$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: KB+H6fq0ZCbqiCZka2PPoVXxfXyNEjdA/eK7LtDBvzk= Subject key identifier: 9D:A0:27:71:A3:85:60:56:64:E5:27:5F:0D:DF:EA:57:08:04:4A:6B Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 7E5AA352AE24BD1E533F497983935C8CD8637E8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 02C6 Signing time: Sun 07 Sep 2025 09:42:21 +0000 Manifest this update: Sun 07 Sep 2025 09:37:21 +0000 Manifest next update: Wed 10 Sep 2025 16:12:21 +0000 Files and hashes: 1: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) 3: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: wU96Oak4zm6E+dmzLL3l4FHHB0O97i/3ItcNivMbBcs=) 4: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 16:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5a:a3:52:ae:24:bd:1e:53:3f:49:79:83:93:5c:8c:d8:63:7e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Sep 7 09:37:21 2025 GMT Not After : Sep 10 16:12:21 2025 GMT Subject: CN=9DA02771A385605664E5275F0DDFEA5708044A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:e5:99:1d:58:45:88:74:1d:21:b6:a7:08: ca:7f:51:d9:83:fd:ae:ba:d2:a4:35:bc:9f:89:bc: ac:4e:4d:42:c7:4f:f9:ad:25:42:0b:43:9c:a0:90: 51:32:ad:32:61:56:99:4b:05:bc:e8:f9:2d:3b:de: e0:a8:1c:57:4b:9f:0b:7d:c6:8a:fd:67:52:65:f2: 79:82:3e:96:2b:85:9c:5c:f2:a5:c6:49:07:1b:39: c8:01:d6:e4:0c:81:83:26:c8:ac:0c:3f:06:32:7d: c5:ac:16:a7:76:8f:65:af:98:3b:b3:7c:e5:ba:78: 0f:ef:ba:1e:bc:4a:ad:ca:47:47:85:68:22:4b:d0: 3b:8f:9a:4f:c7:c0:21:c5:95:45:40:1f:e0:a3:17: 7b:f9:3f:19:6b:63:21:2e:0b:b3:61:aa:4b:26:fc: aa:73:1f:99:ba:1c:31:07:ae:69:dc:54:7f:e9:d5: 39:3a:ae:ae:0f:b3:aa:03:50:46:44:04:b7:22:92: 08:08:85:e2:c1:8a:e0:ef:bc:2d:d4:e8:a1:56:78: 85:83:5a:6a:60:86:84:a4:97:27:b0:26:d1:68:a1: cb:89:e4:90:76:ae:ef:bc:de:21:0a:b3:2b:d6:8f: ea:75:6e:d7:0e:5d:d4:8e:9b:ed:bf:22:de:ec:9b: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A0:27:71:A3:85:60:56:64:E5:27:5F:0D:DF:EA:57:08:04:4A:6B X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ac:a8:5a:6a:70:d9:d5:51:bb:6b:7b:d5:8c:b1:82:18:a0: 2c:13:3b:5a:f2:1b:1d:2c:e8:ff:94:4e:65:41:76:30:fa:05: 8c:55:c8:8f:40:ac:9d:05:06:8c:cc:67:b2:b1:19:f0:cf:19: 00:a4:ff:5e:40:2a:7d:f4:48:5f:5d:76:80:8e:b6:91:01:d0: 26:59:8c:6f:87:ee:6e:e8:b5:74:a5:c0:0b:c4:76:05:91:d7: 89:39:09:3c:71:8b:93:38:94:8f:50:fb:3d:e5:e7:4b:7e:43: 3e:b3:a2:bf:f9:29:81:64:8b:5c:2b:12:f8:c5:61:1b:55:c3: 0d:3d:dc:8f:bc:5f:e3:a9:3e:c4:c2:3b:5e:a7:77:1a:4e:e4: ab:e5:1a:e5:d6:fe:91:b8:cd:2d:af:14:94:b4:d9:4d:25:3d: 13:60:60:fa:55:6b:09:45:c8:e6:45:0f:1d:8a:2e:ec:d0:f1: 38:15:e4:68:55:f9:3f:b4:f7:f2:cb:18:86:36:65:e1:3c:e3: b2:3b:38:81:9a:50:27:5b:e9:d7:e3:f8:ee:e4:6a:a3:95:d7: a8:2b:67:67:c0:23:d2:d7:21:b7:ae:81:02:e0:e3:60:df:95: 74:11:1a:de:f9:f9:3a:e0:35:52:05:95:33:56:41:e6:16:a7: 6c:58:5f:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflqjUq4kvR5TP0l5g5NcjNhjfo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTA5MDcwOTM3MjFaFw0yNTA5MTAxNjEyMjFaMDMxMTAvBgNV BAMTKDlEQTAyNzcxQTM4NTYwNTY2NEU1Mjc1RjBEREZFQTU3MDgwNDRBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1eWZHVhFiHQdIbanCMp/UdmD /a660qQ1vJ+JvKxOTULHT/mtJUILQ5ygkFEyrTJhVplLBbzo+S073uCoHFdLnwt9 xor9Z1Jl8nmCPpYrhZxc8qXGSQcbOcgB1uQMgYMmyKwMPwYyfcWsFqd2j2WvmDuz fOW6eA/vuh68Sq3KR0eFaCJL0DuPmk/HwCHFlUVAH+CjF3v5PxlrYyEuC7Nhqksm /KpzH5m6HDEHrmncVH/p1Tk6rq4Ps6oDUEZEBLcikggIheLBiuDvvC3U6KFWeIWD WmpghoSklyewJtFoocuJ5JB2ru+83iEKsyvWj+p1btcOXdSOm+2/It7sm7eDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnaAncaOFYFZk5SdfDd/qVwgESmswHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2sqFpqcNnVUbtre9WMsYIYoCwTO1ryGx0s 6P+UTmVBdjD6BYxVyI9ArJ0FBozMZ7KxGfDPGQCk/15AKn30SF9ddoCOtpEB0CZZ jG+H7m7otXSlwAvEdgWR14k5CTxxi5M4lI9Q+z3l50t+Qz6zor/5KYFki1wrEvjF YRtVww093I+8X+OpPsTCO16ndxpO5KvlGuXW/pG4zS2vFJS02U0lPRNgYPpVawlF yOZFDx2KLuzQ8TgV5GhV+T+09/LLGIY2ZeE847I7OIGaUCdb6dfj+O7kaqOV16gr Z2fAI9LXIbeugQLg42DflXQRGt75+TrgNVIFlTNWQeYWp2xYXxs= -----END CERTIFICATE-----Generated at Tue Sep 9 00:44:16 2025 by rpki-client