$ rpki-client -vvf repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft File: 061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft (raw, json) Hash identifier: +CKvcRvpaVzokIfS830YGFWxTYFT/X35DB2JXmz9Yyo= Subject key identifier: A9:85:E2:43:63:91:9F:83:7D:CE:A4:FB:C6:92:B1:23:9B:3F:63:AA Authority key identifier: 06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59 Certificate issuer: /CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159 Certificate serial: 1B565B1315E9ABA857493C1BE53F3D7CA58C3264 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft Manifest number: 02C0 Signing time: Fri 17 Oct 2025 21:21:24 +0000 Manifest this update: Fri 17 Oct 2025 21:16:24 +0000 Manifest next update: Tue 21 Oct 2025 05:35:24 +0000 Files and hashes: 1: 3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa (hash: HPAI2gh/1HuKjzOsiopIeCg4F+M7JZClMF/J1ZpnE0M=) 2: 061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl (hash: +w/udYP/aaiJBSgeCX5sF/OL+psgSnaybEq+h74d//w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 05:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:56:5b:13:15:e9:ab:a8:57:49:3c:1b:e5:3f:3d:7c:a5:8c:32:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159 Validity Not Before: Oct 17 21:16:24 2025 GMT Not After : Oct 21 05:35:24 2025 GMT Subject: CN=A985E24363919F837DCEA4FBC692B1239B3F63AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:26:e0:fd:5a:c5:9a:7f:6b:c2:9f:f4:f2: ae:ec:a2:a3:72:3b:fb:b2:7b:77:b0:d9:55:21:98: 22:e0:be:b6:d6:47:8b:e6:7f:fd:46:ee:95:50:91: 50:44:cf:82:cb:aa:b9:e1:41:0e:09:9f:a0:84:47: 10:71:94:ec:52:d6:6e:d3:1b:f8:69:0e:5b:22:9a: 29:25:47:6f:b9:87:dd:b1:5d:da:56:21:38:50:63: ec:e7:5d:81:f4:d7:e3:bf:1f:0b:c1:95:89:9b:30: 92:6f:0d:47:ec:13:c3:df:36:82:d3:3e:c5:b9:d9: 9d:fe:89:37:30:b2:9b:f5:fa:f0:3b:f1:2b:8f:04: 0b:b2:12:d1:51:85:76:56:d6:4d:3a:e2:9c:73:6c: 75:55:f5:70:5c:b0:f1:87:69:4e:85:a8:f8:ac:3d: f8:57:73:47:95:6a:3d:73:f5:95:ac:88:5e:de:20: f0:b3:2c:85:cf:cb:57:2a:10:b0:e8:2d:28:03:c5: 8c:17:bb:44:03:f0:44:a4:48:b5:7b:07:39:55:58: 8a:4e:47:7c:06:fd:97:ef:4b:f0:d8:b2:cf:ad:42: a1:72:7b:88:c9:f3:ba:32:fe:86:0f:a8:b3:3e:33: f8:aa:27:a1:a7:8f:14:2b:27:7b:33:39:82:f3:dd: 84:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:85:E2:43:63:91:9F:83:7D:CE:A4:FB:C6:92:B1:23:9B:3F:63:AA X509v3 Authority Key Identifier: keyid:06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4c:f7:91:35:bd:40:a8:0a:47:4f:79:be:eb:eb:bb:b5:c9: e0:fc:88:8c:43:6e:b6:36:5f:af:a1:3c:3c:a4:d9:5d:0e:32: 28:c1:65:1e:e2:eb:99:b6:b1:c0:5c:1d:e8:01:06:dd:3a:ff: c8:5c:83:bb:b7:37:03:54:bd:f7:80:ed:06:b5:34:b6:b2:c4: ec:6d:5e:22:7d:c0:38:f0:4d:51:96:64:3f:29:3e:fc:2f:60: 42:f7:b4:d4:a1:dd:a7:1d:2f:45:88:4a:2d:03:fe:4b:d9:95: 23:b2:fe:96:74:f4:56:1b:b5:79:28:f8:b5:c4:1e:25:7f:bf: b4:77:5f:1d:b6:39:3a:3c:06:91:bc:d1:6e:02:66:37:7f:52: 84:dd:dc:4c:23:88:0b:d7:d4:69:c1:e3:9c:30:32:8b:aa:b6: 46:29:66:ed:77:09:75:86:4d:5d:a7:c0:6c:95:c7:74:29:eb: c7:3d:9e:ea:ab:5a:6b:2c:3e:86:39:cd:85:eb:73:97:85:15: 53:45:4d:2a:0f:1b:7b:1c:c5:56:4a:c0:99:f4:c5:d2:cf:e5: 25:6b:c6:36:68:e2:be:14:45:b4:b1:5f:ef:b6:a3:fb:7e:c3: 68:1c:d5:aa:c4:e3:ef:d2:0a:d7:17:a7:36:51:27:be:bf:2a: 0e:d5:4a:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1ZbExXpq6hXSTwb5T89fKWMMmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNERTBG RkVBMjE1OTAeFw0yNTEwMTcyMTE2MjRaFw0yNTEwMjEwNTM1MjRaMDMxMTAvBgNV BAMTKEE5ODVFMjQzNjM5MTlGODM3RENFQTRGQkM2OTJCMTIzOUIzRjYzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgybg/VrFmn9rwp/08q7soqNy O/uye3ew2VUhmCLgvrbWR4vmf/1G7pVQkVBEz4LLqrnhQQ4Jn6CERxBxlOxS1m7T G/hpDlsimiklR2+5h92xXdpWIThQY+znXYH01+O/HwvBlYmbMJJvDUfsE8PfNoLT PsW52Z3+iTcwspv1+vA78SuPBAuyEtFRhXZW1k064pxzbHVV9XBcsPGHaU6FqPis PfhXc0eVaj1z9ZWsiF7eIPCzLIXPy1cqELDoLSgDxYwXu0QD8ESkSLV7BzlVWIpO R3wG/ZfvS/DYss+tQqFye4jJ87oy/oYPqLM+M/iqJ6GnjxQrJ3szOYLz3YSxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqYXiQ2ORn4N9zqT7xpKxI5s/Y6owHwYDVR0j BBgwFoAUBhppK/wWsRnB2P2wfIHN4P/qIVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzMxZmIyNy02MTMzLTQ3ZWEtYjdjYy0yMjI3ZTA0Y2EyNjUvMC8wNjFBNjkyQkZD MTZCMTE5QzFEOEZEQjA3QzgxQ0RFMEZGRUEyMTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNERTBGRkVB MjE1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzczMWZiMjctNjEzMy00N2VhLWI3 Y2MtMjIyN2UwNGNhMjY1LzAvMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNE RTBGRkVBMjE1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhM95E1vUCoCkdPeb7r67u1yeD8iIxDbrY2 X6+hPDyk2V0OMijBZR7i65m2scBcHegBBt06/8hcg7u3NwNUvfeA7Qa1NLayxOxt XiJ9wDjwTVGWZD8pPvwvYEL3tNSh3acdL0WISi0D/kvZlSOy/pZ09FYbtXko+LXE HiV/v7R3Xx22OTo8BpG80W4CZjd/UoTd3EwjiAvX1GnB45wwMouqtkYpZu13CXWG TV2nwGyVx3Qp68c9nuqrWmssPoY5zYXrc5eFFVNFTSoPG3scxVZKwJn0xdLP5SVr xjZo4r4URbSxX++2o/t+w2gc1arE4+/SCtcXpzZRJ76/Kg7VSkg= -----END CERTIFICATE-----Generated at Mon Oct 20 06:54:51 2025 by rpki-client