$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: KSDbNTc1G9L7S6z2PvDhW2zBSS/0i2P3UNqV64JhMAo= Subject key identifier: 05:94:EC:DA:A7:BA:43:B3:C1:DE:8D:B2:7C:DE:74:CD:E5:AD:AE:6B Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 716F3F5A5F6FAEB203529C8C0BACFA5739028D2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: 59 Signing time: Thu 04 Sep 2025 21:32:19 +0000 Manifest this update: Thu 04 Sep 2025 21:27:19 +0000 Manifest next update: Sun 07 Sep 2025 23:09:19 +0000 Files and hashes: 1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=) 2: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: rcFO1k7MadIoDF+MjYprD4LpkmHV6bFmQQiK0a8t7hE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 23:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6f:3f:5a:5f:6f:ae:b2:03:52:9c:8c:0b:ac:fa:57:39:02:8d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Sep 4 21:27:19 2025 GMT Not After : Sep 7 23:09:19 2025 GMT Subject: CN=0594ECDAA7BA43B3C1DE8DB27CDE74CDE5ADAE6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ff:c4:2b:f3:75:7c:af:b6:f9:d7:2a:d8:cb: c6:b1:21:90:f2:34:68:2e:dd:f9:67:b2:f2:df:3d: da:38:88:1f:d5:20:a5:f6:fc:4a:98:a2:08:ca:76: 1f:f1:cd:44:e5:87:95:32:94:55:a1:59:0d:70:27: 93:82:88:4f:71:a2:63:f8:ea:53:f9:94:f3:f1:70: c6:c2:81:72:0a:d3:3c:5a:fe:1d:d9:03:76:e5:22: 93:b0:bd:11:23:14:97:48:fc:a8:fa:24:c2:e2:c5: 1e:d1:33:31:8e:85:b0:a5:e9:55:45:da:9d:1c:1a: 72:60:d7:24:84:09:94:e6:90:4b:ab:fd:76:5f:af: 6b:af:58:a6:2d:70:c1:ef:5f:a6:be:0a:54:23:f1: b4:09:a6:2f:05:d3:a1:91:46:b6:f7:7e:cd:43:d0: c4:ce:ad:c7:3c:2c:84:3d:3a:00:07:a5:06:34:50: d6:23:0c:1d:82:44:1e:e1:a1:d8:cb:2a:d7:dd:d5: 13:3b:14:41:96:26:81:2b:ba:cf:58:c5:d4:b0:34: 47:cd:8c:16:6b:40:89:94:1a:8d:f4:82:e0:0f:73: 4f:95:bd:8c:2b:36:b6:e1:16:4e:06:04:c4:ec:10: cf:b7:46:7f:87:00:b6:07:23:c2:df:da:d9:df:5c: e0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:94:EC:DA:A7:BA:43:B3:C1:DE:8D:B2:7C:DE:74:CD:E5:AD:AE:6B X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:85:db:1d:4c:cf:30:2c:6d:ce:de:57:8d:05:9b:33:5b:50: bd:7e:76:d5:cb:b0:9b:9d:a2:c0:3d:12:5e:5c:8d:f1:7e:c2: 4f:3e:ee:d8:26:cf:ce:d8:e3:05:af:8e:e7:28:ae:19:c5:45: 63:1a:29:6a:24:3b:70:25:92:d6:f2:5f:76:e7:ed:87:2a:78: 0f:ef:36:33:95:4c:4c:97:9e:18:2e:38:cd:58:10:3b:36:8d: 60:b0:e3:b6:e3:4e:c4:55:f9:a6:ab:04:bb:9b:67:8a:a6:01: 45:10:e0:ab:e7:ba:ea:66:4d:1f:27:60:aa:db:66:0b:f4:47: b5:a3:d3:81:86:28:a9:16:6e:a0:71:89:d0:44:c6:7c:b7:4e: 27:f6:ec:44:ca:d8:80:4f:be:e9:52:39:be:43:79:79:4a:23: 9c:89:9e:1f:87:e3:cb:28:09:eb:13:16:e2:3b:1a:f5:7a:b0: d7:ce:cd:20:46:f9:73:3c:16:55:94:2b:6e:70:03:0c:1c:5f: fd:65:7c:21:27:4c:27:79:a2:e3:bb:b2:99:e8:a6:10:4c:63: 45:2f:ed:cf:37:b7:db:73:2e:46:f3:63:29:8c:b9:bf:02:e3: e6:f7:21:98:0a:ab:67:74:51:fd:b1:6b:f2:9c:ad:9a:e4:92: 45:b0:81:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcW8/Wl9vrrIDUpyMC6z6VzkCjS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTA5MDQyMTI3MTlaFw0yNTA5MDcyMzA5MTlaMDMxMTAvBgNV BAMTKDA1OTRFQ0RBQTdCQTQzQjNDMURFOERCMjdDREU3NENERTVBREFFNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/8Qr83V8r7b51yrYy8axIZDy NGgu3flnsvLfPdo4iB/VIKX2/EqYogjKdh/xzUTlh5UylFWhWQ1wJ5OCiE9xomP4 6lP5lPPxcMbCgXIK0zxa/h3ZA3blIpOwvREjFJdI/Kj6JMLixR7RMzGOhbCl6VVF 2p0cGnJg1ySECZTmkEur/XZfr2uvWKYtcMHvX6a+ClQj8bQJpi8F06GRRrb3fs1D 0MTOrcc8LIQ9OgAHpQY0UNYjDB2CRB7hodjLKtfd1RM7FEGWJoErus9YxdSwNEfN jBZrQImUGo30guAPc0+VvYwrNrbhFk4GBMTsEM+3Rn+HALYHI8Lf2tnfXOAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBZTs2qe6Q7PB3o2yfN50zeWtrmswHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeF2x1MzzAsbc7eV40FmzNbUL1+dtXLsJud osA9El5cjfF+wk8+7tgmz87Y4wWvjucorhnFRWMaKWokO3AlktbyX3bn7YcqeA/v NjOVTEyXnhguOM1YEDs2jWCw47bjTsRV+aarBLubZ4qmAUUQ4KvnuupmTR8nYKrb Zgv0R7Wj04GGKKkWbqBxidBExny3Tif27ETK2IBPvulSOb5DeXlKI5yJnh+H48so CesTFuI7GvV6sNfOzSBG+XM8FlWUK25wAwwcX/1lfCEnTCd5ouO7spnophBMY0Uv 7c83t9tzLkbzYymMub8C4+b3IZgKq2d0Uf2xa/KcrZrkkkWwgTc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:31 2025 by rpki-client