$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: PNmSU9milF+XnsVlEtk115flkvlUuLpSSzyL4Z4Hb+o= Subject key identifier: 69:9B:DB:6C:91:10:23:B8:7A:33:AC:1E:46:CD:37:D2:06:70:EB:A9 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 3884683E3F7825AF1A57D006C37EB152631ADB50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: B8 Signing time: Thu 07 Aug 2025 00:32:02 +0000 Manifest this update: Thu 07 Aug 2025 00:27:02 +0000 Manifest next update: Sun 10 Aug 2025 11:53:02 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: OmLH8W08As6K0ug6KI1+YDxJy/verZGxWg/2QDVCONQ=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:84:68:3e:3f:78:25:af:1a:57:d0:06:c3:7e:b1:52:63:1a:db:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Aug 7 00:27:02 2025 GMT Not After : Aug 10 11:53:02 2025 GMT Subject: CN=699BDB6C911023B87A33AC1E46CD37D20670EBA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:2d:f6:f3:3c:64:1c:1d:d4:8a:fb:e1:50: 2b:bf:26:cb:be:7b:96:ce:1a:09:fa:07:2c:2d:f6: a6:5e:6d:76:3a:3d:5e:59:fd:4a:4e:07:39:06:62: 51:5b:3a:b2:22:1b:a6:4e:33:c3:ec:24:95:4b:90: 2d:3c:ef:2d:d1:97:31:03:18:d0:d3:31:be:b0:a2: fa:90:81:21:16:f8:e4:db:d4:43:17:80:6f:69:71: e3:1a:30:d3:8e:69:98:3a:38:fe:c5:45:71:b7:a1: b1:de:82:f6:7c:db:14:30:2a:76:01:de:d0:79:e0: 3d:7a:02:ed:c2:20:80:1c:2a:42:a9:dd:e1:8e:43: d6:47:78:a1:c3:a4:cf:66:0a:11:64:b7:f8:07:40: 55:ac:8e:86:54:5e:aa:e2:7c:b6:3a:d1:dc:e1:f9: 37:d7:d7:2b:2c:73:fc:70:9b:04:b3:47:29:06:90: 14:a3:1f:bf:3f:f7:14:15:73:a9:88:0c:0e:ee:5f: 72:84:19:1b:d6:8d:c8:39:f2:b8:99:6d:51:fe:91: 3b:ab:b2:3e:d5:2f:b4:cf:4b:5c:53:24:9f:74:dd: e8:c1:84:5a:b0:3a:69:36:c3:95:31:c9:42:a4:90: cd:05:14:4c:40:25:4e:58:de:7b:e5:73:89:6a:d3: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9B:DB:6C:91:10:23:B8:7A:33:AC:1E:46:CD:37:D2:06:70:EB:A9 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3b:14:e2:1b:7b:ca:29:40:62:43:d1:ac:2d:41:77:66:70: 97:2b:ef:b3:48:c3:4e:ab:2a:a3:6e:58:d8:c2:a6:f1:06:f2: 40:21:c1:25:a0:3d:aa:e6:6c:d8:30:18:3f:75:82:31:bc:30: db:74:75:42:17:19:e0:26:fc:8a:a9:70:26:6c:f2:2a:f5:6f: 52:a7:b4:b0:86:e8:55:18:ff:7e:8e:a5:15:7c:30:86:2e:34: e6:7e:98:56:92:ad:73:7b:8c:b2:aa:49:f3:d1:77:4d:1d:80: 0a:12:1e:25:66:df:b2:41:28:08:16:96:3e:cd:17:02:22:12: 9a:ee:32:8d:22:98:0a:46:91:5e:47:25:9b:9b:19:c8:0b:71: ff:2e:5b:87:77:d0:69:d8:2f:5b:8d:01:37:80:44:af:26:5b: ea:8c:14:97:25:3b:25:84:aa:06:18:6b:de:61:41:24:5b:35: 3a:83:78:e3:88:5e:47:fd:9d:09:d2:1d:7a:2b:e4:3f:03:83: f0:09:99:bc:89:72:97:7e:84:89:4a:69:50:3f:ed:cd:06:f4: c2:d2:c7:2d:2b:97:9c:e2:e3:7b:93:12:63:71:a6:d1:54:a9: d1:4c:40:fe:2f:f1:24:da:89:ac:ce:9e:62:36:5b:e0:87:0e: 34:91:29:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOIRoPj94Ja8aV9AGw36xUmMa21AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNTA4MDcwMDI3MDJaFw0yNTA4MTAxMTUzMDJaMDMxMTAvBgNV BAMTKDY5OUJEQjZDOTExMDIzQjg3QTMzQUMxRTQ2Q0QzN0QyMDY3MEVCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WS328zxkHB3UivvhUCu/Jsu+ e5bOGgn6Bywt9qZebXY6PV5Z/UpOBzkGYlFbOrIiG6ZOM8PsJJVLkC087y3RlzED GNDTMb6wovqQgSEW+OTb1EMXgG9pceMaMNOOaZg6OP7FRXG3obHegvZ82xQwKnYB 3tB54D16Au3CIIAcKkKp3eGOQ9ZHeKHDpM9mChFkt/gHQFWsjoZUXqrifLY60dzh +TfX1yssc/xwmwSzRykGkBSjH78/9xQVc6mIDA7uX3KEGRvWjcg58riZbVH+kTur sj7VL7TPS1xTJJ903ejBhFqwOmk2w5UxyUKkkM0FFExAJU5Y3nvlc4lq0yBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaZvbbJEQI7h6M6weRs030gZw66kwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADk7FOIbe8opQGJD0awtQXdmcJcr77NIw06r KqNuWNjCpvEG8kAhwSWgParmbNgwGD91gjG8MNt0dUIXGeAm/IqpcCZs8ir1b1Kn tLCG6FUY/36OpRV8MIYuNOZ+mFaSrXN7jLKqSfPRd00dgAoSHiVm37JBKAgWlj7N FwIiEpruMo0imApGkV5HJZubGcgLcf8uW4d30GnYL1uNATeARK8mW+qMFJclOyWE qgYYa95hQSRbNTqDeOOIXkf9nQnSHXor5D8Dg/AJmbyJcpd+hIlKaVA/7c0G9MLS xy0rl5zi43uTEmNxptFUqdFMQP4v8STaiazOnmI2W+CHDjSRKY8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:57 2025 by rpki-client