$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.mft (raw, json) Hash identifier: euQtwqOo/nkZzm8BSi3Sf3Jn1ShCf+Wz2F+GBgkR09E= Subject key identifier: 11:5A:33:17:D4:9D:3A:74:10:FB:01:4B:BC:3E:F6:37:BB:14:98:93 Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 Certificate issuer: /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Certificate serial: 2D32B8F8745B5410C7B57BE14CF0023419567D8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft Manifest number: 04A7 Signing time: Mon 16 Jun 2025 13:31:33 +0000 Manifest this update: Mon 16 Jun 2025 13:26:33 +0000 Manifest next update: Thu 19 Jun 2025 17:57:33 +0000 Files and hashes: 1: 1259FE91D21610D4BA487C60C804F66EB6591CA8.crl (hash: MJqg9Jl8xiQzW+SZYwcnzd9BUqj5JFAsk7QaCvHo5k0=) 2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: oB1d9yvgfS+HluooOtRbWp6RFCioJruvG1J3R5Z7jjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:32:b8:f8:74:5b:54:10:c7:b5:7b:e1:4c:f0:02:34:19:56:7d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Validity Not Before: Jun 16 13:26:33 2025 GMT Not After : Jun 19 17:57:33 2025 GMT Subject: CN=115A3317D49D3A7410FB014BBC3EF637BB149893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:70:6e:77:20:64:d5:f3:7a:db:ed:28:cc: 66:b4:36:fd:ff:e8:fd:b2:03:71:9a:2b:b0:8a:bf: 8d:1c:ea:c0:5e:71:fe:65:5e:37:45:d0:2f:b0:ab: 2e:92:b5:9e:3a:f3:10:97:3a:4b:a8:3a:ab:bf:a6: 53:35:f5:8f:46:81:17:01:2f:f1:33:fe:da:9a:f8: 6c:fe:ec:6b:03:66:d6:07:9b:e4:54:9a:8a:cf:0b: 10:e8:05:1a:ab:c7:47:8b:5c:fe:e6:c0:a5:e9:1c: 34:5f:87:de:02:7e:cf:12:6b:e3:69:a1:bd:d9:cc: 96:e2:2d:1e:5f:82:2d:19:4c:44:dc:40:9f:cf:b1: cc:db:11:18:cc:01:6e:83:d9:31:63:82:bd:6e:43: a8:68:6e:20:c0:f6:2d:b5:2d:41:7e:7d:96:c2:34: 57:90:70:04:7b:b4:7c:bd:75:3c:95:ce:70:08:78: 3f:03:c3:88:36:38:5e:fc:b2:bc:a2:4a:65:be:ed: b9:ab:1a:d5:0a:08:d3:00:90:b7:4e:2d:24:f1:8e: f7:94:e6:3c:53:e9:63:5f:0b:7a:a6:01:9b:de:49: a9:cc:17:9c:5c:3a:15:2b:4e:41:5d:e5:d5:3b:64: 5b:23:8b:61:9d:04:74:14:bb:73:13:36:e8:ac:ee: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5A:33:17:D4:9D:3A:74:10:FB:01:4B:BC:3E:F6:37:BB:14:98:93 X509v3 Authority Key Identifier: keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:af:ca:5f:bb:b5:fb:3b:0e:78:42:72:98:c8:a2:f3:a0:70: 2e:e1:15:1f:10:ec:95:6e:1c:a5:52:ce:69:00:d0:18:e2:c6: 1c:c1:8c:6c:ca:cd:4c:5e:23:0a:80:d0:b1:48:c0:6b:99:99: c8:98:6d:d7:90:11:be:31:ad:26:a3:0f:a2:ca:a2:69:8c:4a: 3c:e5:6a:96:e3:0b:0d:7d:4f:7f:38:60:f2:59:08:b5:fc:d9: a3:ab:56:08:e7:85:e7:2e:fa:c8:9e:7e:f9:10:30:8e:1e:c3: d8:be:d2:0d:91:ea:4e:a8:7a:05:f9:84:7b:87:3f:f8:3b:bc: d9:f8:25:0e:96:f3:db:13:54:71:22:2d:bc:15:f5:3c:b1:1c: d8:aa:d9:89:63:2d:b7:c4:98:29:7f:0e:5b:b3:d7:7b:17:b2: df:21:05:52:87:69:ce:82:0f:85:f8:a9:d6:60:92:e0:6a:94: d7:0f:0d:bd:6b:82:d8:e4:7b:e7:d2:00:56:3d:23:6c:24:24: cd:ec:af:5d:0e:44:34:3a:15:32:4f:a1:31:07:7b:6a:f9:fb: 33:37:6d:8f:a8:be:2a:b1:0a:fb:3a:c3:31:99:39:e6:09:b5: 45:74:75:36:af:dd:ec:4b:58:18:88:d0:71:bb:cf:db:c6:8f: ec:f8:e2:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTK4+HRbVBDHtXvhTPACNBlWfYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVC NjU5MUNBODAeFw0yNTA2MTYxMzI2MzNaFw0yNTA2MTkxNzU3MzNaMDMxMTAvBgNV BAMTKDExNUEzMzE3RDQ5RDNBNzQxMEZCMDE0QkJDM0VGNjM3QkIxNDk4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDernBudyBk1fN62+0ozGa0Nv3/ 6P2yA3GaK7CKv40c6sBecf5lXjdF0C+wqy6StZ468xCXOkuoOqu/plM19Y9GgRcB L/Ez/tqa+Gz+7GsDZtYHm+RUmorPCxDoBRqrx0eLXP7mwKXpHDRfh94Cfs8Sa+Np ob3ZzJbiLR5fgi0ZTETcQJ/PsczbERjMAW6D2TFjgr1uQ6hobiDA9i21LUF+fZbC NFeQcAR7tHy9dTyVznAIeD8Dw4g2OF78sryiSmW+7bmrGtUKCNMAkLdOLSTxjveU 5jxT6WNfC3qmAZveSanMF5xcOhUrTkFd5dU7ZFsji2GdBHQUu3MTNuis7s27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEVozF9SdOnQQ+wFLvD72N7sUmJMwHwYDVR0j BBgwFoAUEln+kdIWENS6SHxgyAT2brZZHKgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzkwOTczNy0xNTY0LTQ2Y2EtOTAwOS04ZDI4YTU2ZTk4ZWUvMC8xMjU5RkU5MUQy MTYxMEQ0QkE0ODdDNjBDODA0RjY2RUI2NTkxQ0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVCNjU5 MUNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2 NkVCNjU5MUNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJevyl+7tfs7DnhCcpjIovOgcC7hFR8Q7JVu HKVSzmkA0BjixhzBjGzKzUxeIwqA0LFIwGuZmciYbdeQEb4xrSajD6LKommMSjzl apbjCw19T384YPJZCLX82aOrVgjnhecu+siefvkQMI4ew9i+0g2R6k6oegX5hHuH P/g7vNn4JQ6W89sTVHEiLbwV9TyxHNiq2YljLbfEmCl/Dluz13sXst8hBVKHac6C D4X4qdZgkuBqlNcPDb1rgtjke+fSAFY9I2wkJM3sr10ORDQ6FTJPoTEHe2r5+zM3 bY+oviqxCvs6wzGZOeYJtUV0dTav3exLWBiI0HG7z9vGj+z44iU= -----END CERTIFICATE-----Generated at Mon Jun 16 22:00:14 2025 by rpki-client