$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft File: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft (raw, json) Hash identifier: pwRp89RpOfjk79BwOnU9+tgx1hEvja9JmdymGGAOYr8= Subject key identifier: 17:F8:72:42:CE:9F:D0:75:EC:9C:54:4D:C9:42:6B:F0:A1:3E:F1:34 Authority key identifier: 61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 Certificate issuer: /CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Certificate serial: 4A1BB3C56AB0753E3F8B3977D14A023431946ECF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:14:38 +0000 Manifest this update: Thu 24 Sep 2026 07:09:38 +0000 Manifest next update: Fri 25 Sep 2026 08:38:38 +0000 Files and hashes: 1: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl (hash: Wg34ejQfCNP94yaJUweT3vRkf10gat36gUUZ7AVHCjI=) 2: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: a3QIiaTsy8MOmYYKu9Aftofqk5cR/1nQkqFwNPo3MJU=) 3: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: LuRIWLyAew0juP41dvh4zIo1vh+0WRov4D4XfQ/6pVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1b:b3:c5:6a:b0:75:3e:3f:8b:39:77:d1:4a:02:34:31:94:6e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Validity Not Before: Sep 24 07:09:38 2026 GMT Not After : Sep 25 08:38:38 2026 GMT Subject: CN=17F87242CE9FD075EC9C544DC9426BF0A13EF134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:94:ac:00:be:e0:59:6d:e2:6c:fe:4c:85: 9d:14:21:32:f6:ce:e2:e1:a0:de:5d:63:d7:c8:45: 88:dd:e4:29:20:ae:1b:46:68:54:38:a6:77:53:66: 45:72:51:ae:0d:1c:66:36:ac:9b:6e:a2:d6:02:4e: 12:59:b2:b6:8b:34:02:28:85:63:59:82:92:b8:c2: 5a:52:95:43:7d:0e:2a:46:a3:55:77:61:89:e1:37: ce:ae:6f:5d:9e:f7:88:16:64:0d:8c:08:09:4a:c8: 25:80:bf:18:10:df:98:eb:7b:17:e6:c8:4e:25:73: 13:b9:ba:81:91:d4:ec:48:d7:7e:b3:20:c4:e8:31: c8:74:de:29:ca:3c:92:09:76:46:ad:69:70:d9:e3: f6:d2:5f:32:47:0d:7e:9f:02:05:9d:26:1b:05:90: 38:b4:ff:00:a0:eb:aa:1a:ae:8f:6b:ae:05:27:f9: c2:ea:82:9f:b1:de:6e:21:d7:9a:d7:d1:36:00:d9: 16:b9:cb:0c:fe:08:bb:95:0a:df:6a:f7:da:15:4b: bf:6f:a1:4c:c8:c5:c1:c4:ed:00:e2:2a:fa:0b:c2: 16:56:e1:ac:5a:09:01:71:0e:76:80:bb:26:68:d1: 05:75:93:1a:69:c8:3d:9c:d1:c6:78:fb:43:a0:0a: 06:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F8:72:42:CE:9F:D0:75:EC:9C:54:4D:C9:42:6B:F0:A1:3E:F1:34 X509v3 Authority Key Identifier: keyid:61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:43:10:04:73:78:5c:0c:47:75:86:91:66:65:16:48:82:92: 78:0c:2b:4b:fb:1f:80:89:a6:b2:c1:de:f8:b7:2d:35:67:94: 85:12:f7:4b:33:15:38:72:be:1f:f7:7a:3c:23:41:01:98:33: d0:dc:ca:10:dc:6d:91:c8:52:87:75:77:ff:c3:eb:9c:91:cb: 38:29:97:4c:0f:0a:a0:d4:ee:61:84:aa:54:69:ef:3a:0e:a2: 74:0e:79:17:5a:20:69:a1:df:2f:18:ce:71:92:a5:c6:78:dc: 01:76:75:9a:4d:e3:44:10:4b:a8:16:14:0b:4f:3f:9e:4a:b6: 66:4c:28:ad:84:cf:7b:10:e6:66:00:71:85:c8:82:e3:50:f3: 18:f2:8f:02:09:ae:4d:80:69:8b:16:d3:a8:1b:9b:36:fb:19: 1e:24:af:f8:dc:89:09:8e:0b:df:87:bc:57:f7:c5:4d:f4:d3: c4:0b:aa:32:72:48:e4:db:df:a0:d4:21:e9:d9:e0:76:3d:e1: 0f:f2:0d:cd:6c:2d:93:af:92:60:c4:51:17:43:d3:a4:8c:b3: 90:3a:de:73:f6:f2:5f:12:0c:41:c4:73:53:27:7e:6f:31:01: 36:2f:93:64:5a:55:44:aa:2d:2d:a1:c9:53:56:67:73:64:2f: 49:f4:a1:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUShuzxWqwdT4/izl30UoCNDGUbs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3 QUEyOThEMDAeFw0yNjA5MjQwNzA5MzhaFw0yNjA5MjUwODM4MzhaMDMxMTAvBgNV BAMTKDE3Rjg3MjQyQ0U5RkQwNzVFQzlDNTQ0REM5NDI2QkYwQTEzRUYxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rJSsAL7gWW3ibP5MhZ0UITL2 zuLhoN5dY9fIRYjd5CkgrhtGaFQ4pndTZkVyUa4NHGY2rJtuotYCThJZsraLNAIo hWNZgpK4wlpSlUN9DipGo1V3YYnhN86ub12e94gWZA2MCAlKyCWAvxgQ35jrexfm yE4lcxO5uoGR1OxI136zIMToMch03inKPJIJdkataXDZ4/bSXzJHDX6fAgWdJhsF kDi0/wCg66oaro9rrgUn+cLqgp+x3m4h15rX0TYA2Ra5ywz+CLuVCt9q99oVS79v oUzIxcHE7QDiKvoLwhZW4axaCQFxDnaAuyZo0QV1kxppyD2c0cZ4+0OgCgbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/hyQs6f0HXsnFRNyUJr8KE+8TQwHwYDVR0j BBgwFoAUYf/T3DkkntaFDF+URTH0THqimNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMyYzQ5NDgtNjg3Yi00MDIwLTg3ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMz OTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3QUEyOThEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MUZGRDNEQzM5MjQ5RUQ2ODUwQzVGOTQ0NTMxRjQ0QzdBQTI5 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0 NEM3QUEyOThEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtDEARzeFwMR3WGkWZlFkiCkngMK0v7H4CJ prLB3vi3LTVnlIUS90szFThyvh/3ejwjQQGYM9DcyhDcbZHIUod1d//D65yRyzgp l0wPCqDU7mGEqlRp7zoOonQOeRdaIGmh3y8YznGSpcZ43AF2dZpN40QQS6gWFAtP P55KtmZMKK2Ez3sQ5mYAcYXIguNQ8xjyjwIJrk2AaYsW06gbmzb7GR4kr/jciQmO C9+HvFf3xU3008QLqjJySOTb36DUIenZ4HY94Q/yDc1sLZOvkmDEURdD06SMs5A6 3nP28l8SDEHEc1Mnfm8xATYvk2RaVUSqLS2hyVNWZ3NkL0n0ocg= -----END CERTIFICATE-----Generated at Thu Sep 24 23:34:24 2026 by rpki-client