$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: 8m9bmS4xjPIerv+3WiKW0FpPMgkb6vz19sTBgtnFDsk= Subject key identifier: EA:93:B6:35:4F:BE:08:B0:7F:C5:AE:33:CC:DC:F3:6B:8C:05:CE:E9 Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 05BB2E78D4565EE89A31E786584BA8F1B445E35C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 02D9 Signing time: Sun 19 Oct 2025 16:12:21 +0000 Manifest this update: Sun 19 Oct 2025 16:07:21 +0000 Manifest next update: Wed 22 Oct 2025 19:15:21 +0000 Files and hashes: 1: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: s/BvvNyFLoDCC8VoLvtKFsnbQ7vDgztsbYdMDmUMi80=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) 3: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) 4: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:bb:2e:78:d4:56:5e:e8:9a:31:e7:86:58:4b:a8:f1:b4:45:e3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Oct 19 16:07:21 2025 GMT Not After : Oct 22 19:15:21 2025 GMT Subject: CN=EA93B6354FBE08B07FC5AE33CCDCF36B8C05CEE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:86:32:09:1b:69:c6:69:42:b1:ad:97:4e: 3d:5f:52:9e:4c:46:4d:e8:9d:e5:ff:a9:e1:6d:cd: 02:f0:4c:c3:37:ee:37:51:af:3a:89:94:11:dd:da: 06:8f:a7:d5:28:c1:26:b6:07:c0:3b:e7:9e:9e:20: 25:38:5f:83:5f:9b:95:0b:e6:6d:9f:5b:cb:fe:26: 36:33:c7:6b:66:59:45:00:e7:b9:79:22:ff:7c:48: 2d:c4:93:08:ea:0d:fc:35:c9:db:dc:f0:ef:36:c1: 46:43:9f:2c:73:ac:33:6f:fa:84:ee:10:40:22:4a: a1:fb:bc:72:1d:21:b5:06:da:2c:51:fe:df:bd:e8: a5:17:64:4c:f4:ee:80:e4:11:6b:12:23:ab:16:34: 84:59:dd:f6:cd:ee:fb:e9:8e:b1:01:67:54:21:f5: 39:9c:da:3d:6c:55:2a:bb:4a:2b:44:4d:fd:5a:a0: d1:92:48:e0:0a:d1:03:26:1a:61:ba:b8:c6:21:00: 79:80:60:0a:e9:34:bb:e2:5e:cc:fc:05:50:04:e1: c7:54:a2:03:4f:b3:fe:1c:1c:db:ec:25:21:e9:40: 1e:2e:35:17:07:73:94:c6:53:2f:02:50:a3:d2:ee: 9f:51:3f:3b:18:47:77:f4:ea:47:57:16:bc:6f:fb: 5d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:93:B6:35:4F:BE:08:B0:7F:C5:AE:33:CC:DC:F3:6B:8C:05:CE:E9 X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ff:a2:1e:02:a8:10:dd:95:9d:a1:f8:c6:0f:96:75:a0:a4: c2:b5:3e:c5:6e:2e:fb:ab:cb:40:d6:37:c3:ce:e1:06:2b:1b: 75:7d:57:5f:a8:9b:4d:70:11:03:15:6d:d9:52:ee:21:88:43: 98:b0:bc:c2:6e:65:72:44:2d:dd:68:70:6a:af:ea:12:b0:59: f6:3d:1e:b9:06:7c:fd:a1:6d:b1:48:1f:88:65:c0:8b:6e:01: 01:26:24:70:d0:cb:6a:a2:c6:47:6b:1a:0a:33:4e:40:4d:3e: 40:9f:d3:7b:2b:6a:f9:35:72:af:e0:63:37:47:2c:b4:b9:2c: 0a:51:61:3b:62:da:a0:0e:76:0c:07:31:dd:21:03:5e:d7:58: 5c:66:d5:22:f8:fe:8e:84:3a:11:c4:6d:b4:2a:e2:f2:46:f1: d1:f8:15:30:ba:ee:50:fe:97:fe:33:88:07:54:26:83:47:5d: 49:42:18:86:a4:0d:82:60:ec:a6:a5:59:d7:f8:a0:39:9c:9b: 16:a8:b1:20:7e:e8:fe:56:a2:bf:c0:06:5a:08:7d:a8:f2:ba: ad:e4:c2:6c:cd:33:ef:8e:44:80:e2:b2:f2:36:81:98:87:73: ef:a6:a9:49:dc:68:54:2b:af:6e:6f:c7:df:84:59:ee:67:38: ab:61:f1:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBbsueNRWXuiaMeeGWEuo8bRF41wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTEwMTkxNjA3MjFaFw0yNTEwMjIxOTE1MjFaMDMxMTAvBgNV BAMTKEVBOTNCNjM1NEZCRTA4QjA3RkM1QUUzM0NDRENGMzZCOEMwNUNFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrIYyCRtpxmlCsa2XTj1fUp5M Rk3oneX/qeFtzQLwTMM37jdRrzqJlBHd2gaPp9UowSa2B8A7556eICU4X4Nfm5UL 5m2fW8v+JjYzx2tmWUUA57l5Iv98SC3EkwjqDfw1ydvc8O82wUZDnyxzrDNv+oTu EEAiSqH7vHIdIbUG2ixR/t+96KUXZEz07oDkEWsSI6sWNIRZ3fbN7vvpjrEBZ1Qh 9Tmc2j1sVSq7SitETf1aoNGSSOAK0QMmGmG6uMYhAHmAYArpNLviXsz8BVAE4cdU ogNPs/4cHNvsJSHpQB4uNRcHc5TGUy8CUKPS7p9RPzsYR3f06kdXFrxv+11nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6pO2NU++CLB/xa4zzNzza4wFzukwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHr/oh4CqBDdlZ2h+MYPlnWgpMK1PsVuLvur y0DWN8PO4QYrG3V9V1+om01wEQMVbdlS7iGIQ5iwvMJuZXJELd1ocGqv6hKwWfY9 HrkGfP2hbbFIH4hlwItuAQEmJHDQy2qixkdrGgozTkBNPkCf03sravk1cq/gYzdH LLS5LApRYTti2qAOdgwHMd0hA17XWFxm1SL4/o6EOhHEbbQq4vJG8dH4FTC67lD+ l/4ziAdUJoNHXUlCGIakDYJg7KalWdf4oDmcmxaosSB+6P5Wor/ABloIfajyuq3k wmzNM++ORIDisvI2gZiHc++mqUncaFQrr25vx9+EWe5nOKth8b4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:21 2025 by rpki-client