$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: XkWYvxB/ZVncuIPgBidbdro6KUQzxXtsZBRf4P+0jVk= Subject key identifier: 60:A2:B2:6E:49:C9:CD:48:A8:FB:14:FE:5F:15:B5:3D:B2:41:81:B3 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 6B2BA5D38F02F0579EB7429F9317CD83A98CA35F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: C6 Signing time: Sun 07 Sep 2025 17:11:52 +0000 Manifest this update: Sun 07 Sep 2025 17:06:52 +0000 Manifest next update: Wed 10 Sep 2025 17:52:52 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: JpOWFvZf+niDBuxjJsJCpnB5IwF0Bhztbr0RQkt9yW4=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 17:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2b:a5:d3:8f:02:f0:57:9e:b7:42:9f:93:17:cd:83:a9:8c:a3:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Sep 7 17:06:52 2025 GMT Not After : Sep 10 17:52:52 2025 GMT Subject: CN=60A2B26E49C9CD48A8FB14FE5F15B53DB24181B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:92:f2:b2:6f:bc:1b:d0:fd:5f:96:30:c4:41: 1f:31:d8:31:47:1f:f2:76:48:ff:44:34:59:f9:9b: 98:a6:cb:6f:65:e3:ad:19:e3:62:30:9a:f5:64:92: be:1c:68:97:63:22:02:7a:45:5a:02:56:d4:d6:06: 22:7b:b6:bf:52:6b:86:6d:88:56:25:b9:ea:ae:ac: d7:d7:aa:c9:2a:d8:30:d2:b5:0f:92:2e:d9:c6:1f: 38:4b:0a:e3:81:9a:6c:98:f5:ce:6c:ed:83:8b:9d: 2d:26:e6:3d:7c:57:32:62:82:9b:e5:fd:16:90:ca: ce:a1:2e:79:44:db:b2:db:7d:ce:0a:f3:f5:a2:88: bf:58:9a:26:6c:b1:ac:56:e7:cd:e1:8b:7b:a3:73: 0c:f6:7a:5b:70:06:8e:26:8c:82:08:22:17:3c:2b: 6c:64:2a:7f:fb:e1:14:28:78:3f:d1:28:e4:21:92: f6:f6:4a:d6:73:14:66:51:0a:76:a9:e1:8b:02:34: 1b:9a:35:9f:10:c4:3d:08:8c:b0:8b:3f:f2:d5:62: 62:20:8b:37:14:8e:2a:cf:f6:c5:b8:e7:e1:62:f5: 83:7d:3f:46:f3:9d:ac:5f:12:72:97:f5:fb:b2:79: 96:72:0b:fb:b3:2d:3b:5d:8a:d4:04:bb:84:7e:8e: 52:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A2:B2:6E:49:C9:CD:48:A8:FB:14:FE:5F:15:B5:3D:B2:41:81:B3 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:dc:02:18:32:7b:3c:2a:6b:cc:79:76:46:52:0f:d5:31:75: ef:8b:d3:88:f6:99:39:08:14:bb:2d:c1:9c:c8:4d:88:63:f4: 3e:90:f3:f6:39:ea:1f:7d:97:f2:89:77:ea:79:ce:83:04:d0: 6c:1f:c8:7b:b5:54:17:45:30:2e:1c:8c:30:4b:29:61:b2:12: 71:0c:fd:fc:ba:7d:75:df:9c:66:9d:d9:46:8f:50:e5:3b:b5: dc:d4:58:3e:33:fb:b1:41:7e:58:b8:c4:40:9f:c6:e2:b5:62: 9a:5d:e4:d0:f7:9b:37:f6:dc:ec:4c:86:5b:24:75:8d:10:3b: 44:12:e4:e3:61:17:1d:fc:be:fa:98:98:51:bb:76:f7:2a:8c: 52:42:5a:b6:11:14:7d:4a:e3:89:de:dc:db:f8:b7:3a:c2:bf: c9:6d:6c:9f:57:a1:78:f3:75:3d:c8:60:39:d2:aa:0e:87:6f: 00:ce:6c:5b:5b:41:8d:cd:7a:e6:d2:ea:99:94:1c:34:13:42: 0b:3c:87:fa:be:b7:73:75:1f:15:8e:1a:2d:8b:fa:27:17:ff: 38:dd:99:cc:03:54:fb:5a:a6:b9:31:5d:2a:e0:5b:e1:ce:2f: 98:c6:db:9e:2f:7d:4f:3f:cb:5e:b5:87:b4:b7:6c:86:9b:14: 49:6b:89:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayul048C8Feet0KfkxfNg6mMo18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNTA5MDcxNzA2NTJaFw0yNTA5MTAxNzUyNTJaMDMxMTAvBgNV BAMTKDYwQTJCMjZFNDlDOUNENDhBOEZCMTRGRTVGMTVCNTNEQjI0MTgxQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkvKyb7wb0P1fljDEQR8x2DFH H/J2SP9ENFn5m5imy29l460Z42IwmvVkkr4caJdjIgJ6RVoCVtTWBiJ7tr9Sa4Zt iFYluequrNfXqskq2DDStQ+SLtnGHzhLCuOBmmyY9c5s7YOLnS0m5j18VzJigpvl /RaQys6hLnlE27Lbfc4K8/WiiL9YmiZssaxW583hi3ujcwz2eltwBo4mjIIIIhc8 K2xkKn/74RQoeD/RKOQhkvb2StZzFGZRCnap4YsCNBuaNZ8QxD0IjLCLP/LVYmIg izcUjirP9sW45+Fi9YN9P0bznaxfEnKX9fuyeZZyC/uzLTtditQEu4R+jlKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYKKybknJzUio+xT+XxW1PbJBgbMwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzcAhgyezwqa8x5dkZSD9Uxde+L04j2mTkI FLstwZzITYhj9D6Q8/Y56h99l/KJd+p5zoME0GwfyHu1VBdFMC4cjDBLKWGyEnEM /fy6fXXfnGad2UaPUOU7tdzUWD4z+7FBfli4xECfxuK1Yppd5ND3mzf23OxMhlsk dY0QO0QS5ONhFx38vvqYmFG7dvcqjFJCWrYRFH1K44ne3Nv4tzrCv8ltbJ9XoXjz dT3IYDnSqg6HbwDObFtbQY3NeubS6pmUHDQTQgs8h/q+t3N1HxWOGi2L+icX/zjd mcwDVPtaprkxXSrgW+HOL5jG254vfU8/y161h7S3bIabFElriYg= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:33 2025 by rpki-client