$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: JVcr4rxmnpHW5yctfZcSHqvg2XZ/B0P3/1QDg+410dc= Subject key identifier: AD:56:35:61:57:17:79:85:7C:DB:52:FD:AD:05:CA:94:A2:1A:38:D4 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 3410BCC65A7210FD5F4C8B4E70CB0C10A0710324 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: 0114 Signing time: Sat 28 Feb 2026 17:22:08 +0000 Manifest this update: Sat 28 Feb 2026 17:17:08 +0000 Manifest next update: Tue 03 Mar 2026 18:55:08 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: R+iW0hWqL2YL+IyZsitfwpeZl4zVf2ZEJKNQ4FLvyjU=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:10:bc:c6:5a:72:10:fd:5f:4c:8b:4e:70:cb:0c:10:a0:71:03:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Feb 28 17:17:08 2026 GMT Not After : Mar 3 18:55:08 2026 GMT Subject: CN=AD563561571779857CDB52FDAD05CA94A21A38D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:73:99:45:cd:14:d3:5e:d0:b2:ca:50:06:5f: c7:c9:e4:c3:37:9f:94:39:64:bf:6e:a2:4d:ad:5f: 61:9b:87:76:1d:66:9b:71:d2:91:f9:ed:4c:9d:0d: c3:d6:d4:ea:c6:b1:f3:81:ad:9c:92:ef:fe:b9:fe: e2:d1:8b:2a:7f:73:79:06:86:8a:45:6b:3e:ad:02: 4f:64:a5:da:57:c0:b0:7c:21:3a:e8:ea:3b:e4:44: fc:87:fe:af:eb:66:e2:79:a3:82:2a:af:b3:9d:3b: 42:df:7c:29:d0:15:ef:7b:1d:c8:64:d3:1b:30:12: c9:d3:5f:9d:f3:dd:bd:3a:a9:6a:89:0c:be:56:cb: 7c:a6:b3:27:06:8d:5a:5b:15:8e:3e:7b:98:5d:0a: cc:f2:c0:3c:12:92:7c:24:d0:e0:41:54:04:51:b9: 7c:aa:61:d0:ff:7a:3a:20:53:78:63:ae:d6:82:79: b1:47:35:54:e6:49:35:5d:99:e2:b9:11:ef:aa:0c: b0:d7:0a:54:0a:60:95:22:1c:09:c7:dc:2f:72:3b: c0:24:c1:27:d8:5a:57:0f:15:13:58:c2:da:15:08: 99:10:57:f4:50:31:56:40:b5:99:ad:1b:7c:ee:58: 39:52:bf:df:48:22:61:5c:ab:0e:22:c3:0e:27:47: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:56:35:61:57:17:79:85:7C:DB:52:FD:AD:05:CA:94:A2:1A:38:D4 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3c:96:89:ae:7f:ea:0f:cf:1d:52:ec:93:57:8c:58:73:92: b3:8f:26:81:35:74:f2:d2:ea:bd:0c:72:d3:42:34:16:71:bb: 44:7a:d7:db:be:a5:21:7a:e1:dc:23:ed:bf:e1:d9:71:e0:4d: 0b:6d:24:fd:4f:a8:75:bb:5c:d4:a0:3d:ff:74:1e:51:c1:02: 47:12:fe:45:fa:01:5b:cf:b4:67:af:07:74:a5:fa:ca:d6:13: 05:ad:2a:ea:97:25:27:e3:84:0b:ac:d1:0b:c2:d7:5a:68:09: 03:bc:85:83:4f:35:85:29:5c:c4:25:2a:0f:75:ab:ad:c3:c8: 29:d5:a5:38:80:83:82:c2:6e:22:4e:2d:fd:03:90:78:4d:45: f4:5f:c3:8d:51:4e:a2:3c:f7:47:09:10:81:5f:e0:65:46:93: fd:45:a9:c7:f4:da:e3:23:df:0d:3e:01:2b:e3:ca:b7:86:60: 5b:aa:5b:0e:39:e6:80:1b:10:e5:90:0e:fd:8e:4d:c3:82:81: 92:78:15:66:06:c2:41:86:c7:73:09:93:4f:91:b3:a8:d7:87: e8:18:82:c5:a1:f1:5a:f7:99:7e:22:2f:d2:88:0c:bc:0a:f8: 27:2c:0a:16:9a:e2:f5:1c:68:45:89:46:a2:1b:a8:bf:b4:cd: 91:b9:22:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBC8xlpyEP1fTItOcMsMEKBxAyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNjAyMjgxNzE3MDhaFw0yNjAzMDMxODU1MDhaMDMxMTAvBgNV BAMTKEFENTYzNTYxNTcxNzc5ODU3Q0RCNTJGREFEMDVDQTk0QTIxQTM4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8c5lFzRTTXtCyylAGX8fJ5MM3 n5Q5ZL9uok2tX2Gbh3YdZptx0pH57UydDcPW1OrGsfOBrZyS7/65/uLRiyp/c3kG hopFaz6tAk9kpdpXwLB8ITro6jvkRPyH/q/rZuJ5o4Iqr7OdO0LffCnQFe97Hchk 0xswEsnTX53z3b06qWqJDL5Wy3ymsycGjVpbFY4+e5hdCszywDwSknwk0OBBVARR uXyqYdD/ejogU3hjrtaCebFHNVTmSTVdmeK5Ee+qDLDXClQKYJUiHAnH3C9yO8Ak wSfYWlcPFRNYwtoVCJkQV/RQMVZAtZmtG3zuWDlSv99IImFcqw4iww4nRysDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrVY1YVcXeYV821L9rQXKlKIaONQwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE08lomuf+oPzx1S7JNXjFhzkrOPJoE1dPLS 6r0MctNCNBZxu0R619u+pSF64dwj7b/h2XHgTQttJP1PqHW7XNSgPf90HlHBAkcS /kX6AVvPtGevB3Sl+srWEwWtKuqXJSfjhAus0QvC11poCQO8hYNPNYUpXMQlKg91 q63DyCnVpTiAg4LCbiJOLf0DkHhNRfRfw41RTqI890cJEIFf4GVGk/1Fqcf02uMj 3w0+ASvjyreGYFuqWw455oAbEOWQDv2OTcOCgZJ4FWYGwkGGx3MJk0+Rs6jXh+gY gsWh8Vr3mX4iL9KIDLwK+CcsChaa4vUcaEWJRqIbqL+0zZG5Iu4= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:35 2026 by rpki-client