$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: TiOD+RUUR/uVUgeKy8M/qk0qqXm3i3kwqZo33qaI7o0= Subject key identifier: F9:A4:06:41:45:16:F1:D4:03:60:AB:A9:0B:28:1C:C6:41:B1:49:D7 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 23077BC9A63E2FA860EA2B4522D333DD3377B022 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 04BF Signing time: Sat 05 Apr 2025 20:50:59 +0000 Manifest this update: Sat 05 Apr 2025 20:45:59 +0000 Manifest next update: Tue 08 Apr 2025 23:36:59 +0000 Files and hashes: 1: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: SMYYurY0SEO2jZThWJbzWbXaP4HTkeYhENGpVK8uUQA=) 2: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: MUfVq8flNGOivhnl4jjR14qjwu6GNOjMW+mPbMeDTjo=) 3: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: 3RumU7Dr69Yz04sYFtclOWsPkh9HLdtvgAmxPCEES4A=) 4: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: x48RZie0/oYbGzj1kIT+aUkxT6LfFYhJDQ9pQpC6TKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:07:7b:c9:a6:3e:2f:a8:60:ea:2b:45:22:d3:33:dd:33:77:b0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Apr 5 20:45:59 2025 GMT Not After : Apr 8 23:36:59 2025 GMT Subject: CN=F9A406414516F1D40360ABA90B281CC641B149D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:8f:ec:5f:5f:6a:ae:d6:a3:b2:b0:ba:3e: ec:e5:1a:32:4f:bb:8a:08:4d:b4:40:b5:15:f4:4a: d4:8d:37:e0:2d:3c:f8:3c:ce:7c:84:22:b9:8f:82: ae:fe:2e:4a:4e:7c:c2:2b:62:71:0d:30:0a:db:8f: f2:11:0c:c2:c4:23:4c:18:a6:dc:66:3b:61:0b:e9: 03:e7:68:1f:51:19:15:fb:94:13:6d:a1:62:43:bd: 91:bc:45:55:2a:3e:dd:a8:c3:13:a6:01:d8:0c:77: 20:30:30:5a:40:94:7a:f9:b6:2d:c2:64:1d:33:4e: 2a:a4:4c:af:3f:30:94:f4:f8:4f:3d:f9:69:ac:4b: ca:82:3f:1a:d7:42:19:d0:9a:b4:46:79:d2:5d:df: c2:ff:49:cb:2e:b1:e0:d6:c9:ff:42:a6:bb:77:b4: d7:87:be:05:20:96:14:3a:3d:39:de:b2:d0:ab:e4: 39:ee:f5:49:55:17:fa:5a:73:0c:c4:74:ea:0e:85: 45:65:4e:5c:f7:90:c7:62:1f:fc:cc:f0:5e:24:60: 12:43:a8:8b:24:71:ca:57:f3:f5:55:3d:41:db:37: 34:31:cd:7b:5d:19:a5:03:8b:4e:7b:6c:d4:c2:9a: 94:33:f4:e5:33:f4:cb:98:93:18:ba:fb:4b:73:01: 23:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A4:06:41:45:16:F1:D4:03:60:AB:A9:0B:28:1C:C6:41:B1:49:D7 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e9:4f:46:87:cf:9e:6c:9b:56:f0:52:a2:d1:07:47:7b:9c: 6a:7c:83:f4:79:6f:d3:34:92:38:21:c5:2a:ef:33:55:91:25: 13:2b:13:f2:cd:ad:37:15:6c:37:21:7d:2c:29:42:8e:58:f5: 66:d0:cf:58:f9:41:96:62:35:58:64:a2:60:71:40:a0:5e:62: 79:3e:ac:7d:39:ef:c6:43:3c:57:f9:01:0d:32:73:19:80:79: 50:d9:1d:be:73:44:a1:08:f2:9c:4b:38:97:52:fb:43:0d:21: 3d:08:1b:9f:12:b5:d8:b1:1a:0a:68:69:06:b9:99:4e:6e:62: c6:92:cc:67:cc:73:bc:0e:0b:ff:46:97:67:ce:44:95:df:20: 68:f8:71:43:f4:4e:d2:da:55:26:36:32:38:55:82:b8:c8:b9: 77:ad:34:5c:68:a8:f1:2d:de:24:e6:a7:93:7d:f4:1f:91:ac: 66:8a:bd:4b:8e:42:60:65:fe:ce:e9:ea:b4:91:bf:a4:2f:50: e5:8c:a5:16:22:ed:e4:47:ca:6a:d7:31:c8:ca:09:92:d8:ac: 70:22:f2:22:a3:03:60:84:25:84:3c:81:7e:8e:d5:68:41:f2: 2c:86:ae:7e:2a:33:2d:f9:cd:99:6e:d3:80:1f:41:58:69:06: e8:11:01:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwd7yaY+L6hg6itFItMz3TN3sCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNTA0MDUyMDQ1NTlaFw0yNTA0MDgyMzM2NTlaMDMxMTAvBgNV BAMTKEY5QTQwNjQxNDUxNkYxRDQwMzYwQUJBOTBCMjgxQ0M2NDFCMTQ5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr64/sX19qrtajsrC6PuzlGjJP u4oITbRAtRX0StSNN+AtPPg8znyEIrmPgq7+LkpOfMIrYnENMArbj/IRDMLEI0wY ptxmO2EL6QPnaB9RGRX7lBNtoWJDvZG8RVUqPt2owxOmAdgMdyAwMFpAlHr5ti3C ZB0zTiqkTK8/MJT0+E89+WmsS8qCPxrXQhnQmrRGedJd38L/ScsuseDWyf9Cprt3 tNeHvgUglhQ6PTnestCr5Dnu9UlVF/pacwzEdOoOhUVlTlz3kMdiH/zM8F4kYBJD qIskccpX8/VVPUHbNzQxzXtdGaUDi057bNTCmpQz9OUz9MuYkxi6+0tzASO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+aQGQUUW8dQDYKupCygcxkGxSdcwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPpT0aHz55sm1bwUqLRB0d7nGp8g/R5b9M0 kjghxSrvM1WRJRMrE/LNrTcVbDchfSwpQo5Y9WbQz1j5QZZiNVhkomBxQKBeYnk+ rH0578ZDPFf5AQ0ycxmAeVDZHb5zRKEI8pxLOJdS+0MNIT0IG58StdixGgpoaQa5 mU5uYsaSzGfMc7wOC/9Gl2fORJXfIGj4cUP0TtLaVSY2MjhVgrjIuXetNFxoqPEt 3iTmp5N99B+RrGaKvUuOQmBl/s7p6rSRv6QvUOWMpRYi7eRHymrXMcjKCZLYrHAi 8iKjA2CEJYQ8gX6O1WhB8iyGrn4qMy35zZlu04AfQVhpBugRAZ4= -----END CERTIFICATE-----Generated at Sat Apr 5 23:25:41 2025 by rpki-client