$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: AQVcxhD5mQ2Uiex5zDrxkw7W5dOhoVilLdUpDpN3zYw= Subject key identifier: 12:ED:5B:18:FA:38:D3:52:9F:9F:C4:39:52:52:80:5B:89:A8:D7:CD Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 351733DE5A7AE31CF29C88049DA1507AA025BDD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 01E7 Signing time: Sat 06 Sep 2025 05:01:58 +0000 Manifest this update: Sat 06 Sep 2025 04:56:58 +0000 Manifest next update: Tue 09 Sep 2025 12:05:58 +0000 Files and hashes: 1: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=) 2: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: OVp41P8XiusORgDYjhyG3tIoN5ypPHdHjH6RGxbqADk=) 3: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: e7ssOUKoFT174C3idTodl/E8xTzVJMVFacJkE3BKeBs=) 4: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: 3t8POxW2mcQ/nvjJPU9gXim41a5qa0GKDf3HQqW/V6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:17:33:de:5a:7a:e3:1c:f2:9c:88:04:9d:a1:50:7a:a0:25:bd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Sep 6 04:56:58 2025 GMT Not After : Sep 9 12:05:58 2025 GMT Subject: CN=12ED5B18FA38D3529F9FC4395252805B89A8D7CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:3d:87:73:6a:40:ed:31:92:e7:a2:9d:cc: 7b:16:63:6c:c6:fa:af:fc:e0:d8:ee:6e:a1:a1:ef: 22:4a:ec:ac:d2:15:8b:51:80:64:43:ec:2b:33:d3: b4:ca:13:6c:e1:b1:29:c7:73:0d:02:7b:76:14:c5: e1:d6:8e:f9:be:40:fb:49:c5:2f:d3:f6:a4:7d:43: 81:4f:d8:8c:28:d0:24:92:e3:5b:9f:c2:2a:c3:78: 8f:b5:d7:ff:81:82:14:b6:d8:e2:7e:82:84:91:54: 7d:ab:98:7b:b6:35:b8:74:95:d2:e5:af:9b:af:96: d2:86:5e:13:62:97:36:99:15:9c:c7:f8:57:d3:83: 3a:23:81:81:04:7d:3a:ce:c3:56:52:35:bf:ed:7c: f5:bb:2c:c4:74:bd:1e:15:6f:0b:90:51:14:bd:9a: cf:31:6c:30:4b:ed:d1:2e:51:f1:62:ec:f4:22:af: e8:dd:c5:56:0c:59:a0:ef:bc:b2:ed:1f:89:3d:49: ee:75:50:79:b3:a0:e1:bc:c5:ae:d9:27:2a:67:f1: e7:2e:dc:8f:7d:3d:bf:96:7c:32:48:93:ff:f7:48: c7:e6:19:0f:fa:ff:d5:2f:33:8d:d9:54:2d:f8:27: 02:14:b0:5d:8f:29:8d:c9:33:30:58:72:3f:4b:04: f9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:ED:5B:18:FA:38:D3:52:9F:9F:C4:39:52:52:80:5B:89:A8:D7:CD X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a6:2e:49:a0:b5:ac:05:96:94:a0:ba:3b:89:61:9b:93:d1: 02:90:b4:f3:81:05:91:dc:3b:b0:9b:bc:e2:c8:7b:f0:d9:c7: c9:ef:f3:76:19:84:ee:84:db:96:51:2b:17:b2:75:9d:29:15: 85:55:ad:65:15:eb:7e:ef:20:d8:20:a0:ba:97:53:32:a5:27: a2:13:c9:31:5c:b3:ad:c8:05:42:eb:a9:08:15:2c:f1:6a:ac: be:5b:d2:2d:a6:55:eb:2c:71:f2:76:88:07:e9:c5:63:b7:9b: 90:76:2e:c4:4d:25:58:69:ec:b6:e4:28:a3:17:3a:74:b5:b8: b9:fd:b8:d0:c5:ff:60:3b:7a:f3:6a:c5:cc:b2:a9:32:54:f5: 88:2e:b9:11:1d:dd:93:26:a3:2a:ff:4d:33:ea:2e:3d:bb:76: 2e:d1:b8:13:13:f7:90:f5:c3:e3:87:3e:38:69:22:e6:77:c4: a4:de:9d:72:f2:f4:9a:cb:ce:de:24:2a:f1:ca:9f:4c:65:19: 7f:ab:af:b3:fb:f5:4c:7c:db:c1:48:1e:3b:ba:c2:46:ad:37: 1f:c0:c1:8f:66:08:15:08:0c:6a:51:ae:13:5c:1c:09:9b:44: 70:43:55:be:42:dc:c1:77:d5:a6:ba:fe:ee:45:4f:a8:ac:c5: 54:2f:c6:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRcz3lp64xzynIgEnaFQeqAlvdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNTA5MDYwNDU2NThaFw0yNTA5MDkxMjA1NThaMDMxMTAvBgNV BAMTKDEyRUQ1QjE4RkEzOEQzNTI5RjlGQzQzOTUyNTI4MDVCODlBOEQ3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmT2Hc2pA7TGS56KdzHsWY2zG +q/84NjubqGh7yJK7KzSFYtRgGRD7Csz07TKE2zhsSnHcw0Ce3YUxeHWjvm+QPtJ xS/T9qR9Q4FP2Iwo0CSS41ufwirDeI+11/+BghS22OJ+goSRVH2rmHu2Nbh0ldLl r5uvltKGXhNilzaZFZzH+FfTgzojgYEEfTrOw1ZSNb/tfPW7LMR0vR4VbwuQURS9 ms8xbDBL7dEuUfFi7PQir+jdxVYMWaDvvLLtH4k9Se51UHmzoOG8xa7ZJypn8ecu 3I99Pb+WfDJIk//3SMfmGQ/6/9UvM43ZVC34JwIUsF2PKY3JMzBYcj9LBPmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEu1bGPo401Kfn8Q5UlKAW4mo180wHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWmLkmgtawFlpSgujuJYZuT0QKQtPOBBZHc O7CbvOLIe/DZx8nv83YZhO6E25ZRKxeydZ0pFYVVrWUV637vINggoLqXUzKlJ6IT yTFcs63IBULrqQgVLPFqrL5b0i2mVesscfJ2iAfpxWO3m5B2LsRNJVhp7LbkKKMX OnS1uLn9uNDF/2A7evNqxcyyqTJU9YguuREd3ZMmoyr/TTPqLj27di7RuBMT95D1 w+OHPjhpIuZ3xKTenXLy9JrLzt4kKvHKn0xlGX+rr7P79Ux828FIHju6wkatNx/A wY9mCBUIDGpRrhNcHAmbRHBDVb5C3MF31aa6/u5FT6isxVQvxqM= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:24 2025 by rpki-client