$ rpki-client -vvvf rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft File: F61FC33006E4D563052A74A3344CBDB712A9CE42.mft (raw, json) Hash identifier: 8qcuTDJs5CJSUqVZ/Ajm+eKrnmeoEewgNPFYjs5eJ5w= Subject key identifier: D1:F8:68:AD:34:F9:73:DE:D5:89:C2:7A:2F:3B:7F:E1:05:9A:6F:2B Authority key identifier: F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42 Certificate issuer: /CN=F61FC33006E4D563052A74A3344CBDB712A9CE42 Certificate serial: 5099E4ABDE939165CA3151231CC3DE6F875C3390 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 08:31:46 +0000 Manifest this update: Wed 23 Sep 2026 08:26:46 +0000 Manifest next update: Thu 24 Sep 2026 10:53:46 +0000 Files and hashes: 1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: slYjvzyCrVX4GgCGyd9rvovLqFZzNIshufZkbhVSrC0=) 2: F61FC33006E4D563052A74A3344CBDB712A9CE42.crl (hash: /ZPsDXIipqGHbElb2NOgGc2b+7ue/Yge02/7Eracs3A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:99:e4:ab:de:93:91:65:ca:31:51:23:1c:c3:de:6f:87:5c:33:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61FC33006E4D563052A74A3344CBDB712A9CE42 Validity Not Before: Sep 23 08:26:46 2026 GMT Not After : Sep 24 10:53:46 2026 GMT Subject: CN=D1F868AD34F973DED589C27A2F3B7FE1059A6F2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fc:b8:1d:65:ab:ee:18:63:1c:e7:cd:62:18: db:1c:1d:7e:62:ee:9e:63:71:19:b6:d7:cd:ec:f0: 0c:06:e8:40:db:50:cf:5b:87:f7:fe:cf:0c:82:12: 12:8c:cd:a6:02:72:ea:72:d5:b5:d6:c4:01:56:32: e4:36:0f:bc:6a:d2:33:d2:02:62:d2:53:e0:ec:e8: 91:cd:34:95:84:52:6f:5f:0e:6d:cf:d1:8f:dc:eb: bf:de:2b:8f:09:3c:bb:00:22:e7:42:92:9d:d6:1c: 76:9b:cf:64:d7:bb:b5:e4:a5:ce:05:a4:34:8a:39: 53:85:69:4d:9f:ca:8e:74:1e:b0:ea:71:8b:7e:cf: e8:62:4c:4a:30:d6:6f:e5:aa:96:dc:1a:c8:2e:cd: c5:b2:06:1f:6d:54:7e:dc:b3:73:6f:09:00:c2:bb: 2a:90:91:dd:49:62:e3:9e:a8:44:e4:ea:c6:2c:66: 29:63:fe:f8:5a:3a:85:c0:04:21:e6:4d:94:0f:7a: bd:4a:49:20:44:d0:bd:7c:0b:25:27:0f:1d:2b:f1: f8:6a:2e:24:81:89:62:33:15:d5:8b:ca:c4:e5:ee: 12:a5:01:10:1c:45:b1:72:4d:d3:63:76:0e:9a:a6: 4a:67:6f:88:fa:c5:d7:ea:67:e0:3c:77:68:7c:88: 11:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F8:68:AD:34:F9:73:DE:D5:89:C2:7A:2F:3B:7F:E1:05:9A:6F:2B X509v3 Authority Key Identifier: keyid:F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:af:4f:02:7a:e6:42:86:14:08:35:50:00:78:40:4c:96:90: 62:5a:d7:fe:78:d3:c6:74:d1:17:35:11:a2:1a:13:2d:d5:f3: c8:3e:df:ac:e7:36:d4:4b:d0:da:f1:3b:03:89:48:f9:35:cc: 11:b7:2d:01:e7:23:29:72:c8:b4:bb:d7:a1:ff:b0:99:3a:fa: b4:9f:c4:dc:c3:cc:47:30:92:15:40:3a:24:db:ee:d0:b8:8d: 65:e5:a9:64:50:0d:22:b4:1a:60:ec:1f:bf:95:15:ca:28:55: 60:c2:65:2e:06:ce:e0:de:b2:63:6f:c7:ce:6b:c7:94:ea:2d: 3a:55:0f:1f:da:4a:a0:7d:2d:30:8b:09:88:c8:3d:2f:06:ed: 02:2d:78:ea:29:1a:25:d8:35:42:43:2a:31:3f:8a:fe:48:df: 9a:a2:1e:51:8a:e8:7d:b2:34:e7:42:4d:c1:1f:ed:77:fc:65: 5f:6c:7b:1f:cb:8d:e0:af:c1:f4:c3:0c:60:38:82:21:6a:89: 7d:88:7f:bd:8f:6c:38:04:b2:23:ff:ed:2f:a6:49:df:a9:df: 08:be:71:9f:d0:e6:b1:ee:54:02:54:df:70:b6:21:9e:c0:f1: bf:eb:4e:3f:b0:a0:3a:f8:fb:a8:14:45:3c:98:a0:d3:9e:f6: f5:e6:6f:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJnkq96TkWXKMVEjHMPeb4dcM5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRkMzMzAwNkU0RDU2MzA1MkE3NEEzMzQ0Q0JEQjcx MkE5Q0U0MjAeFw0yNjA5MjMwODI2NDZaFw0yNjA5MjQxMDUzNDZaMDMxMTAvBgNV BAMTKEQxRjg2OEFEMzRGOTczREVENTg5QzI3QTJGM0I3RkUxMDU5QTZGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ/LgdZavuGGMc581iGNscHX5i 7p5jcRm2183s8AwG6EDbUM9bh/f+zwyCEhKMzaYCcupy1bXWxAFWMuQ2D7xq0jPS AmLSU+Ds6JHNNJWEUm9fDm3P0Y/c67/eK48JPLsAIudCkp3WHHabz2TXu7Xkpc4F pDSKOVOFaU2fyo50HrDqcYt+z+hiTEow1m/lqpbcGsguzcWyBh9tVH7cs3NvCQDC uyqQkd1JYuOeqETk6sYsZilj/vhaOoXABCHmTZQPer1KSSBE0L18CyUnDx0r8fhq LiSBiWIzFdWLysTl7hKlARAcRbFyTdNjdg6apkpnb4j6xdfqZ+A8d2h8iBHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0fhorTT5c97VicJ6Lzt/4QWabyswHwYDVR0j BBgwFoAU9h/DMAbk1WMFKnSjNEy9txKpzkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgxZWY0NDAtNWE1Zi00YTRmLWI1MDktYjEwMzI0NWM1Y2YxLzAvRjYxRkMzMzAw NkU0RDU2MzA1MkE3NEEzMzQ0Q0JEQjcxMkE5Q0U0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNjFGQzMzMDA2RTRENTYzMDUyQTc0QTMzNDRDQkRCNzEyQTlD RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvRjYxRkMzMzAwNkU0RDU2MzA1MkE3NEEzMzQ0Q0JE QjcxMkE5Q0U0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+vTwJ65kKGFAg1UAB4QEyWkGJa1/5408Z0 0Rc1EaIaEy3V88g+36znNtRL0NrxOwOJSPk1zBG3LQHnIylyyLS716H/sJk6+rSf xNzDzEcwkhVAOiTb7tC4jWXlqWRQDSK0GmDsH7+VFcooVWDCZS4GzuDesmNvx85r x5TqLTpVDx/aSqB9LTCLCYjIPS8G7QIteOopGiXYNUJDKjE/iv5I35qiHlGK6H2y NOdCTcEf7Xf8ZV9sex/LjeCvwfTDDGA4giFqiX2If72PbDgEsiP/7S+mSd+p3wi+ cZ/Q5rHuVAJU33C2IZ7A8b/rTj+woDr4+6gURTyYoNOe9vXmbw0= -----END CERTIFICATE-----Generated at Wed Sep 23 19:49:47 2026 by rpki-client