$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: npF8u1QPRi0nXKlJCr8KIoNNEq1LCO139cVL1nyaUFI= Subject key identifier: 9D:BD:67:43:5D:27:B0:92:EA:20:E9:37:46:C7:71:19:44:9E:81:39 Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 438795F28030759EA8116DD51D7B4A10E5B03C72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: FA Signing time: Mon 20 Oct 2025 10:52:04 +0000 Manifest this update: Mon 20 Oct 2025 10:47:04 +0000 Manifest next update: Thu 23 Oct 2025 16:41:04 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: 1IQsBuPxJnaLiRctTMDoreqnLmyBZw5Sbh0vvREXNNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:87:95:f2:80:30:75:9e:a8:11:6d:d5:1d:7b:4a:10:e5:b0:3c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Oct 20 10:47:04 2025 GMT Not After : Oct 23 16:41:04 2025 GMT Subject: CN=9DBD67435D27B092EA20E93746C77119449E8139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:f0:d8:4d:b3:2c:a8:b6:8a:be:40:cc:d3: 23:7d:e6:d3:27:23:41:7b:0b:71:3f:68:cd:9e:74: 1a:31:f5:3c:56:2e:74:3c:56:d3:a5:27:dd:42:5e: cf:96:81:86:33:99:a7:44:17:54:ea:71:08:e5:76: ad:0a:40:26:79:02:d0:a2:2f:39:a1:23:ba:c6:9c: 07:94:f2:51:57:43:d4:cf:5b:39:a2:81:28:f3:8c: 2f:0b:df:aa:e4:49:53:69:e6:58:f9:0a:f9:9b:92: ee:88:3a:14:bf:09:01:5e:c1:3e:d9:53:80:b4:bf: c5:5c:a6:3d:12:49:b9:c4:48:ad:04:1e:8c:6d:c1: 72:7b:10:8d:64:9a:c6:77:ff:19:ee:e3:65:4b:07: e2:25:34:89:b2:45:41:a1:2b:5a:35:88:a5:05:e1: 27:fd:a0:24:24:41:fa:bf:ba:ae:1e:fa:05:12:92: 2d:fc:49:bb:bf:e9:03:77:56:9f:f7:c8:d7:2e:a5: ee:33:83:57:77:26:95:0b:c9:3d:99:30:24:aa:f2: d3:5c:ef:f6:f6:21:70:82:48:64:76:8c:9a:8b:e0: 7e:6d:86:54:2a:64:c7:2d:3d:df:15:17:e5:2d:58: 07:46:61:37:3e:4e:02:f3:8b:16:73:2a:c3:1b:62: fe:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BD:67:43:5D:27:B0:92:EA:20:E9:37:46:C7:71:19:44:9E:81:39 X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:dd:2e:cf:b8:ca:7e:ac:8b:6f:36:09:1b:c9:6a:92:ee:bc: 46:74:ee:9d:f2:93:37:2f:bc:4a:ae:ce:3c:2f:b2:7a:c0:6b: 13:85:f0:47:eb:f5:d7:a1:30:18:fb:06:48:1f:26:90:bc:af: 1c:79:e9:62:a3:de:f4:42:29:92:4f:99:d9:ce:aa:9a:43:11: e9:8b:ae:f3:f1:92:30:f4:ca:d6:7d:04:a6:e9:58:92:5e:ab: 49:32:1e:ad:45:00:2d:62:ed:82:05:42:6d:63:e6:1c:61:07: d7:4e:f2:d7:75:0c:16:69:c1:20:74:65:62:3f:ac:5f:97:7d: da:12:63:02:88:1b:a1:a8:fd:90:99:a4:e0:16:6b:fc:b1:7d: 3a:57:f1:ec:00:a8:56:ea:1a:9d:c7:bc:d2:d8:25:4d:dc:2f: c5:ce:7f:e7:81:a4:87:90:7a:ab:33:48:ca:a7:25:4b:a2:c7: b2:00:eb:81:ad:35:83:74:96:80:d6:02:58:f1:5f:c1:33:bd: f2:fa:f6:d2:0a:e1:60:6c:65:73:a0:30:0d:03:c6:cd:01:9c: 75:c7:03:32:74:e4:91:03:3a:2c:09:5e:5f:1b:d4:30:e5:76: c6:20:da:1e:f4:77:04:22:27:a7:c9:6d:3a:fd:31:e9:e1:9e: bf:ac:2b:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4eV8oAwdZ6oEW3VHXtKEOWwPHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNTEwMjAxMDQ3MDRaFw0yNTEwMjMxNjQxMDRaMDMxMTAvBgNV BAMTKDlEQkQ2NzQzNUQyN0IwOTJFQTIwRTkzNzQ2Qzc3MTE5NDQ5RTgxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQh/DYTbMsqLaKvkDM0yN95tMn I0F7C3E/aM2edBox9TxWLnQ8VtOlJ91CXs+WgYYzmadEF1TqcQjldq0KQCZ5AtCi LzmhI7rGnAeU8lFXQ9TPWzmigSjzjC8L36rkSVNp5lj5Cvmbku6IOhS/CQFewT7Z U4C0v8Vcpj0SSbnESK0EHoxtwXJ7EI1kmsZ3/xnu42VLB+IlNImyRUGhK1o1iKUF 4Sf9oCQkQfq/uq4e+gUSki38Sbu/6QN3Vp/3yNcupe4zg1d3JpULyT2ZMCSq8tNc 7/b2IXCCSGR2jJqL4H5thlQqZMctPd8VF+UtWAdGYTc+TgLzixZzKsMbYv5hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnb1nQ10nsJLqIOk3RsdxGUSegTkwHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHdLs+4yn6si282CRvJapLuvEZ07p3ykzcv vEquzjwvsnrAaxOF8Efr9dehMBj7BkgfJpC8rxx56WKj3vRCKZJPmdnOqppDEemL rvPxkjD0ytZ9BKbpWJJeq0kyHq1FAC1i7YIFQm1j5hxhB9dO8td1DBZpwSB0ZWI/ rF+XfdoSYwKIG6Go/ZCZpOAWa/yxfTpX8ewAqFbqGp3HvNLYJU3cL8XOf+eBpIeQ eqszSMqnJUuix7IA64GtNYN0loDWAljxX8EzvfL69tIK4WBsZXOgMA0Dxs0BnHXH AzJ05JEDOiwJXl8b1DDldsYg2h70dwQiJ6fJbTr9Menhnr+sK1U= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:35 2025 by rpki-client