$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: 2EpkuKMeL4XBUs+QZkK3IzJjiQQzbn0vOeNzRX7T5Eo= Subject key identifier: 4E:A2:CB:BE:83:5F:90:BA:F3:E9:5C:4E:4D:FE:C7:20:5A:A2:92:56 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 3B577B57AF5961E5A98C29B333D6A76D5CF27E91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: 0129 Signing time: Thu 16 Apr 2026 22:32:08 +0000 Manifest this update: Thu 16 Apr 2026 22:27:08 +0000 Manifest next update: Mon 20 Apr 2026 05:08:08 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: ATIs/s5wE9lnNmAl/6+xyl7XmtF8hpVfLqRe0Fx3pAo=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:57:7b:57:af:59:61:e5:a9:8c:29:b3:33:d6:a7:6d:5c:f2:7e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Apr 16 22:27:08 2026 GMT Not After : Apr 20 05:08:08 2026 GMT Subject: CN=4EA2CBBE835F90BAF3E95C4E4DFEC7205AA29256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:79:fa:1f:2c:fd:31:61:2f:64:71:4a:8f:15: 2d:4d:15:0a:1f:11:18:1b:4c:7b:1a:94:4d:7b:18: 2a:75:73:ed:48:db:b9:27:b1:38:47:b6:95:72:46: 73:b6:64:1d:5c:d4:27:86:90:15:cc:62:81:e0:29: 0a:d1:47:9e:62:cb:e5:0f:5a:54:75:a9:80:45:11: 65:00:40:7c:7d:55:1c:a8:6f:9d:cc:fc:17:f8:05: 4a:d7:6c:af:27:ac:cb:2e:df:e3:77:69:16:ee:1d: a1:ce:a2:44:01:34:fe:ef:13:6b:4e:c1:15:e0:85: dd:96:c6:89:51:ac:32:7e:49:1f:5a:76:b1:bf:f0: a1:cd:c4:72:6a:20:2c:b2:2a:41:0c:58:e8:14:03: 02:e1:d5:a1:b4:38:4d:57:2a:f9:38:b4:6d:d7:ab: 0c:56:f8:df:47:a1:49:ad:2c:12:49:1d:4f:e1:24: 72:4d:77:79:84:01:8f:0c:29:18:b4:d2:b0:35:63: 32:3d:b3:12:bc:41:c7:d4:ae:14:9b:a6:13:64:cf: ef:ae:29:bc:3e:a5:08:d2:19:d9:65:72:4c:72:dd: 19:24:df:01:6d:00:85:e4:a7:5f:e7:5b:0d:a1:6b: a7:c9:bc:27:13:b7:7c:a4:1e:94:54:3e:f6:34:a7: cd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A2:CB:BE:83:5F:90:BA:F3:E9:5C:4E:4D:FE:C7:20:5A:A2:92:56 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c4:e8:d1:bb:df:11:bf:cd:e1:83:7e:bf:5e:a9:23:b7:d9: e0:42:94:d9:d4:7d:de:8f:61:c1:4d:b6:e5:7a:e6:23:80:77: 62:fb:5c:76:0f:ec:39:b8:b1:47:45:60:27:38:3f:c6:52:41: 28:2a:25:c3:02:dd:c0:30:39:7a:f8:5d:12:47:f7:7c:c3:62: 4b:3e:af:d8:a3:03:60:42:f8:72:02:8d:46:d8:3d:69:96:de: e6:60:1f:8d:18:a9:0d:66:5b:ee:39:34:1a:cc:66:84:f4:fd: 24:9e:19:58:8d:e0:74:41:ff:55:57:2d:b0:19:78:83:ad:5d: e6:8e:0f:1e:1f:ec:a8:c4:9d:d8:ed:a1:91:70:d7:fa:26:73: 44:18:83:46:5c:ed:e0:51:cf:37:63:05:0e:ba:60:39:8a:b4: c9:61:8d:a8:bc:68:ee:db:28:8d:b6:43:85:7f:18:a0:95:7a: 4f:d5:f1:ec:f1:fc:ef:27:3f:6c:88:1f:12:d4:b0:c1:ae:2c: 66:18:19:97:6a:6a:12:7b:9a:5d:fd:28:c7:ad:80:d8:97:c5: 8c:92:f7:91:48:2a:48:ed:c5:7a:af:82:42:11:7d:c5:f3:27: 00:51:3b:40:df:e7:c2:55:78:ff:bd:55:5c:5b:7e:eb:9c:d8: 89:40:b6:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1d7V69ZYeWpjCmzM9anbVzyfpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNjA0MTYyMjI3MDhaFw0yNjA0MjAwNTA4MDhaMDMxMTAvBgNV BAMTKDRFQTJDQkJFODM1RjkwQkFGM0U5NUM0RTRERkVDNzIwNUFBMjkyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9efofLP0xYS9kcUqPFS1NFQof ERgbTHsalE17GCp1c+1I27knsThHtpVyRnO2ZB1c1CeGkBXMYoHgKQrRR55iy+UP WlR1qYBFEWUAQHx9VRyob53M/Bf4BUrXbK8nrMsu3+N3aRbuHaHOokQBNP7vE2tO wRXghd2WxolRrDJ+SR9adrG/8KHNxHJqICyyKkEMWOgUAwLh1aG0OE1XKvk4tG3X qwxW+N9HoUmtLBJJHU/hJHJNd3mEAY8MKRi00rA1YzI9sxK8QcfUrhSbphNkz++u Kbw+pQjSGdllckxy3Rkk3wFtAIXkp1/nWw2ha6fJvCcTt3ykHpRUPvY0p815AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTqLLvoNfkLrz6VxOTf7HIFqiklYwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvE6NG73xG/zeGDfr9eqSO32eBClNnUfd6P YcFNtuV65iOAd2L7XHYP7Dm4sUdFYCc4P8ZSQSgqJcMC3cAwOXr4XRJH93zDYks+ r9ijA2BC+HICjUbYPWmW3uZgH40YqQ1mW+45NBrMZoT0/SSeGViN4HRB/1VXLbAZ eIOtXeaODx4f7KjEndjtoZFw1/omc0QYg0Zc7eBRzzdjBQ66YDmKtMlhjai8aO7b KI22Q4V/GKCVek/V8ezx/O8nP2yIHxLUsMGuLGYYGZdqahJ7ml39KMetgNiXxYyS 95FIKkjtxXqvgkIRfcXzJwBRO0Df58JVeP+9VVxbfuuc2IlAtlU= -----END CERTIFICATE-----Generated at Fri Apr 17 17:46:46 2026 by rpki-client