$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft File: D61B761F0598B8998BF802A069F51103270C6CC0.mft (raw, json) Hash identifier: JYCwKzh/kQmFjwfnOiH2lL05J6lHwh/Aygt1qYc4yt4= Subject key identifier: 48:B5:E0:36:C0:BB:F0:57:7B:EC:A5:CF:77:6E:FE:B3:4F:8B:E9:7F Authority key identifier: D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0 Certificate issuer: /CN=D61B761F0598B8998BF802A069F51103270C6CC0 Certificate serial: 5F06EF7C19F00F9B7B7848D71E0D4651449A2D27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 09:17:09 +0000 Manifest this update: Fri 25 Sep 2026 09:12:09 +0000 Manifest next update: Sat 26 Sep 2026 13:12:09 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: JV7kYNU81vIjUMbIQ9WaFlRn0Vf3tZeMtDHyZF3sYe4=) 2: D61B761F0598B8998BF802A069F51103270C6CC0.crl (hash: w4a8FcqHDgG4I/CgfjUD9nypLMf8EDXXnNU2EUKCsak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 13:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:06:ef:7c:19:f0:0f:9b:7b:78:48:d7:1e:0d:46:51:44:9a:2d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D61B761F0598B8998BF802A069F51103270C6CC0 Validity Not Before: Sep 25 09:12:09 2026 GMT Not After : Sep 26 13:12:09 2026 GMT Subject: CN=48B5E036C0BBF0577BECA5CF776EFEB34F8BE97F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:54:63:e6:8c:91:08:41:a7:d3:10:65:e5: e9:69:33:10:97:57:32:47:97:69:ec:c6:7f:f9:61: 4b:f9:12:72:9a:bb:0c:1f:cc:ff:b2:b2:b7:7b:5a: ab:7a:81:36:90:9d:36:2d:6f:c4:28:c7:b9:df:eb: 97:2f:cd:bb:e7:e9:b9:0c:b3:64:7a:4d:3e:a9:ea: 59:98:99:23:81:55:6a:a6:4d:34:04:78:8d:bb:0c: cd:14:a5:3d:11:58:bb:ef:bc:57:5d:f7:f2:5f:0f: df:42:c4:af:82:0b:4f:30:84:aa:4a:06:5b:d7:72: f3:74:8f:be:40:6c:01:e9:f9:b5:1e:98:3f:46:ee: ba:ae:9d:61:eb:a3:79:05:83:5d:e1:93:ae:4e:3a: 06:b8:7a:70:e3:e4:a4:30:43:8d:78:d4:58:7e:47: f9:c9:10:dc:97:61:d8:fc:9b:0e:58:08:5d:28:b5: 4c:cb:ad:b8:8c:f4:d7:54:c6:7d:ee:ce:84:6e:6e: f0:fc:e5:95:5c:b5:d2:50:b3:7e:76:0c:92:8b:f6: 62:f5:54:1f:67:c5:6e:77:90:33:c2:53:b5:ba:46: 17:9d:1e:60:b9:1a:28:28:e1:49:8e:cb:08:14:0f: 81:1d:83:33:63:63:e6:fa:d1:c7:b3:39:37:17:ee: f4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B5:E0:36:C0:BB:F0:57:7B:EC:A5:CF:77:6E:FE:B3:4F:8B:E9:7F X509v3 Authority Key Identifier: keyid:D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b3:c4:89:b4:03:8e:de:03:cd:d5:64:a2:32:0e:4c:1f:29: 4e:ca:0e:e9:72:c5:4d:fb:a8:5e:58:36:f9:2d:57:b9:72:ed: ee:ad:1a:74:b5:60:4d:af:e4:d8:dc:0c:6d:ce:84:7a:b6:6c: 13:c5:79:84:e2:60:9b:79:c7:15:12:7b:3e:54:ab:6c:d0:75: be:1a:b9:9e:34:71:b9:ec:fb:a7:6b:88:70:1a:9c:39:00:c7: db:be:04:9f:29:65:fc:89:d5:7e:6f:77:b2:90:53:2c:25:02: 5f:63:24:ce:15:46:84:d3:2b:90:80:93:23:c2:4e:6d:09:3c: dd:06:6e:71:57:da:2b:e0:56:fa:e9:7a:b3:07:0b:50:aa:41: e4:4e:82:af:20:85:fd:e3:25:45:39:ca:74:65:ec:79:3b:70: 1a:e5:25:73:61:62:48:7d:bf:22:44:1c:85:87:0b:fb:6b:12: 3a:a8:5e:e9:5b:34:9a:92:7e:6d:50:60:79:9d:f9:d8:ef:0c: 3a:4f:10:13:e1:0e:36:45:ce:d8:f2:3f:7b:20:0f:1e:9f:fa: 8d:26:83:83:eb:e8:03:ae:be:25:6a:db:cd:2a:fb:41:b0:9e: da:fb:04:50:a0:de:d3:f5:33:42:6a:52:b1:e9:6d:14:9b:a8: 8a:07:27:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwbvfBnwD5t7eEjXHg1GUUSaLScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxQjc2MUYwNTk4Qjg5OThCRjgwMkEwNjlGNTExMDMy NzBDNkNDMDAeFw0yNjA5MjUwOTEyMDlaFw0yNjA5MjYxMzEyMDlaMDMxMTAvBgNV BAMTKDQ4QjVFMDM2QzBCQkYwNTc3QkVDQTVDRjc3NkVGRUIzNEY4QkU5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7VRj5oyRCEGn0xBl5elpMxCX VzJHl2nsxn/5YUv5EnKauwwfzP+ysrd7Wqt6gTaQnTYtb8Qox7nf65cvzbvn6bkM s2R6TT6p6lmYmSOBVWqmTTQEeI27DM0UpT0RWLvvvFdd9/JfD99CxK+CC08whKpK BlvXcvN0j75AbAHp+bUemD9G7rqunWHro3kFg13hk65OOga4enDj5KQwQ4141Fh+ R/nJENyXYdj8mw5YCF0otUzLrbiM9NdUxn3uzoRubvD85ZVctdJQs352DJKL9mL1 VB9nxW53kDPCU7W6RhedHmC5Gigo4UmOywgUD4EdgzNjY+b60cezOTcX7vTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSLXgNsC78Fd77KXPd27+s0+L6X8wHwYDVR0j BBgwFoAU1ht2HwWYuJmL+AKgafURAycMbMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EyMmI0ZTItMjZmNi00MWU4LTg5MTAtMjA2YmVhNzgzZGI5LzAvRDYxQjc2MUYw NTk4Qjg5OThCRjgwMkEwNjlGNTExMDMyNzBDNkNDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjFCNzYxRjA1OThCODk5OEJGODAyQTA2OUY1MTEwMzI3MEM2 Q0MwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvRDYxQjc2MUYwNTk4Qjg5OThCRjgwMkEwNjlGNTEx MDMyNzBDNkNDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIizxIm0A47eA83VZKIyDkwfKU7KDulyxU37 qF5YNvktV7ly7e6tGnS1YE2v5NjcDG3OhHq2bBPFeYTiYJt5xxUSez5Uq2zQdb4a uZ40cbns+6driHAanDkAx9u+BJ8pZfyJ1X5vd7KQUywlAl9jJM4VRoTTK5CAkyPC Tm0JPN0GbnFX2ivgVvrperMHC1CqQeROgq8ghf3jJUU5ynRl7Hk7cBrlJXNhYkh9 vyJEHIWHC/trEjqoXulbNJqSfm1QYHmd+djvDDpPEBPhDjZFztjyP3sgDx6f+o0m g4Pr6AOuviVq280q+0Gwntr7BFCg3tP1M0JqUrHpbRSbqIoHJz0= -----END CERTIFICATE-----Generated at Fri Sep 25 14:20:05 2026 by rpki-client