$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: WK15g8BwMe/HcgzfIth38gvd8/a/W1hymQ/pdQ9iaIk= Subject key identifier: EA:E1:E1:7E:9B:7A:42:6D:66:99:A6:EC:B4:70:FD:26:3E:FF:E5:22 Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 4D5139D28D470887FB723DF072151845407A719A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: 44 Signing time: Sun 20 Jul 2025 15:02:17 +0000 Manifest this update: Sun 20 Jul 2025 14:57:17 +0000 Manifest next update: Wed 23 Jul 2025 22:52:17 +0000 Files and hashes: 1: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: zoSdpWY07pQQUunp/EDvhQ41kIP5vvUPZdtW3RsP7PQ=) 2: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:51:39:d2:8d:47:08:87:fb:72:3d:f0:72:15:18:45:40:7a:71:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Jul 20 14:57:17 2025 GMT Not After : Jul 23 22:52:17 2025 GMT Subject: CN=EAE1E17E9B7A426D6699A6ECB470FD263EFFE522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6c:54:57:3f:6d:d5:26:ca:db:69:90:20:3d: 0d:bb:e5:b5:60:c9:57:e8:c2:68:8f:36:c1:96:51: 3b:71:eb:3d:0d:5d:75:74:59:e1:81:6c:73:d2:a5: 86:8f:38:62:8c:89:b4:ad:4a:9b:b2:4e:7b:bb:61: d5:19:80:0a:d9:4c:5b:19:52:8f:e1:89:2c:9a:33: 62:63:cb:40:4d:d5:a0:bc:24:7c:cd:dd:0b:72:71: 33:c2:23:e8:6e:c7:b8:c7:17:28:41:72:a7:58:84: 32:0d:83:e5:0a:bf:58:4b:84:87:68:a3:5a:bc:1a: 17:95:4e:3e:13:0b:61:64:23:3e:2c:21:db:6f:3c: 63:5e:33:4d:dc:0e:92:72:50:22:c1:87:81:9f:21: 2a:ca:c7:64:4c:07:0b:a7:aa:76:37:3b:3d:ea:f9: 90:9d:9c:ec:59:7d:f6:44:8b:e5:17:82:1d:18:d4: 78:a0:10:58:02:41:be:7d:45:da:fe:89:cf:3b:b3: bf:29:9e:cb:f8:0a:8e:24:15:cb:1f:6a:f5:d6:7f: 3b:c1:59:81:d9:13:f9:a3:aa:f8:2e:20:85:5e:35: ec:7f:f3:a9:90:58:58:f5:15:88:e6:d9:e3:44:a2: e0:eb:63:ce:4d:e9:f1:15:e2:ef:18:bb:63:d3:c4: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E1:E1:7E:9B:7A:42:6D:66:99:A6:EC:B4:70:FD:26:3E:FF:E5:22 X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:bb:73:49:ef:3e:fe:b0:85:25:9e:0c:35:d7:30:ec:f0:ab: ce:df:2a:db:95:ba:bb:6a:22:f0:3e:57:3e:69:5a:76:f8:31: 55:95:5e:74:29:c7:d2:03:1a:64:6c:31:3f:0d:1b:5a:af:70: ef:00:10:78:90:13:77:d9:41:0f:1d:79:00:a9:f6:5a:a0:05: 28:64:a4:04:c7:ed:fd:6e:c5:8a:23:64:82:a0:a6:f9:ed:bb: 46:a5:08:90:fd:05:e8:c1:40:6c:6b:b9:84:3f:fb:cb:bb:86: b8:33:3a:7b:36:80:1b:6b:53:e9:19:b7:d9:3a:80:6b:6f:74: 1a:96:e9:f6:55:f1:69:2e:a3:19:25:e2:f8:75:c4:b6:15:a8: ec:5f:42:45:50:f9:02:77:05:89:4e:d7:f7:98:bb:a3:17:e0: 3a:59:84:12:38:e5:6f:ec:88:bb:fe:6a:13:fd:78:e8:e4:80: e3:0b:c8:e8:c1:61:84:4d:57:d2:ef:3c:a4:fc:ec:01:f3:bc: 34:0f:4b:03:93:f4:7f:f5:8f:56:fb:1c:45:49:cf:2f:32:c1: 39:f7:7f:c2:3d:e5:09:08:9a:09:c8:44:66:9a:d2:0d:4d:c9: 06:45:73:f2:ff:27:53:00:45:c5:2e:ad:b5:94:96:54:4f:47: e7:88:7f:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVE50o1HCIf7cj3wchUYRUB6cZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTA3MjAxNDU3MTdaFw0yNTA3MjMyMjUyMTdaMDMxMTAvBgNV BAMTKEVBRTFFMTdFOUI3QTQyNkQ2Njk5QTZFQ0I0NzBGRDI2M0VGRkU1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVbFRXP23VJsrbaZAgPQ275bVg yVfowmiPNsGWUTtx6z0NXXV0WeGBbHPSpYaPOGKMibStSpuyTnu7YdUZgArZTFsZ Uo/hiSyaM2Jjy0BN1aC8JHzN3QtycTPCI+hux7jHFyhBcqdYhDINg+UKv1hLhIdo o1q8GheVTj4TC2FkIz4sIdtvPGNeM03cDpJyUCLBh4GfISrKx2RMBwunqnY3Oz3q +ZCdnOxZffZEi+UXgh0Y1HigEFgCQb59Rdr+ic87s78pnsv4Co4kFcsfavXWfzvB WYHZE/mjqvguIIVeNex/86mQWFj1FYjm2eNEouDrY85N6fEV4u8Yu2PTxFkBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6uHhfpt6Qm1mmabstHD9Jj7/5SIwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALq7c0nvPv6whSWeDDXXMOzwq87fKtuVurtq IvA+Vz5pWnb4MVWVXnQpx9IDGmRsMT8NG1qvcO8AEHiQE3fZQQ8deQCp9lqgBShk pATH7f1uxYojZIKgpvntu0alCJD9BejBQGxruYQ/+8u7hrgzOns2gBtrU+kZt9k6 gGtvdBqW6fZV8Wkuoxkl4vh1xLYVqOxfQkVQ+QJ3BYlO1/eYu6MX4DpZhBI45W/s iLv+ahP9eOjkgOMLyOjBYYRNV9LvPKT87AHzvDQPSwOT9H/1j1b7HEVJzy8ywTn3 f8I95QkImgnIRGaa0g1NyQZFc/L/J1MARcUurbWUllRPR+eIfy8= -----END CERTIFICATE-----Generated at Tue Jul 22 05:49:04 2025 by rpki-client