$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: 1YhynYrhL+MogIJRcid0ocUcADGkLOzn2yPWnCXOg5s= Subject key identifier: E5:6E:D0:24:94:84:0A:FD:31:5E:44:B8:40:F6:B0:4B:B6:A2:97:5B Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 268B0793A15C093205B2A411FFAC6F45D08FD967 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: 74 Signing time: Tue 04 Nov 2025 15:32:20 +0000 Manifest this update: Tue 04 Nov 2025 15:27:20 +0000 Manifest next update: Fri 07 Nov 2025 20:33:20 +0000 Files and hashes: 1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=) 2: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: 3v5++KlZ8iNT+Kr7OfmGn+HJQS+j38LTQiY9UZVuOoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:8b:07:93:a1:5c:09:32:05:b2:a4:11:ff:ac:6f:45:d0:8f:d9:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Nov 4 15:27:20 2025 GMT Not After : Nov 7 20:33:20 2025 GMT Subject: CN=E56ED02494840AFD315E44B840F6B04BB6A2975B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:08:9e:18:aa:39:16:aa:8f:5c:96:13:d7: b7:09:88:8e:66:33:d7:e4:11:eb:4b:9c:7d:87:f0: 6f:af:69:b3:cc:b5:bf:62:f5:72:6b:52:e0:d6:f5: 98:c7:6f:ec:64:4e:ac:9e:dd:76:a0:05:10:0b:2e: 12:56:00:85:88:38:be:46:76:f4:bb:f8:ad:5e:d0: 8e:2f:27:0b:86:cc:53:9e:ff:87:09:7f:b6:3a:32: 59:f0:1b:66:09:8d:e9:52:34:82:af:e2:90:5d:be: c1:0a:f1:cf:46:54:48:6a:07:ee:10:9a:56:9a:e7: e7:31:f9:62:7b:4d:f7:b0:e3:2f:2d:bd:9f:ac:d4: 7a:d0:83:5d:84:9b:0b:a0:c3:18:15:32:c2:bc:82: df:ad:72:d6:1b:18:7d:c4:ee:c2:af:e6:25:59:df: 42:25:f5:14:37:20:ba:16:aa:28:b3:e6:12:e5:14: 7a:70:a3:58:91:3f:c5:bc:fe:a7:3a:db:cc:45:ab: 4b:39:a6:9e:e1:4a:8e:93:b6:df:00:1e:95:d0:d4: 32:68:8e:3e:16:22:17:2e:85:c1:e8:6f:1c:1b:4d: 48:8a:ad:be:56:47:35:71:af:44:e9:f8:8a:7a:dd: 37:31:61:e2:c0:ec:e2:ce:ba:72:3f:9b:38:a9:1a: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6E:D0:24:94:84:0A:FD:31:5E:44:B8:40:F6:B0:4B:B6:A2:97:5B X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fe:1e:2e:94:63:90:ca:d4:a4:f9:9f:39:17:3f:30:0c:7c: ce:27:70:fc:20:b2:a7:4c:0b:a2:56:8a:d1:16:2f:3e:4f:61: c4:f1:a7:f5:a7:55:01:f8:2e:e7:a1:74:90:27:87:c5:9e:36: 1d:c2:5f:0a:92:db:2a:f2:ee:39:29:fb:d6:46:b8:b4:58:43: dd:f5:ba:3d:38:d3:c4:d5:b1:df:f4:b2:63:4b:aa:08:fa:5b: 36:d4:c5:5c:ad:70:7c:80:a4:72:6b:3a:d5:dc:0e:1f:53:81: 6d:8b:05:ee:f6:b6:cd:6a:9a:7e:9a:7c:36:3b:d4:3e:74:d9: 5f:4b:78:8c:7c:43:e7:d1:2c:2c:ef:b6:8f:13:43:a5:ca:65: 1b:75:f5:a6:d0:14:d4:52:e4:04:3d:7a:da:12:72:c9:1f:f4: dc:ea:29:91:4d:a6:3c:ee:20:de:47:0d:73:7b:99:b3:12:e2: 35:4c:a4:69:53:8c:05:e3:07:7c:bf:18:93:e7:22:fe:19:01: 66:d6:77:2a:0f:e6:da:1c:e5:91:81:e8:be:30:8a:f8:a1:50: cc:70:c3:78:54:51:bc:02:69:12:f5:ae:de:de:4f:01:da:3d: 19:d4:62:fa:a4:43:d5:0e:46:ea:3f:a1:32:3c:db:d1:4c:46: 72:f7:58:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJosHk6FcCTIFsqQR/6xvRdCP2WcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTExMDQxNTI3MjBaFw0yNTExMDcyMDMzMjBaMDMxMTAvBgNV BAMTKEU1NkVEMDI0OTQ4NDBBRkQzMTVFNDRCODQwRjZCMDRCQjZBMjk3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VwieGKo5FqqPXJYT17cJiI5m M9fkEetLnH2H8G+vabPMtb9i9XJrUuDW9ZjHb+xkTqye3XagBRALLhJWAIWIOL5G dvS7+K1e0I4vJwuGzFOe/4cJf7Y6MlnwG2YJjelSNIKv4pBdvsEK8c9GVEhqB+4Q mlaa5+cx+WJ7Tfew4y8tvZ+s1HrQg12EmwugwxgVMsK8gt+tctYbGH3E7sKv5iVZ 30Il9RQ3ILoWqiiz5hLlFHpwo1iRP8W8/qc628xFq0s5pp7hSo6Ttt8AHpXQ1DJo jj4WIhcuhcHobxwbTUiKrb5WRzVxr0Tp+Ip63TcxYeLA7OLOunI/mzipGtERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5W7QJJSECv0xXkS4QPawS7ail1swHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFv+Hi6UY5DK1KT5nzkXPzAMfM4ncPwgsqdM C6JWitEWLz5PYcTxp/WnVQH4LuehdJAnh8WeNh3CXwqS2yry7jkp+9ZGuLRYQ931 uj0408TVsd/0smNLqgj6WzbUxVytcHyApHJrOtXcDh9TgW2LBe72ts1qmn6afDY7 1D502V9LeIx8Q+fRLCzvto8TQ6XKZRt19abQFNRS5AQ9etoScskf9NzqKZFNpjzu IN5HDXN7mbMS4jVMpGlTjAXjB3y/GJPnIv4ZAWbWdyoP5toc5ZGB6L4wivihUMxw w3hUUbwCaRL1rt7eTwHaPRnUYvqkQ9UORuo/oTI829FMRnL3WNU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:20:47 2025 by rpki-client