$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: 7x5Pi3aM56f75CyhDf2SkSBB/F29hwf4NHxK4xsk0AY= Subject key identifier: A3:46:83:9E:CA:8B:52:6B:80:D5:8E:83:7C:B4:98:D0:1F:A5:8B:BD Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 6B6D64ACD42CC5DAB48CA957452DF9B097BBFF86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 055A Signing time: Wed 18 Mar 2026 13:01:09 +0000 Manifest this update: Wed 18 Mar 2026 12:56:09 +0000 Manifest next update: Sat 21 Mar 2026 15:05:09 +0000 Files and hashes: 1: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: v+GBTK6a7C2e2yyd2/Cbr7XfEBJqo3zaXto4oY5ftj4=) 2: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: zYQUx+ql30PPLkUcmDWdEwPKMJFZU5b5VUJfAZqzXL8=) 3: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: G0VeuaYXS/KgF8/ez14lbGq6IneUYgvcmaO4bAZiGEU=) 4: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: 1EZSjvRP2SRnr2FbtmEkuDAZWdhz/ERYDxYK2+TR5jA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 15:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6d:64:ac:d4:2c:c5:da:b4:8c:a9:57:45:2d:f9:b0:97:bb:ff:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Mar 18 12:56:09 2026 GMT Not After : Mar 21 15:05:09 2026 GMT Subject: CN=A346839ECA8B526B80D58E837CB498D01FA58BBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:db:73:4c:63:69:e6:88:f2:32:1b:22:c0:d6: bf:95:1c:8c:9a:53:5c:2c:40:42:2a:8f:42:f2:01: 71:94:a8:15:55:26:e0:16:a3:aa:a4:8b:4d:68:b1: 0d:d1:23:54:f6:7e:90:73:58:d1:70:d8:ca:0c:66: 44:3c:4a:dd:db:28:1b:45:97:7c:95:ea:21:2c:2a: 63:ed:38:84:e0:c7:8c:ce:04:a8:60:3a:35:e6:67: 39:3f:1b:a7:9e:5f:ac:0c:29:d8:5c:34:54:1c:99: b2:6f:60:56:64:cb:c2:86:b2:fd:e3:ed:d2:25:ce: 9a:46:eb:93:a3:4e:ed:36:00:3f:93:e0:c9:6d:94: 9d:7a:89:7e:42:d5:49:e2:84:d1:e4:4f:0c:1d:8f: 8e:be:9d:8a:72:6a:a4:b2:6a:da:a1:a9:a7:f6:9f: 76:31:2a:37:f2:9f:1b:6f:b9:64:32:ab:86:c7:e8: ff:66:59:74:65:a5:bb:ce:08:2e:c7:33:cd:b1:60: 10:37:5a:5b:24:0e:be:9d:34:35:26:7c:e8:29:d6: 12:be:30:3c:39:ad:a3:91:f2:83:9d:4f:d5:5d:c3: 08:bc:f1:34:8a:0b:7b:3c:23:42:50:4d:95:bc:d7: c3:1f:86:c3:96:8a:c0:35:0e:97:23:3a:0c:1b:14: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:83:9E:CA:8B:52:6B:80:D5:8E:83:7C:B4:98:D0:1F:A5:8B:BD X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a8:4a:d9:49:66:84:2e:66:a2:19:ae:08:79:cd:aa:33:68: 02:98:f5:34:69:f7:8b:9b:d5:16:ca:8d:90:29:c0:6e:0f:28: b1:37:1c:ab:c3:cf:4a:d1:31:f0:c2:26:c6:b3:39:39:45:36: c9:ff:36:dc:3a:e0:cf:c2:61:50:c4:3d:ad:52:c6:e4:de:5a: 31:d2:1d:4a:d4:21:10:71:34:4e:78:00:90:91:e8:e2:46:c3: 36:5c:36:7d:d2:3d:34:94:82:2a:4f:2d:ad:bd:c0:49:6b:4d: ab:a0:4a:1f:8d:4d:96:fa:55:bb:35:20:29:4a:e8:c4:90:67: 96:1b:ab:8e:76:bb:54:0b:a0:3d:c0:b3:6e:82:0f:0b:5a:05: c8:57:df:5e:32:80:19:c3:a6:8e:2c:fa:bb:df:a1:d8:53:09: 4d:b9:7d:1b:a4:2f:8a:64:b1:f4:72:90:f2:88:2e:8e:1b:0e: d4:0f:44:3d:4c:2f:ff:3b:db:a6:7d:92:00:71:3d:33:e4:ac: ec:97:30:58:61:da:fb:3f:04:ae:92:c9:fe:86:eb:8a:87:14: bf:58:5c:d7:7b:6d:a8:90:fb:7e:fb:2e:0b:39:68:9b:54:13: e5:7d:6a:f3:94:34:e8:e9:5f:c5:36:c9:8c:7d:3e:95:cb:1a: 50:cc:30:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa21krNQsxdq0jKlXRS35sJe7/4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNjAzMTgxMjU2MDlaFw0yNjAzMjExNTA1MDlaMDMxMTAvBgNV BAMTKEEzNDY4MzlFQ0E4QjUyNkI4MEQ1OEU4MzdDQjQ5OEQwMUZBNThCQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl23NMY2nmiPIyGyLA1r+VHIya U1wsQEIqj0LyAXGUqBVVJuAWo6qki01osQ3RI1T2fpBzWNFw2MoMZkQ8St3bKBtF l3yV6iEsKmPtOITgx4zOBKhgOjXmZzk/G6eeX6wMKdhcNFQcmbJvYFZky8KGsv3j 7dIlzppG65OjTu02AD+T4MltlJ16iX5C1UnihNHkTwwdj46+nYpyaqSyatqhqaf2 n3YxKjfynxtvuWQyq4bH6P9mWXRlpbvOCC7HM82xYBA3WlskDr6dNDUmfOgp1hK+ MDw5raOR8oOdT9Vdwwi88TSKC3s8I0JQTZW818MfhsOWisA1DpcjOgwbFBZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo0aDnsqLUmuA1Y6DfLSY0B+li70wHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2oStlJZoQuZqIZrgh5zaozaAKY9TRp94ub 1RbKjZApwG4PKLE3HKvDz0rRMfDCJsazOTlFNsn/Ntw64M/CYVDEPa1SxuTeWjHS HUrUIRBxNE54AJCR6OJGwzZcNn3SPTSUgipPLa29wElrTaugSh+NTZb6Vbs1IClK 6MSQZ5Ybq452u1QLoD3As26CDwtaBchX314ygBnDpo4s+rvfodhTCU25fRukL4pk sfRykPKILo4bDtQPRD1ML/8726Z9kgBxPTPkrOyXMFhh2vs/BK6Syf6G64qHFL9Y XNd7baiQ+377Lgs5aJtUE+V9avOUNOjpX8U2yYx9PpXLGlDMMEQ= -----END CERTIFICATE-----Generated at Thu Mar 19 09:59:28 2026 by rpki-client