$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: aYbTgpPVDa//EEXq3q0fv+QpoacSBLI2aGUC2Uv1iVY= Subject key identifier: E1:D3:A6:8A:0B:2D:32:7E:94:76:58:16:0C:5C:A5:FB:36:FD:B9:85 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 668BA8922CBA63F25B2604095DEC590C317ABCB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 051A Signing time: Fri 24 Oct 2025 19:01:03 +0000 Manifest this update: Fri 24 Oct 2025 18:56:03 +0000 Manifest next update: Tue 28 Oct 2025 02:33:03 +0000 Files and hashes: 1: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: 3+nb2vghWJ1zI1r83ff0U/01Y3QXOVbnR8U05yGj/G0=) 2: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: 1EZSjvRP2SRnr2FbtmEkuDAZWdhz/ERYDxYK2+TR5jA=) 3: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: G0VeuaYXS/KgF8/ez14lbGq6IneUYgvcmaO4bAZiGEU=) 4: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: zYQUx+ql30PPLkUcmDWdEwPKMJFZU5b5VUJfAZqzXL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8b:a8:92:2c:ba:63:f2:5b:26:04:09:5d:ec:59:0c:31:7a:bc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Oct 24 18:56:03 2025 GMT Not After : Oct 28 02:33:03 2025 GMT Subject: CN=E1D3A68A0B2D327E947658160C5CA5FB36FDB985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:84:b9:2a:ef:f7:dc:d7:d7:9d:45:28:6b:f3: 99:75:5a:b2:01:f8:3b:fa:e8:f7:ab:75:a9:9a:4a: 51:96:c7:34:90:c9:7a:2f:d1:2d:ab:35:f1:2f:c2: 6f:a8:b0:4d:b4:57:77:9d:94:e9:59:ee:a3:90:2e: 61:3b:15:8a:46:e2:4f:10:62:92:e6:f1:78:64:ad: 6b:e9:ec:c4:fe:8f:e3:25:d2:e7:cd:6a:61:a9:ce: da:a6:15:9e:2e:f0:da:dd:21:f4:16:a6:a1:65:aa: 2f:6c:a8:02:46:d9:92:1b:d4:74:c9:29:45:27:8a: 9d:44:1f:a2:7f:f8:3f:06:89:3c:5f:2c:b2:e0:4e: 21:4a:aa:9f:a3:c6:11:60:4a:62:92:48:99:28:f4: b2:b0:60:79:7c:3d:76:d7:fb:da:bd:64:a4:c9:51: 86:48:71:be:57:7a:8c:f8:66:61:2c:9d:0e:79:72: 0a:79:8e:e2:63:ad:27:31:3b:9b:cf:19:40:63:72: 66:80:62:90:1d:e5:fc:eb:56:7a:c3:c6:20:13:53: cf:fa:6b:59:1e:37:39:83:bb:14:12:5e:04:d4:45: 73:52:c8:f9:fb:9d:8a:cb:77:f9:81:03:d7:59:6c: f4:4e:19:02:fa:08:55:04:3d:38:02:bc:2f:71:69: 08:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D3:A6:8A:0B:2D:32:7E:94:76:58:16:0C:5C:A5:FB:36:FD:B9:85 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:29:1c:2a:da:21:59:07:15:69:95:ee:3f:e8:dd:55:7a:c3: 9b:01:5d:75:54:c7:56:cb:38:a5:f9:01:ca:d1:f1:00:8c:dc: e6:41:af:33:12:13:9f:c0:6c:aa:b4:06:b1:ac:02:bb:6e:5a: 41:e1:4d:72:ed:93:02:c6:e4:2f:ff:cf:23:24:d9:3f:55:da: 71:b7:96:ae:6d:20:4f:d4:14:56:ec:2f:e2:a9:3c:66:37:d3: e7:e4:10:84:0e:e0:1d:de:ac:da:39:1f:ef:99:02:0c:48:78: 46:cf:46:68:96:66:05:34:1e:c1:12:79:c5:7b:10:13:3c:aa: b2:9c:83:63:57:95:23:1c:28:cd:a8:cf:2c:37:8f:da:60:6a: 7f:fe:a9:41:86:b1:40:21:10:2c:6d:aa:f8:12:d1:e4:cc:0e: 29:b9:53:21:ec:e2:e9:12:7c:5e:e0:f0:3c:e8:7d:cb:ec:92: 53:43:cd:50:cf:b6:bb:62:1d:81:b2:da:8a:cd:bd:4a:bf:27: 0a:2b:87:ae:a9:b1:32:b5:59:c7:8b:a1:8c:c3:d5:7d:19:56: 90:a5:a3:45:f1:fb:24:26:c4:39:2c:1d:8b:6e:60:90:4d:ef: 6a:f5:73:03:85:3d:ee:df:5b:3f:4c:e9:5f:af:76:13:1a:0d: b3:53:c9:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZouokiy6Y/JbJgQJXexZDDF6vLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNTEwMjQxODU2MDNaFw0yNTEwMjgwMjMzMDNaMDMxMTAvBgNV BAMTKEUxRDNBNjhBMEIyRDMyN0U5NDc2NTgxNjBDNUNBNUZCMzZGREI5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmhLkq7/fc19edRShr85l1WrIB +Dv66PerdamaSlGWxzSQyXov0S2rNfEvwm+osE20V3edlOlZ7qOQLmE7FYpG4k8Q YpLm8XhkrWvp7MT+j+Ml0ufNamGpztqmFZ4u8NrdIfQWpqFlqi9sqAJG2ZIb1HTJ KUUnip1EH6J/+D8GiTxfLLLgTiFKqp+jxhFgSmKSSJko9LKwYHl8PXbX+9q9ZKTJ UYZIcb5Xeoz4ZmEsnQ55cgp5juJjrScxO5vPGUBjcmaAYpAd5fzrVnrDxiATU8/6 a1keNzmDuxQSXgTURXNSyPn7nYrLd/mBA9dZbPROGQL6CFUEPTgCvC9xaQj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4dOmigstMn6UdlgWDFyl+zb9uYUwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgpHCraIVkHFWmV7j/o3VV6w5sBXXVUx1bL OKX5AcrR8QCM3OZBrzMSE5/AbKq0BrGsArtuWkHhTXLtkwLG5C//zyMk2T9V2nG3 lq5tIE/UFFbsL+KpPGY30+fkEIQO4B3erNo5H++ZAgxIeEbPRmiWZgU0HsESecV7 EBM8qrKcg2NXlSMcKM2ozyw3j9pgan/+qUGGsUAhECxtqvgS0eTMDim5UyHs4ukS fF7g8DzofcvsklNDzVDPtrtiHYGy2orNvUq/Jworh66psTK1WceLoYzD1X0ZVpCl o0Xx+yQmxDksHYtuYJBN72r1cwOFPe7fWz9M6V+vdhMaDbNTybQ= -----END CERTIFICATE-----Generated at Sat Oct 25 20:39:44 2025 by rpki-client