$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: xaB3go1+v8pRb/3bhY6Jnn7ICQZY+byYmMP+dYNLHMQ= Subject key identifier: 4F:24:C4:F6:85:9C:FE:EF:F4:6D:31:DC:1B:95:AA:A1:02:F4:A2:F6 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 1733D5B3B73F34D564DEB478A8FFD4A44C5BEE65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: BF Signing time: Sat 23 Aug 2025 05:41:55 +0000 Manifest this update: Sat 23 Aug 2025 05:36:55 +0000 Manifest next update: Tue 26 Aug 2025 11:41:55 +0000 Files and hashes: 1: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) 2: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: a0CZusRc2ouzso8B1q7Y2/CIztma41sJg6GPjJ4kyqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:33:d5:b3:b7:3f:34:d5:64:de:b4:78:a8:ff:d4:a4:4c:5b:ee:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Aug 23 05:36:55 2025 GMT Not After : Aug 26 11:41:55 2025 GMT Subject: CN=4F24C4F6859CFEEFF46D31DC1B95AAA102F4A2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:c2:a5:93:6a:dd:a5:0f:ce:c4:4b:a9:30: 19:0b:df:32:45:ae:e6:80:dc:66:52:9f:ec:e8:70: 0c:f4:1a:3d:73:a2:b1:d1:c0:17:18:00:32:28:cf: 82:af:ce:40:8e:c2:55:8b:9b:51:43:55:30:66:b0: e9:7e:e3:64:82:a9:f1:be:98:3d:2f:70:26:1d:29: 25:14:2a:95:1a:7b:57:43:9f:cf:46:d0:94:d6:f0: 13:bf:6a:61:cc:ae:34:ba:44:75:cd:a8:1e:00:ee: e8:5c:83:54:c7:48:4f:69:76:c1:4d:af:89:2c:ec: bc:4b:92:7f:bc:01:fa:84:91:2e:4a:86:a8:30:80: 45:1a:17:eb:67:95:8b:b0:b7:90:7f:11:a1:bc:5a: ff:d1:e1:be:99:46:ea:50:3f:56:b0:43:b1:f2:9e: 6f:93:9e:b1:82:b1:3a:48:71:a6:e7:69:24:a3:04: 5f:a2:21:e3:f4:fc:9c:26:0a:7c:98:23:ad:f8:61: d5:ea:a0:21:8b:d3:90:4b:f1:0a:c4:58:73:92:01: a2:4e:a4:57:4c:7c:ff:de:a4:41:d6:1f:c4:8d:6b: ca:12:87:fc:20:a8:bf:f2:e6:ae:bc:7a:53:51:92: 3f:ba:bd:18:7b:72:fa:58:c6:85:89:ae:f2:fc:91: 02:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:24:C4:F6:85:9C:FE:EF:F4:6D:31:DC:1B:95:AA:A1:02:F4:A2:F6 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a8:e1:0b:eb:b2:92:51:09:20:b0:9f:b7:3a:b4:f7:2c:fb: 8f:4e:94:97:00:6f:ec:1d:ab:18:44:fe:08:9c:c2:92:f3:dd: 5b:05:7f:04:32:58:26:33:23:b6:04:da:d8:b8:19:4d:0c:39: eb:e1:32:81:fe:a4:f9:87:24:5f:22:f6:07:e4:70:ae:70:a4: 1c:a0:9e:33:dc:da:ac:f5:f3:9b:55:29:40:eb:73:87:bf:75: c4:3a:4f:27:c9:f8:34:b5:6d:84:97:a8:10:bd:ff:67:39:03: 08:c0:45:2e:0e:1a:e5:17:57:c7:a7:c0:a8:bb:61:b8:52:ca: 69:94:b1:8e:11:70:1d:54:d9:e3:c6:6d:56:63:85:8c:69:d0: 48:21:36:9a:a1:32:77:4e:6d:5c:fb:23:44:6f:c9:a5:af:2d: 77:99:19:a6:79:c7:07:f1:41:ff:ed:ed:19:e0:53:03:2c:1f: 12:29:0c:1c:06:8f:a9:81:98:18:1c:c7:81:2b:ad:9d:90:0f: e4:d6:9f:1f:76:d5:19:c7:46:a5:42:8f:50:9a:15:c3:9d:0a: 87:78:e2:32:ae:ae:7b:52:5a:27:30:17:fe:a2:8d:43:65:58: ae:e4:d1:47:2a:a3:fe:b0:60:c7:5c:b8:e2:3e:29:70:43:5d: fb:18:82:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzPVs7c/NNVk3rR4qP/UpExb7mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNTA4MjMwNTM2NTVaFw0yNTA4MjYxMTQxNTVaMDMxMTAvBgNV BAMTKDRGMjRDNEY2ODU5Q0ZFRUZGNDZEMzFEQzFCOTVBQUExMDJGNEEyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHcKlk2rdpQ/OxEupMBkL3zJF ruaA3GZSn+zocAz0Gj1zorHRwBcYADIoz4KvzkCOwlWLm1FDVTBmsOl+42SCqfG+ mD0vcCYdKSUUKpUae1dDn89G0JTW8BO/amHMrjS6RHXNqB4A7uhcg1THSE9pdsFN r4ks7LxLkn+8AfqEkS5KhqgwgEUaF+tnlYuwt5B/EaG8Wv/R4b6ZRupQP1awQ7Hy nm+TnrGCsTpIcabnaSSjBF+iIeP0/JwmCnyYI634YdXqoCGL05BL8QrEWHOSAaJO pFdMfP/epEHWH8SNa8oSh/wgqL/y5q68elNRkj+6vRh7cvpYxoWJrvL8kQLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTyTE9oWc/u/0bTHcG5WqoQL0ovYwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeo4QvrspJRCSCwn7c6tPcs+49OlJcAb+wd qxhE/gicwpLz3VsFfwQyWCYzI7YE2ti4GU0MOevhMoH+pPmHJF8i9gfkcK5wpByg njPc2qz185tVKUDrc4e/dcQ6TyfJ+DS1bYSXqBC9/2c5AwjARS4OGuUXV8enwKi7 YbhSymmUsY4RcB1U2ePGbVZjhYxp0EghNpqhMndObVz7I0RvyaWvLXeZGaZ5xwfx Qf/t7RngUwMsHxIpDBwGj6mBmBgcx4ErrZ2QD+TWnx921RnHRqVCj1CaFcOdCod4 4jKurntSWicwF/6ijUNlWK7k0Ucqo/6wYMdcuOI+KXBDXfsYgog= -----END CERTIFICATE-----Generated at Sat Aug 23 21:48:51 2025 by rpki-client