$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: /JuTNW8XbSJ3DLHfQqHQGXuWk9GH7oJ/V+Y2oziBq8o= Subject key identifier: A5:66:6C:AF:7C:C8:25:FF:A4:EC:71:4F:FC:91:CA:B2:E8:0C:94:15 Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 011A80382C5EE8B0AA729255710F001EAD389EB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: CA Signing time: Thu 03 Jul 2025 07:11:57 +0000 Manifest this update: Thu 03 Jul 2025 07:06:57 +0000 Manifest next update: Sun 06 Jul 2025 07:45:57 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: rABBMqjFhBN9ndmzypH3icPk5VJDbe+tUEGe7j87Vmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 07:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1a:80:38:2c:5e:e8:b0:aa:72:92:55:71:0f:00:1e:ad:38:9e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Jul 3 07:06:57 2025 GMT Not After : Jul 6 07:45:57 2025 GMT Subject: CN=A5666CAF7CC825FFA4EC714FFC91CAB2E80C9415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:63:b5:09:e5:ef:7f:42:1d:ae:87:97:e6:4b: 1e:42:e1:61:e0:4f:1e:4f:b4:c2:80:ea:80:0b:8c: 1e:4d:4a:d1:da:44:e2:13:33:6c:ee:e3:e9:70:10: 25:cc:36:93:b4:9e:15:89:59:36:28:1f:2a:83:96: 40:f0:67:96:82:71:26:5f:41:6b:83:91:58:be:37: 38:b4:d1:7a:d4:79:b5:79:e0:0e:32:17:96:12:7b: 6c:47:d3:cb:a0:b1:82:a8:63:21:6d:5c:87:32:91: bd:5e:d0:2e:db:20:86:23:83:dd:e0:98:6d:39:10: 4f:f8:bb:eb:91:9e:b4:5d:58:d3:4f:7f:fe:30:e6: b2:7e:a6:06:17:b3:50:87:c9:da:c2:83:2e:f8:6c: 0f:17:55:b7:95:cd:5e:34:f4:c9:24:a3:c8:5b:40: f0:5b:c7:4a:d2:c5:28:1b:27:d2:41:b7:92:fb:34: 64:45:8f:2c:97:0e:5e:0e:13:b5:97:11:60:1f:46: 95:0a:28:c5:5e:1c:10:8b:e6:59:18:08:36:1e:81: 87:f8:fc:b6:7d:d4:9e:ef:31:d2:d3:ec:eb:b1:f7: c2:39:9d:70:35:00:fd:34:34:8a:69:e4:88:72:90: aa:c1:91:87:5f:c4:c0:a4:cd:ac:45:25:79:83:52: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:66:6C:AF:7C:C8:25:FF:A4:EC:71:4F:FC:91:CA:B2:E8:0C:94:15 X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c0:a8:a6:58:89:01:55:82:04:ff:4b:ce:a5:4a:ec:ed:67: 80:ec:ff:62:71:74:3a:53:d2:14:06:f0:34:8e:c6:68:75:f4: 30:c1:59:96:93:6f:91:7d:25:b3:d8:99:6c:a1:01:b9:2a:8e: c0:91:b2:2f:ff:0b:59:b4:6d:f1:85:56:f8:fd:52:07:31:ce: d8:0a:a2:e5:75:f8:62:76:ea:38:91:a3:e7:db:59:92:8c:fc: 37:27:9a:96:69:c4:84:e8:0b:4a:f5:c6:56:28:22:be:2e:d0: a1:1c:fd:0f:1c:c1:30:11:0d:60:e8:8d:cb:34:79:ac:ea:e7: 4d:e1:43:7d:9f:a1:8d:66:f6:76:5d:0b:ef:5a:a3:02:32:a4: 47:0c:74:94:8e:51:84:43:1e:7e:18:de:28:0e:fa:c9:5e:85: 04:1e:9b:a2:5a:f6:55:a1:06:49:49:9f:27:c4:e0:05:2a:06: ba:1e:a3:a8:57:1e:90:60:0f:08:ac:05:f9:1d:f9:ea:9d:2b: 45:5f:9d:d4:f8:b9:c6:97:a0:e1:63:5d:2a:ef:0c:36:4b:ac: 88:5c:79:3c:c2:a1:f3:97:46:cf:5b:1a:66:59:cc:65:c7:e0: 65:67:ac:5d:9c:5b:f2:ee:67:59:99:e0:29:df:f7:1e:d0:b5: f3:0a:2a:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARqAOCxe6LCqcpJVcQ8AHq04nrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNTA3MDMwNzA2NTdaFw0yNTA3MDYwNzQ1NTdaMDMxMTAvBgNV BAMTKEE1NjY2Q0FGN0NDODI1RkZBNEVDNzE0RkZDOTFDQUIyRTgwQzk0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtY7UJ5e9/Qh2uh5fmSx5C4WHg Tx5PtMKA6oALjB5NStHaROITM2zu4+lwECXMNpO0nhWJWTYoHyqDlkDwZ5aCcSZf QWuDkVi+Nzi00XrUebV54A4yF5YSe2xH08ugsYKoYyFtXIcykb1e0C7bIIYjg93g mG05EE/4u+uRnrRdWNNPf/4w5rJ+pgYXs1CHydrCgy74bA8XVbeVzV409Mkko8hb QPBbx0rSxSgbJ9JBt5L7NGRFjyyXDl4OE7WXEWAfRpUKKMVeHBCL5lkYCDYegYf4 /LZ91J7vMdLT7Oux98I5nXA1AP00NIpp5IhykKrBkYdfxMCkzaxFJXmDUoolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpWZsr3zIJf+k7HFP/JHKsugMlBUwHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvAqKZYiQFVggT/S86lSuztZ4Ds/2JxdDpT 0hQG8DSOxmh19DDBWZaTb5F9JbPYmWyhAbkqjsCRsi//C1m0bfGFVvj9UgcxztgK ouV1+GJ26jiRo+fbWZKM/DcnmpZpxIToC0r1xlYoIr4u0KEc/Q8cwTARDWDojcs0 eazq503hQ32foY1m9nZdC+9aowIypEcMdJSOUYRDHn4Y3igO+slehQQem6Ja9lWh BklJnyfE4AUqBroeo6hXHpBgDwisBfkd+eqdK0VfndT4ucaXoOFjXSrvDDZLrIhc eTzCofOXRs9bGmZZzGXH4GVnrF2cW/LuZ1mZ4Cnf9x7QtfMKKnU= -----END CERTIFICATE-----Generated at Fri Jul 4 06:09:43 2025 by rpki-client