$ rpki-client -vvvf rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft File: F61FC33006E4D563052A74A3344CBDB712A9CE42.mft (raw, json) Hash identifier: BcCZ0wTkMItjR7XqoSJEzYJAe73z6Visduqd1ddI5h4= Subject key identifier: 6D:09:07:2A:1A:A2:4E:29:B5:83:C9:14:04:7F:46:D2:3B:9F:17:DC Authority key identifier: F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42 Certificate issuer: /CN=F61FC33006E4D563052A74A3344CBDB712A9CE42 Certificate serial: 5724DB5617741290EBE4B9D285C497CF53163000 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 14:07:06 +0000 Manifest this update: Sat 14 Nov 2026 14:02:06 +0000 Manifest next update: Sun 15 Nov 2026 17:53:06 +0000 Files and hashes: 1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: slYjvzyCrVX4GgCGyd9rvovLqFZzNIshufZkbhVSrC0=) 2: F61FC33006E4D563052A74A3344CBDB712A9CE42.crl (hash: 2WSp6bNNf9qcnOZq/bLVgxULxbd/+oB1ZaJiXxJkevw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:24:db:56:17:74:12:90:eb:e4:b9:d2:85:c4:97:cf:53:16:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61FC33006E4D563052A74A3344CBDB712A9CE42 Validity Not Before: Nov 14 14:02:06 2026 GMT Not After : Nov 15 17:53:06 2026 GMT Subject: CN=6D09072A1AA24E29B583C914047F46D23B9F17DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:fa:2f:67:50:7a:b1:9b:42:e9:ae:50:26: 87:65:38:7f:38:3a:c3:ee:5b:ff:a0:7f:d5:14:6c: 2e:17:43:c4:41:89:56:98:16:ff:60:0f:cd:e0:f2: 48:e1:bb:5a:0c:47:b2:be:f1:e1:7a:b0:1a:60:68: 6c:2c:d6:72:dd:9c:43:13:4a:d3:f9:ac:23:d6:9c: d0:53:d9:41:17:48:cd:ff:3c:df:9e:1b:e9:cc:90: e4:8c:30:89:22:81:e9:91:80:35:19:cd:50:54:f3: e0:16:ec:b4:02:00:b9:8b:a0:10:bc:99:ef:4b:f7: b8:f8:a9:b4:61:d2:62:95:92:1f:8e:df:27:fc:ca: 38:cd:a4:a1:9f:1c:a1:a2:9b:80:38:79:8a:d4:be: 28:07:70:33:d7:55:6b:e5:65:4d:2a:9d:37:9c:b4: f8:9a:01:5f:0c:42:16:44:f3:97:fe:d7:53:95:7b: e8:03:a4:96:bf:e5:55:ba:40:14:fa:59:eb:bd:79: ff:07:fa:8a:b3:90:3b:26:74:b0:e4:a3:3d:cc:76: 23:78:5a:e3:2d:68:b3:40:91:59:81:9d:4b:f2:51: f2:52:4a:96:09:0c:0e:33:36:55:b5:54:c4:0e:af: 5c:2b:9d:8a:5f:a7:51:17:7f:4e:07:8b:bd:ce:e1: 8f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:09:07:2A:1A:A2:4E:29:B5:83:C9:14:04:7F:46:D2:3B:9F:17:DC X509v3 Authority Key Identifier: keyid:F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:60:a4:9a:f1:b9:76:9d:46:44:bf:10:3a:cd:c3:bd:46:31: de:0d:4c:5b:35:cc:0c:a4:9f:69:22:69:6c:4c:d4:cd:9c:6e: 8e:50:92:3d:11:eb:7b:db:e2:05:69:89:07:e9:69:5f:58:e8: 95:8f:f1:21:7b:36:bd:5c:cc:25:12:6d:0a:4f:65:82:c2:ea: 82:77:86:77:2c:59:9f:10:78:17:13:2d:cb:57:e8:36:b3:c2: 86:8c:13:6e:82:d6:e1:28:85:f6:fd:bd:f4:26:81:00:e4:63: 66:24:73:8f:d7:d4:bd:b8:e2:17:13:18:a8:da:26:7c:36:cc: 51:bb:78:16:c2:07:e8:18:4f:73:bc:2d:22:d4:d6:c0:0c:89: 2c:01:71:70:72:97:a6:d2:66:8c:d6:c2:dc:56:a7:da:ea:40: 07:15:eb:48:a1:0e:17:42:b9:a8:4a:82:42:25:5e:ec:27:8d: fb:73:d2:53:8b:d7:b7:be:34:d7:31:b3:4a:cc:57:fa:6d:40: 19:6a:d6:19:08:d8:54:75:2d:78:26:5f:72:ed:56:cc:cb:62: d7:9b:7b:23:99:26:93:5b:9d:49:14:8e:ca:e8:83:ec:40:e8: de:5d:1b:15:eb:92:88:cf:58:5c:ac:6a:1c:7f:a7:6a:a4:00: 58:e8:cd:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyTbVhd0EpDr5LnShcSXz1MWMAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRkMzMzAwNkU0RDU2MzA1MkE3NEEzMzQ0Q0JEQjcx MkE5Q0U0MjAeFw0yNjExMTQxNDAyMDZaFw0yNjExMTUxNzUzMDZaMDMxMTAvBgNV BAMTKDZEMDkwNzJBMUFBMjRFMjlCNTgzQzkxNDA0N0Y0NkQyM0I5RjE3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfvovZ1B6sZtC6a5QJodlOH84 OsPuW/+gf9UUbC4XQ8RBiVaYFv9gD83g8kjhu1oMR7K+8eF6sBpgaGws1nLdnEMT StP5rCPWnNBT2UEXSM3/PN+eG+nMkOSMMIkigemRgDUZzVBU8+AW7LQCALmLoBC8 me9L97j4qbRh0mKVkh+O3yf8yjjNpKGfHKGim4A4eYrUvigHcDPXVWvlZU0qnTec tPiaAV8MQhZE85f+11OVe+gDpJa/5VW6QBT6Weu9ef8H+oqzkDsmdLDkoz3MdiN4 WuMtaLNAkVmBnUvyUfJSSpYJDA4zNlW1VMQOr1wrnYpfp1EXf04Hi73O4Y/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbQkHKhqiTim1g8kUBH9G0jufF9wwHwYDVR0j BBgwFoAU9h/DMAbk1WMFKnSjNEy9txKpzkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgxZWY0NDAtNWE1Zi00YTRmLWI1MDktYjEwMzI0NWM1Y2YxLzAvRjYxRkMzMzAw NkU0RDU2MzA1MkE3NEEzMzQ0Q0JEQjcxMkE5Q0U0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNjFGQzMzMDA2RTRENTYzMDUyQTc0QTMzNDRDQkRCNzEyQTlD RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvRjYxRkMzMzAwNkU0RDU2MzA1MkE3NEEzMzQ0Q0JE QjcxMkE5Q0U0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdgpJrxuXadRkS/EDrNw71GMd4NTFs1zAyk n2kiaWxM1M2cbo5Qkj0R63vb4gVpiQfpaV9Y6JWP8SF7Nr1czCUSbQpPZYLC6oJ3 hncsWZ8QeBcTLctX6DazwoaME26C1uEohfb9vfQmgQDkY2Ykc4/X1L244hcTGKja Jnw2zFG7eBbCB+gYT3O8LSLU1sAMiSwBcXByl6bSZozWwtxWp9rqQAcV60ihDhdC uahKgkIlXuwnjftz0lOL17e+NNcxs0rMV/ptQBlq1hkI2FR1LXgmX3LtVszLYteb eyOZJpNbnUkUjsrog+xA6N5dGxXrkojPWFysahx/p2qkAFjozQA= -----END CERTIFICATE-----Generated at Sun Nov 15 02:38:35 2026 by rpki-client