$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: zroD9LmoF+MT5Oa1n9Qs8dDAOHqJAgMJ/7kLharUUzs= Subject key identifier: F6:49:6F:9D:4A:74:BF:27:7C:65:3A:2E:32:E2:FC:31:82:EC:3A:61 Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 1292E1D9EDCB34B32CC88BB33F479ECBC1F74F53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: C3 Signing time: Tue 17 Jun 2025 16:11:58 +0000 Manifest this update: Tue 17 Jun 2025 16:06:58 +0000 Manifest next update: Fri 20 Jun 2025 19:01:58 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: 3XaEImAt0DU4W+u1yNKDiV8ABHXLkEVk4sZ3RFThxa8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 19:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:92:e1:d9:ed:cb:34:b3:2c:c8:8b:b3:3f:47:9e:cb:c1:f7:4f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Jun 17 16:06:58 2025 GMT Not After : Jun 20 19:01:58 2025 GMT Subject: CN=F6496F9D4A74BF277C653A2E32E2FC3182EC3A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:17:02:68:44:c8:ea:31:c7:e2:86:83:80: 5f:a7:e1:6a:08:6a:c9:f8:27:09:6f:1e:22:22:40: 8a:38:af:68:36:dd:5f:fb:29:04:e4:c0:29:49:83: 95:cf:3d:84:fe:63:f7:53:f1:73:82:bd:78:fb:8f: 71:ea:42:fd:5c:c4:a0:49:b7:29:1e:6f:98:dd:e3: b0:7d:02:d5:89:3c:f0:f7:4d:a3:f0:36:03:7b:a1: ed:91:fd:01:28:f6:62:b5:55:7c:95:91:19:a0:cf: cd:0e:92:6e:fc:54:5a:13:90:d9:98:87:25:25:30: 29:04:30:d2:24:e3:af:9c:78:4e:fa:c7:1e:09:70: d9:18:da:3f:de:1d:99:ca:61:49:8c:2b:8b:1a:fe: f7:1d:dc:81:6b:09:bb:f3:00:7c:c6:cd:0e:3c:3c: 95:0a:15:e1:c9:2f:86:55:39:f3:d1:f6:a9:0d:5b: 0e:5a:38:ca:79:86:17:9f:ca:a4:90:12:f8:38:7f: 8f:a1:2b:f1:e9:b2:d5:3f:15:75:b5:f4:57:a8:79: 5a:5f:7a:fc:c4:d0:85:15:08:e6:15:03:ab:54:20: 44:eb:5e:2c:3f:b9:67:cd:e3:23:24:b8:20:2a:8d: 50:b5:2e:4b:b9:0c:1f:13:ac:39:2a:42:dc:1d:a4: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:49:6F:9D:4A:74:BF:27:7C:65:3A:2E:32:E2:FC:31:82:EC:3A:61 X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ac:9d:23:4c:49:a4:dd:1e:2e:42:a1:42:0d:54:65:4c:79: f5:37:5c:de:08:06:84:fe:7a:b9:a9:29:f0:6f:a2:5d:3f:61: e3:b9:d2:9d:38:a7:8c:2a:ae:7b:dc:2a:dc:ae:2f:8d:9a:4c: f9:be:7c:ee:47:f1:00:4a:63:37:63:f4:2a:ee:f2:be:b4:16: e0:03:47:bc:c4:08:5d:1f:79:02:a1:88:08:dd:b2:c7:58:82: 15:ec:0d:03:dc:e6:98:f4:d4:67:7f:5b:09:ef:5c:c6:cd:95: 3c:b2:e1:26:77:29:ce:2c:6f:67:f3:c1:25:6e:ac:2b:03:df: 86:82:91:a5:a6:51:c9:55:48:48:ec:84:2c:0b:80:95:4e:02: 4d:b7:62:55:d0:92:f0:b2:10:a3:9e:65:e3:00:85:c0:bf:7d: 0a:cb:dc:4e:c8:5a:49:d3:6a:11:c7:e4:c8:a1:66:f6:6f:9c: 5a:1a:5d:c4:95:17:0f:c2:fb:1c:ca:5c:6d:82:e6:7d:cf:e3: b9:39:6b:eb:80:39:05:33:ca:17:49:92:42:c3:12:6e:e1:8a: e6:50:1a:52:62:ec:58:22:9b:6f:c9:e7:05:34:1c:35:fa:6c: 02:5f:c4:87:1c:85:3d:36:6c:30:4d:a5:2d:29:de:ec:eb:97: e1:7d:b3:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpLh2e3LNLMsyIuzP0eey8H3T1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNTA2MTcxNjA2NThaFw0yNTA2MjAxOTAxNThaMDMxMTAvBgNV BAMTKEY2NDk2RjlENEE3NEJGMjc3QzY1M0EyRTMyRTJGQzMxODJFQzNBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jBcCaETI6jHH4oaDgF+n4WoI asn4JwlvHiIiQIo4r2g23V/7KQTkwClJg5XPPYT+Y/dT8XOCvXj7j3HqQv1cxKBJ tykeb5jd47B9AtWJPPD3TaPwNgN7oe2R/QEo9mK1VXyVkRmgz80Okm78VFoTkNmY hyUlMCkEMNIk46+ceE76xx4JcNkY2j/eHZnKYUmMK4sa/vcd3IFrCbvzAHzGzQ48 PJUKFeHJL4ZVOfPR9qkNWw5aOMp5hhefyqSQEvg4f4+hK/HpstU/FXW19FeoeVpf evzE0IUVCOYVA6tUIETrXiw/uWfN4yMkuCAqjVC1Lku5DB8TrDkqQtwdpI0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9klvnUp0vyd8ZTouMuL8MYLsOmEwHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6snSNMSaTdHi5CoUINVGVMefU3XN4IBoT+ ermpKfBvol0/YeO50p04p4wqrnvcKtyuL42aTPm+fO5H8QBKYzdj9Cru8r60FuAD R7zECF0feQKhiAjdssdYghXsDQPc5pj01Gd/WwnvXMbNlTyy4SZ3Kc4sb2fzwSVu rCsD34aCkaWmUclVSEjshCwLgJVOAk23YlXQkvCyEKOeZeMAhcC/fQrL3E7IWknT ahHH5MihZvZvnFoaXcSVFw/C+xzKXG2C5n3P47k5a+uAOQUzyhdJkkLDEm7hiuZQ GlJi7Fgim2/J5wU0HDX6bAJfxIcchT02bDBNpS0p3uzrl+F9s5s= -----END CERTIFICATE-----Generated at Wed Jun 18 07:16:01 2025 by rpki-client