$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: m8/DNdi5RZAq3zC8yAB9HD0grMQAkeC2fxqD0eeYulk= Subject key identifier: 1A:5A:A8:F9:AD:78:97:ED:DB:BB:85:00:B2:57:C6:D5:F7:44:6B:B5 Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 403E6951E2FAD372C76D3E451DFB836964C9B17B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 02DF Signing time: Sun 02 Nov 2025 08:12:23 +0000 Manifest this update: Sun 02 Nov 2025 08:07:23 +0000 Manifest next update: Wed 05 Nov 2025 13:19:23 +0000 Files and hashes: 1: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) 2: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: HGan1dckRL53DS2lON8L0DGLF93ibFw6C2TombWiMNg=) 3: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) 4: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 13:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:3e:69:51:e2:fa:d3:72:c7:6d:3e:45:1d:fb:83:69:64:c9:b1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Nov 2 08:07:23 2025 GMT Not After : Nov 5 13:19:23 2025 GMT Subject: CN=1A5AA8F9AD7897EDDBBB8500B257C6D5F7446BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:a6:12:8f:a4:44:2f:1f:cf:01:f1:b0:71: 45:8e:c5:a1:6b:6d:68:b9:cb:4a:31:62:bc:5c:77: 07:20:5c:b6:41:e5:9a:a7:4e:e7:db:f2:38:21:80: b8:db:a8:7b:40:b4:ce:f2:b0:c2:9e:47:a5:cc:89: 64:7b:3e:8b:60:c1:5f:a0:76:fe:47:fc:48:72:98: c3:7a:e5:0c:30:87:16:dd:62:c9:1a:4f:f8:79:b2: 7b:e2:e1:55:eb:8a:64:5c:44:56:1a:2b:07:a9:2d: 5b:cb:4d:8f:e7:79:07:4a:a1:e8:3b:eb:12:e5:2e: 1a:bd:a4:2a:c9:c6:75:fe:f3:c9:c2:d5:62:a9:d6: 18:4e:c2:c6:ad:07:a8:c8:1a:85:f7:93:7d:2a:0b: 8c:70:cb:dd:f1:94:4f:ff:bd:c8:90:34:c7:38:ec: 6c:3e:50:8c:8c:6d:0b:fa:e5:8a:27:7e:dd:34:32: ce:f8:84:90:6f:42:a9:52:5d:0c:ab:bb:8f:23:18: 49:e2:9a:61:ce:1e:1a:9b:48:fc:75:d7:15:c4:f6: d8:c5:60:9b:95:ba:a7:d0:1e:23:62:f1:2b:a9:21: 28:23:07:0f:67:eb:2a:c8:e7:c0:4a:f1:86:fa:99: b6:7d:16:e3:99:dc:7e:86:fc:fa:b2:0c:75:9b:9b: 80:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5A:A8:F9:AD:78:97:ED:DB:BB:85:00:B2:57:C6:D5:F7:44:6B:B5 X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e4:92:50:00:84:53:c2:98:a5:e5:b3:be:dc:5c:93:1c:de: 91:c3:c9:27:70:81:f3:ec:6a:86:58:77:89:59:4f:a9:cf:c1: 48:da:e1:c0:71:cd:e4:4e:cc:14:07:0d:0a:9d:81:d8:24:ac: 65:e8:44:4e:38:3d:fb:c7:9b:f9:4b:36:0b:e8:54:8a:af:73: 39:a5:ca:05:37:a6:0d:08:e8:39:e6:8f:f2:a3:a0:92:ea:e8: 0a:6b:96:e1:12:bd:5f:e3:42:7e:68:b3:f9:8f:3c:d3:1c:93: d8:54:8f:a3:28:2a:9a:18:4f:c1:5c:6f:49:e6:20:83:3d:ee: 3c:c2:15:8a:47:4f:10:40:e1:62:b5:a7:00:65:12:a7:9f:4d: 38:7c:d2:f7:38:76:a2:74:0f:ba:f5:21:45:18:e4:fc:44:68: 64:9d:dc:21:45:45:58:82:5d:41:8d:cc:70:66:60:ba:a5:87: e2:ce:59:8b:07:62:47:0f:8a:67:1a:62:e6:7a:09:ae:c2:1a: 26:0a:62:63:8a:09:a5:e9:c5:c8:fa:fe:d2:bb:c3:28:1a:51: df:a5:6f:3a:ea:08:b1:69:3f:62:f8:5b:6a:97:b2:95:94:88: ef:98:cb:90:f5:94:35:8d:ce:26:8d:eb:08:e5:40:d3:0c:61: 4d:ff:aa:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQD5pUeL603LHbT5FHfuDaWTJsXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTExMDIwODA3MjNaFw0yNTExMDUxMzE5MjNaMDMxMTAvBgNV BAMTKDFBNUFBOEY5QUQ3ODk3RUREQkJCODUwMEIyNTdDNkQ1Rjc0NDZCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRy6YSj6RELx/PAfGwcUWOxaFr bWi5y0oxYrxcdwcgXLZB5ZqnTufb8jghgLjbqHtAtM7ysMKeR6XMiWR7PotgwV+g dv5H/EhymMN65QwwhxbdYskaT/h5snvi4VXrimRcRFYaKwepLVvLTY/neQdKoeg7 6xLlLhq9pCrJxnX+88nC1WKp1hhOwsatB6jIGoX3k30qC4xwy93xlE//vciQNMc4 7Gw+UIyMbQv65Yonft00Ms74hJBvQqlSXQyru48jGEnimmHOHhqbSPx11xXE9tjF YJuVuqfQHiNi8SupISgjBw9n6yrI58BK8Yb6mbZ9FuOZ3H6G/PqyDHWbm4ABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGlqo+a14l+3bu4UAslfG1fdEa7UwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDkklAAhFPCmKXls77cXJMc3pHDySdwgfPs aoZYd4lZT6nPwUja4cBxzeROzBQHDQqdgdgkrGXoRE44PfvHm/lLNgvoVIqvczml ygU3pg0I6Dnmj/KjoJLq6AprluESvV/jQn5os/mPPNMck9hUj6MoKpoYT8Fcb0nm IIM97jzCFYpHTxBA4WK1pwBlEqefTTh80vc4dqJ0D7r1IUUY5PxEaGSd3CFFRViC XUGNzHBmYLqlh+LOWYsHYkcPimcaYuZ6Ca7CGiYKYmOKCaXpxcj6/tK7wygaUd+l bzrqCLFpP2L4W2qXspWUiO+Yy5D1lDWNziaN6wjlQNMMYU3/qq4= -----END CERTIFICATE-----Generated at Tue Nov 4 12:33:04 2025 by rpki-client