$ rpki-client -vvf repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft File: 061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft (raw, json) Hash identifier: 7KI4H/LmhHYRaAm4Bl/5MYuZYgRGVAk+ShwJ8oUmQ00= Subject key identifier: EC:AE:D5:D5:E5:D1:78:18:D4:DE:E8:D7:6F:67:15:FC:C2:F7:C5:98 Authority key identifier: 06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59 Certificate issuer: /CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159 Certificate serial: 37D0705646768453C7F32C28022B9375D47840D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft Manifest number: 02AE Signing time: Sun 07 Sep 2025 00:21:22 +0000 Manifest this update: Sun 07 Sep 2025 00:16:22 +0000 Manifest next update: Wed 10 Sep 2025 08:06:22 +0000 Files and hashes: 1: 061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl (hash: +nzgovL2RQZSb8khwB7GRIjMKeon63qaL8w8FscEphU=) 2: 3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa (hash: HPAI2gh/1HuKjzOsiopIeCg4F+M7JZClMF/J1ZpnE0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d0:70:56:46:76:84:53:c7:f3:2c:28:02:2b:93:75:d4:78:40:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159 Validity Not Before: Sep 7 00:16:22 2025 GMT Not After : Sep 10 08:06:22 2025 GMT Subject: CN=ECAED5D5E5D17818D4DEE8D76F6715FCC2F7C598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ab:71:9f:a5:69:76:b4:10:9f:2d:7b:67:9d: 9e:ee:06:af:e9:01:46:a3:e5:d5:9a:0f:d2:fa:b1: 16:9e:4d:2d:e5:ef:59:aa:fb:dd:87:dd:c8:b0:1b: 1c:14:7b:53:a7:4e:e5:93:10:db:8b:88:92:1b:a9: 63:80:12:72:d1:8b:98:03:9f:57:f2:0f:b8:4f:e4: ef:fa:04:a5:e8:77:ba:db:56:4c:2a:e6:4f:61:3b: 3c:b4:fd:ca:bd:48:2a:ca:13:2f:a8:f1:32:be:71: 09:60:0a:9e:5c:c0:fd:d7:1b:31:f6:a9:b4:72:e0: e2:07:80:24:3e:2f:51:05:c3:27:30:d8:3f:89:b9: 30:7d:16:74:b6:d9:6a:88:4f:13:88:f7:78:df:eb: 93:3a:18:e7:06:ac:85:8e:4e:83:a4:8c:b9:91:d8: 27:8e:64:0e:e9:99:97:d8:6f:0e:2e:39:ab:79:9d: ae:15:62:1f:e2:6e:9e:37:3e:de:13:b5:65:b8:d8: 94:be:60:00:40:25:a1:69:c4:79:8c:5d:28:51:40: fa:dc:f0:a3:b0:3c:89:de:e2:bc:27:2e:d1:0a:a4: f3:37:56:fb:16:b2:fb:d7:be:64:ed:7e:d9:a6:7c: b4:2c:d7:09:73:fe:bd:e5:02:0c:94:1b:c6:24:a2: 71:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AE:D5:D5:E5:D1:78:18:D4:DE:E8:D7:6F:67:15:FC:C2:F7:C5:98 X509v3 Authority Key Identifier: keyid:06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:38:ac:ca:1f:47:30:67:a7:6b:6e:15:b0:ad:e3:d0:97:c4: 49:30:18:63:2e:cd:95:65:17:b6:b8:8e:96:ff:ae:37:18:d6: 4a:7c:1b:65:54:c0:af:49:13:24:89:06:80:b5:9c:0e:ff:17: a0:45:e4:25:df:10:ef:a6:51:fb:e7:ad:b7:d0:78:ba:7f:5d: 34:92:9f:95:09:67:b7:50:b4:7c:c6:31:65:23:69:e0:56:4d: 2c:45:24:93:f3:3e:79:c6:91:7d:35:47:cb:53:fb:5c:25:df: ef:76:ca:5b:aa:6d:06:fd:8d:23:91:ab:9c:96:d0:af:9d:02: 5a:48:f8:16:53:c5:84:0c:15:bd:dc:de:82:f1:2c:1b:1e:fc: f4:e9:ff:e4:c3:c0:7d:fe:11:f5:ea:84:81:eb:65:c3:f5:e2: fe:85:40:84:6f:f4:15:67:c5:24:b3:2c:9c:db:b8:c2:bf:8d: 9e:c0:b0:bd:27:59:ab:f7:ba:83:08:87:67:44:89:d5:79:cf: 77:d3:24:2e:4d:07:61:fa:68:c6:61:43:0f:30:17:61:1a:d5: 6e:70:f7:3a:55:ed:3e:fb:11:1e:bc:7e:8f:58:0a:ed:f7:4e: 02:f1:7f:14:4f:d4:13:3b:7b:aa:18:04:35:9e:b8:7a:a2:eb: 87:f0:07:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9BwVkZ2hFPH8ywoAiuTddR4QNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNERTBG RkVBMjE1OTAeFw0yNTA5MDcwMDE2MjJaFw0yNTA5MTAwODA2MjJaMDMxMTAvBgNV BAMTKEVDQUVENUQ1RTVEMTc4MThENERFRThENzZGNjcxNUZDQzJGN0M1OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhq3GfpWl2tBCfLXtnnZ7uBq/p AUaj5dWaD9L6sRaeTS3l71mq+92H3ciwGxwUe1OnTuWTENuLiJIbqWOAEnLRi5gD n1fyD7hP5O/6BKXod7rbVkwq5k9hOzy0/cq9SCrKEy+o8TK+cQlgCp5cwP3XGzH2 qbRy4OIHgCQ+L1EFwycw2D+JuTB9FnS22WqITxOI93jf65M6GOcGrIWOToOkjLmR 2CeOZA7pmZfYbw4uOat5na4VYh/ibp43Pt4TtWW42JS+YABAJaFpxHmMXShRQPrc 8KOwPIne4rwnLtEKpPM3VvsWsvvXvmTtftmmfLQs1wlz/r3lAgyUG8YkonEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7K7V1eXReBjU3ujXb2cV/ML3xZgwHwYDVR0j BBgwFoAUBhppK/wWsRnB2P2wfIHN4P/qIVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzMxZmIyNy02MTMzLTQ3ZWEtYjdjYy0yMjI3ZTA0Y2EyNjUvMC8wNjFBNjkyQkZD MTZCMTE5QzFEOEZEQjA3QzgxQ0RFMEZGRUEyMTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNERTBGRkVB MjE1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzczMWZiMjctNjEzMy00N2VhLWI3 Y2MtMjIyN2UwNGNhMjY1LzAvMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNE RTBGRkVBMjE1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ4rMofRzBnp2tuFbCt49CXxEkwGGMuzZVl F7a4jpb/rjcY1kp8G2VUwK9JEySJBoC1nA7/F6BF5CXfEO+mUfvnrbfQeLp/XTSS n5UJZ7dQtHzGMWUjaeBWTSxFJJPzPnnGkX01R8tT+1wl3+92yluqbQb9jSORq5yW 0K+dAlpI+BZTxYQMFb3c3oLxLBse/PTp/+TDwH3+EfXqhIHrZcP14v6FQIRv9BVn xSSzLJzbuMK/jZ7AsL0nWav3uoMIh2dEidV5z3fTJC5NB2H6aMZhQw8wF2Ea1W5w 9zpV7T77ER68fo9YCu33TgLxfxRP1BM7e6oYBDWeuHqi64fwByA= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:43 2025 by rpki-client