$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: JTH76zSbZICYxrRmDXQQCpTa/rnmiJgoSpFqoW6T4B0= Subject key identifier: E3:29:2B:FB:F0:4C:7D:B8:EB:C3:61:EE:6F:48:C6:30:07:A9:BF:AD Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 5A62A86B2458F1B70288881AE87C84E1AFF83763 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: 011F Signing time: Wed 25 Mar 2026 01:42:07 +0000 Manifest this update: Wed 25 Mar 2026 01:37:07 +0000 Manifest next update: Sat 28 Mar 2026 11:08:07 +0000 Files and hashes: 1: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) 2: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: YNbFRcATivAUcTWkLX97Re3XTURpGqwQpFXAyNb7kp0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:62:a8:6b:24:58:f1:b7:02:88:88:1a:e8:7c:84:e1:af:f8:37:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Mar 25 01:37:07 2026 GMT Not After : Mar 28 11:08:07 2026 GMT Subject: CN=E3292BFBF04C7DB8EBC361EE6F48C63007A9BFAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bf:45:73:96:f6:fd:28:1d:f4:d2:56:74:a0: a5:70:b3:82:e0:78:48:42:2a:18:f1:31:20:8b:23: 30:87:43:31:bd:6e:22:a1:27:06:51:e9:6e:3d:4c: 7a:63:31:a2:b1:b2:54:d4:f2:a2:7f:bb:48:0b:37: 48:26:87:67:2f:49:bd:8a:74:39:88:75:b7:ee:f3: bc:9f:13:dc:19:9b:4c:9b:c5:cb:4f:e1:65:a1:f5: c3:fc:b0:1d:84:7d:da:49:f3:9e:b3:ce:f6:81:7f: 26:24:01:4f:6e:e4:94:7c:84:d3:d1:86:0c:24:cc: 2a:2e:17:30:1b:39:ff:bd:80:b6:0c:64:4f:82:6a: 5d:a4:7a:17:2a:83:bc:7b:8e:51:12:6a:59:1a:be: 63:8e:0c:a0:76:9e:c5:d9:6b:f7:b2:1a:68:74:1e: 0f:a7:d3:df:b2:c9:70:fe:73:42:15:47:00:80:f6: e3:e7:8f:d3:84:58:85:d4:a5:0a:5d:1a:cc:0e:35: 7b:1b:45:51:19:58:b4:5d:9a:31:86:d8:0f:75:92: 67:50:b7:48:d0:8e:ea:c3:d2:a1:a9:22:28:70:00: 64:62:60:3d:a1:72:b2:2b:99:2d:38:53:e1:62:82: 14:e4:08:30:65:39:76:90:3e:92:1a:c7:0c:2f:5c: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:29:2B:FB:F0:4C:7D:B8:EB:C3:61:EE:6F:48:C6:30:07:A9:BF:AD X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c9:d8:0a:50:9c:10:fa:1a:25:a1:a4:95:20:a9:fc:06:2b: f9:d7:af:f6:33:cc:22:23:cb:71:e7:fe:e8:e4:20:3b:3d:e3: 9f:f7:7f:0f:07:7b:0c:ef:9d:29:84:c8:f0:5d:17:6a:63:22: 66:f4:cb:16:e3:c7:bc:c8:8e:77:60:1a:a9:2d:04:4c:b8:5b: 88:65:7e:01:cf:c5:4b:89:a0:55:07:20:c6:03:6a:62:b1:c6: 66:e6:d0:f6:29:21:c3:b2:66:c6:d3:af:86:f6:3e:a1:7e:9a: 25:d5:48:b4:2a:7b:99:79:9a:8b:3f:74:b6:90:11:e0:18:5c: 83:8d:45:05:62:99:27:eb:22:bb:9a:8a:b0:bc:a8:3c:ae:d3: 61:99:5c:3e:21:f4:0c:fe:4f:aa:40:dd:f5:5a:1c:c6:0b:91: e6:fe:36:27:fc:9d:5a:9d:6b:3e:94:05:31:a9:cf:fe:c3:fc: 49:b2:88:bd:c0:92:81:c5:be:d1:ea:e3:4f:e8:55:73:5d:d8: 08:85:e9:78:c9:3e:19:10:7b:0b:07:06:28:8d:e7:6f:d0:41: a2:71:8a:30:a0:20:5c:3f:2f:64:66:a3:a3:e0:ce:3d:d5:3e: fb:9b:59:20:49:16:06:75:a1:1d:e6:41:2e:c8:b8:ee:65:2b: bf:43:0b:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmKoayRY8bcCiIga6HyE4a/4N2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNjAzMjUwMTM3MDdaFw0yNjAzMjgxMTA4MDdaMDMxMTAvBgNV BAMTKEUzMjkyQkZCRjA0QzdEQjhFQkMzNjFFRTZGNDhDNjMwMDdBOUJGQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5v0Vzlvb9KB300lZ0oKVws4Lg eEhCKhjxMSCLIzCHQzG9biKhJwZR6W49THpjMaKxslTU8qJ/u0gLN0gmh2cvSb2K dDmIdbfu87yfE9wZm0ybxctP4WWh9cP8sB2EfdpJ856zzvaBfyYkAU9u5JR8hNPR hgwkzCouFzAbOf+9gLYMZE+Cal2kehcqg7x7jlESalkavmOODKB2nsXZa/eyGmh0 Hg+n09+yyXD+c0IVRwCA9uPnj9OEWIXUpQpdGswONXsbRVEZWLRdmjGG2A91kmdQ t0jQjurD0qGpIihwAGRiYD2hcrIrmS04U+FighTkCDBlOXaQPpIaxwwvXLeNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ykr+/BMfbjrw2Hub0jGMAepv60wHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHJ2ApQnBD6GiWhpJUgqfwGK/nXr/YzzCIj y3Hn/ujkIDs945/3fw8HewzvnSmEyPBdF2pjImb0yxbjx7zIjndgGqktBEy4W4hl fgHPxUuJoFUHIMYDamKxxmbm0PYpIcOyZsbTr4b2PqF+miXVSLQqe5l5mos/dLaQ EeAYXIONRQVimSfrIruairC8qDyu02GZXD4h9Az+T6pA3fVaHMYLkeb+Nif8nVqd az6UBTGpz/7D/EmyiL3AkoHFvtHq40/oVXNd2AiF6XjJPhkQewsHBiiN52/QQaJx ijCgIFw/L2Rmo6Pgzj3VPvubWSBJFgZ1oR3mQS7IuO5lK79DC5k= -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:03 2026 by rpki-client