:29:53:2d:e8:9c:de: ec:e1:c9:13:a5:1a:66:c8:53:6e:ab:c8:42:00:79:1f:57:3a: 74:69:cc:80:ee:0b:97:e9:5d:4a:1b:70:47:34:e2:f4:14:eb: a1:3b:bb:70:4c:2e:af:c4:82:0a:7e:6e:a4:be:0b:87:b4:3d: 05:ee:b5:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/OPH7GOZj3nAYFaTseKSEfWvkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVB QUZDNjRGNzAeFw0yNTA4MjMwNTU2MjFaFw0yNTA4MjYxMTAzMjFaMDMxMTAvBgNV BAMTKDU5REE3Njk5NEVERTM1MEE0MTVDQ0E5MTZGMTA0Mzc3M0UwODY3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqE7w6Hxrmb8d9HPrS7v7z+Mi DYmta8tR2kCTaqgDzV/adQvTpeO6DFab5O4L1MjBmLcwx2dOlTogYij279ZbS8dJ P5QN5rn2Xsx8pDGhFxuk4g5bkEYQ8JIiAZQu6EP5y/0k7GoIpbi+SQghvkrwEQwk 5KXnTDHR5lKsMnyMgi7eTWoX0zXDVc1m0gjs7V/35qMe6Hu5KdhmtnyD1+NjksWH Clb38T9mBPZJfoJDBXzVUsVb8Xhxd8PaY0XfQLLf4Ian+aoCP+JEY8Yjvlwz2kCJ IV3onodR8jCZtn+v7IjybzNoOnuQcHImizLmu8ZO58dvITCqdKdK1DH4IZYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWdp2mU7eNQpBXMqRbxBDdz4IZz0wHwYDVR0j BBgwFoAUtZEFm2ry9dZuu9FAMdoj5ar8ZPcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMC9CNTkxMDU5QjZB RjJGNUQ2NkVCQkQxNDAzMURBMjNFNUFBRkM2NEY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVBQUZD NjRGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIz RTVBQUZDNjRGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCwUQoNMTDUVn/7kuYgZMkNdxKClpj3RaMU d/Oob22X6rq0XSTyPlhOlirWWhtrYFOLEg6cxp/rgeRBoXYQtZjEVvGzfYu7TqXx O5VJ+N9soz6mjvbN1sq8vQ8OMmBfxfcB0hwkOiUtWuYcimELXyipw11uxLSNXVeN o8qnWPFp0CDbZHCKyWEi3upI7fX/2nYFRqrpI2xZb+EnbUEm4Fw81V1klwc0uxhD mD6TlkDYuwxaTsJ81eTH6pz5BaZOUilTLeic3uzhyROlGmbIU26ryEIAeR9XOnRp zIDuC5fpXUobcEc04vQU66E7u3BMLq/Eggp+bqS+C4e0PQXutSc= -----END CERTIFICATE-----Generated at Sat Aug 23 10:15:10 2025 by rpki-client