$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft File: F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json) Hash identifier: eE6YGizu9mYZEN+AS0LhsPtMwbBYND7b120gI5CFafM= Subject key identifier: 00:67:6A:C5:B1:CD:EB:E4:DF:13:77:AA:FF:80:5B:67:FC:47:9D:28 Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Certificate serial: 518D8D8776BA19F19FC9B043FF2FC10FCA312600 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft Manifest number: 01FD Signing time: Fri 06 Jun 2025 12:52:18 +0000 Manifest this update: Fri 06 Jun 2025 12:47:18 +0000 Manifest next update: Mon 09 Jun 2025 18:31:18 +0000 Files and hashes: 1: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: XCqNIcakoZvDGPO2YXMqkJChbrt+tqQRj/unfIMIZFs=) 2: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: XPciT66Xx06GRwXZ0ZEhgnmHRmTDySk8mHEntenab4o=) 3: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: eoTBfzq8y4bEDLADbH3GXH2pd0CIGqJzNCdlfnqwOuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 12:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8d:8d:87:76:ba:19:f1:9f:c9:b0:43:ff:2f:c1:0f:ca:31:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Validity Not Before: Jun 6 12:47:18 2025 GMT Not After : Jun 9 18:31:18 2025 GMT Subject: CN=00676AC5B1CDEBE4DF1377AAFF805B67FC479D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:66:bc:6e:23:e2:e7:f0:2c:b3:75:ed:9d: 59:c0:30:ab:d5:52:48:6a:8c:1b:78:ef:90:19:79: ab:2e:8b:a3:0a:43:73:37:0c:de:b2:05:72:b1:fd: ca:f9:b8:49:eb:5a:bd:2c:42:56:44:25:38:c8:89: 9f:78:ba:75:75:dc:f6:5a:be:6c:b7:f7:a4:b9:e5: e9:db:9e:dc:31:e6:a1:1a:dd:49:4b:93:07:c9:b7: a4:44:6c:45:5a:66:4e:85:14:fa:2b:92:19:d7:d1: 11:c6:54:e8:06:da:be:d4:cd:fc:7a:06:16:0d:c8: f4:7b:8a:bb:ab:f7:c6:5e:11:f8:c3:a9:a4:48:76: 88:23:2e:07:f0:01:4a:6e:2c:6b:d2:a3:53:6c:24: c3:89:83:7a:c0:99:1c:be:36:1e:2b:00:57:10:1f: 08:df:2e:fe:bc:e3:1a:51:85:17:57:25:6e:a4:e1: 9a:73:76:af:50:ae:79:d2:1e:f2:75:54:73:f0:94: 26:8e:4a:a7:b2:e3:e0:39:1b:3a:e0:9f:ad:ae:6e: 3b:1b:3e:c7:99:5f:df:25:8f:06:69:94:67:26:2a: 2e:bf:21:2a:0e:1f:ae:f9:3c:cd:98:bd:5a:d3:e5: 73:c4:96:ec:14:f4:6f:e4:33:01:65:9a:5b:3b:dc: cf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:67:6A:C5:B1:CD:EB:E4:DF:13:77:AA:FF:80:5B:67:FC:47:9D:28 X509v3 Authority Key Identifier: keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:13:ac:04:45:4a:01:63:fb:0a:b7:52:df:f4:a9:ea:95:76: 91:db:d7:fc:18:4f:86:60:6f:84:ac:d4:1b:62:34:de:2f:01: 44:d9:0d:c9:49:e5:e1:54:19:b9:2f:6a:20:62:fb:f4:f0:04: d8:ba:f5:e8:53:29:67:be:fe:dd:9b:22:b8:50:83:ef:8a:59: fe:e7:06:b9:44:2e:55:26:c2:4b:a8:cb:cf:af:3d:61:55:fe: 68:96:50:98:fd:27:1e:89:6c:f6:b6:39:af:7e:80:9c:13:9d: bf:19:98:0a:00:26:7e:29:f3:96:28:b6:60:ed:34:45:78:c2: 40:94:9c:b0:a6:d7:93:bb:53:b2:c3:b5:39:67:8d:be:cb:8e: 74:4d:29:f3:9c:81:1d:76:d5:7a:ab:64:42:b1:44:4b:c4:5d: 20:f9:92:2b:fb:73:9d:9e:46:1d:b3:8c:27:6f:5d:8e:cf:9d: 2f:c1:8b:8d:03:46:14:0d:d7:61:d3:8e:8c:14:fc:cd:49:fc: 03:32:14:be:cb:32:bf:fb:8c:19:a3:1c:b0:75:b1:41:95:c0: e5:0b:c8:19:58:49:38:5e:e2:17:d1:ec:eb:65:b4:09:b1:c1: 0f:a5:f2:12:58:79:ee:93:6b:98:65:d2:67:9c:4d:66:a1:9e: 0d:77:80:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUY2Nh3a6GfGfybBD/y/BD8oxJgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1 OTY4MDMyNDAeFw0yNTA2MDYxMjQ3MThaFw0yNTA2MDkxODMxMThaMDMxMTAvBgNV BAMTKDAwNjc2QUM1QjFDREVCRTRERjEzNzdBQUZGODA1QjY3RkM0NzlEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdRWa8biPi5/Ass3XtnVnAMKvV UkhqjBt475AZeasui6MKQ3M3DN6yBXKx/cr5uEnrWr0sQlZEJTjIiZ94unV13PZa vmy396S55enbntwx5qEa3UlLkwfJt6REbEVaZk6FFPorkhnX0RHGVOgG2r7Uzfx6 BhYNyPR7irur98ZeEfjDqaRIdogjLgfwAUpuLGvSo1NsJMOJg3rAmRy+Nh4rAFcQ HwjfLv684xpRhRdXJW6k4Zpzdq9QrnnSHvJ1VHPwlCaOSqey4+A5Gzrgn62ubjsb PseZX98ljwZplGcmKi6/ISoOH675PM2YvVrT5XPEluwU9G/kMwFlmls73M/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGdqxbHN6+TfE3eq/4BbZ/xHnSgwHwYDVR0j BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1 NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4 MDMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0 RjY1OTY4MDMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsTrARFSgFj+wq3Ut/0qeqVdpHb1/wYT4Zg b4Ss1BtiNN4vAUTZDclJ5eFUGbkvaiBi+/TwBNi69ehTKWe+/t2bIrhQg++KWf7n BrlELlUmwkuoy8+vPWFV/miWUJj9Jx6JbPa2Oa9+gJwTnb8ZmAoAJn4p85YotmDt NEV4wkCUnLCm15O7U7LDtTlnjb7LjnRNKfOcgR121XqrZEKxREvEXSD5kiv7c52e Rh2zjCdvXY7PnS/Bi40DRhQN12HTjowU/M1J/AMyFL7LMr/7jBmjHLB1sUGVwOUL yBlYSThe4hfR7OtltAmxwQ+l8hJYee6Ta5hl0mecTWahng13gGg= -----END CERTIFICATE-----Generated at Fri Jun 6 16:28:36 2025 by rpki-client