$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: MS2/OpOeoDMstTrQhdLMAtPYo6KPSRgJl5MnNX9HAkg= Subject key identifier: 4A:71:04:18:22:80:14:3A:8D:DE:0D:80:11:8E:04:BC:F1:F1:BC:8C Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 62F6AA9C01B81F412EC36621191E8DBD15912E82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: 4C Signing time: Thu 07 Aug 2025 05:32:21 +0000 Manifest this update: Thu 07 Aug 2025 05:27:21 +0000 Manifest next update: Sun 10 Aug 2025 13:22:21 +0000 Files and hashes: 1: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: KOAwUKuncSuc2IIz15S+BU0CGRNGpDnzFscLUmkcKFA=) 2: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 13:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f6:aa:9c:01:b8:1f:41:2e:c3:66:21:19:1e:8d:bd:15:91:2e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Aug 7 05:27:21 2025 GMT Not After : Aug 10 13:22:21 2025 GMT Subject: CN=4A7104182280143A8DDE0D80118E04BCF1F1BC8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1b:f8:5c:d2:c0:27:a5:26:aa:dd:f7:22:eb: 52:1c:f2:48:da:9c:78:91:97:24:f6:01:8f:42:3c: 2a:b1:31:c3:d7:11:e3:52:70:30:38:9e:4d:80:c1: d3:32:98:7a:4e:e5:41:cd:d3:58:59:e8:e2:3e:29: 6e:8d:e5:e2:92:c2:ae:c4:ad:a0:66:82:13:42:21: 4b:dd:21:8e:87:e0:94:9d:7a:65:5b:39:90:b2:98: fe:9b:70:7f:ab:12:61:69:49:8a:93:07:75:cf:c8: e7:cb:4d:b8:68:5a:25:6e:58:98:f1:49:6f:3b:98: ad:37:a5:1b:64:45:05:54:12:a3:d9:e2:bf:9c:95: 96:b2:ff:5a:1f:57:a7:a1:e0:6d:a5:fc:b6:cc:94: 0e:4a:ce:f0:ac:f6:74:7e:0d:f7:75:04:77:50:b0: 36:a5:83:60:d0:94:23:91:b8:a6:c8:3a:72:15:58: 00:31:a4:e9:b7:f0:35:33:8e:a9:37:78:a4:e4:64: d3:eb:ed:60:76:ba:60:48:11:91:03:9d:b7:36:c0: c5:cb:fc:a3:fa:21:db:c9:37:6f:a1:be:36:59:20: a5:fd:2d:4b:5c:3f:55:ad:4f:8c:3d:e1:fe:a4:82: c7:57:ac:4f:85:52:73:c8:dd:17:b0:7e:d6:57:a5: 2b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:71:04:18:22:80:14:3A:8D:DE:0D:80:11:8E:04:BC:F1:F1:BC:8C X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1d:f0:f2:ea:c6:ca:bd:da:ad:32:39:ed:d4:d1:62:b6:c8: 83:78:92:16:24:79:a0:2e:a0:38:9f:44:3c:04:bb:7d:67:c7: 79:23:c5:b4:1b:6d:b2:25:3a:32:cf:fc:fb:7f:01:c7:20:3f: a3:4b:8f:6b:bf:65:e3:b2:67:90:d9:c5:cc:8c:f0:f7:5d:04: 33:ae:13:3b:7f:b6:eb:fe:f7:c4:0d:d5:ed:4a:f6:b9:3a:70: c1:c4:68:ef:6b:d2:c6:a7:af:a5:ab:7e:94:63:b0:ba:1e:3c: 70:1c:b0:b0:a4:a4:2e:f7:f1:af:69:1f:72:64:6c:17:73:3e: 21:6e:0e:ed:43:9c:b4:93:3b:cd:6d:7b:bf:56:37:23:54:6c: 9e:46:0f:ce:11:eb:b7:60:03:c2:01:c2:2d:ea:51:f2:56:b6: 3a:b8:fb:0e:8b:f5:6a:d6:f0:bb:e9:36:f6:65:e6:c3:08:66: f1:55:09:6a:68:66:3a:b2:f2:d3:fe:3f:db:75:63:a7:b6:1a: 06:96:26:a1:44:59:6e:9f:05:bc:1c:1b:4d:e2:22:e7:01:68: b6:18:82:d7:52:9e:32:a7:15:2b:e9:5d:38:85:9e:b5:73:54: db:5a:fb:4b:81:7f:ac:0d:d7:90:ad:01:82:6f:0e:48:f5:56: 37:6a:66:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvaqnAG4H0Euw2YhGR6NvRWRLoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTA4MDcwNTI3MjFaFw0yNTA4MTAxMzIyMjFaMDMxMTAvBgNV BAMTKDRBNzEwNDE4MjI4MDE0M0E4RERFMEQ4MDExOEUwNEJDRjFGMUJDOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiG/hc0sAnpSaq3fci61Ic8kja nHiRlyT2AY9CPCqxMcPXEeNScDA4nk2AwdMymHpO5UHN01hZ6OI+KW6N5eKSwq7E raBmghNCIUvdIY6H4JSdemVbOZCymP6bcH+rEmFpSYqTB3XPyOfLTbhoWiVuWJjx SW87mK03pRtkRQVUEqPZ4r+clZay/1ofV6eh4G2l/LbMlA5KzvCs9nR+Dfd1BHdQ sDalg2DQlCORuKbIOnIVWAAxpOm38DUzjqk3eKTkZNPr7WB2umBIEZEDnbc2wMXL /KP6IdvJN2+hvjZZIKX9LUtcP1WtT4w94f6kgsdXrE+FUnPI3RewftZXpSuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSnEEGCKAFDqN3g2AEY4EvPHxvIwwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8d8PLqxsq92q0yOe3U0WK2yIN4khYkeaAu oDifRDwEu31nx3kjxbQbbbIlOjLP/Pt/AccgP6NLj2u/ZeOyZ5DZxcyM8PddBDOu Ezt/tuv+98QN1e1K9rk6cMHEaO9r0sanr6WrfpRjsLoePHAcsLCkpC738a9pH3Jk bBdzPiFuDu1DnLSTO81te79WNyNUbJ5GD84R67dgA8IBwi3qUfJWtjq4+w6L9WrW 8LvpNvZl5sMIZvFVCWpoZjqy8tP+P9t1Y6e2GgaWJqFEWW6fBbwcG03iIucBaLYY gtdSnjKnFSvpXTiFnrVzVNta+0uBf6wN15CtAYJvDkj1VjdqZu0= -----END CERTIFICATE-----Generated at Thu Aug 7 23:58:07 2025 by rpki-client