$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: SD8IGE3efF3WqNjOW30AD/4pAECvSVq80SDN5/mMpm8= Subject key identifier: 6D:39:85:7C:36:3D:09:40:1F:40:56:4D:14:13:62:E5:D6:58:9C:FB Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 3A7A97B2E1C155927EFD87547C7E7BF9B5DC1B27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: E0 Signing time: Thu 21 Aug 2025 12:22:03 +0000 Manifest this update: Thu 21 Aug 2025 12:17:03 +0000 Manifest next update: Sun 24 Aug 2025 22:31:03 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: JPnmigpSU22mNMM2felu/teh45//yxl1D3GXtz4zcLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7a:97:b2:e1:c1:55:92:7e:fd:87:54:7c:7e:7b:f9:b5:dc:1b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Aug 21 12:17:03 2025 GMT Not After : Aug 24 22:31:03 2025 GMT Subject: CN=6D39857C363D09401F40564D141362E5D6589CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:d9:a3:9b:a3:07:52:a0:97:2c:ca:59:93: 8d:82:aa:1a:e1:61:40:2e:22:f9:76:60:0a:0f:53: 1e:f8:44:a2:ad:f1:33:b5:b0:5c:c0:2f:6b:0d:b9: eb:9e:f8:d2:c3:83:ce:82:df:e0:d5:d6:91:5f:32: ef:8c:e9:00:fb:3e:7d:c3:a1:87:b3:76:db:22:42: e3:d3:5d:dd:bd:50:c5:70:dd:f7:ff:a9:b2:a6:56: d0:dd:a5:fa:48:71:3b:d1:c5:ff:6c:7f:19:39:b9: ee:81:2e:67:52:35:a4:48:10:81:66:3b:32:c9:0a: 70:d5:b7:5f:f2:59:f1:23:b3:a5:d1:a5:90:19:93: 89:bf:bf:bd:84:3d:35:8e:17:16:a9:7b:db:98:67: 09:0e:c7:6f:ef:7f:19:1d:dc:45:66:d3:65:a9:03: 8c:ae:88:e2:6b:36:01:5c:39:35:44:32:a3:e8:f5: 64:f6:bf:ea:8f:dd:4b:bf:53:0b:36:9d:21:54:27: 1d:2e:80:64:15:f5:a4:e3:99:6a:30:14:e8:c2:8a: 1e:5b:36:e1:b3:b3:f7:de:33:2e:fd:5a:5a:25:c3: 02:58:2c:58:c8:ca:35:20:f5:f7:65:b1:04:aa:dd: b7:42:ce:df:ce:ad:58:62:4d:40:25:94:21:e0:ca: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:39:85:7C:36:3D:09:40:1F:40:56:4D:14:13:62:E5:D6:58:9C:FB X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4a:48:dd:ca:4a:45:3f:fd:5c:e7:e9:ff:5a:6f:f9:25:2a: 41:01:2d:c3:01:3d:ce:c9:72:17:4b:d1:77:6b:92:60:53:e7: 8f:42:37:f5:2c:5e:5b:69:66:98:a6:cb:cd:0f:39:0f:86:81: d8:1a:3e:dc:6c:1d:0b:4a:60:4a:5e:52:cd:d9:4d:ea:9a:b2: 3e:ef:3e:e2:41:87:b2:0d:c3:4c:75:12:16:1f:9a:40:3b:03: 19:c1:2e:54:6a:d3:de:25:c3:eb:b6:4c:4f:25:00:45:07:99: 66:66:19:eb:d0:93:29:60:8f:d5:b8:8b:ca:34:c7:d4:53:33: b8:50:9d:c1:ae:0c:e5:5b:15:16:f9:97:5c:ff:01:06:4c:c5: 40:f1:c0:e5:8b:9d:a8:da:98:b7:b2:d6:1e:85:88:24:1c:d7: 90:2c:a3:c7:8d:fd:50:7e:c2:70:73:5f:fd:61:d0:bc:da:d6: 98:48:df:cd:83:0e:cb:8c:bb:6f:af:f7:1f:62:5a:9f:0d:77: 02:ae:a7:4f:9c:7c:b6:6b:9b:16:e8:9e:a7:7c:cb:ec:af:87: 85:27:ef:01:f6:10:c3:c0:a0:21:56:8f:45:b4:a4:84:bd:16: ef:ba:ab:74:64:06:2c:80:0c:b8:da:29:b0:19:18:e5:9c:0e: 5a:a1:81:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnqXsuHBVZJ+/YdUfH57+bXcGycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNTA4MjExMjE3MDNaFw0yNTA4MjQyMjMxMDNaMDMxMTAvBgNV BAMTKDZEMzk4NTdDMzYzRDA5NDAxRjQwNTY0RDE0MTM2MkU1RDY1ODlDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hdmjm6MHUqCXLMpZk42Cqhrh YUAuIvl2YAoPUx74RKKt8TO1sFzAL2sNueue+NLDg86C3+DV1pFfMu+M6QD7Pn3D oYezdtsiQuPTXd29UMVw3ff/qbKmVtDdpfpIcTvRxf9sfxk5ue6BLmdSNaRIEIFm OzLJCnDVt1/yWfEjs6XRpZAZk4m/v72EPTWOFxape9uYZwkOx2/vfxkd3EVm02Wp A4yuiOJrNgFcOTVEMqPo9WT2v+qP3Uu/Uws2nSFUJx0ugGQV9aTjmWowFOjCih5b NuGzs/feMy79WlolwwJYLFjIyjUg9fdlsQSq3bdCzt/OrVhiTUAllCHgyipfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbTmFfDY9CUAfQFZNFBNi5dZYnPswHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9KSN3KSkU//Vzn6f9ab/klKkEBLcMBPc7J chdL0XdrkmBT549CN/UsXltpZpimy80POQ+GgdgaPtxsHQtKYEpeUs3ZTeqasj7v PuJBh7INw0x1EhYfmkA7AxnBLlRq094lw+u2TE8lAEUHmWZmGevQkylgj9W4i8o0 x9RTM7hQncGuDOVbFRb5l1z/AQZMxUDxwOWLnajamLey1h6FiCQc15Aso8eN/VB+ wnBzX/1h0Lza1phI382DDsuMu2+v9x9iWp8NdwKup0+cfLZrmxbonqd8y+yvh4Un 7wH2EMPAoCFWj0W0pIS9Fu+6q3RkBiyADLjaKbAZGOWcDlqhgRY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:36:43 2025 by rpki-client