$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: Qq6XoKNQutlLokKqW3CNU8dHC8dL63i9Y+fxrLR3VMQ= Subject key identifier: E7:81:64:67:90:DB:CA:76:C3:AC:5D:A7:F7:CE:62:CC:E6:87:48:A6 Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 72A95A51713725D224D564E24D8C9A193843D37E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 0201 Signing time: Sun 02 Nov 2025 15:31:58 +0000 Manifest this update: Sun 02 Nov 2025 15:26:58 +0000 Manifest next update: Thu 06 Nov 2025 03:16:58 +0000 Files and hashes: 1: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: OVp41P8XiusORgDYjhyG3tIoN5ypPHdHjH6RGxbqADk=) 2: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=) 3: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: O6JN9vB81dvnYSqOOuF4U9Zi4uiJHyZMHogORYwb0B8=) 4: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: 3t8POxW2mcQ/nvjJPU9gXim41a5qa0GKDf3HQqW/V6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a9:5a:51:71:37:25:d2:24:d5:64:e2:4d:8c:9a:19:38:43:d3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Nov 2 15:26:58 2025 GMT Not After : Nov 6 03:16:58 2025 GMT Subject: CN=E781646790DBCA76C3AC5DA7F7CE62CCE68748A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:a8:13:e4:02:31:c4:b4:dc:c5:0a:8c:bd: c6:df:85:6a:c4:22:ff:32:be:c1:63:07:d4:6c:0e: ea:c6:44:cf:e6:5a:d4:50:c7:dc:ab:14:09:d3:4e: 80:3d:ce:88:b7:66:4f:e1:b1:36:c4:91:e9:0c:a6: d5:0f:ef:c8:d0:05:bb:a8:83:81:a0:14:b9:32:97: 16:92:c2:3a:43:41:da:e0:57:55:1f:d5:5d:3a:f4: 1a:7e:32:d2:b4:bc:99:14:f1:3d:e6:ec:9c:df:81: 49:f3:55:b9:86:23:1e:1e:6a:44:07:2f:65:29:db: f4:af:47:d0:35:77:88:92:d0:93:74:c4:f3:72:44: 1f:5b:87:4d:d5:58:3f:b8:01:04:d1:74:37:6e:4b: 1d:b2:fa:b2:6b:95:0c:3a:30:a2:4e:6a:31:7d:0c: c2:bd:2b:80:70:03:80:1e:3d:f5:c3:15:e0:ce:70: d0:99:7e:62:7e:2c:50:32:71:ca:b3:64:6d:7d:95: 25:d2:c7:71:58:f6:ef:ae:d3:da:43:45:81:df:df: 5e:04:5f:b4:31:e1:54:8f:c5:98:8c:12:f8:03:d5: 8a:7e:10:a3:c0:18:14:2a:67:3b:c1:6c:fb:72:59: 4a:30:67:05:32:19:9d:7e:82:ff:8c:0b:11:b1:b3: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:81:64:67:90:DB:CA:76:C3:AC:5D:A7:F7:CE:62:CC:E6:87:48:A6 X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:21:a0:65:37:4b:70:5a:eb:1a:a6:d2:70:56:62:ac:e3:e1: 25:5e:08:8e:e0:04:ba:a2:53:93:40:ac:87:77:60:e3:b2:d3: e6:f6:9c:9c:95:bc:8b:ee:85:5e:6e:ba:4e:2e:ff:b9:d6:ac: 2b:cb:b9:5e:d0:e7:1f:90:27:1b:bd:7f:1b:c3:84:c0:9b:34: 62:7e:64:c2:2a:06:31:12:fa:64:38:66:04:c3:57:22:f1:a4: 13:a4:69:66:26:fd:44:21:dd:13:bd:ee:65:61:63:7f:6c:88: 21:00:5b:b6:d6:76:69:48:9e:bc:49:26:de:ab:db:09:cc:d5: 37:f0:b8:88:ad:2c:a7:c8:d5:0d:4d:ad:a6:2a:a5:c2:65:7b: 55:df:c5:6a:3c:8e:5c:0a:04:81:bf:38:9a:72:a8:1c:3c:92: 92:63:e4:d0:ca:b6:f5:4a:d8:c5:b6:4d:17:9e:0a:9e:b7:89: 0f:d7:8c:9f:64:9f:30:98:1d:f1:72:68:b6:de:ad:02:1e:8f: d0:18:01:eb:c5:92:b4:b7:27:a5:ca:4d:9d:59:44:9b:b3:2d: e1:a3:50:b4:4b:56:7b:00:c8:7f:d5:dc:01:b8:38:65:42:5b: 74:5e:2e:5b:9a:be:89:f2:a6:45:b6:fe:9f:14:53:93:8f:df: fa:84:44:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcqlaUXE3JdIk1WTiTYyaGThD034wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNTExMDIxNTI2NThaFw0yNTExMDYwMzE2NThaMDMxMTAvBgNV BAMTKEU3ODE2NDY3OTBEQkNBNzZDM0FDNURBN0Y3Q0U2MkNDRTY4NzQ4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CqgT5AIxxLTcxQqMvcbfhWrE Iv8yvsFjB9RsDurGRM/mWtRQx9yrFAnTToA9zoi3Zk/hsTbEkekMptUP78jQBbuo g4GgFLkylxaSwjpDQdrgV1Uf1V069Bp+MtK0vJkU8T3m7JzfgUnzVbmGIx4eakQH L2Up2/SvR9A1d4iS0JN0xPNyRB9bh03VWD+4AQTRdDduSx2y+rJrlQw6MKJOajF9 DMK9K4BwA4AePfXDFeDOcNCZfmJ+LFAyccqzZG19lSXSx3FY9u+u09pDRYHf314E X7Qx4VSPxZiMEvgD1Yp+EKPAGBQqZzvBbPtyWUowZwUyGZ1+gv+MCxGxs0fNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU54FkZ5DbynbDrF2n985izOaHSKYwHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8hoGU3S3Ba6xqm0nBWYqzj4SVeCI7gBLqi U5NArId3YOOy0+b2nJyVvIvuhV5uuk4u/7nWrCvLuV7Q5x+QJxu9fxvDhMCbNGJ+ ZMIqBjES+mQ4ZgTDVyLxpBOkaWYm/UQh3RO97mVhY39siCEAW7bWdmlInrxJJt6r 2wnM1TfwuIitLKfI1Q1NraYqpcJle1XfxWo8jlwKBIG/OJpyqBw8kpJj5NDKtvVK 2MW2TReeCp63iQ/XjJ9knzCYHfFyaLberQIej9AYAevFkrS3J6XKTZ1ZRJuzLeGj ULRLVnsAyH/V3AG4OGVCW3ReLluavonypkW2/p8UU5OP3/qERG4= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:53 2025 by rpki-client