$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: zc/Uy3OQSpHz+yVtCFEPXV+mUNisNrjX/3tmTTUceH4= Subject key identifier: 5E:E6:13:91:53:C6:4A:FF:98:07:8B:88:17:A4:CD:B3:81:98:9A:D4 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 549490E3503C80D6FEEB3189F7878007728B5151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: A7 Signing time: Sun 29 Jun 2025 19:12:02 +0000 Manifest this update: Sun 29 Jun 2025 19:07:02 +0000 Manifest next update: Wed 02 Jul 2025 21:09:02 +0000 Files and hashes: 1: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) 2: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: 84tqk0UB38fPg5VdiYykrUEmqOLAtTgsAVGGGxjKqoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:94:90:e3:50:3c:80:d6:fe:eb:31:89:f7:87:80:07:72:8b:51:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Jun 29 19:07:02 2025 GMT Not After : Jul 2 21:09:02 2025 GMT Subject: CN=5EE6139153C64AFF98078B8817A4CDB381989AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:70:93:a8:ef:48:76:28:eb:09:44:99:a0: 56:fb:00:73:63:4d:2e:46:d3:aa:24:44:98:8e:ef: d1:d4:31:ed:8f:9a:60:bc:4c:ec:15:a6:d8:e0:40: 92:10:f7:5a:fc:fb:d5:67:fa:99:ca:e2:ad:d7:d8: da:1d:5f:d2:c3:08:07:c9:8f:cd:70:fb:49:3d:87: 6d:3a:aa:ce:36:8a:39:61:82:29:9f:06:d6:f1:8b: db:ed:90:a1:ea:85:bf:e5:28:81:57:6f:7a:95:8d: ff:d2:8a:95:03:e7:44:84:a0:1e:1b:94:9c:7b:b1: 76:a3:5d:8b:49:ea:8c:56:db:2d:36:dc:18:84:63: 4d:c8:fd:e2:d7:11:7e:6a:6d:39:80:0a:7c:6e:eb: 48:41:fb:64:ff:1f:fe:cb:e0:9e:16:ef:5e:44:28: 4c:80:34:55:b4:36:61:00:c8:9e:f7:5e:ed:b7:4c: 87:27:9a:33:a8:7f:e8:e1:59:c7:f2:cc:ad:6d:30: 78:e8:83:09:8e:33:ef:e5:f9:4d:8d:a1:63:29:2d: af:d4:a0:20:13:50:30:1e:c7:5d:6e:b7:c4:04:0a: e1:16:31:b9:41:af:ac:b9:eb:ae:72:10:42:93:fe: 46:70:ff:7f:2d:0a:2d:28:29:40:a3:24:a4:4b:d6: 95:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E6:13:91:53:C6:4A:FF:98:07:8B:88:17:A4:CD:B3:81:98:9A:D4 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0f:79:6f:0f:e0:b4:0c:29:8c:bc:eb:9a:c1:25:e1:ca:cf: e7:f1:8c:3b:a7:55:ee:02:7f:ca:21:75:25:86:fd:ea:39:3d: 38:79:9c:30:85:f9:c5:7e:d4:7e:5e:8c:7f:f5:53:22:b8:65: 77:62:8b:a9:9e:f2:01:56:ab:06:53:55:a1:22:30:b6:94:f5: 8b:3e:b1:ff:7e:53:4d:72:39:76:a5:be:75:5d:7f:2c:c7:5d: 08:6c:02:8c:bc:7c:d9:74:d3:5d:8b:48:e6:89:58:51:4c:7c: 0b:20:41:d8:07:c1:82:28:a7:e0:34:bc:18:61:1b:ee:18:9d: 36:93:7d:89:df:aa:42:c4:e9:cb:25:a5:a7:5b:96:89:04:75: cb:35:b6:2d:9f:93:9f:be:4c:94:9d:33:5e:8f:49:4a:ac:87: 57:4d:1b:7f:fd:8a:08:93:42:65:48:83:fc:fc:e6:22:8a:f6: 41:bf:15:0b:7f:b9:11:d0:8d:f4:5b:c6:73:0f:42:85:50:8d: 20:45:dc:e4:dd:55:5c:5d:4f:ab:dd:68:b4:bb:c6:1c:40:7a: b5:53:ff:10:59:d7:fc:3f:5f:2d:cc:df:9f:fa:70:02:48:f7: b6:aa:a3:21:ec:f5:3f:fb:29:c7:a7:44:43:fe:56:e2:b8:be: 12:e2:b7:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJSQ41A8gNb+6zGJ94eAB3KLUVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNTA2MjkxOTA3MDJaFw0yNTA3MDIyMTA5MDJaMDMxMTAvBgNV BAMTKDVFRTYxMzkxNTNDNjRBRkY5ODA3OEI4ODE3QTRDREIzODE5ODlBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkXCTqO9IdijrCUSZoFb7AHNj TS5G06okRJiO79HUMe2PmmC8TOwVptjgQJIQ91r8+9Vn+pnK4q3X2NodX9LDCAfJ j81w+0k9h206qs42ijlhgimfBtbxi9vtkKHqhb/lKIFXb3qVjf/SipUD50SEoB4b lJx7sXajXYtJ6oxW2y023BiEY03I/eLXEX5qbTmACnxu60hB+2T/H/7L4J4W715E KEyANFW0NmEAyJ73Xu23TIcnmjOof+jhWcfyzK1tMHjogwmOM+/l+U2NoWMpLa/U oCATUDAex11ut8QECuEWMblBr6y5665yEEKT/kZw/38tCi0oKUCjJKRL1pUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXuYTkVPGSv+YB4uIF6TNs4GYmtQwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgPeW8P4LQMKYy865rBJeHKz+fxjDunVe4C f8ohdSWG/eo5PTh5nDCF+cV+1H5ejH/1UyK4ZXdii6me8gFWqwZTVaEiMLaU9Ys+ sf9+U01yOXalvnVdfyzHXQhsAoy8fNl0012LSOaJWFFMfAsgQdgHwYIop+A0vBhh G+4YnTaTfYnfqkLE6cslpadblokEdcs1ti2fk5++TJSdM16PSUqsh1dNG3/9igiT QmVIg/z85iKK9kG/FQt/uRHQjfRbxnMPQoVQjSBF3OTdVVxdT6vdaLS7xhxAerVT /xBZ1/w/Xy3M35/6cAJI97aqoyHs9T/7KcenREP+VuK4vhLit6g= -----END CERTIFICATE-----Generated at Mon Jun 30 18:51:44 2025 by rpki-client