$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: Qu/EYsIvJvXX6rrRhwbShqgpHjP7xDjeHAg68uz+RqE= Subject key identifier: 82:1B:97:56:DB:F8:BA:82:FF:A2:23:0A:69:24:F6:0D:2D:03:87:D2 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 17C8156E51DC45CBD441A977F54D5B90C73836C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 0505 Signing time: Mon 08 Sep 2025 00:51:07 +0000 Manifest this update: Mon 08 Sep 2025 00:46:07 +0000 Manifest next update: Thu 11 Sep 2025 12:14:07 +0000 Files and hashes: 1: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: 7keHTHuC8uGle24j6LNORdEsMwmk1cPeng1c2CTD9Nk=) 2: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: G0VeuaYXS/KgF8/ez14lbGq6IneUYgvcmaO4bAZiGEU=) 3: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: 1EZSjvRP2SRnr2FbtmEkuDAZWdhz/ERYDxYK2+TR5jA=) 4: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: zYQUx+ql30PPLkUcmDWdEwPKMJFZU5b5VUJfAZqzXL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 12:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c8:15:6e:51:dc:45:cb:d4:41:a9:77:f5:4d:5b:90:c7:38:36:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Sep 8 00:46:07 2025 GMT Not After : Sep 11 12:14:07 2025 GMT Subject: CN=821B9756DBF8BA82FFA2230A6924F60D2D0387D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:54:4a:d1:20:fb:21:7b:b0:c0:ad:30:7f:67: 0f:ea:05:51:77:e6:1a:12:cc:34:d1:da:6a:84:53: 68:fb:85:2f:e6:a9:8a:81:8b:b0:04:65:1c:17:58: 80:8a:75:9f:ca:49:0a:e8:0e:ea:e1:4f:f5:c2:e7: c1:84:1c:78:52:6b:d9:d5:0e:66:43:f8:7d:6f:7a: 5a:10:52:05:93:ec:6f:dc:8b:d5:e2:18:26:58:75: 42:7a:85:b4:47:2e:42:0f:ba:a8:2a:4b:ed:9e:07: 35:e9:20:30:1d:1f:df:14:80:92:78:34:fd:4d:6f: f4:e3:f6:68:bc:96:45:f7:4b:91:e4:47:9d:d3:8c: 10:1a:d7:de:fd:4b:04:ad:6b:a9:0d:7e:48:78:ac: 6f:fb:bb:a7:c5:d1:4d:66:22:8f:6c:6e:36:fb:2d: 6f:04:a8:e3:32:39:f1:a7:7e:53:34:11:22:29:71: 2c:bf:9d:a1:34:84:b3:9d:10:af:e8:be:4f:19:56: 8c:a8:4d:68:0b:64:b8:73:e4:9c:14:d0:6e:d8:3d: d1:26:c2:40:11:c5:35:40:6d:88:65:b7:9a:1b:be: 9a:f0:28:e7:ca:2f:10:b5:d9:ae:7d:ce:b8:d7:83: db:4e:c1:e3:be:2a:b6:b6:8c:dd:3a:e9:4a:48:53: 3a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1B:97:56:DB:F8:BA:82:FF:A2:23:0A:69:24:F6:0D:2D:03:87:D2 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:f6:33:46:ae:fc:c4:99:77:4c:0f:65:97:dd:46:18:ce:34: 4d:29:8d:bd:99:46:69:0a:fe:63:6a:3d:73:89:47:03:8b:a0: fe:48:8c:75:c6:2f:db:1d:3e:2c:ee:11:70:0f:a3:77:f0:12: bc:8a:04:34:e0:67:8d:11:3d:d3:fe:82:0e:8d:03:e8:fd:a1: 3d:93:9b:55:87:63:c3:29:15:9a:80:ab:51:92:a4:2a:f4:52: 35:68:ea:a8:86:56:29:4a:5a:aa:1b:1e:9c:ad:07:1b:77:f9: 44:dc:ca:16:1e:2f:92:e1:b2:93:34:9a:97:18:42:f8:39:09: ff:ef:ec:7a:f7:d7:a7:91:2b:ba:9b:b8:58:81:a8:32:29:70: 8c:a6:94:05:1c:6f:82:89:2f:8b:0e:da:7a:c2:e3:85:29:41: 34:a7:9a:d8:12:a9:9e:b3:d1:84:65:a2:69:c5:df:d2:d0:ff: 05:65:39:8f:ed:28:32:49:50:f7:a0:ae:13:24:bc:35:98:0e: de:ba:bc:2e:89:1c:2a:b9:2a:69:ea:0e:45:46:8d:46:66:a5: ca:05:02:87:df:3d:f5:7b:15:9c:09:e6:7d:c3:e8:cf:f3:f9: e4:8d:5f:c5:59:d6:3c:59:32:17:22:cb:eb:ef:58:7d:95:79: 45:b9:73:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8gVblHcRcvUQal39U1bkMc4NsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNTA5MDgwMDQ2MDdaFw0yNTA5MTExMjE0MDdaMDMxMTAvBgNV BAMTKDgyMUI5NzU2REJGOEJBODJGRkEyMjMwQTY5MjRGNjBEMkQwMzg3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1VErRIPshe7DArTB/Zw/qBVF3 5hoSzDTR2mqEU2j7hS/mqYqBi7AEZRwXWICKdZ/KSQroDurhT/XC58GEHHhSa9nV DmZD+H1veloQUgWT7G/ci9XiGCZYdUJ6hbRHLkIPuqgqS+2eBzXpIDAdH98UgJJ4 NP1Nb/Tj9mi8lkX3S5HkR53TjBAa1979SwSta6kNfkh4rG/7u6fF0U1mIo9sbjb7 LW8EqOMyOfGnflM0ESIpcSy/naE0hLOdEK/ovk8ZVoyoTWgLZLhz5JwU0G7YPdEm wkARxTVAbYhlt5obvprwKOfKLxC12a59zrjXg9tOweO+Kra2jN066UpIUzpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghuXVtv4uoL/oiMKaST2DS0Dh9IwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANP2M0au/MSZd0wPZZfdRhjONE0pjb2ZRmkK /mNqPXOJRwOLoP5IjHXGL9sdPizuEXAPo3fwEryKBDTgZ40RPdP+gg6NA+j9oT2T m1WHY8MpFZqAq1GSpCr0UjVo6qiGVilKWqobHpytBxt3+UTcyhYeL5LhspM0mpcY Qvg5Cf/v7Hr316eRK7qbuFiBqDIpcIymlAUcb4KJL4sO2nrC44UpQTSnmtgSqZ6z 0YRlomnF39LQ/wVlOY/tKDJJUPegrhMkvDWYDt66vC6JHCq5KmnqDkVGjUZmpcoF AoffPfV7FZwJ5n3D6M/z+eSNX8VZ1jxZMhciy+vvWH2VeUW5c4c= -----END CERTIFICATE-----Generated at Mon Sep 8 13:55:46 2025 by rpki-client