$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft File: F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json) Hash identifier: VwUmH9dpO7vR5+UyHw6sCCd8Qo4QUpnNDGx86r3LFLk= Subject key identifier: 47:0D:66:F9:26:88:46:4D:07:7A:A4:33:AD:63:DD:1B:DB:15:E1:87 Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Certificate serial: 7997E86E20747688FDDD4F2CD0D4E6F022720C91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft Manifest number: 0226 Signing time: Fri 05 Sep 2025 20:22:20 +0000 Manifest this update: Fri 05 Sep 2025 20:17:20 +0000 Manifest next update: Tue 09 Sep 2025 00:30:20 +0000 Files and hashes: 1: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: XPciT66Xx06GRwXZ0ZEhgnmHRmTDySk8mHEntenab4o=) 2: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: vOXXnYF9w9QRpr5X7k8yxVzKOQqSgm/BpRaR8LEbXgI=) 3: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: eoTBfzq8y4bEDLADbH3GXH2pd0CIGqJzNCdlfnqwOuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:97:e8:6e:20:74:76:88:fd:dd:4f:2c:d0:d4:e6:f0:22:72:0c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Validity Not Before: Sep 5 20:17:20 2025 GMT Not After : Sep 9 00:30:20 2025 GMT Subject: CN=470D66F92688464D077AA433AD63DD1BDB15E187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:6f:6c:cd:ab:52:1b:7b:fd:f6:6e:a8:2a: fd:fc:49:55:c8:be:d3:b2:fa:4c:b7:0a:d5:34:e7: b6:f1:fe:74:c3:3b:f8:41:8b:b1:41:48:65:1d:bd: 82:f1:8c:27:77:1a:a2:a5:c0:01:b2:d0:5f:1d:68: 72:f1:ff:de:82:9a:ce:9c:f4:b5:12:a4:60:3b:32: 5c:c0:85:01:cf:93:b7:23:45:61:e4:20:76:40:e8: 16:1b:e2:83:6d:ca:7b:c2:6b:0c:b4:fb:09:c4:e2: 00:87:65:a0:bf:69:eb:37:a5:fb:47:d1:cb:e2:d5: 5f:36:f2:74:71:91:ec:67:15:7b:2d:9f:6d:51:a9: cf:2f:e6:68:bb:48:02:15:5b:4f:06:d5:01:ac:6a: e3:69:b5:b9:4c:d0:7f:52:08:eb:25:e5:33:44:be: 21:c2:e8:eb:1f:13:d4:fe:fd:67:2f:46:8b:cc:32: b9:e1:85:4a:f9:5c:9d:a9:62:b6:b4:ca:ec:16:33: d6:98:aa:5e:5b:4f:f2:39:08:82:1d:94:b7:11:00: ba:9b:f0:fc:b7:22:8e:4d:64:77:e5:6c:c7:f7:5b: c7:b6:7a:cb:3c:7e:17:72:c3:45:c8:a7:91:26:0f: 75:fe:53:d7:05:58:7a:70:df:2c:c0:da:8a:87:00: 97:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0D:66:F9:26:88:46:4D:07:7A:A4:33:AD:63:DD:1B:DB:15:E1:87 X509v3 Authority Key Identifier: keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:1c:bb:0a:f2:d8:e4:d8:db:09:60:91:78:f1:4d:20:97:93: 37:63:08:2b:45:cb:64:c6:c7:e8:f8:10:23:59:b0:eb:ad:3e: 1e:72:be:fd:ec:b0:08:e5:0f:51:63:8b:c3:ce:36:81:a2:e1: 0b:01:22:67:a0:44:d0:5e:e4:9b:1e:c4:2e:b5:ed:a3:b1:d3: c3:79:ed:ae:85:b3:26:52:98:e6:10:d0:bf:65:22:7f:61:1a: ba:e6:a0:5a:d5:88:18:56:38:a4:b5:88:1a:ff:ef:2c:fb:38: 6f:0c:36:25:58:6e:26:46:c4:06:9e:b8:ba:40:f7:2b:93:5e: bb:7f:84:96:6d:a9:d2:40:37:68:4b:d0:ba:6a:1a:84:f3:0a: b3:50:d0:7d:f0:ed:e1:36:1d:24:8c:f3:c4:67:04:dd:3f:1e: c6:a9:0d:b9:2e:e4:d1:e7:7c:17:37:a9:83:7e:d1:57:ac:8d: 2e:6a:e4:52:39:77:6a:7f:b4:5f:a6:c0:40:16:a5:b4:4e:7b: 54:51:0e:6c:8c:7a:be:7c:27:fd:32:8f:39:d8:c7:bf:b4:4b: a9:e0:fd:62:aa:d8:e0:20:9f:01:3a:64:ea:50:19:ed:e5:50: a8:f8:54:7a:f2:df:d1:23:7f:e5:44:17:15:77:ca:a7:86:ca: 16:86:9f:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZfobiB0doj93U8s0NTm8CJyDJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1 OTY4MDMyNDAeFw0yNTA5MDUyMDE3MjBaFw0yNTA5MDkwMDMwMjBaMDMxMTAvBgNV BAMTKDQ3MEQ2NkY5MjY4ODQ2NEQwNzdBQTQzM0FENjNERDFCREIxNUUxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tG9szatSG3v99m6oKv38SVXI vtOy+ky3CtU057bx/nTDO/hBi7FBSGUdvYLxjCd3GqKlwAGy0F8daHLx/96Cms6c 9LUSpGA7MlzAhQHPk7cjRWHkIHZA6BYb4oNtynvCawy0+wnE4gCHZaC/aes3pftH 0cvi1V828nRxkexnFXstn21Rqc8v5mi7SAIVW08G1QGsauNptblM0H9SCOsl5TNE viHC6OsfE9T+/WcvRovMMrnhhUr5XJ2pYra0yuwWM9aYql5bT/I5CIIdlLcRALqb 8Py3Io5NZHflbMf3W8e2ess8fhdyw0XIp5EmD3X+U9cFWHpw3yzA2oqHAJcbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURw1m+SaIRk0HeqQzrWPdG9sV4YcwHwYDVR0j BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1 NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4 MDMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0 RjY1OTY4MDMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQcuwry2OTY2wlgkXjxTSCXkzdjCCtFy2TG x+j4ECNZsOutPh5yvv3ssAjlD1Fji8PONoGi4QsBImegRNBe5JsexC617aOx08N5 7a6FsyZSmOYQ0L9lIn9hGrrmoFrViBhWOKS1iBr/7yz7OG8MNiVYbiZGxAaeuLpA 9yuTXrt/hJZtqdJAN2hL0LpqGoTzCrNQ0H3w7eE2HSSM88RnBN0/HsapDbku5NHn fBc3qYN+0VesjS5q5FI5d2p/tF+mwEAWpbROe1RRDmyMer58J/0yjznYx7+0S6ng /WKq2OAgnwE6ZOpQGe3lUKj4VHry39Ejf+VEFxV3yqeGyhaGn4Y= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:10 2025 by rpki-client