$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: nonVy4C1HWB9QHtTmE3xDZjmwL02DcidUpw4TQUaL1I= Subject key identifier: 1E:00:8D:B0:A8:49:B1:1F:42:58:2B:1F:AA:20:98:D6:35:66:CC:77 Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 6B5FE676AC19E96324B2CF837521747ED3510533 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 01D2 Signing time: Sun 20 Jul 2025 11:51:57 +0000 Manifest this update: Sun 20 Jul 2025 11:46:57 +0000 Manifest next update: Wed 23 Jul 2025 18:59:57 +0000 Files and hashes: 1: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: OVp41P8XiusORgDYjhyG3tIoN5ypPHdHjH6RGxbqADk=) 2: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: C4XcT4GOWQB6jUKocUAAbR2sejlQV7/xjXGZgdE+gH4=) 3: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: 3t8POxW2mcQ/nvjJPU9gXim41a5qa0GKDf3HQqW/V6Y=) 4: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 18:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5f:e6:76:ac:19:e9:63:24:b2:cf:83:75:21:74:7e:d3:51:05:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Jul 20 11:46:57 2025 GMT Not After : Jul 23 18:59:57 2025 GMT Subject: CN=1E008DB0A849B11F42582B1FAA2098D63566CC77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:09:ac:f4:ae:57:44:24:03:32:28:05:a8: 6e:44:eb:01:ee:93:3f:25:fe:a8:73:8d:92:b1:65: b7:5a:0c:fb:62:35:31:a8:26:f2:74:32:ba:5d:f2: f8:e7:7d:57:20:6a:88:bd:b7:5f:f1:c0:a3:72:5d: 35:fb:93:6b:a4:8b:6d:95:37:d2:99:01:0c:16:8a: 73:61:98:d8:e1:78:52:0d:05:8b:15:c8:40:22:99: 65:b4:42:25:8a:57:ac:74:5a:cd:08:2d:db:6c:52: e0:1c:f6:92:5f:e7:09:8a:0f:ad:31:b5:6d:bb:16: 04:27:01:b8:e6:f4:00:af:53:f4:b8:49:ba:b2:1f: 66:79:d7:2a:35:38:2c:34:8e:38:79:65:0f:38:95: 4d:7a:28:d3:8a:e6:57:f6:62:6b:f2:b7:85:82:5a: ec:3a:5c:48:00:70:2d:95:8c:79:6e:69:37:bf:df: 3d:90:77:72:26:c9:f1:c4:6f:18:f1:13:db:29:e0: 2c:ea:87:88:43:7f:6d:97:fa:06:a5:c9:72:e7:ca: d1:86:da:ee:5a:ac:f8:0f:11:66:0c:09:70:da:94: b0:f0:67:82:04:8a:fe:cf:0f:0d:97:b5:83:d5:3a: 51:68:01:db:14:46:2f:2a:94:90:19:32:9e:e9:88: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:00:8D:B0:A8:49:B1:1F:42:58:2B:1F:AA:20:98:D6:35:66:CC:77 X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:67:ca:7f:d0:99:9f:9a:64:0b:c7:a7:e5:60:d3:63:88:fc: c1:b5:40:6d:1d:c1:51:5c:77:a7:ad:56:d5:8e:de:45:b6:c5: 6e:24:b8:75:23:24:38:cc:c0:70:99:22:77:38:74:0b:5d:8f: d5:d3:13:47:db:7d:e0:5d:f8:ea:bd:87:aa:a4:e0:4b:25:6f: e2:f5:bf:ef:d8:29:5f:10:52:07:f8:35:66:fb:fa:44:81:45: e7:c8:20:c5:bd:cf:39:ac:45:6e:e8:10:c4:1b:00:eb:e9:1b: 0a:11:7c:3d:47:f5:c3:9e:eb:99:73:0b:b0:bd:c4:b7:2f:6a: 0e:9c:e8:dd:0f:d5:84:fe:b4:48:96:40:9f:0e:36:36:52:32: fb:d9:c7:b3:be:43:8e:53:dc:ef:11:5f:59:3e:d5:2f:7a:81: c2:75:e6:bd:b7:57:d6:f8:22:b6:1a:e3:30:0c:2b:96:61:32: 0f:6f:ea:73:b6:51:a8:e2:95:e0:cd:d0:54:1a:71:95:f3:b1: 4d:cb:fb:da:23:38:76:fc:63:20:7f:ec:9e:82:c6:d4:cf:51: df:ea:74:9b:65:27:50:15:ec:48:0f:51:5b:3c:86:a5:94:2b: 83:5f:da:7c:56:5c:8b:6c:4e:bd:7d:92:98:90:72:56:42:09: 8d:84:21:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1/mdqwZ6WMkss+DdSF0ftNRBTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNTA3MjAxMTQ2NTdaFw0yNTA3MjMxODU5NTdaMDMxMTAvBgNV BAMTKDFFMDA4REIwQTg0OUIxMUY0MjU4MkIxRkFBMjA5OEQ2MzU2NkNDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21gms9K5XRCQDMigFqG5E6wHu kz8l/qhzjZKxZbdaDPtiNTGoJvJ0Mrpd8vjnfVcgaoi9t1/xwKNyXTX7k2uki22V N9KZAQwWinNhmNjheFINBYsVyEAimWW0QiWKV6x0Ws0ILdtsUuAc9pJf5wmKD60x tW27FgQnAbjm9ACvU/S4SbqyH2Z51yo1OCw0jjh5ZQ84lU16KNOK5lf2Ymvyt4WC Wuw6XEgAcC2VjHluaTe/3z2Qd3ImyfHEbxjxE9sp4Czqh4hDf22X+galyXLnytGG 2u5arPgPEWYMCXDalLDwZ4IEiv7PDw2XtYPVOlFoAdsURi8qlJAZMp7piMd1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHgCNsKhJsR9CWCsfqiCY1jVmzHcwHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNnyn/QmZ+aZAvHp+Vg02OI/MG1QG0dwVFc d6etVtWO3kW2xW4kuHUjJDjMwHCZInc4dAtdj9XTE0fbfeBd+Oq9h6qk4Eslb+L1 v+/YKV8QUgf4NWb7+kSBRefIIMW9zzmsRW7oEMQbAOvpGwoRfD1H9cOe65lzC7C9 xLcvag6c6N0P1YT+tEiWQJ8ONjZSMvvZx7O+Q45T3O8RX1k+1S96gcJ15r23V9b4 IrYa4zAMK5ZhMg9v6nO2UajileDN0FQacZXzsU3L+9ojOHb8YyB/7J6CxtTPUd/q dJtlJ1AV7EgPUVs8hqWUK4Nf2nxWXItsTr19kpiQclZCCY2EIbk= -----END CERTIFICATE-----Generated at Mon Jul 21 08:32:15 2025 by rpki-client