$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: kZnbhDBEUCCXXLQTiIXYxl2MaFTrse37FSaDMRmdTyo= Subject key identifier: C8:63:85:C9:63:A3:19:90:CD:28:45:E0:41:DC:84:2C:B1:50:3F:BE Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 55277B723B325ABE68DB681B90A7A761C2976C6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: 86 Signing time: Thu 21 Aug 2025 06:42:08 +0000 Manifest this update: Thu 21 Aug 2025 06:37:08 +0000 Manifest next update: Sun 24 Aug 2025 17:43:08 +0000 Files and hashes: 1: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: NvcYnOEp6TNwLUBjxvBXiVS/7BTrnJnJ+1wRwh9R1JM=) 2: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: x1zUxCGk5MI/+9HxStpwobEHABSl/FwV6EbOq7Ah7lU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:27:7b:72:3b:32:5a:be:68:db:68:1b:90:a7:a7:61:c2:97:6c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Aug 21 06:37:08 2025 GMT Not After : Aug 24 17:43:08 2025 GMT Subject: CN=C86385C963A31990CD2845E041DC842CB1503FBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a1:5a:58:98:fd:10:2b:9c:05:96:43:ef:b8: a0:a9:61:82:51:d0:a2:4c:c0:4f:8c:a8:6e:34:eb: 19:32:85:3c:e4:56:4b:fe:57:e0:81:34:b8:c9:52: 8e:7f:31:91:81:e4:24:86:13:a9:b3:3f:b4:7e:3d: 7d:fe:a4:a9:97:43:9c:d9:20:50:05:b2:ce:88:a3: c2:70:58:4d:3d:0b:fb:3f:b9:cf:f3:09:ba:b8:15: 06:ea:e8:66:d1:15:7d:f6:6c:da:68:4c:ea:ed:88: c7:bb:49:59:94:70:5c:0d:6b:11:9c:f8:43:5f:d1: 0b:d9:f1:97:a3:19:c3:9f:32:5d:19:9d:c7:f4:cc: fd:22:9a:49:65:94:7a:02:36:39:19:11:c2:02:3b: 56:ef:f3:36:0c:1c:1d:92:24:06:b9:9e:a3:26:b0: a8:d1:05:80:fd:01:63:d8:fd:81:f8:29:5c:ef:0f: d1:fe:2f:71:d8:58:9d:4e:2a:98:40:87:cd:d4:50: 52:e5:2f:c6:56:04:cc:c1:90:67:ee:c9:6a:0b:c4: e1:21:ee:55:78:67:69:ca:9c:ff:85:77:7c:78:f7: ad:c5:51:1f:e3:fd:ee:80:6b:6f:72:34:d7:5c:a8: 13:62:0c:39:7b:b0:f2:7d:94:4b:e7:b9:72:79:85: 31:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:63:85:C9:63:A3:19:90:CD:28:45:E0:41:DC:84:2C:B1:50:3F:BE X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:24:6f:66:e8:85:b9:96:35:9b:81:4e:44:fb:c1:42:91:c0: 8e:95:c6:61:c1:52:41:d4:d7:6d:b3:c1:dd:29:f4:ff:8f:6d: 31:28:e0:d4:b0:8c:86:b9:7c:55:f9:0a:20:1d:e8:a5:3d:14: 49:3e:1a:96:5c:f0:e6:29:7d:93:00:20:6d:94:b4:5c:72:3c: 29:67:32:11:05:87:4f:27:46:c6:94:af:b4:98:20:28:5c:90: 3d:3e:86:8f:da:6d:6a:bb:65:de:10:8d:1a:27:7e:07:1b:5e: db:30:af:e0:8e:f1:24:a4:3b:61:00:2e:cf:96:d1:94:da:dd: 87:fd:66:40:cb:b3:58:57:59:4c:18:c2:5b:ce:df:48:b8:74: 6e:48:c6:7d:a5:38:87:77:ea:b0:c4:3b:36:41:f4:c7:a0:21: 86:dd:8b:e5:2c:b7:69:e9:f0:d4:28:ad:8f:74:40:54:8d:81: d3:01:49:95:de:8c:ee:f4:b5:3f:ae:56:7d:8c:5e:8b:36:38: dc:18:56:1a:db:09:35:31:08:56:35:22:09:91:5c:73:d0:a0: ad:78:22:bd:e8:b0:e3:cb:c6:e2:c7:ed:0d:04:09:93:03:d8: d9:8c:9a:25:b9:b2:e0:ca:27:48:ac:a8:46:11:db:b3:ff:87: da:9c:a4:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSd7cjsyWr5o22gbkKenYcKXbGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNTA4MjEwNjM3MDhaFw0yNTA4MjQxNzQzMDhaMDMxMTAvBgNV BAMTKEM4NjM4NUM5NjNBMzE5OTBDRDI4NDVFMDQxREM4NDJDQjE1MDNGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSoVpYmP0QK5wFlkPvuKCpYYJR 0KJMwE+MqG406xkyhTzkVkv+V+CBNLjJUo5/MZGB5CSGE6mzP7R+PX3+pKmXQ5zZ IFAFss6Io8JwWE09C/s/uc/zCbq4FQbq6GbRFX32bNpoTOrtiMe7SVmUcFwNaxGc +ENf0QvZ8ZejGcOfMl0Zncf0zP0imklllHoCNjkZEcICO1bv8zYMHB2SJAa5nqMm sKjRBYD9AWPY/YH4KVzvD9H+L3HYWJ1OKphAh83UUFLlL8ZWBMzBkGfuyWoLxOEh 7lV4Z2nKnP+Fd3x4963FUR/j/e6Aa29yNNdcqBNiDDl7sPJ9lEvnuXJ5hTGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyGOFyWOjGZDNKEXgQdyELLFQP74wHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMkb2bohbmWNZuBTkT7wUKRwI6VxmHBUkHU 122zwd0p9P+PbTEo4NSwjIa5fFX5CiAd6KU9FEk+GpZc8OYpfZMAIG2UtFxyPCln MhEFh08nRsaUr7SYIChckD0+ho/abWq7Zd4QjRonfgcbXtswr+CO8SSkO2EALs+W 0ZTa3Yf9ZkDLs1hXWUwYwlvO30i4dG5Ixn2lOId36rDEOzZB9MegIYbdi+Ust2np 8NQorY90QFSNgdMBSZXejO70tT+uVn2MXos2ONwYVhrbCTUxCFY1IgmRXHPQoK14 Ir3osOPLxuLH7Q0ECZMD2NmMmiW5suDKJ0isqEYR27P/h9qcpEE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:00 2025 by rpki-client