$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: 6oRg39e8Fp5h/D/AQqqcmoU1m3NrCOQi9rt7xcOQEwc= Subject key identifier: 86:DC:C3:A9:72:66:41:D9:29:E7:82:4A:59:68:50:16:BA:64:5F:D9 Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 62FAF87B0D6703BAB90989253AC2394D80870B80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: A7 Signing time: Sun 02 Nov 2025 09:31:57 +0000 Manifest this update: Sun 02 Nov 2025 09:26:57 +0000 Manifest next update: Wed 05 Nov 2025 20:12:57 +0000 Files and hashes: 1: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: NK3JkvL1wMrqtUmi2iyKYPNlAct/T0K2rIX2eNuU6YQ=) 2: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: ioN63y/a6zMhso1bZx+bq+twKG/bpFqGK3I7L7XEk5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:fa:f8:7b:0d:67:03:ba:b9:09:89:25:3a:c2:39:4d:80:87:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Nov 2 09:26:57 2025 GMT Not After : Nov 5 20:12:57 2025 GMT Subject: CN=86DCC3A9726641D929E7824A59685016BA645FD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:fd:91:ad:93:24:b3:c3:34:a2:e3:67:25:5d: ba:99:53:e8:b0:08:62:14:57:a2:db:4e:0c:48:96: 32:65:1f:36:56:85:21:c0:fe:bd:58:b3:fb:87:c6: 9c:67:dd:b3:a2:54:4d:ed:0e:f5:74:41:22:16:6b: bf:73:2e:81:36:74:e7:31:9d:8a:c2:42:46:ad:b4: 98:81:c9:03:3f:b6:ab:bd:f9:c0:2c:95:d6:dd:63: 21:70:51:4c:20:8f:ba:47:05:c7:f6:cd:52:cc:12: ed:38:ad:6c:7e:e7:c9:78:00:9b:d6:08:e7:df:81: dd:0a:16:df:a3:b4:6c:b8:67:42:df:a9:2c:ce:f3: aa:05:e8:a7:d3:9d:d9:b2:bc:07:9a:1f:85:35:29: bf:19:74:10:83:46:e4:ab:8b:8e:1e:62:b0:cb:1d: 2f:e8:9c:14:c5:f2:67:47:51:f5:eb:85:1e:35:a0: 4f:cb:e9:0e:96:b1:35:df:14:eb:e5:bf:7f:b1:94: 5a:0e:62:7e:a7:a6:9c:da:6c:83:eb:d3:87:41:67: 63:7a:f3:8d:36:2d:d4:b5:70:bb:06:3f:8d:f0:08: db:24:74:8c:b8:e3:ec:3d:7c:d1:8b:00:6b:82:b4: e3:26:98:30:3f:27:74:b3:22:32:48:74:0c:14:ca: fd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DC:C3:A9:72:66:41:D9:29:E7:82:4A:59:68:50:16:BA:64:5F:D9 X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a9:75:a2:b8:84:96:f3:d1:89:d3:ac:27:1b:cd:ab:ac:db: 84:87:15:30:0d:57:bb:eb:ab:3a:36:44:d9:5b:85:c4:37:8e: a8:28:45:3a:e4:8b:28:2e:6f:83:7c:04:85:5e:18:15:d7:e2: 9a:7e:94:c0:d8:2c:1e:5a:71:ff:75:f1:6f:5b:4d:45:5f:41: ca:b0:d7:d4:b6:fe:b1:32:77:28:f7:27:d4:2e:c6:bd:ea:9c: 34:34:37:2c:5a:35:8a:3b:f6:03:74:bb:26:64:a4:62:94:0b: e0:5c:34:66:9a:7b:df:f5:4a:1a:28:55:88:86:4c:94:ba:28: d6:44:7f:f1:1c:12:5d:41:2f:d4:34:82:28:b5:8b:6c:f5:92: d0:ec:af:40:20:96:45:a2:65:c6:59:9d:39:2f:4f:d3:25:bc: 78:11:1f:64:f4:24:9b:fd:46:90:89:b4:da:95:c7:5a:e0:b3: 96:5a:bd:5a:9f:3f:93:0d:50:10:c5:3f:7b:51:c3:64:2c:95: f7:c6:69:e8:04:6a:e0:e9:e9:e6:05:40:f7:0b:24:f4:03:ec: 08:ad:00:14:75:01:af:15:4f:47:da:c5:e3:ac:e4:a7:91:23: 0b:d2:f2:4c:9e:ba:50:b7:f7:97:49:04:93:f1:f2:7c:11:bf: 47:ae:bb:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvr4ew1nA7q5CYklOsI5TYCHC4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNTExMDIwOTI2NTdaFw0yNTExMDUyMDEyNTdaMDMxMTAvBgNV BAMTKDg2RENDM0E5NzI2NjQxRDkyOUU3ODI0QTU5Njg1MDE2QkE2NDVGRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7/ZGtkySzwzSi42clXbqZU+iw CGIUV6LbTgxIljJlHzZWhSHA/r1Ys/uHxpxn3bOiVE3tDvV0QSIWa79zLoE2dOcx nYrCQkattJiByQM/tqu9+cAsldbdYyFwUUwgj7pHBcf2zVLMEu04rWx+58l4AJvW COffgd0KFt+jtGy4Z0LfqSzO86oF6KfTndmyvAeaH4U1Kb8ZdBCDRuSri44eYrDL HS/onBTF8mdHUfXrhR41oE/L6Q6WsTXfFOvlv3+xlFoOYn6nppzabIPr04dBZ2N6 8402LdS1cLsGP43wCNskdIy44+w9fNGLAGuCtOMmmDA/J3SzIjJIdAwUyv2nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhtzDqXJmQdkp54JKWWhQFrpkX9kwHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqpdaK4hJbz0YnTrCcbzaus24SHFTANV7vr qzo2RNlbhcQ3jqgoRTrkiygub4N8BIVeGBXX4pp+lMDYLB5acf918W9bTUVfQcqw 19S2/rEydyj3J9Quxr3qnDQ0NyxaNYo79gN0uyZkpGKUC+BcNGaae9/1ShooVYiG TJS6KNZEf/EcEl1BL9Q0gii1i2z1ktDsr0AglkWiZcZZnTkvT9MlvHgRH2T0JJv9 RpCJtNqVx1rgs5ZavVqfP5MNUBDFP3tRw2QslffGaegEauDp6eYFQPcLJPQD7Ait ABR1Aa8VT0faxeOs5KeRIwvS8kyeulC395dJBJPx8nwRv0euu/o= -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:26 2025 by rpki-client