$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft File: 610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft (raw, json) Hash identifier: ALzu86c/6WhN0CadijCk8HClI6G/4lRjBleh9nAUW9o= Subject key identifier: 98:BB:33:EA:A0:64:0C:22:88:D3:57:4B:28:CC:DA:46:5D:3F:A1:35 Authority key identifier: 61:0D:31:D4:D6:A8:65:C3:A5:73:2C:77:94:E5:A1:9B:AE:55:E8:82 Certificate issuer: /CN=610D31D4D6A865C3A5732C7794E5A19BAE55E882 Certificate serial: 2A455D013C6651F653DA212F700A85E7AFE26DBB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:29:58 +0000 Manifest this update: Fri 24 Jul 2026 04:24:58 +0000 Manifest next update: Sat 25 Jul 2026 04:37:58 +0000 Files and hashes: 1: 610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl (hash: CZqxZqSj1SD/HjmBYd/9bTQrJkHH4POiRG+BJxuwg78=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:45:5d:01:3c:66:51:f6:53:da:21:2f:70:0a:85:e7:af:e2:6d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=610D31D4D6A865C3A5732C7794E5A19BAE55E882 Validity Not Before: Jul 24 04:24:58 2026 GMT Not After : Jul 25 04:37:58 2026 GMT Subject: CN=98BB33EAA0640C2288D3574B28CCDA465D3FA135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:08:38:ac:db:19:b4:7a:e9:c5:4a:5c:13: 59:f7:c6:77:6d:cc:0a:2b:78:57:c3:1e:0e:ed:ce: 23:77:67:e8:bd:5f:39:ce:3b:c4:d9:24:d7:7e:80: bb:cf:88:71:4f:bf:e3:b6:d2:65:12:17:3a:94:e2: ca:20:e2:9d:7a:39:fc:0b:9b:c7:c1:28:c7:32:e4: 55:2f:b0:a9:ba:c3:60:b3:c1:5b:42:74:6c:cb:d8: 18:e3:c1:7f:dc:89:18:66:b8:a1:82:71:54:c1:e5: 5d:17:54:b9:9a:1b:e7:f6:52:9e:a0:56:81:0b:d3: e9:36:63:bb:e4:9b:f0:f0:76:b6:e5:bb:7b:a0:fa: 3f:c8:d4:fe:ac:6f:e3:19:04:48:c0:ae:98:39:dd: d9:fd:b5:10:68:fe:04:ae:08:41:46:cb:26:4c:5a: 92:eb:2a:1c:88:5d:00:1e:8b:93:8c:cc:9e:8b:73: 56:f9:f8:65:b4:d4:57:97:19:c3:fc:31:9e:01:9d: e3:da:ce:dc:35:0f:0a:90:69:ff:ea:2a:f4:a4:78: 0d:86:b8:4c:d0:36:d1:0c:10:cd:9c:f3:36:29:f3: 47:4d:e1:3f:5f:de:04:d1:ca:5d:56:79:31:ff:29: 80:89:d4:6d:f7:6c:03:10:99:ab:18:e2:b0:78:b8: ed:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BB:33:EA:A0:64:0C:22:88:D3:57:4B:28:CC:DA:46:5D:3F:A1:35 X509v3 Authority Key Identifier: keyid:61:0D:31:D4:D6:A8:65:C3:A5:73:2C:77:94:E5:A1:9B:AE:55:E8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:62:ee:7f:ef:3b:0e:ad:83:36:58:d6:bf:33:15:4a:49:9f: 1d:f1:64:1c:37:76:e7:b6:f8:90:40:d1:71:e3:58:c4:89:ad: d3:e1:df:1b:ef:fc:83:ab:a1:90:18:fa:0a:1c:d7:1d:06:5d: 87:91:84:56:c1:17:34:e2:67:33:16:c3:bf:82:c6:21:7f:c7: a2:65:38:fe:87:bc:50:89:f1:ac:c5:5b:aa:4a:fb:80:d1:69: 0d:13:57:37:18:04:7c:68:88:a1:4a:ed:fc:49:e5:0a:22:f1: 5b:31:1f:99:22:78:02:d1:74:f7:a6:c3:8c:f0:c4:04:9f:d7: 98:d4:d1:07:7a:31:3e:3c:1c:ef:f4:b7:72:7e:43:9e:24:53: e2:45:93:09:36:8f:ad:31:84:53:1e:7c:77:5e:5e:3a:0b:e4: fc:da:7e:c9:9d:2a:73:2f:fe:03:ce:bc:02:d4:c1:4b:05:f5: 00:d3:63:e1:7b:9b:6e:f8:f5:c1:3f:17:54:75:7c:25:5a:6c: 45:da:40:d9:0d:8e:5c:b3:02:43:9d:45:7c:28:a3:a5:c8:21: 9c:7a:cb:6d:34:27:f1:3b:96:f8:64:72:11:89:11:c6:e0:29: d1:ad:8d:45:c7:76:eb:c9:c5:b2:ad:4a:a4:e6:38:e8:4c:ba: 8f:aa:68:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkVdATxmUfZT2iEvcAqF56/ibbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjEwRDMxRDRENkE4NjVDM0E1NzMyQzc3OTRFNUExOUJB RTU1RTg4MjAeFw0yNjA3MjQwNDI0NThaFw0yNjA3MjUwNDM3NThaMDMxMTAvBgNV BAMTKDk4QkIzM0VBQTA2NDBDMjI4OEQzNTc0QjI4Q0NEQTQ2NUQzRkExMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24gg4rNsZtHrpxUpcE1n3xndt zAoreFfDHg7tziN3Z+i9XznOO8TZJNd+gLvPiHFPv+O20mUSFzqU4sog4p16OfwL m8fBKMcy5FUvsKm6w2CzwVtCdGzL2BjjwX/ciRhmuKGCcVTB5V0XVLmaG+f2Up6g VoEL0+k2Y7vkm/Dwdrblu3ug+j/I1P6sb+MZBEjArpg53dn9tRBo/gSuCEFGyyZM WpLrKhyIXQAei5OMzJ6Lc1b5+GW01FeXGcP8MZ4BnePaztw1DwqQaf/qKvSkeA2G uEzQNtEMEM2c8zYp80dN4T9f3gTRyl1WeTH/KYCJ1G33bAMQmasY4rB4uO1rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmLsz6qBkDCKI01dLKMzaRl0/oTUwHwYDVR0j BBgwFoAUYQ0x1NaoZcOlcyx3lOWhm65V6IIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI3NGQ3NmItNWIxNi00YWI1LWFiY2YtZTRhODYwN2EyOGIyLzAvNjEwRDMxRDRE NkE4NjVDM0E1NzMyQzc3OTRFNUExOUJBRTU1RTg4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MTBEMzFENEQ2QTg2NUMzQTU3MzJDNzc5NEU1QTE5QkFFNTVF ODgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNjEwRDMxRDRENkE4NjVDM0E1NzMyQzc3OTRFNUEx OUJBRTU1RTg4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRi7n/vOw6tgzZY1r8zFUpJnx3xZBw3due2 +JBA0XHjWMSJrdPh3xvv/IOroZAY+goc1x0GXYeRhFbBFzTiZzMWw7+CxiF/x6Jl OP6HvFCJ8azFW6pK+4DRaQ0TVzcYBHxoiKFK7fxJ5Qoi8VsxH5kieALRdPemw4zw xASf15jU0Qd6MT48HO/0t3J+Q54kU+JFkwk2j60xhFMefHdeXjoL5PzafsmdKnMv /gPOvALUwUsF9QDTY+F7m2749cE/F1R1fCVabEXaQNkNjlyzAkOdRXwoo6XIIZx6 y200J/E7lvhkchGJEcbgKdGtjUXHduvJxbKtSqTmOOhMuo+qaMo= -----END CERTIFICATE-----Generated at Fri Jul 24 10:38:26 2026 by rpki-client