$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: dLvVxVUSLqQg/IX9eZ8zvb0ust2LvsjBnClogIFSTsE= Subject key identifier: 4B:47:78:4F:59:F0:96:DB:FE:4A:0C:E2:80:47:9F:8B:A0:15:A5:01 Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 54CFBFFCCC728D95B855027A92B88800A834BC46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: D9 Signing time: Wed 06 Aug 2025 05:22:02 +0000 Manifest this update: Wed 06 Aug 2025 05:17:02 +0000 Manifest next update: Sat 09 Aug 2025 14:23:02 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: MDIIsIoDQ+Hbc/0+kGmEQceAVbYerOzQNS2jsnybVus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:cf:bf:fc:cc:72:8d:95:b8:55:02:7a:92:b8:88:00:a8:34:bc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Aug 6 05:17:02 2025 GMT Not After : Aug 9 14:23:02 2025 GMT Subject: CN=4B47784F59F096DBFE4A0CE280479F8BA015A501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:94:42:6d:e5:2f:8b:7e:71:8b:44:8d:f1: 11:e5:a0:55:5e:a7:5e:48:c3:47:8b:2d:b2:63:7f: 14:f8:d7:aa:a9:e2:b6:cc:29:45:c1:dd:d0:bd:db: be:5c:2b:13:27:95:19:14:1e:5a:98:90:e2:97:04: 96:46:ac:cd:fe:ee:48:a6:f4:e8:af:e3:05:2b:dd: 10:7f:7d:f1:a1:e5:a6:ed:e0:15:16:7a:c3:57:fe: d7:12:bf:40:af:0c:ca:18:53:4b:be:04:64:dd:0c: bb:31:25:b1:6c:45:7e:a0:8c:c9:64:7d:7a:6b:69: a0:aa:d2:0c:94:d4:5e:b1:0c:6c:52:ef:da:41:b9: e4:b1:0f:9b:d7:9b:cf:8d:93:59:99:71:5f:69:96: 5f:80:f9:23:25:be:c0:88:cd:93:cd:e7:d0:46:b4: af:9b:63:d2:79:17:69:ba:70:bf:d4:fa:e5:42:8f: 18:cf:2a:9e:c7:a5:59:c0:a8:5d:43:5c:ef:ee:0c: a8:e6:d5:45:76:70:a2:69:c3:55:cd:86:22:7b:b6: 70:e8:ca:5f:29:aa:e4:45:3d:f9:ee:61:53:f8:8b: 29:c8:dc:eb:a9:a1:bf:ab:3f:7a:f9:95:ad:16:de: 6d:5e:f4:4f:3b:ef:1a:be:83:18:12:87:9c:cc:55: 8b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:47:78:4F:59:F0:96:DB:FE:4A:0C:E2:80:47:9F:8B:A0:15:A5:01 X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:57:fb:a5:6d:44:6d:5c:a7:91:fa:73:8c:b7:72:62:bb:6e: 9c:8d:d3:1d:8b:33:c6:ff:e6:b7:e1:4c:80:3d:65:48:67:45: 0f:2b:12:15:b4:14:96:5a:a6:dd:de:22:ea:55:d9:0c:a3:1f: 77:85:a6:4f:9c:ba:26:01:44:d7:0a:46:e7:1f:fd:fd:27:24: dd:18:c5:b5:5a:03:cc:a5:73:28:c6:49:39:e4:d9:f1:28:4a: 90:2e:66:1e:a2:13:92:54:31:2f:3f:e6:0d:73:cc:3e:ab:c8: 4f:e7:58:17:69:ee:2b:57:72:63:f4:13:d9:c2:63:ed:c5:71: d6:c8:27:fd:ee:48:7c:c3:0e:fc:ed:2d:c8:65:72:1b:8c:6c: 25:5b:aa:15:bc:c5:ab:30:5d:8e:22:76:3d:21:d6:41:1f:fc: 91:eb:b6:a4:5a:10:4f:f2:33:fe:34:c0:02:0a:70:56:ee:07: 7c:09:67:2c:a9:9d:9d:b3:3d:03:e8:9a:2f:29:c6:7a:d7:5b: 46:4d:82:9f:0e:3a:7e:bb:96:a7:64:4e:22:dc:44:12:3b:ef: 03:e8:d9:2b:ab:ee:d0:7d:df:75:f7:90:54:c8:77:8d:87:3c: 15:2f:50:c1:e7:c5:7c:56:9b:3e:7d:7d:da:e6:a0:92:d4:ef: 39:0f:ac:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVM+//MxyjZW4VQJ6kriIAKg0vEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNTA4MDYwNTE3MDJaFw0yNTA4MDkxNDIzMDJaMDMxMTAvBgNV BAMTKDRCNDc3ODRGNTlGMDk2REJGRTRBMENFMjgwNDc5RjhCQTAxNUE1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdOJRCbeUvi35xi0SN8RHloFVe p15Iw0eLLbJjfxT416qp4rbMKUXB3dC9275cKxMnlRkUHlqYkOKXBJZGrM3+7kim 9Oiv4wUr3RB/ffGh5abt4BUWesNX/tcSv0CvDMoYU0u+BGTdDLsxJbFsRX6gjMlk fXpraaCq0gyU1F6xDGxS79pBueSxD5vXm8+Nk1mZcV9pll+A+SMlvsCIzZPN59BG tK+bY9J5F2m6cL/U+uVCjxjPKp7HpVnAqF1DXO/uDKjm1UV2cKJpw1XNhiJ7tnDo yl8pquRFPfnuYVP4iynI3Oupob+rP3r5la0W3m1e9E877xq+gxgSh5zMVYuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS0d4T1nwltv+SgzigEefi6AVpQEwHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVX+6VtRG1cp5H6c4y3cmK7bpyN0x2LM8b/ 5rfhTIA9ZUhnRQ8rEhW0FJZapt3eIupV2QyjH3eFpk+cuiYBRNcKRucf/f0nJN0Y xbVaA8ylcyjGSTnk2fEoSpAuZh6iE5JUMS8/5g1zzD6ryE/nWBdp7itXcmP0E9nC Y+3FcdbIJ/3uSHzDDvztLchlchuMbCVbqhW8xaswXY4idj0h1kEf/JHrtqRaEE/y M/40wAIKcFbuB3wJZyypnZ2zPQPomi8pxnrXW0ZNgp8OOn67lqdkTiLcRBI77wPo 2Sur7tB933X3kFTId42HPBUvUMHnxXxWmz59fdrmoJLU7zkPrNM= -----END CERTIFICATE-----Generated at Thu Aug 7 11:21:07 2025 by rpki-client