$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: hMTlbq5jVudSGdvO3ODH/VgQQ4H/0HCiPeaOqdIuAfA= Subject key identifier: 70:4C:C2:75:8A:97:3F:F9:93:CE:71:0C:70:0F:33:8C:F1:0D:2D:A9 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 5DB42C1BF859135927E9B11E14D8DE3DD25C8E6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: D9 Signing time: Sun 19 Oct 2025 04:51:53 +0000 Manifest this update: Sun 19 Oct 2025 04:46:53 +0000 Manifest next update: Wed 22 Oct 2025 12:03:53 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: P2M1weoeZtZvSD++WLsD5dAIC8XtftkYxGaTrhzDDh4=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b4:2c:1b:f8:59:13:59:27:e9:b1:1e:14:d8:de:3d:d2:5c:8e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Oct 19 04:46:53 2025 GMT Not After : Oct 22 12:03:53 2025 GMT Subject: CN=704CC2758A973FF993CE710C700F338CF10D2DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:30:43:7b:bf:0c:b1:dc:2d:f8:ad:b9:66:df: 99:be:f1:ce:be:f3:43:4a:23:42:6d:2c:35:9c:c1: d2:35:f3:1e:85:0d:cf:49:63:b8:3f:f6:48:45:83: 0a:c8:ac:7f:e0:56:11:8e:c1:69:aa:95:41:2c:ed: f5:6c:ba:47:5b:2b:4d:ca:e9:12:67:a5:14:41:26: ac:71:7e:a7:7d:ee:80:49:91:ad:5e:d2:b0:08:c9: c3:d1:fb:42:c0:fb:92:1b:3e:b6:88:aa:ab:7b:46: 99:d2:c3:ff:d0:1f:e3:2c:c0:31:b2:e3:bb:00:62: 93:d8:f2:7d:46:b7:b5:d0:9d:a7:79:d1:f6:06:74: 60:48:96:6c:00:16:8d:56:a8:48:b2:ca:2c:99:c5: aa:3c:75:1d:d7:b7:88:6f:f4:1c:ae:4b:75:1f:74: 34:15:b1:d7:85:04:60:e2:2c:7b:cf:73:17:a4:5b: f4:94:f6:8b:4d:6c:d5:1a:a0:9f:e3:61:c4:a2:90: c0:c4:8b:38:18:bf:81:df:fb:ea:97:85:4e:a3:af: 5d:63:4c:c3:7c:d6:e6:69:46:1a:27:0e:b4:f9:fe: 04:10:46:ef:84:c5:e4:d5:48:14:57:de:72:00:c5: fc:ed:66:8f:31:02:3f:b3:2c:5e:4a:e5:ca:8e:46: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4C:C2:75:8A:97:3F:F9:93:CE:71:0C:70:0F:33:8C:F1:0D:2D:A9 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:42:59:d7:d5:67:c2:af:3a:63:1c:07:01:20:52:1d:70:37: 90:9e:4c:00:97:14:79:73:56:59:db:c4:55:4d:d5:e3:d7:eb: 66:b2:7e:49:e1:d0:2e:da:59:03:8d:56:28:74:b7:96:20:03: 87:16:0d:5c:b5:84:3c:8a:7f:24:01:98:11:9a:2b:4f:ae:82: 20:be:2a:3b:f0:3a:89:f6:52:43:95:f7:d6:e9:5a:8d:28:ef: 85:91:8f:1a:71:81:dc:93:b2:9a:1a:2e:60:b1:32:d6:ac:a2: 77:33:64:16:3c:d2:e9:58:2b:48:bb:8c:19:97:cc:8b:eb:2b: 80:fa:f7:5e:7e:39:c3:77:ab:d9:ad:ee:43:62:99:15:fa:dc: 61:6f:79:9f:f7:ee:90:16:7b:de:0d:53:75:b3:f1:af:79:66: 2b:6e:b9:75:12:9a:99:b9:26:2f:95:7f:3b:6b:38:b7:8c:18: bd:5d:cf:51:2a:50:1f:e8:5c:ec:b5:40:ba:05:e8:08:e7:85: 32:f9:7b:f7:80:a1:af:7a:56:8c:43:4f:75:d7:6b:06:a0:9e: 95:46:3e:e5:d8:27:ca:7b:79:86:5e:f7:ee:86:bf:a2:ac:0a: 8c:90:0a:3b:6c:cb:f7:c0:46:18:4f:1c:d2:81:e3:52:4c:eb: 77:ad:91:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXbQsG/hZE1kn6bEeFNjePdJcjm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNTEwMTkwNDQ2NTNaFw0yNTEwMjIxMjAzNTNaMDMxMTAvBgNV BAMTKDcwNENDMjc1OEE5NzNGRjk5M0NFNzEwQzcwMEYzMzhDRjEwRDJEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8MEN7vwyx3C34rblm35m+8c6+ 80NKI0JtLDWcwdI18x6FDc9JY7g/9khFgwrIrH/gVhGOwWmqlUEs7fVsukdbK03K 6RJnpRRBJqxxfqd97oBJka1e0rAIycPR+0LA+5IbPraIqqt7RpnSw//QH+MswDGy 47sAYpPY8n1Gt7XQnad50fYGdGBIlmwAFo1WqEiyyiyZxao8dR3Xt4hv9ByuS3Uf dDQVsdeFBGDiLHvPcxekW/SU9otNbNUaoJ/jYcSikMDEizgYv4Hf++qXhU6jr11j TMN81uZpRhonDrT5/gQQRu+ExeTVSBRX3nIAxfztZo8xAj+zLF5K5cqORjtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcEzCdYqXP/mTznEMcA8zjPENLakwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpCWdfVZ8KvOmMcBwEgUh1wN5CeTACXFHlz VlnbxFVN1ePX62ayfknh0C7aWQONVih0t5YgA4cWDVy1hDyKfyQBmBGaK0+ugiC+ KjvwOon2UkOV99bpWo0o74WRjxpxgdyTspoaLmCxMtasonczZBY80ulYK0i7jBmX zIvrK4D6915+OcN3q9mt7kNimRX63GFveZ/37pAWe94NU3Wz8a95ZituuXUSmpm5 Ji+VfztrOLeMGL1dz1EqUB/oXOy1QLoF6AjnhTL5e/eAoa96VoxDT3XXawagnpVG PuXYJ8p7eYZe9+6Gv6KsCoyQCjtsy/fARhhPHNKB41JM63etkQ8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:39 2025 by rpki-client