$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: 6Du5f7Jo2QwTnnbGzHJbCok5RdbThesZ5oLhj4BMTzI= Subject key identifier: 8D:A4:FF:38:B5:AF:03:52:87:E9:AF:83:57:2F:4B:98:E1:E6:3F:37 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 69B71CB0E97BB58B0BB659846FB359398EABE1E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 051E Signing time: Sun 02 Nov 2025 06:41:03 +0000 Manifest this update: Sun 02 Nov 2025 06:36:03 +0000 Manifest next update: Wed 05 Nov 2025 15:43:03 +0000 Files and hashes: 1: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: zYQUx+ql30PPLkUcmDWdEwPKMJFZU5b5VUJfAZqzXL8=) 2: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: q7nBqwyHtJg9PxXTRxjVLc0FshyERrYzdvsBH5cf+28=) 3: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: 1EZSjvRP2SRnr2FbtmEkuDAZWdhz/ERYDxYK2+TR5jA=) 4: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: G0VeuaYXS/KgF8/ez14lbGq6IneUYgvcmaO4bAZiGEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 15:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b7:1c:b0:e9:7b:b5:8b:0b:b6:59:84:6f:b3:59:39:8e:ab:e1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Nov 2 06:36:03 2025 GMT Not After : Nov 5 15:43:03 2025 GMT Subject: CN=8DA4FF38B5AF035287E9AF83572F4B98E1E63F37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:0f:ca:94:35:c0:c7:60:8e:df:78:d8:06: 51:a3:62:7b:d5:7e:0c:97:44:9a:7e:16:35:02:7d: 29:78:ce:a0:26:f1:8e:60:cc:4d:a9:35:a5:48:a1: ba:f6:bb:7e:1e:5c:fe:e5:32:77:c5:90:94:c6:86: 1c:b3:54:70:d7:c0:0a:0d:fb:b1:8d:8d:a7:1a:ae: 3c:bc:98:50:ac:3a:27:c9:ee:7f:90:1c:61:f4:d4: 91:e6:61:6d:6e:66:51:35:a4:4f:c3:89:37:ca:fc: f7:bf:07:b1:00:c4:7b:90:fa:7d:be:de:45:ae:6c: 67:c0:85:d7:8e:40:d9:37:b4:01:84:70:82:5f:de: 17:21:6a:60:1b:6e:6c:15:71:4e:73:90:bc:26:2e: 16:78:e6:4a:ed:0c:04:4e:7d:c8:bc:3e:d2:2b:81: 48:4a:da:6b:09:24:ee:81:e7:2a:bc:f1:86:42:1f: 68:73:9d:39:5b:6c:ef:9c:ef:f7:4e:74:ac:d5:bf: 87:17:cc:5e:53:ff:17:27:6a:db:81:89:b7:72:3c: c6:ba:0d:56:2e:95:23:f9:53:90:bd:16:bd:50:8c: 48:12:af:0e:78:c0:b0:2e:bc:d4:0e:65:e6:4b:c5: bc:0c:5b:85:80:ba:ec:7c:36:fc:6c:54:46:c8:46: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A4:FF:38:B5:AF:03:52:87:E9:AF:83:57:2F:4B:98:E1:E6:3F:37 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:93:0a:f5:a8:30:c8:9b:26:6d:1c:49:9d:ea:0b:73:89:99: bf:94:93:79:f6:d8:99:23:68:00:8b:f3:36:36:10:68:5d:f1: cf:ff:ef:78:64:17:92:5d:fb:ef:30:d7:c4:e2:c4:e3:2d:5b: 15:1c:d7:e6:9b:7c:58:c6:3c:a9:ce:3b:31:c0:06:c3:75:9a: 08:55:0d:18:ae:12:1a:40:b9:75:9a:89:e7:7e:4c:17:c5:ba: 26:df:64:c6:0b:a3:5f:c8:b8:39:90:e7:bb:98:bf:6f:7a:47: fe:95:46:33:3e:b0:25:a2:53:8b:d9:ed:26:a8:1a:83:79:63: 46:3f:20:f6:d8:80:57:75:dd:c5:b0:2a:00:86:4f:fc:52:27: dd:3f:c7:ac:fb:30:74:5e:3d:fd:72:62:f3:3f:18:20:c2:81: ed:7c:91:1d:59:fb:94:5d:e3:01:bb:5e:13:61:3a:f4:14:26: 85:b0:49:c5:92:2c:e4:70:21:0a:71:c5:99:02:2c:90:44:a3: 6e:e1:ed:ff:c3:df:ee:fa:30:08:00:a5:1a:cb:fd:15:22:50: 53:ff:ef:db:fc:05:8d:df:3a:ff:8b:1c:69:a9:b2:a8:44:60: 13:ab:ec:1e:73:06:34:82:e5:4a:94:8b:c9:2f:ee:0d:85:2d: 32:1f:85:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabccsOl7tYsLtlmEb7NZOY6r4ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNTExMDIwNjM2MDNaFw0yNTExMDUxNTQzMDNaMDMxMTAvBgNV BAMTKDhEQTRGRjM4QjVBRjAzNTI4N0U5QUY4MzU3MkY0Qjk4RTFFNjNGMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7g/KlDXAx2CO33jYBlGjYnvV fgyXRJp+FjUCfSl4zqAm8Y5gzE2pNaVIobr2u34eXP7lMnfFkJTGhhyzVHDXwAoN +7GNjacarjy8mFCsOifJ7n+QHGH01JHmYW1uZlE1pE/DiTfK/Pe/B7EAxHuQ+n2+ 3kWubGfAhdeOQNk3tAGEcIJf3hchamAbbmwVcU5zkLwmLhZ45krtDAROfci8PtIr gUhK2msJJO6B5yq88YZCH2hznTlbbO+c7/dOdKzVv4cXzF5T/xcnatuBibdyPMa6 DVYulSP5U5C9Fr1QjEgSrw54wLAuvNQOZeZLxbwMW4WAuux8NvxsVEbIRhDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjaT/OLWvA1KH6a+DVy9LmOHmPzcwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmTCvWoMMibJm0cSZ3qC3OJmb+Uk3n22Jkj aACL8zY2EGhd8c//73hkF5Jd++8w18TixOMtWxUc1+abfFjGPKnOOzHABsN1mghV DRiuEhpAuXWaied+TBfFuibfZMYLo1/IuDmQ57uYv296R/6VRjM+sCWiU4vZ7Sao GoN5Y0Y/IPbYgFd13cWwKgCGT/xSJ90/x6z7MHRePf1yYvM/GCDCge18kR1Z+5Rd 4wG7XhNhOvQUJoWwScWSLORwIQpxxZkCLJBEo27h7f/D3+76MAgApRrL/RUiUFP/ 79v8BY3fOv+LHGmpsqhEYBOr7B5zBjSC5UqUi8kv7g2FLTIfhZs= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:11 2025 by rpki-client