$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: zitzpytKWlQT/Mm4JrSkN7ePf5e5TNiIZykjyiP0Gdk= Subject key identifier: 17:6E:43:77:F7:0D:AC:EE:42:E8:67:98:2F:1C:DF:76:FC:4F:02:11 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 434E0C881D9313CF6E098C0D5B38D4F25A174CBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 04F7 Signing time: Thu 07 Aug 2025 05:11:03 +0000 Manifest this update: Thu 07 Aug 2025 05:06:03 +0000 Manifest next update: Sun 10 Aug 2025 12:34:03 +0000 Files and hashes: 1: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: 1EZSjvRP2SRnr2FbtmEkuDAZWdhz/ERYDxYK2+TR5jA=) 2: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: fsBh5+JMA2SEQBESggMxd/Klj3KxamkBwQxA8ha3loA=) 3: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: zYQUx+ql30PPLkUcmDWdEwPKMJFZU5b5VUJfAZqzXL8=) 4: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: G0VeuaYXS/KgF8/ez14lbGq6IneUYgvcmaO4bAZiGEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 12:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4e:0c:88:1d:93:13:cf:6e:09:8c:0d:5b:38:d4:f2:5a:17:4c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Aug 7 05:06:03 2025 GMT Not After : Aug 10 12:34:03 2025 GMT Subject: CN=176E4377F70DACEE42E867982F1CDF76FC4F0211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:e2:9c:de:1b:cf:e6:d4:c2:65:05:cc:3e: 19:18:12:5b:3e:5c:97:f1:7f:20:69:ad:70:e1:70: 46:69:20:e7:f2:90:a3:57:1a:a9:1b:2f:00:7d:2e: f3:64:14:fa:66:35:14:0d:e1:64:42:ef:86:d4:e3: 44:4a:21:68:f4:98:47:16:17:2f:5f:dc:32:de:3e: c7:1a:38:be:e4:4c:33:a4:73:c9:d5:83:1f:64:bc: 35:96:87:3d:a0:3c:d3:a9:36:73:e0:68:86:22:73: 62:63:46:79:6a:a2:e3:17:2a:a7:bc:25:54:bc:1c: 08:02:e4:37:e6:e2:4d:0a:b0:a2:a6:43:e9:ba:f6: f3:23:e8:06:45:83:87:4e:71:f0:2e:d1:d0:92:51: 92:22:2f:c6:57:cf:49:c0:15:90:f2:3c:f4:92:ec: bb:44:b7:25:ab:1f:10:31:01:15:4a:b1:a3:54:c0: aa:c2:c9:2c:f8:17:e5:b4:5e:d9:4d:00:14:a2:67: a2:e4:5b:27:d5:ce:7a:3a:d3:e2:9d:41:15:e5:04: 10:3d:7c:09:df:21:42:df:29:5f:31:57:a3:1e:f5: b1:a8:fb:bf:f4:1e:61:06:ef:77:bd:3e:cf:ee:c4: b3:59:d3:b7:65:8c:b4:cd:49:8d:2d:e7:47:dd:20: 20:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6E:43:77:F7:0D:AC:EE:42:E8:67:98:2F:1C:DF:76:FC:4F:02:11 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ed:c0:47:9c:81:40:00:08:22:19:e9:ee:25:28:8b:07:a0: cb:bf:cd:85:5b:35:25:2c:a6:00:bf:f4:31:0a:65:9c:9e:73: fb:82:57:5a:1f:c6:aa:d6:21:cd:60:59:e6:70:02:45:56:f8: ec:64:b3:cf:ba:b2:29:4b:2c:50:a8:74:b5:9c:95:dd:c9:d7: 8c:2f:0f:6c:bf:cf:e6:cf:34:94:73:d9:7c:43:63:8c:42:69: 5b:3a:29:16:93:35:73:78:2e:b7:5a:88:c8:42:27:36:4b:1d: 77:c4:83:bd:f4:a9:70:e2:48:60:c6:6f:77:4d:f7:e2:43:2e: 12:62:10:67:bd:1a:5a:29:63:28:a2:06:7a:20:3d:cf:6c:a5: f4:08:3e:ad:1b:e4:f1:2e:47:9f:63:42:66:eb:1e:87:7c:a0: bc:d6:9b:a3:38:b0:6b:fb:5a:db:23:75:03:2d:ca:36:2f:4b: 0e:26:e0:b0:62:ba:f7:20:6e:a5:8e:a4:2d:38:ff:e8:0b:d0: 70:c1:aa:18:ff:a7:d3:d0:f9:40:b5:94:7d:01:c6:91:ca:66: 96:6d:d7:a4:b0:7c:26:ef:53:57:98:85:0c:7e:19:51:29:a0: 8e:ed:84:4d:83:97:bc:6e:77:93:98:42:58:20:80:3f:17:9f: ee:c5:bd:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ04MiB2TE89uCYwNWzjU8loXTL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNTA4MDcwNTA2MDNaFw0yNTA4MTAxMjM0MDNaMDMxMTAvBgNV BAMTKDE3NkU0Mzc3RjcwREFDRUU0MkU4Njc5ODJGMUNERjc2RkM0RjAyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VuKc3hvP5tTCZQXMPhkYEls+ XJfxfyBprXDhcEZpIOfykKNXGqkbLwB9LvNkFPpmNRQN4WRC74bU40RKIWj0mEcW Fy9f3DLePscaOL7kTDOkc8nVgx9kvDWWhz2gPNOpNnPgaIYic2JjRnlqouMXKqe8 JVS8HAgC5Dfm4k0KsKKmQ+m69vMj6AZFg4dOcfAu0dCSUZIiL8ZXz0nAFZDyPPSS 7LtEtyWrHxAxARVKsaNUwKrCySz4F+W0XtlNABSiZ6LkWyfVzno60+KdQRXlBBA9 fAnfIULfKV8xV6Me9bGo+7/0HmEG73e9Ps/uxLNZ07dljLTNSY0t50fdICCXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF25Dd/cNrO5C6GeYLxzfdvxPAhEwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAztwEecgUAACCIZ6e4lKIsHoMu/zYVbNSUs pgC/9DEKZZyec/uCV1ofxqrWIc1gWeZwAkVW+Oxks8+6silLLFCodLWcld3J14wv D2y/z+bPNJRz2XxDY4xCaVs6KRaTNXN4LrdaiMhCJzZLHXfEg730qXDiSGDGb3dN 9+JDLhJiEGe9GlopYyiiBnogPc9spfQIPq0b5PEuR59jQmbrHod8oLzWm6M4sGv7 WtsjdQMtyjYvSw4m4LBiuvcgbqWOpC04/+gL0HDBqhj/p9PQ+UC1lH0BxpHKZpZt 16SwfCbvU1eYhQx+GVEpoI7thE2Dl7xud5OYQlgggD8Xn+7FvXg= -----END CERTIFICATE-----Generated at Fri Aug 8 00:18:52 2025 by rpki-client