$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.mft (raw, json) Hash identifier: ThLda9Sll4ZIzWACyLLAV/VFsheEawcmxz/KhXoId2w= Subject key identifier: 00:25:2D:E9:9D:F9:27:6A:37:BC:F0:81:BB:D2:D2:A0:84:F4:F9:50 Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 Certificate issuer: /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Certificate serial: 0FC1F210604EE0C5EF536A52BCED8B97D2230F0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft Manifest number: 0490 Signing time: Sat 26 Apr 2025 00:41:32 +0000 Manifest this update: Sat 26 Apr 2025 00:36:32 +0000 Manifest next update: Tue 29 Apr 2025 09:16:32 +0000 Files and hashes: 1: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: oB1d9yvgfS+HluooOtRbWp6RFCioJruvG1J3R5Z7jjI=) 2: 1259FE91D21610D4BA487C60C804F66EB6591CA8.crl (hash: U9xJhwkSbMQB9Hq8stuwk8eSyahK5fwAadtz0M6pJ2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c1:f2:10:60:4e:e0:c5:ef:53:6a:52:bc:ed:8b:97:d2:23:0f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Validity Not Before: Apr 26 00:36:32 2025 GMT Not After : Apr 29 09:16:32 2025 GMT Subject: CN=00252DE99DF9276A37BCF081BBD2D2A084F4F950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:d1:48:c5:ec:65:a9:74:39:b3:e5:ff:4d: 8f:6b:d5:a6:78:93:a3:4e:57:08:db:9b:cf:f8:b3: c8:6d:91:3e:f7:5c:6b:c4:5a:72:2c:d1:5a:49:ff: 83:ea:e2:16:74:a0:ed:41:7c:9f:38:f4:a2:5d:63: ed:7f:e0:33:f0:58:53:3f:be:82:41:f7:0d:c7:a7: 47:92:5c:0b:87:d8:cc:e1:4b:96:a5:7e:8b:9b:f2: b5:69:c1:75:95:b2:de:1f:52:3d:30:2e:46:99:d3: 20:2c:5a:19:05:9e:95:6c:be:37:72:85:c4:10:35: 21:7e:a5:a0:5b:ad:0c:49:81:33:ee:db:0b:8f:8a: 82:46:74:1b:00:72:13:c8:71:c3:47:ac:37:bc:b6: b0:df:29:d8:fd:aa:62:8e:4d:d9:1d:ef:bc:46:0b: 88:e9:6e:aa:f0:37:a9:5b:4f:5c:28:7c:6d:0b:c5: 7c:87:1c:11:7d:c5:7b:3c:8d:a9:79:89:9a:f9:5f: 04:4e:b1:18:e2:e5:bc:06:cc:84:18:00:3b:8c:f7: 8e:6c:28:15:69:1f:2d:9f:f5:01:b5:ec:dd:94:f2: d6:1d:7f:db:3e:64:cd:b7:5b:49:48:e1:07:cc:5b: 00:bd:49:74:74:5c:ae:a2:dd:0a:11:a8:3b:74:9b: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:25:2D:E9:9D:F9:27:6A:37:BC:F0:81:BB:D2:D2:A0:84:F4:F9:50 X509v3 Authority Key Identifier: keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ce:bd:e7:50:7e:c9:8a:2e:ae:14:25:01:06:ea:36:b7:b1: c1:96:32:f3:37:91:c2:3c:dc:34:42:df:69:e9:80:13:99:d6: b2:37:b3:f6:10:6f:59:51:dd:c7:80:56:b2:0e:a0:76:98:58: 0a:a9:09:5f:8b:8c:6a:1a:21:87:33:62:f8:48:bb:4c:df:c6: b3:6a:32:b1:5f:c1:0e:fe:d0:0a:ec:af:c5:12:cd:d6:f6:d3: 38:3e:00:64:57:87:30:b2:c6:1b:36:b1:8b:40:aa:2a:d4:98: b0:42:ee:aa:be:d7:db:86:4a:2f:72:43:21:82:7f:c0:d6:8a: 8a:09:51:8c:45:71:f2:ab:00:1e:93:ba:82:8a:26:82:79:21: 3e:0f:12:9d:a2:76:c3:91:c2:87:22:54:9e:31:67:08:f3:c2: e9:e4:68:c2:47:80:df:8b:4e:14:1f:81:49:ab:14:0f:90:e1: ce:9d:dc:f0:97:3f:0e:eb:ec:e8:90:a8:35:8a:62:bc:ef:9f: 71:36:9c:1c:9d:7b:12:7d:99:a5:06:af:1a:12:e2:3e:cc:a3: 09:28:73:55:bd:d8:ca:ae:7a:17:02:92:f6:64:13:3f:c6:57: e6:24:e7:c4:ab:b3:03:1a:d9:95:65:38:f3:54:5c:3b:f0:93: c9:21:77:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD8HyEGBO4MXvU2pSvO2Ll9IjDw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVC NjU5MUNBODAeFw0yNTA0MjYwMDM2MzJaFw0yNTA0MjkwOTE2MzJaMDMxMTAvBgNV BAMTKDAwMjUyREU5OURGOTI3NkEzN0JDRjA4MUJCRDJEMkEwODRGNEY5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBtFIxexlqXQ5s+X/TY9r1aZ4 k6NOVwjbm8/4s8htkT73XGvEWnIs0VpJ/4Pq4hZ0oO1BfJ849KJdY+1/4DPwWFM/ voJB9w3Hp0eSXAuH2MzhS5alfoub8rVpwXWVst4fUj0wLkaZ0yAsWhkFnpVsvjdy hcQQNSF+paBbrQxJgTPu2wuPioJGdBsAchPIccNHrDe8trDfKdj9qmKOTdkd77xG C4jpbqrwN6lbT1wofG0LxXyHHBF9xXs8jal5iZr5XwROsRji5bwGzIQYADuM945s KBVpHy2f9QG17N2U8tYdf9s+ZM23W0lI4QfMWwC9SXR0XK6i3QoRqDt0m0eNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUACUt6Z35J2o3vPCBu9LSoIT0+VAwHwYDVR0j BBgwFoAUEln+kdIWENS6SHxgyAT2brZZHKgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzkwOTczNy0xNTY0LTQ2Y2EtOTAwOS04ZDI4YTU2ZTk4ZWUvMC8xMjU5RkU5MUQy MTYxMEQ0QkE0ODdDNjBDODA0RjY2RUI2NTkxQ0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVCNjU5 MUNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2 NkVCNjU5MUNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfOvedQfsmKLq4UJQEG6ja3scGWMvM3kcI8 3DRC32npgBOZ1rI3s/YQb1lR3ceAVrIOoHaYWAqpCV+LjGoaIYczYvhIu0zfxrNq MrFfwQ7+0Arsr8USzdb20zg+AGRXhzCyxhs2sYtAqirUmLBC7qq+19uGSi9yQyGC f8DWiooJUYxFcfKrAB6TuoKKJoJ5IT4PEp2idsORwociVJ4xZwjzwunkaMJHgN+L ThQfgUmrFA+Q4c6d3PCXPw7r7OiQqDWKYrzvn3E2nBydexJ9maUGrxoS4j7Mowko c1W92MquehcCkvZkEz/GV+Yk58SrswMa2ZVlOPNUXDvwk8khd9o= -----END CERTIFICATE-----Generated at Mon Apr 28 03:27:35 2025 by rpki-client