$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: 3PhflwlEQnk6+xIPrFDlNAKNOaXbc5ld+9gE0Q0fHr4= Subject key identifier: 49:C9:AB:22:CD:53:7E:4D:F0:17:A3:4F:9F:93:7E:DD:1D:C5:96:5B Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 7655097A34C00A697351EA0CD7078AED9CBE5DAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: 9C Signing time: Wed 04 Jun 2025 22:01:52 +0000 Manifest this update: Wed 04 Jun 2025 21:56:52 +0000 Manifest next update: Sun 08 Jun 2025 09:16:52 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: lBpDlOvJplaCT7r480ByH3yh1S8tAl9VcvPw7ETOn7Y=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 09:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:55:09:7a:34:c0:0a:69:73:51:ea:0c:d7:07:8a:ed:9c:be:5d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Jun 4 21:56:52 2025 GMT Not After : Jun 8 09:16:52 2025 GMT Subject: CN=49C9AB22CD537E4DF017A34F9F937EDD1DC5965B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:94:90:d9:0d:f7:bb:7e:0b:85:da:b5:43: 2d:00:3e:a5:c9:62:5c:01:83:93:c7:c7:f5:74:69: 0e:a9:6d:e2:52:8d:15:4c:ac:a4:d9:97:cb:e8:11: 7d:96:26:b4:45:42:9c:ba:66:04:5b:97:09:92:96: 50:1b:db:6d:fe:83:20:5b:58:e3:91:fa:e5:73:09: 17:ee:0f:cd:ad:64:db:4f:ed:4c:80:e2:43:5e:88: f4:61:a2:46:07:a3:85:da:1c:10:20:ba:c8:1d:39: ba:8a:5b:85:64:14:0e:94:e9:55:28:ad:63:e4:16: d3:cb:50:12:fd:8e:b2:cc:ce:d8:a5:ee:ad:8e:42: 41:6a:04:ae:76:89:87:d0:6b:01:dd:1c:51:c8:dd: ce:23:47:7e:3a:e6:aa:a6:d8:e6:46:13:5d:8a:2c: 94:53:8b:94:32:f2:6e:33:d9:63:58:62:f7:cd:31: 8f:2c:bb:37:60:86:e2:e7:75:d9:8a:24:d4:1e:25: 50:1f:9a:fd:ab:d5:25:89:fd:94:99:46:20:d1:82: b6:f3:e9:1f:d5:6d:d9:a1:da:03:43:17:46:79:f2: b9:18:77:50:a4:f8:bc:f8:b4:cf:55:84:18:56:dd: 74:12:25:06:a5:da:14:9b:8d:6e:dc:19:c9:3f:94: 7f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C9:AB:22:CD:53:7E:4D:F0:17:A3:4F:9F:93:7E:DD:1D:C5:96:5B X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fb:90:ec:0b:b4:7d:cd:bd:df:02:e4:d9:7d:89:f1:a6:4d: 83:76:82:06:b5:85:02:71:ab:b9:da:86:3a:e9:65:1e:a4:bc: 4b:ae:3d:36:0b:bc:8d:bb:b9:b8:9b:bd:56:b9:28:63:11:3d: d5:5f:64:c5:19:7d:3c:ca:41:48:38:b2:8f:8f:9c:0d:57:d1: 25:92:ef:e9:a3:e7:97:b7:1c:40:f2:07:e0:4b:b2:33:ee:4a: b6:10:4e:db:2b:d3:cf:46:c9:91:51:52:2c:f5:17:63:ed:d2: e7:ac:40:f3:63:b2:a3:aa:f9:95:8a:32:22:f1:f9:f6:ae:c7: 45:62:c8:ac:90:0a:04:8e:13:89:44:3e:9d:90:ee:4d:84:db: 0b:cb:6d:8e:82:3e:44:67:c5:cb:22:d5:b3:be:48:69:a7:69: 7c:f1:69:c1:1b:8d:18:31:85:c0:fa:e7:64:0f:1a:a5:1c:9a: 17:ac:50:50:19:40:01:f9:36:15:9b:bc:8d:eb:49:f1:47:44: 90:7d:c9:d7:41:12:79:27:ec:e7:4b:d6:67:3e:ca:f5:b2:df: 84:53:9a:54:f2:d1:a7:c8:17:94:4f:8e:bc:4f:ea:86:45:c9: 8a:18:6d:17:ea:c5:ee:45:6c:9a:e9:ed:4f:e3:24:4f:5c:f5: bf:8d:e5:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlUJejTACmlzUeoM1weK7Zy+Xa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNTA2MDQyMTU2NTJaFw0yNTA2MDgwOTE2NTJaMDMxMTAvBgNV BAMTKDQ5QzlBQjIyQ0Q1MzdFNERGMDE3QTM0RjlGOTM3RUREMURDNTk2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpypSQ2Q33u34Lhdq1Qy0APqXJ YlwBg5PHx/V0aQ6pbeJSjRVMrKTZl8voEX2WJrRFQpy6ZgRblwmSllAb223+gyBb WOOR+uVzCRfuD82tZNtP7UyA4kNeiPRhokYHo4XaHBAgusgdObqKW4VkFA6U6VUo rWPkFtPLUBL9jrLMztil7q2OQkFqBK52iYfQawHdHFHI3c4jR3465qqm2OZGE12K LJRTi5Qy8m4z2WNYYvfNMY8suzdghuLnddmKJNQeJVAfmv2r1SWJ/ZSZRiDRgrbz 6R/Vbdmh2gNDF0Z58rkYd1Ck+Lz4tM9VhBhW3XQSJQal2hSbjW7cGck/lH8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUScmrIs1Tfk3wF6NPn5N+3R3FllswHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEz7kOwLtH3Nvd8C5Nl9ifGmTYN2gga1hQJx q7nahjrpZR6kvEuuPTYLvI27ubibvVa5KGMRPdVfZMUZfTzKQUg4so+PnA1X0SWS 7+mj55e3HEDyB+BLsjPuSrYQTtsr089GyZFRUiz1F2Pt0uesQPNjsqOq+ZWKMiLx +faux0ViyKyQCgSOE4lEPp2Q7k2E2wvLbY6CPkRnxcsi1bO+SGmnaXzxacEbjRgx hcD652QPGqUcmhesUFAZQAH5NhWbvI3rSfFHRJB9yddBEnkn7OdL1mc+yvWy34RT mlTy0afIF5RPjrxP6oZFyYoYbRfqxe5FbJrp7U/jJE9c9b+N5eE= -----END CERTIFICATE-----Generated at Fri Jun 6 06:18:21 2025 by rpki-client