$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.mft (raw, json) Hash identifier: rHaO+ViumImugh9WahQZiFsl6A62UI2nr07qcm71sB4= Subject key identifier: 55:54:21:2C:DA:57:A6:AB:35:37:83:93:9B:82:BA:E5:6B:45:61:FD Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 Certificate issuer: /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Certificate serial: 182DD52DA0588081E68F6EC8F24FEF4B8AA0AA74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft Manifest number: 04A1 Signing time: Tue 03 Jun 2025 15:32:51 +0000 Manifest this update: Tue 03 Jun 2025 15:27:51 +0000 Manifest next update: Fri 06 Jun 2025 23:54:51 +0000 Files and hashes: 1: 1259FE91D21610D4BA487C60C804F66EB6591CA8.crl (hash: 1jMBcBhushDIGlt4jYfmcpjeA8qmRL+S3wItTDxp3uU=) 2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: oB1d9yvgfS+HluooOtRbWp6RFCioJruvG1J3R5Z7jjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:2d:d5:2d:a0:58:80:81:e6:8f:6e:c8:f2:4f:ef:4b:8a:a0:aa:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Validity Not Before: Jun 3 15:27:51 2025 GMT Not After : Jun 6 23:54:51 2025 GMT Subject: CN=5554212CDA57A6AB353783939B82BAE56B4561FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0c:db:11:15:ad:cc:53:ab:5e:7d:8b:cf:54: 9c:25:33:d6:34:9e:03:f6:f4:de:57:61:83:b5:ad: 13:92:17:d8:8c:5b:19:ee:c9:1f:cf:5f:d1:6a:8d: b4:4c:f9:ad:73:b8:5c:a2:58:3e:2d:a8:98:94:55: 67:af:81:d8:10:6a:8e:d1:a3:12:c8:60:9d:13:0f: fe:7b:5b:b2:22:09:1a:1b:c2:fb:f9:05:bb:fd:08: a5:c7:18:3e:2a:72:94:e7:f2:ff:ee:c9:7a:2b:28: 36:71:07:aa:80:3c:89:a3:90:a4:f1:49:5d:5a:77: fe:81:f2:f0:16:9a:7f:ad:9c:49:37:65:b6:08:46: b7:13:1b:ee:59:ba:eb:96:37:59:b4:4a:b8:60:96: d0:fb:29:a1:04:98:45:be:79:00:e1:72:a8:46:46: 16:1d:ca:fb:86:7c:6d:00:25:c9:90:fd:e0:8d:f5: e7:7d:31:a0:f3:7f:b0:29:c9:3a:f3:0a:af:54:99: 3f:39:68:22:50:1e:90:ad:29:a9:ab:5a:e3:7d:6a: 63:cd:91:4c:aa:0f:2b:e1:11:88:9a:50:f5:97:1f: 5b:1b:b6:d8:03:69:de:b9:96:6b:84:e7:40:cc:d8: 53:7a:c9:c0:37:6c:52:5d:3f:be:2d:66:40:ba:71: d2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:54:21:2C:DA:57:A6:AB:35:37:83:93:9B:82:BA:E5:6B:45:61:FD X509v3 Authority Key Identifier: keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a0:4e:de:95:b8:2e:f3:06:cb:f2:4d:05:da:45:19:b3:b8: 21:1c:71:7e:f0:5d:c1:08:33:e8:00:99:c8:17:05:8c:ac:ea: 3b:5c:98:d7:43:10:d5:13:be:f3:4b:3b:b8:e2:57:17:3b:9b: 37:4e:fc:e5:d6:b1:35:81:6b:23:9c:34:e4:4f:4d:f8:5f:f9: 2f:60:31:e9:16:9c:40:01:b1:34:a8:de:99:48:1a:8c:b7:0e: c9:02:c5:a1:31:77:b3:27:d9:a6:eb:90:fb:9a:6f:f0:ea:e0: aa:fa:ab:a7:52:9e:65:55:6f:e8:60:22:0e:c2:f6:3e:07:50: b3:0a:b7:dd:01:66:76:fc:73:7d:90:0f:e6:03:59:05:0e:27: dc:2c:fb:d8:fa:f3:d7:31:06:c7:65:7d:12:bc:12:a8:af:be: 61:4e:68:e8:ac:ff:ba:ad:de:79:f3:7c:b0:ac:bf:f6:cd:e1: 58:2b:fe:6c:ee:59:33:f9:d7:dc:0a:ab:7f:e4:07:37:97:1a: 6a:13:a1:95:4d:ff:c9:9a:f5:59:1e:92:33:ff:0d:8b:f6:55: 0c:45:34:0f:e3:fc:db:de:83:bc:09:ba:0c:30:4f:a5:9d:57: 3a:23:46:46:05:3d:ce:a3:51:15:fe:78:bf:62:20:bf:85:28: 43:96:d8:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGC3VLaBYgIHmj27I8k/vS4qgqnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVC NjU5MUNBODAeFw0yNTA2MDMxNTI3NTFaFw0yNTA2MDYyMzU0NTFaMDMxMTAvBgNV BAMTKDU1NTQyMTJDREE1N0E2QUIzNTM3ODM5MzlCODJCQUU1NkI0NTYxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgDNsRFa3MU6tefYvPVJwlM9Y0 ngP29N5XYYO1rROSF9iMWxnuyR/PX9FqjbRM+a1zuFyiWD4tqJiUVWevgdgQao7R oxLIYJ0TD/57W7IiCRobwvv5Bbv9CKXHGD4qcpTn8v/uyXorKDZxB6qAPImjkKTx SV1ad/6B8vAWmn+tnEk3ZbYIRrcTG+5ZuuuWN1m0SrhgltD7KaEEmEW+eQDhcqhG RhYdyvuGfG0AJcmQ/eCN9ed9MaDzf7ApyTrzCq9UmT85aCJQHpCtKamrWuN9amPN kUyqDyvhEYiaUPWXH1sbttgDad65lmuE50DM2FN6ycA3bFJdP74tZkC6cdKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVVQhLNpXpqs1N4OTm4K65WtFYf0wHwYDVR0j BBgwFoAUEln+kdIWENS6SHxgyAT2brZZHKgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzkwOTczNy0xNTY0LTQ2Y2EtOTAwOS04ZDI4YTU2ZTk4ZWUvMC8xMjU5RkU5MUQy MTYxMEQ0QkE0ODdDNjBDODA0RjY2RUI2NTkxQ0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVCNjU5 MUNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2 NkVCNjU5MUNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJagTt6VuC7zBsvyTQXaRRmzuCEccX7wXcEI M+gAmcgXBYys6jtcmNdDENUTvvNLO7jiVxc7mzdO/OXWsTWBayOcNORPTfhf+S9g MekWnEABsTSo3plIGoy3DskCxaExd7Mn2abrkPuab/Dq4Kr6q6dSnmVVb+hgIg7C 9j4HULMKt90BZnb8c32QD+YDWQUOJ9ws+9j689cxBsdlfRK8EqivvmFOaOis/7qt 3nnzfLCsv/bN4Vgr/mzuWTP519wKq3/kBzeXGmoToZVN/8ma9VkekjP/DYv2VQxF NA/j/Nveg7wJugwwT6WdVzojRkYFPc6jURX+eL9iIL+FKEOW2BA= -----END CERTIFICATE-----Generated at Thu Jun 5 19:01:37 2025 by rpki-client