$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: h2yIJ4BMz6Aqc0A26kDVSGezHs7GlGLc34/Vp7MHKjA= Subject key identifier: 16:75:A1:17:A8:F6:A7:81:9E:C1:E6:1D:8F:90:80:59:2F:8A:61:83 Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 5801E75C3BB99D35F0082D98F64B249E38787D49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 02B0 Signing time: Tue 22 Jul 2025 06:02:19 +0000 Manifest this update: Tue 22 Jul 2025 05:57:19 +0000 Manifest next update: Fri 25 Jul 2025 11:49:19 +0000 Files and hashes: 1: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: H8eCB1ajNrVrh3omhOA+7EIUqPrlMk7lfLVZEODKpTs=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 2Hf0voiLyRB5yquDwOqQGzECahxM0QLqpt8+luqMRjw=) 3: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: yKoAqnAMuSWOSr1rkv9m/xwQSi+3CDGsN1+tmpX+4i8=) 4: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 6kHHWGOl1WkB5FFpqU5tEepFu8NpO3D8mqOqYEjynek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:01:e7:5c:3b:b9:9d:35:f0:08:2d:98:f6:4b:24:9e:38:78:7d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Jul 22 05:57:19 2025 GMT Not After : Jul 25 11:49:19 2025 GMT Subject: CN=1675A117A8F6A7819EC1E61D8F9080592F8A6183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b4:f9:3a:6c:4f:67:3f:a9:40:58:0d:d8:e6: 9c:3e:7a:8f:54:88:fc:ec:05:4b:bf:00:c4:fa:2f: ec:8c:c2:dd:76:a5:2a:4e:6a:3a:a7:75:74:b0:8d: 7d:63:3b:ab:a4:92:ee:f7:e9:5f:9c:7b:81:54:74: 13:47:79:49:d0:bc:38:6a:b4:fc:28:38:a8:ca:4c: 27:04:6f:0d:4a:78:00:fb:b0:d9:d7:e0:9b:f6:c2: 28:d4:6b:cc:69:14:08:97:82:9a:bf:86:10:50:ec: 15:f3:b3:91:a7:ab:56:62:4c:33:bc:3a:bc:8d:c7: 9f:f0:fd:44:41:f0:d0:29:22:7a:34:49:60:60:73: 95:f2:ba:3b:e4:b6:64:03:64:86:1f:55:ea:69:4b: b7:05:b5:b0:24:01:2c:9c:95:7d:8c:a5:2d:7b:75: 38:0e:02:ce:f7:ce:6b:ec:1e:cd:4b:39:9d:ee:81: af:18:3f:cf:24:ab:dc:ef:c4:75:0c:fb:3c:7f:c7: 13:77:47:2e:38:75:ab:4e:31:67:3c:a8:97:f2:b3: 6f:56:4b:92:21:bf:71:f5:d2:37:e4:a9:66:1e:d5: 62:43:7f:a4:37:27:46:f8:36:ed:6a:7c:21:1e:f7: 92:0f:d4:35:c1:e3:4b:c6:f5:aa:af:d4:63:c1:8a: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:75:A1:17:A8:F6:A7:81:9E:C1:E6:1D:8F:90:80:59:2F:8A:61:83 X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:96:f0:96:2a:81:bc:0e:aa:b1:cd:5d:37:d7:95:b4:21:a6: 60:1f:f2:65:fd:de:40:d7:33:4a:14:db:4b:4e:3a:17:4e:0c: 3e:61:b8:88:4d:5e:0d:d0:14:1b:c4:22:4a:1d:82:07:46:7a: 31:ea:ba:ea:0a:01:bd:40:0f:18:42:cf:04:73:06:62:eb:09: a8:03:7a:13:3d:f3:4c:37:1f:a8:4d:9b:af:2f:47:09:05:6c: 59:f6:62:e8:01:35:b8:4d:82:9d:8e:59:4b:93:3f:66:0b:81: 19:06:61:05:c3:84:35:fa:5b:9f:fa:e5:12:76:3a:c8:d0:41: 5b:56:de:47:5a:f5:65:20:7d:ec:28:e8:9a:18:a4:cb:91:4b: 7f:71:b8:1b:4e:59:42:9a:30:ab:60:aa:71:58:43:55:c2:1f: b7:c0:8f:41:1b:e5:3a:0a:29:c5:ef:2b:7f:81:db:69:9b:60: 42:16:4f:eb:f5:81:d1:bf:b4:ae:77:1a:3c:2c:91:53:9e:d1: c5:16:ca:19:76:74:a7:48:56:29:7f:72:95:53:6a:f7:b5:03: 6d:5f:b6:85:a1:bd:c6:95:9f:37:51:c5:07:e3:f7:bb:5c:15: d5:87:6b:8f:86:fa:8c:eb:c8:3c:c4:53:0c:38:68:e8:98:e3: de:f4:c0:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAHnXDu5nTXwCC2Y9ksknjh4fUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTA3MjIwNTU3MTlaFw0yNTA3MjUxMTQ5MTlaMDMxMTAvBgNV BAMTKDE2NzVBMTE3QThGNkE3ODE5RUMxRTYxRDhGOTA4MDU5MkY4QTYxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtPk6bE9nP6lAWA3Y5pw+eo9U iPzsBUu/AMT6L+yMwt12pSpOajqndXSwjX1jO6ukku736V+ce4FUdBNHeUnQvDhq tPwoOKjKTCcEbw1KeAD7sNnX4Jv2wijUa8xpFAiXgpq/hhBQ7BXzs5Gnq1ZiTDO8 OryNx5/w/URB8NApIno0SWBgc5XyujvktmQDZIYfVeppS7cFtbAkASyclX2MpS17 dTgOAs73zmvsHs1LOZ3uga8YP88kq9zvxHUM+zx/xxN3Ry44datOMWc8qJfys29W S5Ihv3H10jfkqWYe1WJDf6Q3J0b4Nu1qfCEe95IP1DXB40vG9aqv1GPBijslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFnWhF6j2p4GeweYdj5CAWS+KYYMwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMiW8JYqgbwOqrHNXTfXlbQhpmAf8mX93kDX M0oU20tOOhdODD5huIhNXg3QFBvEIkodggdGejHquuoKAb1ADxhCzwRzBmLrCagD ehM980w3H6hNm68vRwkFbFn2YugBNbhNgp2OWUuTP2YLgRkGYQXDhDX6W5/65RJ2 OsjQQVtW3kda9WUgfewo6JoYpMuRS39xuBtOWUKaMKtgqnFYQ1XCH7fAj0Eb5ToK KcXvK3+B22mbYEIWT+v1gdG/tK53GjwskVOe0cUWyhl2dKdIVil/cpVTave1A21f toWhvcaVnzdRxQfj97tcFdWHa4+G+ozryDzEUww4aOiY4970wP4= -----END CERTIFICATE-----Generated at Thu Jul 24 08:22:34 2025 by rpki-client