$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: lcqjICrMU9cX/DIbUm4G/Y9Vc2b6KyPd42wHwNv+yIA= Subject key identifier: 6D:96:AE:1F:05:A2:B8:E3:DA:D4:77:89:FC:0F:7B:38:AB:1B:90:CA Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 62C9FAD6F427D03158ED1FE33D330530AAEF79D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: B0 Signing time: Sat 19 Jul 2025 18:01:50 +0000 Manifest this update: Sat 19 Jul 2025 17:56:50 +0000 Manifest next update: Tue 22 Jul 2025 21:09:50 +0000 Files and hashes: 1: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) 2: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: 1IAr16hRL8L2vNVhkYcwuyM9l1ZTgmlr6aXBYo1uyQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c9:fa:d6:f4:27:d0:31:58:ed:1f:e3:3d:33:05:30:aa:ef:79:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Jul 19 17:56:50 2025 GMT Not After : Jul 22 21:09:50 2025 GMT Subject: CN=6D96AE1F05A2B8E3DAD47789FC0F7B38AB1B90CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:d6:5b:cf:cd:06:bf:c5:85:cd:ad:92:94: 4a:7b:7a:1d:5a:1c:08:c5:a8:c6:bb:20:5f:16:a5: e4:a2:65:c7:2d:8c:f1:84:e5:7b:e9:13:55:5a:f2: df:b1:3e:3a:0b:fb:14:c7:a8:06:94:7d:ac:e2:cf: 78:71:fe:38:9e:6f:49:7c:6a:83:13:31:fc:08:9e: 37:e8:a1:d0:49:40:91:b7:29:90:f1:68:e8:0b:65: 0f:ef:bb:cf:de:30:dd:99:59:1d:57:b9:e0:0f:93: 06:35:f3:b5:51:05:1f:9e:c5:af:0b:48:73:35:f4: bc:6c:27:0a:3f:36:df:a0:65:88:aa:b0:94:5a:ed: 98:bd:ae:f9:75:a1:8e:03:84:69:6f:05:eb:97:35: 08:53:69:d0:9c:af:a8:3f:28:22:26:52:fb:2c:32: 53:80:25:98:ad:2c:85:21:09:52:4d:54:b3:5c:1b: 99:34:10:68:60:e8:39:e2:39:a8:33:e5:ef:3b:14: f6:68:e3:e5:4d:02:18:65:74:b2:09:cd:ec:c3:ce: 7d:a1:63:11:80:8b:9c:4f:10:eb:b4:72:15:e5:d6: c4:dd:e1:7a:d3:80:50:5d:37:33:88:bf:34:a9:dd: 82:6d:ef:52:34:01:95:8d:d0:f6:40:cf:69:02:68: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:96:AE:1F:05:A2:B8:E3:DA:D4:77:89:FC:0F:7B:38:AB:1B:90:CA X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5f:d0:76:27:51:fe:20:85:cc:8d:e9:75:a3:d7:c8:b4:ae: 27:df:3c:55:00:52:2a:61:99:e4:72:26:36:2b:86:2a:32:db: 34:f5:ef:64:70:06:cb:8f:47:bd:20:a8:13:47:fc:80:ab:34: ae:60:ca:7a:92:72:12:02:c9:5a:63:0c:e2:af:71:5a:58:db: df:09:8c:f9:4b:b5:5a:ce:41:5d:47:87:ec:f8:6b:6f:06:c5: 7f:41:66:67:70:3a:51:1f:d7:a1:21:e9:97:1f:3b:64:24:12: 96:17:eb:28:16:b2:4f:75:1e:c7:60:60:bf:7f:1a:af:61:a3: 16:a6:36:5d:95:39:d8:d6:11:32:66:8d:0b:2c:92:18:5b:e6: 13:e3:96:13:43:46:3c:eb:2e:d5:54:c7:e7:78:a6:69:8b:1d: 57:23:0c:85:d9:e6:68:2a:65:0b:f2:43:f2:a3:5e:a0:19:1a: c7:a4:16:55:fc:10:5e:45:23:d7:79:46:7a:d5:ce:4a:88:8e: 47:8a:ea:d8:d2:5a:12:2c:36:bd:ff:1a:1c:51:3a:50:ca:49: d3:50:91:b1:3e:e5:49:ef:15:10:28:8a:b5:59:5e:c4:ba:a5: 92:b3:7c:b9:ce:a6:0e:17:38:a1:ae:d2:87:52:e4:c7:a7:ff: f1:36:05:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYsn61vQn0DFY7R/jPTMFMKrvedAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNTA3MTkxNzU2NTBaFw0yNTA3MjIyMTA5NTBaMDMxMTAvBgNV BAMTKDZEOTZBRTFGMDVBMkI4RTNEQUQ0Nzc4OUZDMEY3QjM4QUIxQjkwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ytZbz80Gv8WFza2SlEp7eh1a HAjFqMa7IF8WpeSiZcctjPGE5XvpE1Va8t+xPjoL+xTHqAaUfaziz3hx/jieb0l8 aoMTMfwInjfoodBJQJG3KZDxaOgLZQ/vu8/eMN2ZWR1XueAPkwY187VRBR+exa8L SHM19LxsJwo/Nt+gZYiqsJRa7Zi9rvl1oY4DhGlvBeuXNQhTadCcr6g/KCImUvss MlOAJZitLIUhCVJNVLNcG5k0EGhg6DniOagz5e87FPZo4+VNAhhldLIJzezDzn2h YxGAi5xPEOu0chXl1sTd4XrTgFBdNzOIvzSp3YJt71I0AZWN0PZAz2kCaMYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbZauHwWiuOPa1HeJ/A97OKsbkMowHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZf0HYnUf4ghcyN6XWj18i0riffPFUAUiph meRyJjYrhioy2zT172RwBsuPR70gqBNH/ICrNK5gynqSchICyVpjDOKvcVpY298J jPlLtVrOQV1Hh+z4a28GxX9BZmdwOlEf16Eh6ZcfO2QkEpYX6ygWsk91HsdgYL9/ Gq9hoxamNl2VOdjWETJmjQsskhhb5hPjlhNDRjzrLtVUx+d4pmmLHVcjDIXZ5mgq ZQvyQ/KjXqAZGsekFlX8EF5FI9d5RnrVzkqIjkeK6tjSWhIsNr3/GhxROlDKSdNQ kbE+5UnvFRAoirVZXsS6pZKzfLnOpg4XOKGu0odS5Men//E2BW8= -----END CERTIFICATE-----Generated at Mon Jul 21 10:34:05 2025 by rpki-client