$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft File: F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json) Hash identifier: mT0I3aqUi8M2ZFcZWAtdb8e1Noa14UiAOA7y9cRGV9Q= Subject key identifier: 51:56:67:43:0B:C1:3F:D1:55:61:D4:22:23:8F:87:44:A5:47:94:A2 Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Certificate serial: 3BD850D5282CFE55D7233A2BB3D5E4E3DE09D938 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft Manifest number: 0239 Signing time: Sun 19 Oct 2025 10:22:17 +0000 Manifest this update: Sun 19 Oct 2025 10:17:17 +0000 Manifest next update: Wed 22 Oct 2025 13:32:17 +0000 Files and hashes: 1: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: cKna+zoeb9tE9KSG4yyg+ysJZR0ZDxy6FCOXuq11CCg=) 2: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: XPciT66Xx06GRwXZ0ZEhgnmHRmTDySk8mHEntenab4o=) 3: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: eoTBfzq8y4bEDLADbH3GXH2pd0CIGqJzNCdlfnqwOuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d8:50:d5:28:2c:fe:55:d7:23:3a:2b:b3:d5:e4:e3:de:09:d9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Validity Not Before: Oct 19 10:17:17 2025 GMT Not After : Oct 22 13:32:17 2025 GMT Subject: CN=515667430BC13FD15561D422238F8744A54794A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:91:7e:6a:98:a8:20:28:4b:c0:74:7f:5b:2b: e0:da:b3:33:77:32:04:ec:0e:22:65:cb:72:6a:d1: a5:cf:ec:1f:a9:ed:ab:da:de:89:6a:2f:5b:15:37: c1:57:c3:56:60:d5:02:a2:32:67:a3:9b:03:c5:52: 68:e6:f6:bf:cf:aa:f3:61:10:a0:9e:69:4f:f4:99: ea:6d:fd:a3:41:67:82:d2:9b:cb:11:7b:73:1d:a6: 8c:49:38:10:e1:ab:b1:83:bf:06:73:9e:83:5f:c1: ec:f7:68:7e:4f:74:10:20:df:cc:08:53:2e:0d:83: c7:e9:f8:a7:00:a3:df:c0:e3:71:97:b4:c8:b1:79: 7b:c2:84:ae:8d:a3:73:8a:b1:19:1c:a8:7c:72:f6: ae:53:7d:01:6f:b2:76:16:94:54:71:e3:d6:81:90: 2e:35:45:20:83:e8:a7:e3:c9:92:64:76:a3:14:14: aa:5a:64:52:be:fb:4c:fc:54:a3:1e:07:46:53:a6: c9:df:7f:bd:96:4e:59:ed:aa:e7:fe:d1:2e:23:ae: 6c:24:f2:c8:cc:e8:bb:10:a3:cc:42:a1:b4:b3:e3: da:67:cb:47:f8:6f:aa:1f:a1:12:d6:84:82:1b:b9: 87:30:14:ef:1c:0d:84:fe:26:3f:c8:86:4c:81:24: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:56:67:43:0B:C1:3F:D1:55:61:D4:22:23:8F:87:44:A5:47:94:A2 X509v3 Authority Key Identifier: keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:77:61:e0:1e:8d:53:ba:65:b2:d3:3f:c2:f8:74:4a:e0:6e: 43:5d:c9:6d:d0:2c:b8:cf:6d:44:bc:13:d2:7e:4b:3c:fd:0b: 66:d9:54:fd:53:5e:27:1d:02:15:1e:d6:6e:96:a1:42:bd:93: ed:82:fb:05:8f:80:71:1d:84:d5:ab:ac:f2:af:0d:d4:95:4b: 73:cd:57:76:0e:6b:29:52:9c:43:54:bb:67:ea:0e:3d:a7:12: 96:23:7c:c9:db:b1:34:4e:cb:50:d9:bf:f7:c9:55:ad:0e:70: 26:5d:67:98:c1:3b:90:13:e9:36:d5:3c:7f:87:b1:f4:1a:df: 1a:94:40:3c:42:68:9a:90:b3:d6:06:74:3b:57:a5:c2:f4:7d: 99:4a:47:3d:e3:be:09:2c:6d:9a:c1:4a:72:89:47:16:34:ec: bf:88:bc:91:24:06:ac:86:fe:f5:ff:72:80:9f:26:5e:6a:1f: e1:34:16:ed:b9:30:d3:dc:ba:63:ee:73:09:c3:da:ba:17:59: 2f:67:09:a8:b8:1d:76:88:1e:85:69:32:85:c0:40:31:cc:7e: 4e:eb:e4:17:a4:31:e2:7b:25:77:14:f8:1c:6c:03:7e:79:d4: 0b:09:bf:12:ee:04:67:17:74:71:60:72:1f:00:c9:fa:eb:64: 6b:2a:ef:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9hQ1Sgs/lXXIzors9Xk494J2TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1 OTY4MDMyNDAeFw0yNTEwMTkxMDE3MTdaFw0yNTEwMjIxMzMyMTdaMDMxMTAvBgNV BAMTKDUxNTY2NzQzMEJDMTNGRDE1NTYxRDQyMjIzOEY4NzQ0QTU0Nzk0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUkX5qmKggKEvAdH9bK+DaszN3 MgTsDiJly3Jq0aXP7B+p7ava3olqL1sVN8FXw1Zg1QKiMmejmwPFUmjm9r/PqvNh EKCeaU/0mept/aNBZ4LSm8sRe3MdpoxJOBDhq7GDvwZznoNfwez3aH5PdBAg38wI Uy4Ng8fp+KcAo9/A43GXtMixeXvChK6No3OKsRkcqHxy9q5TfQFvsnYWlFRx49aB kC41RSCD6KfjyZJkdqMUFKpaZFK++0z8VKMeB0ZTpsnff72WTlntquf+0S4jrmwk 8sjM6LsQo8xCobSz49pny0f4b6ofoRLWhIIbuYcwFO8cDYT+Jj/IhkyBJGxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUVZnQwvBP9FVYdQiI4+HRKVHlKIwHwYDVR0j BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1 NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4 MDMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0 RjY1OTY4MDMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKp3YeAejVO6ZbLTP8L4dErgbkNdyW3QLLjP bUS8E9J+Szz9C2bZVP1TXicdAhUe1m6WoUK9k+2C+wWPgHEdhNWrrPKvDdSVS3PN V3YOaylSnENUu2fqDj2nEpYjfMnbsTROy1DZv/fJVa0OcCZdZ5jBO5AT6TbVPH+H sfQa3xqUQDxCaJqQs9YGdDtXpcL0fZlKRz3jvgksbZrBSnKJRxY07L+IvJEkBqyG /vX/coCfJl5qH+E0Fu25MNPcumPucwnD2roXWS9nCai4HXaIHoVpMoXAQDHMfk7r 5BekMeJ7JXcU+BxsA3551AsJvxLuBGcXdHFgch8AyfrrZGsq79o= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:37 2025 by rpki-client