$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.mft (raw, json) Hash identifier: R/qDd13r3v2boYLIr37lARA3z2m+e6Z+PwkDxiyQSuM= Subject key identifier: 86:07:F9:F3:04:AB:2B:37:8C:73:BF:A1:68:27:AB:C5:B9:9C:85:17 Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 Certificate issuer: /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Certificate serial: 59E2019F08D04801F8E3E7707BD53E6017ECE525 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft Manifest number: 0533 Signing time: Sat 25 Apr 2026 12:01:49 +0000 Manifest this update: Sat 25 Apr 2026 11:56:49 +0000 Manifest next update: Tue 28 Apr 2026 21:57:49 +0000 Files and hashes: 1: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: ybooJJfuCLWJ6Wkr2xd+dtjVGbG8gCLcuXzjWzkx1V0=) 2: 1259FE91D21610D4BA487C60C804F66EB6591CA8.crl (hash: +6ejCPgni+VQHK/Lvb9inY4xq0xETB2q5e0h3KptwWw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 21:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e2:01:9f:08:d0:48:01:f8:e3:e7:70:7b:d5:3e:60:17:ec:e5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Validity Not Before: Apr 25 11:56:49 2026 GMT Not After : Apr 28 21:57:49 2026 GMT Subject: CN=8607F9F304AB2B378C73BFA16827ABC5B99C8517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:b6:c6:7b:6c:bb:88:06:ac:2d:cb:ce:be: ad:f4:c5:33:19:0a:85:2e:e6:84:89:10:f0:da:1c: e6:56:b0:53:53:16:40:71:4a:c6:53:a9:dd:9a:77: b1:47:9c:b4:8f:cf:b6:8c:de:b9:3d:e9:01:b1:3c: 3d:47:bf:f3:df:4a:dd:02:9d:9d:34:dc:64:a0:64: 77:eb:c7:b1:95:0a:49:68:e7:a3:0e:1a:a9:8e:24: 59:74:09:d3:40:74:63:4d:66:0e:5e:7c:06:24:19: 28:5c:e5:b9:3b:63:e9:97:0f:05:7e:48:e4:e2:dd: c1:de:25:8b:6c:2f:9f:f0:bf:6a:29:e6:5e:a6:91: 0d:3c:b2:49:d3:ec:4c:2c:42:42:5f:9a:9c:22:41: 2a:24:df:ea:9b:43:aa:5e:a0:57:30:45:48:89:b1: 13:61:37:bd:ed:45:b1:5f:4f:e0:13:54:3f:e6:46: 70:e2:35:4c:bd:28:16:39:48:ce:9c:29:4f:a6:4a: bd:2d:1c:be:86:e5:8f:2a:e6:00:24:ea:fd:ec:46: 8a:c6:00:28:83:13:0a:53:54:05:7c:e6:11:90:1d: 44:74:2a:5c:ca:56:06:c5:21:9c:71:a3:ff:39:fe: e5:bd:47:2c:f9:76:5f:76:8d:f8:ef:a1:6f:7e:1a: 05:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:07:F9:F3:04:AB:2B:37:8C:73:BF:A1:68:27:AB:C5:B9:9C:85:17 X509v3 Authority Key Identifier: keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:72:67:b4:0b:f2:b9:0a:96:74:e9:b6:ae:ee:14:42:e5:38: 6c:1e:b8:6c:da:7f:d8:61:ea:51:5d:bd:09:ea:05:67:47:f3: 2f:9e:c7:60:89:3f:16:9e:f1:61:c9:44:9a:39:54:68:3d:97: 3a:70:ed:0c:e9:f9:0c:bf:62:86:1b:7a:b5:29:8f:44:5e:d4: 0b:7e:42:e9:c5:30:a2:dc:fe:73:7f:67:e7:4c:4a:a1:37:b8: 28:57:7a:7e:70:bb:31:4c:ec:30:38:71:ea:f0:a4:58:e9:df: 01:d9:c1:14:56:38:c6:31:da:af:81:62:43:23:7b:b8:44:37: 20:f0:7e:b7:6a:6f:ce:8c:30:2a:8c:f6:03:e1:70:47:a0:5d: 37:dd:2d:b3:be:6b:13:23:84:2c:38:50:92:2f:7b:90:32:b3: 9b:07:26:a4:cc:33:e0:ff:4b:0e:4f:85:34:bf:d7:da:ee:7b: b2:02:0f:9f:e6:db:7b:e4:61:26:10:5a:d2:10:c2:c4:0d:21: 83:00:76:de:94:28:9c:be:0c:2f:62:21:21:1d:06:82:4c:b3: a5:b9:f6:a3:bb:9e:a2:b6:12:98:e3:0a:e5:57:d5:70:8f:c7: b6:44:62:fc:46:3c:90:45:07:63:09:6e:2d:ce:73:ad:2b:17: 3f:3e:fd:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWeIBnwjQSAH44+dwe9U+YBfs5SUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVC NjU5MUNBODAeFw0yNjA0MjUxMTU2NDlaFw0yNjA0MjgyMTU3NDlaMDMxMTAvBgNV BAMTKDg2MDdGOUYzMDRBQjJCMzc4QzczQkZBMTY4MjdBQkM1Qjk5Qzg1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Z7bGe2y7iAasLcvOvq30xTMZ CoUu5oSJEPDaHOZWsFNTFkBxSsZTqd2ad7FHnLSPz7aM3rk96QGxPD1Hv/PfSt0C nZ003GSgZHfrx7GVCklo56MOGqmOJFl0CdNAdGNNZg5efAYkGShc5bk7Y+mXDwV+ SOTi3cHeJYtsL5/wv2op5l6mkQ08sknT7EwsQkJfmpwiQSok3+qbQ6peoFcwRUiJ sRNhN73tRbFfT+ATVD/mRnDiNUy9KBY5SM6cKU+mSr0tHL6G5Y8q5gAk6v3sRorG ACiDEwpTVAV85hGQHUR0KlzKVgbFIZxxo/85/uW9Ryz5dl92jfjvoW9+GgXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhgf58wSrKzeMc7+haCerxbmchRcwHwYDVR0j BBgwFoAUEln+kdIWENS6SHxgyAT2brZZHKgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzkwOTczNy0xNTY0LTQ2Y2EtOTAwOS04ZDI4YTU2ZTk4ZWUvMC8xMjU5RkU5MUQy MTYxMEQ0QkE0ODdDNjBDODA0RjY2RUI2NTkxQ0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVCNjU5 MUNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2 NkVCNjU5MUNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARyZ7QL8rkKlnTptq7uFELlOGweuGzaf9hh 6lFdvQnqBWdH8y+ex2CJPxae8WHJRJo5VGg9lzpw7Qzp+Qy/YoYberUpj0Re1At+ QunFMKLc/nN/Z+dMSqE3uChXen5wuzFM7DA4cerwpFjp3wHZwRRWOMYx2q+BYkMj e7hENyDwfrdqb86MMCqM9gPhcEegXTfdLbO+axMjhCw4UJIve5Ays5sHJqTMM+D/ Sw5PhTS/19rue7ICD5/m23vkYSYQWtIQwsQNIYMAdt6UKJy+DC9iISEdBoJMs6W5 9qO7nqK2EpjjCuVX1XCPx7ZEYvxGPJBFB2MJbi3Oc60rFz8+/SI= -----END CERTIFICATE-----Generated at Mon Apr 27 19:49:07 2026 by rpki-client