$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: /0YUNlLHSHAkcdAtk2mq7SPB7ucQy/8YaMO/y19X4fQ= Subject key identifier: 73:A5:14:88:2D:D1:9C:3E:42:1E:FA:07:F4:10:80:38:8A:06:71:9F Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 200DC7C47A99626AAAE714BA9AE4337707E97CB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: 0100 Signing time: Sun 02 Nov 2025 22:52:03 +0000 Manifest this update: Sun 02 Nov 2025 22:47:03 +0000 Manifest next update: Thu 06 Nov 2025 02:49:03 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: P17Do3I2i/NLSaQRidXnnXjIdQ5Hsv/GsRI5cAPg0a0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0d:c7:c4:7a:99:62:6a:aa:e7:14:ba:9a:e4:33:77:07:e9:7c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Nov 2 22:47:03 2025 GMT Not After : Nov 6 02:49:03 2025 GMT Subject: CN=73A514882DD19C3E421EFA07F41080388A06719F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:29:4a:22:c3:2c:41:a2:fd:e4:62:c9:98:ae: 60:24:ac:8d:c9:b8:b4:d8:33:46:92:8e:f8:b2:ec: 73:35:f0:43:0e:ba:18:05:22:83:1c:d7:da:ec:a5: ad:99:35:14:16:16:42:c8:f0:df:bc:bf:3b:fa:63: 21:fe:09:bc:28:3c:b1:ef:06:3d:4b:d8:e4:62:05: 4f:25:3c:13:44:29:4d:5c:ef:a3:52:4d:85:25:4a: 74:e4:46:76:0b:87:c6:50:85:a3:ee:56:87:59:ed: 53:0c:30:ce:cb:6d:e2:02:44:5c:7e:1a:5e:dd:1a: bb:4d:3e:2a:1c:64:76:00:ad:e0:23:1a:74:d8:6d: 8e:2e:31:d3:f6:9c:10:ab:17:d3:b5:57:0b:98:09: f0:3f:9a:92:22:01:d1:a3:74:fd:3e:97:f6:e3:34: 5a:e6:e6:67:47:a1:b9:cb:f5:4a:ad:83:0e:3b:d5: 94:a4:42:a1:22:68:47:75:4f:60:de:df:38:52:6e: 61:aa:ad:3d:f2:82:0e:52:69:e9:f2:f3:4d:ba:a7: 86:6e:06:95:a8:25:05:0d:12:1e:d3:c2:4f:44:46: 0f:3f:de:65:87:65:e8:8e:8b:d6:b2:c5:6f:fa:8a: 93:ea:74:c0:d4:88:70:00:d0:57:3f:59:2f:99:1b: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A5:14:88:2D:D1:9C:3E:42:1E:FA:07:F4:10:80:38:8A:06:71:9F X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:20:8d:14:1c:b6:de:02:54:9a:0f:7f:cf:8c:dd:3c:52:b3: ab:dc:59:22:5c:4f:02:3f:75:fb:8f:bf:35:50:fd:26:74:01: fb:6b:22:78:13:45:07:ec:8c:c7:2e:b1:0b:25:80:0c:4f:89: fe:ac:26:24:a5:3c:15:2b:b8:d3:89:41:bb:14:af:a1:db:1b: ea:8d:ec:eb:03:61:6b:b7:86:08:ae:77:ca:ed:24:7c:0c:25: 6d:88:75:88:78:1f:68:38:b6:21:27:e5:bc:7a:7f:6c:c5:ab: 3b:a0:a5:f1:d5:fb:34:37:5b:29:64:50:65:09:ee:12:0e:e3: fe:2e:40:97:67:29:ff:15:36:8d:14:f1:5a:46:3b:44:aa:6f: 2d:bd:e9:04:de:37:45:ef:46:73:42:e7:e4:00:a6:3a:61:9c: 44:68:73:43:01:9b:b9:7e:26:a4:1b:7f:d0:93:08:1f:5a:b0: d9:9a:b0:62:71:3f:42:be:fa:bb:d2:19:82:36:19:41:d6:83: 0e:df:74:34:9b:c3:38:a1:c8:ec:f6:a3:45:f2:d2:a7:c2:3f: af:67:74:72:ac:d7:09:f9:14:86:c9:79:dc:5f:dc:f8:ab:c7: 4f:3c:e6:12:6a:5f:01:cf:88:b3:f4:24:3b:4c:be:b9:41:ae: b1:6a:b8:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIA3HxHqZYmqq5xS6muQzdwfpfLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNTExMDIyMjQ3MDNaFw0yNTExMDYwMjQ5MDNaMDMxMTAvBgNV BAMTKDczQTUxNDg4MkREMTlDM0U0MjFFRkEwN0Y0MTA4MDM4OEEwNjcxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKUoiwyxBov3kYsmYrmAkrI3J uLTYM0aSjviy7HM18EMOuhgFIoMc19rspa2ZNRQWFkLI8N+8vzv6YyH+CbwoPLHv Bj1L2ORiBU8lPBNEKU1c76NSTYUlSnTkRnYLh8ZQhaPuVodZ7VMMMM7LbeICRFx+ Gl7dGrtNPiocZHYAreAjGnTYbY4uMdP2nBCrF9O1VwuYCfA/mpIiAdGjdP0+l/bj NFrm5mdHobnL9Uqtgw471ZSkQqEiaEd1T2De3zhSbmGqrT3ygg5Saeny8026p4Zu BpWoJQUNEh7Twk9ERg8/3mWHZeiOi9ayxW/6ipPqdMDUiHAA0Fc/WS+ZG341AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc6UUiC3RnD5CHvoH9BCAOIoGcZ8wHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwgjRQctt4CVJoPf8+M3TxSs6vcWSJcTwI/ dfuPvzVQ/SZ0AftrIngTRQfsjMcusQslgAxPif6sJiSlPBUruNOJQbsUr6HbG+qN 7OsDYWu3hgiud8rtJHwMJW2IdYh4H2g4tiEn5bx6f2zFqzugpfHV+zQ3WylkUGUJ 7hIO4/4uQJdnKf8VNo0U8VpGO0Sqby296QTeN0XvRnNC5+QApjphnERoc0MBm7l+ JqQbf9CTCB9asNmasGJxP0K++rvSGYI2GUHWgw7fdDSbwzihyOz2o0Xy0qfCP69n dHKs1wn5FIbJedxf3Pirx0885hJqXwHPiLP0JDtMvrlBrrFquI4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:18:39 2025 by rpki-client