$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: mHFn3lbxdUnsSL1Z1q32tYevZKcGdnvk2ZbOQ7UTG7U= Subject key identifier: 36:74:2A:A0:0F:87:56:19:9A:9A:B8:31:63:07:CC:F5:EF:6B:92:5E Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 22E9B5832D85FACC8E589D20EE011746E4C7027A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 02B9 Signing time: Sat 09 Aug 2025 12:22:26 +0000 Manifest this update: Sat 09 Aug 2025 12:17:26 +0000 Manifest next update: Tue 12 Aug 2025 16:02:26 +0000 Files and hashes: 1: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) 3: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) 4: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: UDTkVcfrH0U9qP73ySbROojtw/zrryq0qgztgQMsZUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 16:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e9:b5:83:2d:85:fa:cc:8e:58:9d:20:ee:01:17:46:e4:c7:02:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Aug 9 12:17:26 2025 GMT Not After : Aug 12 16:02:26 2025 GMT Subject: CN=36742AA00F8756199A9AB8316307CCF5EF6B925E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:15:d2:63:34:96:67:f8:1d:ba:08:a7:ff:fe: 20:b3:6b:34:76:56:f7:14:79:34:df:7a:6a:72:d9: 1a:03:ef:12:2d:e2:e4:10:dd:f1:e4:04:a8:3d:68: ef:5c:7f:8b:33:52:57:fd:c7:08:df:03:20:4f:bd: 0d:f0:65:61:33:ce:a5:19:2c:ce:c6:3c:4c:22:77: d4:96:cc:77:66:13:22:46:fd:81:35:ee:85:6a:c6: 99:53:90:72:cd:d5:61:3d:3f:48:f9:e3:00:8d:a0: 6e:64:c6:e7:f2:0f:82:1c:0c:f9:b1:7f:b0:2e:0b: a5:9b:19:1b:95:47:21:10:3f:63:7f:ee:c5:7d:77: a3:b2:be:07:16:0d:b3:74:80:bf:da:21:71:65:74: 8d:40:d5:7f:09:c2:59:6b:94:e9:f8:c8:ad:80:f1: 59:a7:12:e6:5d:87:ec:a4:60:1e:f4:f2:69:d3:7d: c5:54:7a:60:e1:24:d1:30:25:00:d9:e9:c0:a8:0a: 38:60:69:04:b5:1d:a2:0d:95:2e:8a:88:28:ba:28: b6:8d:55:ed:55:3d:64:29:f3:b4:9c:0c:d2:22:41: 78:d3:c4:6c:09:97:7a:b7:12:4d:c4:ec:1d:2b:5f: 36:bf:93:0d:76:ef:53:ed:b1:39:47:b4:9c:d9:25: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:74:2A:A0:0F:87:56:19:9A:9A:B8:31:63:07:CC:F5:EF:6B:92:5E X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:6a:82:75:32:96:28:57:1d:a7:b4:de:88:a5:4c:c3:d4:83: 0c:52:43:3f:65:66:48:d5:9d:af:f0:af:2e:53:7e:41:47:c6: 88:eb:c3:92:4d:01:21:34:29:37:26:19:92:b8:c9:df:2f:4c: b6:ba:34:86:6e:83:fd:6f:5b:41:70:07:ce:a4:6e:3e:26:b0: 55:42:80:65:d2:7b:5d:70:7c:77:07:d7:8d:b3:95:a4:47:ab: 2f:84:c2:88:25:c8:a4:3c:53:86:e2:08:81:0f:8e:c8:ef:d3: 38:0e:85:60:d7:09:dc:88:46:fa:15:6d:89:fa:43:5b:77:05: 4a:88:ce:21:c3:11:0d:18:2f:cf:fa:11:7c:d0:bd:aa:98:a1: 99:b1:3c:b3:89:44:55:41:df:92:f8:f2:90:77:6b:2d:90:e7: bd:11:54:86:ad:e7:4a:74:88:aa:5f:96:71:fc:8a:a1:ec:16: 08:61:94:09:3b:0d:00:55:23:ff:e7:9b:19:37:05:01:50:c3: 9c:02:a7:a3:78:59:e0:c6:33:32:e2:e0:0b:11:16:bc:89:9c: 38:95:c3:1d:42:0f:bb:dd:92:55:ce:3d:16:bd:50:2b:4b:ef: 6e:a8:60:ff:3f:b7:08:c1:b4:24:9f:32:26:92:04:65:7f:10: 35:8f:84:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIum1gy2F+syOWJ0g7gEXRuTHAnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTA4MDkxMjE3MjZaFw0yNTA4MTIxNjAyMjZaMDMxMTAvBgNV BAMTKDM2NzQyQUEwMEY4NzU2MTk5QTlBQjgzMTYzMDdDQ0Y1RUY2QjkyNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbFdJjNJZn+B26CKf//iCzazR2 VvcUeTTfempy2RoD7xIt4uQQ3fHkBKg9aO9cf4szUlf9xwjfAyBPvQ3wZWEzzqUZ LM7GPEwid9SWzHdmEyJG/YE17oVqxplTkHLN1WE9P0j54wCNoG5kxufyD4IcDPmx f7AuC6WbGRuVRyEQP2N/7sV9d6OyvgcWDbN0gL/aIXFldI1A1X8JwllrlOn4yK2A 8VmnEuZdh+ykYB708mnTfcVUemDhJNEwJQDZ6cCoCjhgaQS1HaINlS6KiCi6KLaN Ve1VPWQp87ScDNIiQXjTxGwJl3q3Ek3E7B0rXza/kw1271PtsTlHtJzZJbFjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNnQqoA+HVhmamrgxYwfM9e9rkl4wHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElqgnUylihXHae03oilTMPUgwxSQz9lZkjV na/wry5TfkFHxojrw5JNASE0KTcmGZK4yd8vTLa6NIZug/1vW0FwB86kbj4msFVC gGXSe11wfHcH142zlaRHqy+EwoglyKQ8U4biCIEPjsjv0zgOhWDXCdyIRvoVbYn6 Q1t3BUqIziHDEQ0YL8/6EXzQvaqYoZmxPLOJRFVB35L48pB3ay2Q570RVIat50p0 iKpflnH8iqHsFghhlAk7DQBVI//nmxk3BQFQw5wCp6N4WeDGMzLi4AsRFryJnDiV wx1CD7vdklXOPRa9UCtL726oYP8/twjBtCSfMiaSBGV/EDWPhH4= -----END CERTIFICATE-----Generated at Sat Aug 9 14:19:01 2025 by rpki-client