$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.mft (raw, json) Hash identifier: IgZcHUEWFzc/N24MJjH7etf1EH2g7Ij9+5ym68+eAxs= Subject key identifier: 70:23:53:59:7D:B3:B7:96:B6:01:37:8A:88:3B:1D:63:61:A2:F7:B9 Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 Certificate issuer: /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Certificate serial: 53B5B286F949C3166CFD958340EE63D999859DBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft Manifest number: 04E3 Signing time: Mon 27 Oct 2025 17:41:36 +0000 Manifest this update: Mon 27 Oct 2025 17:36:36 +0000 Manifest next update: Fri 31 Oct 2025 04:05:36 +0000 Files and hashes: 1: 1259FE91D21610D4BA487C60C804F66EB6591CA8.crl (hash: tcMk8S37juQCesBJnJoEqi4Pd5SBBr2K109U8TX4b8g=) 2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: ybooJJfuCLWJ6Wkr2xd+dtjVGbG8gCLcuXzjWzkx1V0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 04:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b5:b2:86:f9:49:c3:16:6c:fd:95:83:40:ee:63:d9:99:85:9d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Validity Not Before: Oct 27 17:36:36 2025 GMT Not After : Oct 31 04:05:36 2025 GMT Subject: CN=702353597DB3B796B601378A883B1D6361A2F7B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ba:40:b5:44:bb:8c:f9:05:90:66:62:6c:a0: 9b:93:77:29:af:6d:71:48:bc:2e:dc:4d:1c:d8:72: 25:24:e5:6e:e1:9e:17:57:e9:f2:18:4e:3e:77:af: 1a:f6:4b:31:aa:bd:87:c1:b5:53:df:69:d9:e7:8f: 2a:ed:4d:8b:f7:6e:4c:09:0b:e8:cb:bf:69:78:4f: 50:37:8a:81:49:46:9d:c3:8f:9d:3f:75:47:fe:d8: 04:33:e7:5c:c0:2e:a4:ef:30:18:b7:29:fa:0c:87: e5:d0:03:e1:d6:85:ad:a7:0a:c3:6d:58:e0:00:41: 19:84:c4:e6:d9:e3:52:92:29:e1:61:cd:28:f6:b2: 48:f0:a0:de:8e:ce:fc:c0:0b:45:a1:ba:1d:8a:fd: c4:2d:04:1e:0a:98:ab:0b:22:6a:86:52:d0:15:b6: 38:f5:64:10:6b:61:d0:0c:2d:3f:a3:e7:3a:d6:52: 54:c4:60:55:47:be:c8:96:3d:9a:a1:0c:2c:c9:20: cd:8e:8f:0c:83:ec:96:73:b4:d9:c0:96:dc:af:02: 53:70:fd:5e:57:98:87:aa:d3:29:01:dc:f8:60:30: 9b:1c:b0:a3:b7:c8:ea:7a:d8:50:31:68:f3:fe:c9: 3e:8e:6d:81:97:87:be:98:2f:77:95:f2:6f:ee:37: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:23:53:59:7D:B3:B7:96:B6:01:37:8A:88:3B:1D:63:61:A2:F7:B9 X509v3 Authority Key Identifier: keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:28:62:57:05:97:58:80:b0:20:0f:b3:3f:ee:50:7e:95:e8: 07:0b:08:d3:d5:55:03:ca:74:be:6c:5f:7b:8f:3f:75:1a:f9: 3c:2b:a2:a0:55:bb:81:79:75:00:b5:ff:f6:cd:c8:f5:ca:14: ba:26:fe:f1:84:16:2c:1e:b1:ad:85:36:0d:59:9b:9e:09:96: 93:c7:42:3e:75:4e:6d:f0:f4:b3:cb:95:79:07:48:63:a6:84: a4:16:67:b8:17:7d:a3:57:f5:ce:06:e3:e4:9a:d9:3e:9f:94: d6:af:74:45:63:55:d7:67:1f:96:cc:aa:5d:9a:17:84:48:45: 89:21:65:e8:b6:15:4d:6c:31:25:6f:21:6d:3a:b1:83:24:09: f4:dc:11:0e:bc:87:e0:9a:de:0d:41:11:af:46:69:75:82:38: 9a:db:15:79:14:8b:cd:96:83:b0:16:fe:68:56:37:da:25:62: b8:8c:77:0f:ec:92:71:73:6e:29:02:0c:1a:37:04:2a:ba:53: 7c:29:9e:97:f0:6a:97:47:92:36:93:da:59:d5:11:a2:54:d1: 2f:b6:90:88:12:54:75:3f:31:ab:50:df:c2:5e:21:29:d0:c6: e9:de:62:b4:c3:7e:df:0c:df:d9:00:d1:75:47:15:d0:85:d2: 1e:0e:ff:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7WyhvlJwxZs/ZWDQO5j2ZmFnb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVC NjU5MUNBODAeFw0yNTEwMjcxNzM2MzZaFw0yNTEwMzEwNDA1MzZaMDMxMTAvBgNV BAMTKDcwMjM1MzU5N0RCM0I3OTZCNjAxMzc4QTg4M0IxRDYzNjFBMkY3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ukC1RLuM+QWQZmJsoJuTdymv bXFIvC7cTRzYciUk5W7hnhdX6fIYTj53rxr2SzGqvYfBtVPfadnnjyrtTYv3bkwJ C+jLv2l4T1A3ioFJRp3Dj50/dUf+2AQz51zALqTvMBi3KfoMh+XQA+HWha2nCsNt WOAAQRmExObZ41KSKeFhzSj2skjwoN6OzvzAC0Whuh2K/cQtBB4KmKsLImqGUtAV tjj1ZBBrYdAMLT+j5zrWUlTEYFVHvsiWPZqhDCzJIM2OjwyD7JZztNnAltyvAlNw /V5XmIeq0ykB3PhgMJscsKO3yOp62FAxaPP+yT6ObYGXh76YL3eV8m/uN2PHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcCNTWX2zt5a2ATeKiDsdY2Gi97kwHwYDVR0j BBgwFoAUEln+kdIWENS6SHxgyAT2brZZHKgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzkwOTczNy0xNTY0LTQ2Y2EtOTAwOS04ZDI4YTU2ZTk4ZWUvMC8xMjU5RkU5MUQy MTYxMEQ0QkE0ODdDNjBDODA0RjY2RUI2NTkxQ0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVCNjU5 MUNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2 NkVCNjU5MUNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEoYlcFl1iAsCAPsz/uUH6V6AcLCNPVVQPK dL5sX3uPP3Ua+TwroqBVu4F5dQC1//bNyPXKFLom/vGEFiwesa2FNg1Zm54JlpPH Qj51Tm3w9LPLlXkHSGOmhKQWZ7gXfaNX9c4G4+Sa2T6flNavdEVjVddnH5bMql2a F4RIRYkhZei2FU1sMSVvIW06sYMkCfTcEQ68h+Ca3g1BEa9GaXWCOJrbFXkUi82W g7AW/mhWN9olYriMdw/sknFzbikCDBo3BCq6U3wpnpfwapdHkjaT2lnVEaJU0S+2 kIgSVHU/MatQ38JeISnQxuneYrTDft8M39kA0XVHFdCF0h4O//U= -----END CERTIFICATE-----Generated at Tue Oct 28 16:06:34 2025 by rpki-client