$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: VzrQMfe/CpygRH3tAkMCiPSbGbcOLX9PypYYVqewUMs= Subject key identifier: 7A:4A:3F:12:4A:F1:55:EA:89:8C:B8:51:2A:DF:5C:E8:79:3A:96:2D Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 4B4B800D648B976C6048C2AB72408B388FBD3537 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: E0 Signing time: Mon 03 Nov 2025 23:21:53 +0000 Manifest this update: Mon 03 Nov 2025 23:16:53 +0000 Manifest next update: Fri 07 Nov 2025 04:26:53 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: zuDfNjMhpNGufAHRgj5xSFi35OcLwkXM3emxDoJhmus=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4b:80:0d:64:8b:97:6c:60:48:c2:ab:72:40:8b:38:8f:bd:35:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Nov 3 23:16:53 2025 GMT Not After : Nov 7 04:26:53 2025 GMT Subject: CN=7A4A3F124AF155EA898CB8512ADF5CE8793A962D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:29:7f:16:05:62:d5:50:7d:53:45:98:e6: 92:f2:7f:86:cc:35:10:e9:58:f2:80:44:7b:55:17: 2d:b2:67:28:bc:d1:80:7f:06:a3:91:b1:0f:3c:63: 4d:2e:1d:0b:33:69:ae:fb:76:c0:fc:38:74:07:e7: 0b:ea:95:4b:21:52:a9:95:ff:62:ec:51:94:82:ad: f9:fd:2d:7d:3b:a1:b9:d0:90:f9:dc:db:0b:e7:39: 10:11:4d:4c:72:3a:07:b8:bd:8d:ef:39:55:ee:03: c2:39:fd:ec:ae:79:5b:86:0e:b6:9c:de:c9:6a:c7: 6a:2b:a7:5f:57:b8:a3:cd:48:38:5b:af:8c:ad:93: d2:70:ad:02:79:37:96:ff:9a:62:93:32:dd:94:92: 9e:dc:15:ed:7b:55:7a:e8:db:23:94:4d:4b:e7:15: f4:28:fe:d5:1d:07:01:03:b3:01:bd:3f:e8:c7:3f: f6:24:ec:ca:fd:09:a7:82:b3:b6:3c:47:7e:6d:27: b1:11:35:3c:4d:d7:08:02:67:29:3e:1c:72:5c:02: 18:55:ec:8c:93:a6:b0:40:30:fa:3a:98:44:b9:ce: f5:80:f4:d3:53:ad:df:ac:e3:2c:f3:aa:c8:14:8e: 74:b3:e0:18:fd:a1:c2:b6:af:51:01:a4:83:50:a5: 3a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4A:3F:12:4A:F1:55:EA:89:8C:B8:51:2A:DF:5C:E8:79:3A:96:2D X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ce:54:c3:d2:4f:5e:c2:8c:e3:d7:5e:a5:05:82:ac:35:26: 6f:55:a9:81:ea:d8:a1:cb:44:86:62:f6:5f:8b:94:fd:86:28: 28:42:aa:db:59:61:b3:68:58:d2:d7:2d:c6:63:e9:99:c1:76: 38:f5:f1:de:70:c1:ef:c2:99:86:d6:29:ed:41:aa:80:f2:6a: 23:6f:45:7f:63:ea:e0:72:b0:91:aa:97:7d:b5:50:e6:aa:44: 41:8d:19:51:2c:d6:6a:b4:1f:3b:e0:0c:5d:df:ef:c8:7d:d7: 6a:b3:46:de:f3:c9:e1:ea:3c:2f:39:17:40:26:67:7e:36:e5: 88:59:d4:4a:52:08:46:fd:13:cb:7f:00:8b:cb:c4:55:a0:25: ae:c4:3c:7a:05:d7:72:89:65:9f:7f:e1:5e:fa:57:f9:52:72: 8d:68:f9:c7:3a:4a:19:a7:6d:4d:cf:c1:31:e0:9b:1a:04:31: f7:3d:c6:9b:7a:e8:ff:54:b1:29:6f:84:4d:8d:37:f6:57:e0: bc:3e:af:72:d4:c2:86:47:1d:ef:b1:3c:5b:68:57:7a:d4:55: eb:78:d8:c3:08:bc:49:a3:a0:36:1b:a3:9b:8f:bc:93:5b:a3: 10:ba:6e:84:31:27:e7:c3:a9:fd:16:1c:e3:40:51:c7:da:34: c7:b0:22:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0uADWSLl2xgSMKrckCLOI+9NTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNTExMDMyMzE2NTNaFw0yNTExMDcwNDI2NTNaMDMxMTAvBgNV BAMTKDdBNEEzRjEyNEFGMTU1RUE4OThDQjg1MTJBREY1Q0U4NzkzQTk2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnyl/FgVi1VB9U0WY5pLyf4bM NRDpWPKARHtVFy2yZyi80YB/BqORsQ88Y00uHQszaa77dsD8OHQH5wvqlUshUqmV /2LsUZSCrfn9LX07obnQkPnc2wvnORARTUxyOge4vY3vOVXuA8I5/eyueVuGDrac 3slqx2orp19XuKPNSDhbr4ytk9JwrQJ5N5b/mmKTMt2Ukp7cFe17VXro2yOUTUvn FfQo/tUdBwEDswG9P+jHP/Yk7Mr9CaeCs7Y8R35tJ7ERNTxN1wgCZyk+HHJcAhhV 7IyTprBAMPo6mES5zvWA9NNTrd+s4yzzqsgUjnSz4Bj9ocK2r1EBpINQpTpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeko/EkrxVeqJjLhRKt9c6Hk6li0wHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTOVMPST17CjOPXXqUFgqw1Jm9VqYHq2KHL RIZi9l+LlP2GKChCqttZYbNoWNLXLcZj6ZnBdjj18d5wwe/CmYbWKe1BqoDyaiNv RX9j6uBysJGql321UOaqREGNGVEs1mq0HzvgDF3f78h912qzRt7zyeHqPC85F0Am Z3425YhZ1EpSCEb9E8t/AIvLxFWgJa7EPHoF13KJZZ9/4V76V/lSco1o+cc6Shmn bU3PwTHgmxoEMfc9xpt66P9UsSlvhE2NN/ZX4Lw+r3LUwoZHHe+xPFtoV3rUVet4 2MMIvEmjoDYbo5uPvJNboxC6boQxJ+fDqf0WHONAUcfaNMewIoc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:45 2025 by rpki-client