$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft File: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft (raw, json) Hash identifier: 5ZfnQrKTo3L1QyfJf62IXorYQv44MRNkDno4hqaTj0s= Subject key identifier: 16:D7:85:11:BB:CD:EC:0A:7D:C8:FC:C4:8C:F6:0D:BF:9D:EE:0B:F4 Authority key identifier: 61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 Certificate issuer: /CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Certificate serial: 0BE34AE537CCD2E95F6A0D6CB20543AE88E3BF99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:03:01 +0000 Manifest this update: Tue 12 May 2026 17:58:01 +0000 Manifest next update: Wed 13 May 2026 20:56:01 +0000 Files and hashes: 1: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: a3QIiaTsy8MOmYYKu9Aftofqk5cR/1nQkqFwNPo3MJU=) 2: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl (hash: j1Ph2ks2YWcoJoHNVpZA1BdrCX9S+vzPApaz+KlY9Cs=) 3: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: LuRIWLyAew0juP41dvh4zIo1vh+0WRov4D4XfQ/6pVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e3:4a:e5:37:cc:d2:e9:5f:6a:0d:6c:b2:05:43:ae:88:e3:bf:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Validity Not Before: May 12 17:58:01 2026 GMT Not After : May 13 20:56:01 2026 GMT Subject: CN=16D78511BBCDEC0A7DC8FCC48CF60DBF9DEE0BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:e3:93:86:7c:3f:f6:9c:c2:13:35:64:d0: 30:b7:ac:49:c0:45:5a:b2:3e:61:bd:78:11:16:c8: cc:71:c2:7b:cd:d7:6e:27:e2:84:3a:d7:ed:6f:1e: 5c:ba:d4:cb:13:ac:30:95:26:1a:be:3a:34:c0:64: 30:15:29:68:b9:a5:be:82:c9:89:c5:d3:86:7e:42: 0c:22:ef:d9:83:ed:db:c1:1f:f5:59:16:70:27:06: 38:63:9c:ed:f7:43:0a:04:83:5b:ed:55:e3:14:34: 6a:b8:01:fa:87:1b:08:3d:6c:df:f1:f3:99:0f:15: b3:cb:e1:e5:68:03:c3:69:e7:c4:61:31:5a:8c:0b: 66:48:26:eb:72:ad:cf:eb:9f:cc:17:84:53:4d:9e: cb:1c:27:a6:a1:97:69:51:81:4a:8c:2b:a1:fc:f1: 7b:a1:4e:22:4f:9b:a5:a1:ca:ec:6f:6f:4f:bf:a6: 78:6e:55:45:21:b2:d5:96:30:ee:8c:26:56:51:9b: 0f:aa:2a:f4:85:f1:cb:3d:23:43:70:ce:aa:26:21: 17:d4:2c:c3:50:aa:ec:42:d7:bd:26:c9:2c:da:65: 02:76:8c:00:d5:81:e7:2a:b4:3f:c2:2e:0d:35:ff: 0b:9d:3b:96:b6:50:5e:d6:eb:99:fe:a4:c6:c7:34: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D7:85:11:BB:CD:EC:0A:7D:C8:FC:C4:8C:F6:0D:BF:9D:EE:0B:F4 X509v3 Authority Key Identifier: keyid:61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:11:8f:0e:5f:b0:e5:4b:7e:97:ad:a8:36:95:be:62:18:d6: 75:e3:68:41:ba:a3:b4:d1:6d:8d:c2:51:92:0a:11:53:85:f7: 86:df:aa:81:72:4c:04:67:2b:de:e2:99:12:49:3f:b2:19:44: 5a:ee:77:d5:dd:ea:cd:0b:af:07:eb:a8:54:ae:1d:96:6e:0c: 54:a1:a4:56:2d:7c:b0:6b:30:a4:a9:08:ed:f2:5b:a8:46:b8: 29:bf:5f:29:5e:d5:06:0e:65:90:aa:8e:9f:fe:f1:31:66:8f: a2:29:e7:90:3e:8b:f2:d2:a4:7b:ce:d0:de:95:77:6a:3e:04: 63:97:83:46:5a:16:1c:77:6b:e9:ba:34:f5:ea:ba:ce:4b:fd: 48:f6:6f:6c:b3:a5:0d:8d:5c:ae:a1:24:bd:e0:c7:db:ff:34: 15:4e:7e:3e:7f:7f:b4:31:00:26:51:49:40:34:52:96:cb:e7: e7:3d:70:e1:31:cd:f4:07:55:60:4c:38:6b:0a:b2:48:ea:be: 37:bb:a6:44:29:cc:4c:d3:04:e2:3f:0a:59:ce:a4:34:ca:b0: b7:84:48:1f:ff:bf:af:0b:a4:dc:79:07:65:7e:20:32:be:6f: 75:68:34:45:0f:d3:38:87:f2:00:bf:69:99:42:c1:3f:b5:97: b9:52:ae:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+NK5TfM0ulfag1ssgVDrojjv5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3 QUEyOThEMDAeFw0yNjA1MTIxNzU4MDFaFw0yNjA1MTMyMDU2MDFaMDMxMTAvBgNV BAMTKDE2RDc4NTExQkJDREVDMEE3REM4RkNDNDhDRjYwREJGOURFRTBCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0H+OThnw/9pzCEzVk0DC3rEnA RVqyPmG9eBEWyMxxwnvN124n4oQ61+1vHly61MsTrDCVJhq+OjTAZDAVKWi5pb6C yYnF04Z+Qgwi79mD7dvBH/VZFnAnBjhjnO33QwoEg1vtVeMUNGq4AfqHGwg9bN/x 85kPFbPL4eVoA8Np58RhMVqMC2ZIJutyrc/rn8wXhFNNnsscJ6ahl2lRgUqMK6H8 8XuhTiJPm6Whyuxvb0+/pnhuVUUhstWWMO6MJlZRmw+qKvSF8cs9I0NwzqomIRfU LMNQquxC170mySzaZQJ2jADVgecqtD/CLg01/wudO5a2UF7W65n+pMbHNBTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFteFEbvN7Ap9yPzEjPYNv53uC/QwHwYDVR0j BBgwFoAUYf/T3DkkntaFDF+URTH0THqimNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMyYzQ5NDgtNjg3Yi00MDIwLTg3ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMz OTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3QUEyOThEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MUZGRDNEQzM5MjQ5RUQ2ODUwQzVGOTQ0NTMxRjQ0QzdBQTI5 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0 NEM3QUEyOThEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACARjw5fsOVLfpetqDaVvmIY1nXjaEG6o7TR bY3CUZIKEVOF94bfqoFyTARnK97imRJJP7IZRFrud9Xd6s0LrwfrqFSuHZZuDFSh pFYtfLBrMKSpCO3yW6hGuCm/Xyle1QYOZZCqjp/+8TFmj6Ip55A+i/LSpHvO0N6V d2o+BGOXg0ZaFhx3a+m6NPXqus5L/Uj2b2yzpQ2NXK6hJL3gx9v/NBVOfj5/f7Qx ACZRSUA0UpbL5+c9cOExzfQHVWBMOGsKskjqvje7pkQpzEzTBOI/ClnOpDTKsLeE SB//v68LpNx5B2V+IDK+b3VoNEUP0ziH8gC/aZlCwT+1l7lSrtM= -----END CERTIFICATE-----Generated at Wed May 13 02:40:40 2026 by rpki-client