$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: ynVUJ01lD3nCa62pJq049ujxNopSQRyYG4WrjNu2mKY= Subject key identifier: CE:51:53:B4:B4:D6:D5:11:0E:9E:DF:28:10:BE:36:9B:8A:C3:69:89 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 2F18AD6D97E5B0CD6EAE3EF63A0AA52BF3F58219 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: 012B Signing time: Tue 21 Apr 2026 06:52:08 +0000 Manifest this update: Tue 21 Apr 2026 06:47:08 +0000 Manifest next update: Fri 24 Apr 2026 15:10:08 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: bpIN27oTbOnWXwbiT3TDU97PFwmjIKiv36MKOTyEMzM=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:18:ad:6d:97:e5:b0:cd:6e:ae:3e:f6:3a:0a:a5:2b:f3:f5:82:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Apr 21 06:47:08 2026 GMT Not After : Apr 24 15:10:08 2026 GMT Subject: CN=CE5153B4B4D6D5110E9EDF2810BE369B8AC36989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:17:8f:a3:f8:97:49:96:45:8e:ef:be:49: 3a:63:1a:46:4b:81:c8:7a:05:20:4f:a9:a2:14:6b: df:1e:61:32:e8:9d:cc:d5:c0:bf:2c:75:bd:24:b9: 23:be:b1:cb:b3:94:18:5d:71:aa:01:28:2e:55:4d: da:1f:3f:20:cf:c4:84:84:b4:9c:80:6d:9b:a9:63: 21:3d:ff:24:6f:c5:d5:df:ef:13:16:ae:21:dd:d0: b4:ab:c7:53:6c:3d:d6:53:f4:e9:b3:8f:a8:47:6f: 15:7a:91:1e:5d:21:0d:43:43:4e:f4:f3:9a:ba:8b: 71:b7:cb:90:83:69:b2:5b:47:ae:d8:1e:21:9f:4a: c4:31:e7:96:ae:45:68:62:50:43:d5:4c:d6:96:88: c4:84:43:bb:88:3f:48:9b:2b:a5:0b:df:ea:41:7e: 89:c0:44:b6:1b:9b:d2:52:85:10:4f:f4:ea:9a:9a: a9:d1:ff:60:21:31:1a:d3:6c:fe:a2:49:fb:56:b6: 9b:18:18:9e:6b:00:b1:79:40:d0:11:88:97:0c:26: a8:17:c0:c3:c9:29:3e:bd:2b:98:57:33:d6:79:61: 99:79:03:88:32:87:8f:65:00:43:ea:63:01:aa:f3: 70:f6:b3:23:93:ec:d1:9b:f9:ca:04:f2:06:35:c1: b4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:51:53:B4:B4:D6:D5:11:0E:9E:DF:28:10:BE:36:9B:8A:C3:69:89 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c9:32:2b:74:22:19:ab:af:3b:95:a0:34:b8:d5:ed:98:74: 0b:ee:0d:a4:49:19:01:76:54:17:e1:65:05:89:34:aa:1b:7e: 5f:df:1d:f2:d9:34:6b:f1:a3:3d:ff:d9:cf:42:2f:1a:a8:48: 27:32:85:e8:64:0e:7a:a5:94:76:30:62:36:43:12:06:81:1d: 86:08:f1:5f:de:4e:9c:44:c9:26:46:68:4a:35:20:a8:17:60: 89:24:30:1c:c0:3d:b1:f8:29:1e:3f:02:81:26:1e:0c:6e:51: 98:84:74:d5:c7:58:60:34:81:47:6b:36:ea:c4:6f:a1:79:63: a9:d5:f3:46:7c:66:1a:b7:f0:cc:dd:4d:d2:e7:fe:7e:3f:d1: d3:2b:90:13:5a:35:3c:35:ad:d7:6f:c6:4c:b5:f9:b4:2c:48: 0c:54:90:95:be:f8:51:89:3b:a0:ff:c5:67:03:ca:9c:3a:1a: c8:cd:90:5c:9b:05:7c:30:47:e2:2d:91:2f:8b:03:25:2f:2d: 84:ac:25:53:b3:c1:bb:a5:42:8b:18:03:36:7c:d0:fb:b2:a5: ca:85:c4:ec:15:18:26:8b:e2:93:be:92:5a:89:72:d7:ba:e4: d8:f3:38:8e:b0:92:d9:97:d8:05:d3:ea:23:38:fc:41:f2:c1: f6:64:c5:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxitbZflsM1urj72OgqlK/P1ghkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNjA0MjEwNjQ3MDhaFw0yNjA0MjQxNTEwMDhaMDMxMTAvBgNV BAMTKENFNTE1M0I0QjRENkQ1MTEwRTlFREYyODEwQkUzNjlCOEFDMzY5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8xePo/iXSZZFju++STpjGkZL gch6BSBPqaIUa98eYTLonczVwL8sdb0kuSO+scuzlBhdcaoBKC5VTdofPyDPxISE tJyAbZupYyE9/yRvxdXf7xMWriHd0LSrx1NsPdZT9Omzj6hHbxV6kR5dIQ1DQ070 85q6i3G3y5CDabJbR67YHiGfSsQx55auRWhiUEPVTNaWiMSEQ7uIP0ibK6UL3+pB fonARLYbm9JShRBP9OqamqnR/2AhMRrTbP6iSftWtpsYGJ5rALF5QNARiJcMJqgX wMPJKT69K5hXM9Z5YZl5A4gyh49lAEPqYwGq83D2syOT7NGb+coE8gY1wbRtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzlFTtLTW1REOnt8oEL42m4rDaYkwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPJMit0IhmrrzuVoDS41e2YdAvuDaRJGQF2 VBfhZQWJNKobfl/fHfLZNGvxoz3/2c9CLxqoSCcyhehkDnqllHYwYjZDEgaBHYYI 8V/eTpxEySZGaEo1IKgXYIkkMBzAPbH4KR4/AoEmHgxuUZiEdNXHWGA0gUdrNurE b6F5Y6nV80Z8Zhq38MzdTdLn/n4/0dMrkBNaNTw1rddvxky1+bQsSAxUkJW++FGJ O6D/xWcDypw6GsjNkFybBXwwR+ItkS+LAyUvLYSsJVOzwbulQosYAzZ80PuypcqF xOwVGCaL4pO+klqJcte65NjzOI6wktmX2AXT6iM4/EHywfZkxdI= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:36 2026 by rpki-client