$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft File: 1FA59BCEE428AFC03264229113A5539024697A14.mft (raw, json) Hash identifier: XjQZoW4dSit6BHM15brkDSld/+vLuj2eRqMm3i80ivE= Subject key identifier: C1:2D:3E:42:F2:8E:30:66:3F:75:A5:F4:E0:DA:2D:68:4B:59:6C:71 Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 Certificate issuer: /CN=1FA59BCEE428AFC03264229113A5539024697A14 Certificate serial: 6FF178439AED2C712D86972CCAF782D54FC58796 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft Manifest number: 04EF Signing time: Sat 19 Jul 2025 11:50:05 +0000 Manifest this update: Sat 19 Jul 2025 11:45:05 +0000 Manifest next update: Tue 22 Jul 2025 18:53:05 +0000 Files and hashes: 1: 1FA59BCEE428AFC03264229113A5539024697A14.crl (hash: srS/c52z1O6/SkXv69JTY3CVeD22Aesl9L+XBuEKsKs=) 2: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: GvgldOQCXz+vUN0l5dc2pbWfnQQKd7ihZyYtPpd8mRM=) 3: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: pJwvm882Mg2XhUmsTwO4kQV+vaRmkryt9jvtdZPqIks=) 4: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: nRE7xahMjMVa2flPv3xh8lSxkHzcuvl44NR7lfyUvFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f1:78:43:9a:ed:2c:71:2d:86:97:2c:ca:f7:82:d5:4f:c5:87:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14 Validity Not Before: Jul 19 11:45:05 2025 GMT Not After : Jul 22 18:53:05 2025 GMT Subject: CN=C12D3E42F28E30663F75A5F4E0DA2D684B596C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:89:24:0b:12:1e:5c:23:35:26:bd:a9:23:1e: 5a:09:e1:c4:fa:40:b4:39:e4:3d:b2:20:aa:aa:0d: 48:10:b9:03:39:f9:90:a7:b7:f6:cc:0f:65:e9:37: 4f:39:56:0c:18:80:a4:43:57:86:80:9e:33:00:f2: 9b:d9:9c:d2:02:72:cf:ef:c1:75:c2:3b:95:37:36: 00:25:0f:37:86:8f:cc:6d:7a:d1:ac:73:2d:60:f0: af:ff:b9:50:ad:34:db:14:58:e8:84:14:6f:ce:32: 11:db:5c:18:3c:ec:ab:44:c0:6f:30:b2:4e:b0:24: 01:5f:ba:12:33:f7:1a:91:68:cd:ac:57:40:f7:bd: 2f:b1:58:e6:51:25:2e:6e:cc:ed:77:8d:7e:6b:1e: 65:8a:18:58:92:6c:0f:f1:dd:9c:e4:83:7a:8d:71: bb:f0:63:dc:b7:79:1b:3c:15:cd:dc:ae:c2:f1:25: cc:e1:55:49:ba:c7:32:d3:5b:a1:48:b7:bc:78:f3: 99:d2:fc:dd:ae:e4:32:1b:04:6d:8c:88:35:6a:c2: 88:c9:c0:51:dc:80:06:66:f5:4c:70:40:8b:f9:b6: b5:d8:c7:a4:9a:e4:a4:56:12:d4:02:33:5c:1d:72: 5e:fd:46:b7:c9:7d:90:28:72:c5:8f:90:d7:3c:1f: 42:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2D:3E:42:F2:8E:30:66:3F:75:A5:F4:E0:DA:2D:68:4B:59:6C:71 X509v3 Authority Key Identifier: keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0b:7d:d0:3e:ef:dd:58:f9:d0:c7:e4:57:73:68:dd:b0:b9: 02:c6:f6:e0:bb:2b:1a:06:3f:22:aa:dd:e7:83:72:5f:2f:da: de:1b:fd:d9:89:53:f2:06:4b:75:6b:be:b2:f8:a5:88:f0:4e: 4e:dc:09:98:1b:d4:7a:62:78:fa:4b:bc:11:ff:37:ee:1f:59: d1:d2:24:2b:0a:87:33:52:44:7b:90:aa:b7:01:7e:c4:5e:ce: ce:c8:e8:41:a6:07:d3:6b:d0:de:7c:49:36:d0:ce:55:89:2c: a6:03:f4:10:8e:65:e1:54:71:4c:b5:8f:a1:57:fd:87:08:8f: 3c:dc:9a:e1:9b:7e:65:51:46:58:d6:ca:5c:5a:e8:ff:4e:e8: 16:3c:7b:40:a6:30:57:22:f4:2a:8f:c6:8a:7c:f5:a2:9f:ec: 2c:62:a4:11:99:74:b8:f3:ab:f4:fe:ec:d2:0e:63:b7:ed:bb: 6f:19:6a:cb:b7:4a:b1:9a:07:92:66:01:86:ef:c7:a5:ea:77: 0d:d9:60:51:e7:2d:85:60:af:09:39:dc:00:4c:0a:00:be:53: 33:2c:ce:ff:e6:e2:cd:15:f4:d3:b2:62:e5:bf:85:ce:f1:2a: 23:8c:ab:03:1a:a8:34:92:e3:e8:a6:9d:b4:21:ec:02:15:36: 5d:31:45:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/F4Q5rtLHEthpcsyveC1U/Fh5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAy NDY5N0ExNDAeFw0yNTA3MTkxMTQ1MDVaFw0yNTA3MjIxODUzMDVaMDMxMTAvBgNV BAMTKEMxMkQzRTQyRjI4RTMwNjYzRjc1QTVGNEUwREEyRDY4NEI1OTZDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCniSQLEh5cIzUmvakjHloJ4cT6 QLQ55D2yIKqqDUgQuQM5+ZCnt/bMD2XpN085VgwYgKRDV4aAnjMA8pvZnNICcs/v wXXCO5U3NgAlDzeGj8xtetGscy1g8K//uVCtNNsUWOiEFG/OMhHbXBg87KtEwG8w sk6wJAFfuhIz9xqRaM2sV0D3vS+xWOZRJS5uzO13jX5rHmWKGFiSbA/x3Zzkg3qN cbvwY9y3eRs8Fc3crsLxJczhVUm6xzLTW6FIt7x485nS/N2u5DIbBG2MiDVqwojJ wFHcgAZm9UxwQIv5trXYx6Sa5KRWEtQCM1wdcl79RrfJfZAocsWPkNc8H0IBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwS0+QvKOMGY/daX04NotaEtZbHEwHwYDVR0j BBgwFoAUH6WbzuQor8AyZCKRE6VTkCRpehQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDQ0MjA0My0yNDRlLTRiODctYjAwYy1lNTdmNDg3MWQwZWYvMC8xRkE1OUJDRUU0 MjhBRkMwMzI2NDIyOTExM0E1NTM5MDI0Njk3QTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAyNDY5 N0ExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw MGMtZTU3ZjQ4NzFkMGVmLzAvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUz OTAyNDY5N0ExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYLfdA+791Y+dDH5FdzaN2wuQLG9uC7KxoG PyKq3eeDcl8v2t4b/dmJU/IGS3VrvrL4pYjwTk7cCZgb1HpiePpLvBH/N+4fWdHS JCsKhzNSRHuQqrcBfsRezs7I6EGmB9Nr0N58STbQzlWJLKYD9BCOZeFUcUy1j6FX /YcIjzzcmuGbfmVRRljWylxa6P9O6BY8e0CmMFci9CqPxop89aKf7CxipBGZdLjz q/T+7NIOY7ftu28Zasu3SrGaB5JmAYbvx6Xqdw3ZYFHnLYVgrwk53ABMCgC+UzMs zv/m4s0V9NOyYuW/hc7xKiOMqwMaqDSS4+imnbQh7AIVNl0xRTo= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:31 2025 by rpki-client