$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: I0esYkaC88LjUfgMcXMJEgS9CirBOmV1oPAjtWGxSis= Subject key identifier: 97:C5:6C:F8:56:5E:87:4B:9C:DF:56:2D:94:AB:E6:4B:17:2B:E5:D4 Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 031D7D2987812B07BB19524F36EA758EDF537966 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: 013F Signing time: Tue 24 Mar 2026 23:12:18 +0000 Manifest this update: Tue 24 Mar 2026 23:07:18 +0000 Manifest next update: Sat 28 Mar 2026 01:45:18 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: xrd/n/McsN+XPHHgJZaNa5ybao0zt9rmKWVu1V0y++w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:1d:7d:29:87:81:2b:07:bb:19:52:4f:36:ea:75:8e:df:53:79:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Mar 24 23:07:18 2026 GMT Not After : Mar 28 01:45:18 2026 GMT Subject: CN=97C56CF8565E874B9CDF562D94ABE64B172BE5D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:19:4d:1a:80:7c:c3:d8:e3:ad:7e:c1:90: d9:64:84:e3:02:da:b7:f0:8b:67:99:2e:1f:c8:e8: 46:f0:51:f7:5d:42:65:55:2d:5b:ea:73:3c:dd:7c: 58:53:ab:75:3b:55:95:e1:cf:d6:61:35:bd:01:03: 97:c0:0f:a5:4b:f4:d8:37:4e:a2:cb:6b:da:30:1f: 09:30:7a:12:f6:14:25:9c:db:66:e0:01:4b:59:9b: 03:57:b9:74:35:97:14:d8:f8:bb:b6:af:0d:4d:b0: 62:6f:d9:a0:b6:2a:f1:c8:02:fb:ba:ea:34:89:18: 7a:2f:b8:bf:16:67:be:5d:02:fa:6c:da:79:84:e1: a6:87:af:97:24:08:71:4b:b8:0b:7c:26:59:da:48: 53:8b:c8:0c:f4:10:58:69:b2:0b:2a:9a:8e:71:92: 35:29:df:22:7e:55:f8:d8:a5:41:b3:f2:85:34:df: 20:62:a9:f3:8d:f7:06:fe:75:e4:34:08:4b:cb:b6: 57:ef:0f:c6:77:ea:37:c7:71:44:85:42:1f:45:dd: b2:31:09:82:63:90:da:93:68:e9:61:1e:6c:7e:9f: 60:6b:37:9c:f9:33:4c:85:bb:fb:4e:5e:ab:22:27: 08:f9:de:c7:bb:e7:c2:fa:af:10:27:68:e0:88:84: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C5:6C:F8:56:5E:87:4B:9C:DF:56:2D:94:AB:E6:4B:17:2B:E5:D4 X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:fa:a4:9f:0d:49:8c:55:f1:74:e7:6a:b0:8e:87:7f:04:c6: 4c:33:8f:04:21:f3:36:40:40:c6:f0:12:c9:a7:59:23:5e:5d: 18:f2:08:42:5f:24:63:d1:3d:40:ac:15:89:d4:17:87:0b:56: 2c:5e:c1:35:f7:f6:cf:d7:a7:34:1f:30:d1:c1:21:02:f9:07: e1:31:81:11:9e:2f:e5:9b:fd:f8:aa:24:3d:3c:73:75:83:7c: c6:d7:12:34:54:c1:33:21:2b:88:7d:ea:15:aa:d0:b4:7d:e3: d4:b0:b3:db:b5:e9:7f:7b:56:8e:69:aa:b1:6f:cb:ff:7e:d7: ad:4d:80:8b:86:5c:b9:4a:20:c2:cc:2a:42:a3:13:fa:64:5e: 4a:c4:e7:34:f3:50:3e:47:96:a8:91:1d:f2:7b:53:ca:7b:94: 50:53:00:b3:f7:b9:fc:50:fc:5f:4f:8e:8b:77:75:2f:a4:98: 60:d1:60:4e:fe:e1:a3:81:02:3b:da:eb:b6:ae:26:34:4a:d1: 67:26:d6:ab:a9:1b:ee:63:2e:0f:bb:68:07:75:cb:b2:e4:5b: 8e:ec:fe:32:51:6b:8a:9c:bb:3c:0c:21:a1:9e:0f:b9:cd:ed: 55:d2:24:78:87:0c:47:31:71:3c:75:b1:a1:47:ad:1c:ed:38: 1b:66:38:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAx19KYeBKwe7GVJPNup1jt9TeWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNjAzMjQyMzA3MThaFw0yNjAzMjgwMTQ1MThaMDMxMTAvBgNV BAMTKDk3QzU2Q0Y4NTY1RTg3NEI5Q0RGNTYyRDk0QUJFNjRCMTcyQkU1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOBlNGoB8w9jjrX7BkNlkhOMC 2rfwi2eZLh/I6EbwUfddQmVVLVvqczzdfFhTq3U7VZXhz9ZhNb0BA5fAD6VL9Ng3 TqLLa9owHwkwehL2FCWc22bgAUtZmwNXuXQ1lxTY+Lu2rw1NsGJv2aC2KvHIAvu6 6jSJGHovuL8WZ75dAvps2nmE4aaHr5ckCHFLuAt8JlnaSFOLyAz0EFhpsgsqmo5x kjUp3yJ+VfjYpUGz8oU03yBiqfON9wb+deQ0CEvLtlfvD8Z36jfHcUSFQh9F3bIx CYJjkNqTaOlhHmx+n2BrN5z5M0yFu/tOXqsiJwj53se758L6rxAnaOCIhGdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl8Vs+FZeh0uc31YtlKvmSxcr5dQwHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMX6pJ8NSYxV8XTnarCOh38ExkwzjwQh8zZA QMbwEsmnWSNeXRjyCEJfJGPRPUCsFYnUF4cLVixewTX39s/XpzQfMNHBIQL5B+Ex gRGeL+Wb/fiqJD08c3WDfMbXEjRUwTMhK4h96hWq0LR949Sws9u16X97Vo5pqrFv y/9+161NgIuGXLlKIMLMKkKjE/pkXkrE5zTzUD5HlqiRHfJ7U8p7lFBTALP3ufxQ /F9Pjot3dS+kmGDRYE7+4aOBAjva67auJjRK0Wcm1qupG+5jLg+7aAd1y7LkW47s /jJRa4qcuzwMIaGeD7nN7VXSJHiHDEcxcTx1saFHrRztOBtmOJ8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:09 2026 by rpki-client