$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: +3xEDULLDu0+8eKojeNkz9tsrRxHlMsGSyGTTXJZXno= Subject key identifier: 32:4E:04:7B:CC:1C:CE:CE:E6:6F:C4:EC:28:1A:A8:1F:EB:4B:60:C7 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 3BCE6103AD9FAD8EF584BE5BFAE4D14E67DFBE2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: 0117 Signing time: Sat 07 Mar 2026 15:12:06 +0000 Manifest this update: Sat 07 Mar 2026 15:07:06 +0000 Manifest next update: Tue 10 Mar 2026 16:39:06 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: Erw4Ot/dpMdcc8I6qc/gxymPH1JVFQ1BTwvoen43Y5g=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ce:61:03:ad:9f:ad:8e:f5:84:be:5b:fa:e4:d1:4e:67:df:be:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Mar 7 15:07:06 2026 GMT Not After : Mar 10 16:39:06 2026 GMT Subject: CN=324E047BCC1CCECEE66FC4EC281AA81FEB4B60C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:71:93:65:6e:ea:09:a8:96:ed:ec:39:2d:f3: bf:83:dc:78:e3:c7:1d:08:ca:66:e3:6f:99:e0:6f: cf:cb:9a:23:86:06:f8:f3:14:8f:37:a2:41:63:49: 1d:0d:21:39:ac:3a:13:8c:0d:b4:9a:e6:80:0c:45: dc:48:7a:08:75:05:35:66:bc:6b:92:3a:96:a9:e7: 4d:de:9b:ca:11:f3:01:12:c6:ad:2d:8b:df:da:41: 21:cc:cd:db:fb:15:4d:23:11:ac:af:8c:1f:b4:2f: 49:74:db:19:47:b8:9c:b3:d5:d3:38:46:cf:6f:b5: 16:b4:b4:10:78:f5:e0:7a:58:a8:87:74:69:e2:58: 13:4d:35:f8:e1:0c:d2:93:d0:7a:5e:20:b7:21:dd: 21:ff:a8:44:2d:ed:0d:f2:99:8c:e5:6a:79:c9:76: 04:c4:db:5d:ee:d7:76:53:62:f3:f3:16:a8:c1:fd: de:7e:fd:d3:15:fb:2f:b7:ce:5a:de:dc:b5:d5:24: 94:24:1d:b8:13:f3:8f:75:4d:49:09:aa:20:37:91: df:7f:45:d3:a9:a4:5b:23:3b:3f:d4:6d:16:67:4b: 4d:4d:3f:61:e0:9b:99:bf:f1:2a:e0:78:87:38:26: 85:a4:9e:cc:a8:45:35:3e:98:92:d3:82:88:87:87: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4E:04:7B:CC:1C:CE:CE:E6:6F:C4:EC:28:1A:A8:1F:EB:4B:60:C7 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:30:57:26:84:f6:2c:8d:f9:ca:e3:48:d5:f0:8b:14:d5:b2: 7c:9f:62:ed:20:6e:75:6a:9b:78:7b:ff:7c:1e:c4:0b:fe:42: 11:42:9f:a4:b1:94:42:ab:eb:2d:d6:ed:d8:96:db:b9:41:e0: 55:f5:09:88:c0:9b:f0:b7:c5:ff:99:db:cb:68:dc:58:86:9d: 4b:33:8a:19:68:c8:e3:1b:64:45:c8:19:db:76:71:fa:71:9e: 4f:f6:48:3d:cf:eb:3c:c1:a5:64:dc:7e:5d:75:c2:52:16:6d: 7e:31:00:0f:b6:86:50:7b:3e:08:bb:1d:46:c3:51:b9:c2:a8: c6:90:05:e2:d0:07:3d:54:34:d5:63:fb:20:17:22:4a:90:9a: 6b:13:4e:45:1b:cd:5e:5f:72:3f:65:52:6a:5a:1b:8b:21:32: 98:83:8c:ef:9f:30:3b:04:f2:9e:70:c3:7b:7e:6c:2e:82:4d: a9:01:0e:75:52:ea:05:da:45:24:88:e2:55:20:fa:44:d6:20: a4:6b:56:1d:3e:df:3c:52:bb:b0:9c:86:93:a1:03:ff:7e:70: 7b:04:2f:70:6a:30:1d:3c:ca:9f:ea:8b:3c:e1:92:71:b7:6f: 0f:2d:e6:62:13:c4:16:34:d3:04:62:96:b5:19:df:09:24:53: 44:af:42:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO85hA62frY71hL5b+uTRTmffviowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNjAzMDcxNTA3MDZaFw0yNjAzMTAxNjM5MDZaMDMxMTAvBgNV BAMTKDMyNEUwNDdCQ0MxQ0NFQ0VFNjZGQzRFQzI4MUFBODFGRUI0QjYwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDccZNlbuoJqJbt7Dkt87+D3Hjj xx0Iymbjb5ngb8/LmiOGBvjzFI83okFjSR0NITmsOhOMDbSa5oAMRdxIegh1BTVm vGuSOpap503em8oR8wESxq0ti9/aQSHMzdv7FU0jEayvjB+0L0l02xlHuJyz1dM4 Rs9vtRa0tBB49eB6WKiHdGniWBNNNfjhDNKT0HpeILch3SH/qEQt7Q3ymYzlannJ dgTE213u13ZTYvPzFqjB/d5+/dMV+y+3zlre3LXVJJQkHbgT8491TUkJqiA3kd9/ RdOppFsjOz/UbRZnS01NP2Hgm5m/8SrgeIc4JoWknsyoRTU+mJLTgoiHh0ltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMk4Ee8wczs7mb8TsKBqoH+tLYMcwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQwVyaE9iyN+crjSNXwixTVsnyfYu0gbnVq m3h7/3wexAv+QhFCn6SxlEKr6y3W7diW27lB4FX1CYjAm/C3xf+Z28to3FiGnUsz ihloyOMbZEXIGdt2cfpxnk/2SD3P6zzBpWTcfl11wlIWbX4xAA+2hlB7Pgi7HUbD UbnCqMaQBeLQBz1UNNVj+yAXIkqQmmsTTkUbzV5fcj9lUmpaG4shMpiDjO+fMDsE 8p5ww3t+bC6CTakBDnVS6gXaRSSI4lUg+kTWIKRrVh0+3zxSu7CchpOhA/9+cHsE L3BqMB08yp/qizzhknG3bw8t5mITxBY00wRilrUZ3wkkU0SvQoI= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:17 2026 by rpki-client