$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft File: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft (raw, json) Hash identifier: rub1JqkwnWk+Vn8wM1/kwmOJwY/cEWbDxug6g9bLQMw= Subject key identifier: 46:FC:B9:A7:07:5C:85:15:80:7C:D8:2F:84:C6:D0:2C:FB:8F:9F:BD Authority key identifier: 61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 Certificate issuer: /CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Certificate serial: 20A0B8B17602E4121D66CA30605B2D6CD9647CA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 07:13:09 +0000 Manifest this update: Fri 24 Jul 2026 07:08:09 +0000 Manifest next update: Sat 25 Jul 2026 10:02:09 +0000 Files and hashes: 1: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: LuRIWLyAew0juP41dvh4zIo1vh+0WRov4D4XfQ/6pVs=) 2: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: a3QIiaTsy8MOmYYKu9Aftofqk5cR/1nQkqFwNPo3MJU=) 3: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl (hash: N0KBLJjh3eyLOnwONG0Pi2oQM4hFXdBit8LE2PR6NtY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a0:b8:b1:76:02:e4:12:1d:66:ca:30:60:5b:2d:6c:d9:64:7c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Validity Not Before: Jul 24 07:08:09 2026 GMT Not After : Jul 25 10:02:09 2026 GMT Subject: CN=46FCB9A7075C8515807CD82F84C6D02CFB8F9FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:bc:2a:0f:f9:8a:d4:ad:d2:ad:73:a7:a1: 62:03:73:ab:77:6a:7e:7e:f8:af:4d:e2:76:5b:9e: 90:05:ed:93:ef:60:89:72:e9:29:b5:cc:14:ec:83: 77:f3:85:15:83:eb:0d:06:99:67:94:b9:54:7c:58: 7c:19:b1:6e:cb:a6:d6:55:3f:70:07:18:6c:13:a0: c9:ab:a8:c6:46:45:34:9f:0e:d4:4d:be:0f:03:38: 57:2d:4d:95:06:af:fe:46:ec:80:f3:2f:20:48:1f: ef:4e:34:4b:72:ff:49:dd:d7:5c:58:64:76:98:ae: 09:92:be:86:63:6a:89:4d:ba:23:e4:6b:1a:3b:b6: b2:8b:ad:b8:d8:2a:8f:d9:c2:c1:88:8d:fe:e2:63: 97:1d:48:a9:70:82:32:e8:19:ad:ce:dd:b0:ba:7d: 0b:8e:b9:ab:a7:71:b6:86:b2:79:c6:13:a3:6d:fa: 10:11:cb:1b:6b:51:c2:94:0d:bd:2a:0e:3f:35:eb: 45:a1:43:07:f6:c7:8f:ee:8b:f5:35:44:dc:a7:41: fb:db:13:18:62:60:30:08:6d:38:97:5d:44:65:02: 0e:f6:91:0c:c7:a8:54:14:d7:7e:bd:7f:23:de:bb: ea:8d:dd:52:05:85:52:07:b5:4a:96:98:59:94:d2: 9b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FC:B9:A7:07:5C:85:15:80:7C:D8:2F:84:C6:D0:2C:FB:8F:9F:BD X509v3 Authority Key Identifier: keyid:61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5f:c7:c9:cd:90:a4:12:d7:a5:70:53:39:cf:7e:4f:82:5e: 5e:af:fb:77:9a:c4:84:c7:72:6a:13:85:c4:6d:b0:49:4f:35: e3:4c:20:96:bd:ab:5f:1f:1e:4e:c7:bc:1f:e5:08:55:a5:a2: 92:c2:1b:99:90:62:99:a8:c2:e4:bf:e9:2b:56:bb:f5:72:e0: 9d:19:9c:eb:5b:ce:6c:d2:20:1c:67:af:64:6a:d6:06:a0:d0: d8:f7:75:88:8a:1c:21:47:a6:26:65:55:1e:97:c4:29:b0:de: 73:be:cd:15:4c:c9:7c:6d:cd:81:b5:59:d5:6b:fc:5a:ac:b6: 27:2b:77:74:54:ff:c1:4b:de:9c:61:76:ea:59:d0:84:04:9a: 32:e2:e5:ba:5a:b0:a8:a6:f0:82:f2:60:a0:4b:84:b1:18:ff: f1:f0:93:a3:f1:ac:bb:c8:24:ea:a3:f2:75:42:31:75:bb:7b: a4:9c:00:cd:71:7a:1e:c3:46:b4:45:be:ab:05:6d:09:70:d3: c6:87:91:ed:7b:61:a2:61:d7:44:10:dd:72:5a:72:20:c8:44: 29:82:47:20:46:5a:50:50:cb:ca:c1:3a:7f:dc:2b:b6:bc:d0: 01:72:6e:12:07:a0:20:0b:b3:76:23:04:bd:c7:12:15:a7:95: ac:e7:2b:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKC4sXYC5BIdZsowYFstbNlkfKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3 QUEyOThEMDAeFw0yNjA3MjQwNzA4MDlaFw0yNjA3MjUxMDAyMDlaMDMxMTAvBgNV BAMTKDQ2RkNCOUE3MDc1Qzg1MTU4MDdDRDgyRjg0QzZEMDJDRkI4RjlGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu57wqD/mK1K3SrXOnoWIDc6t3 an5++K9N4nZbnpAF7ZPvYIly6Sm1zBTsg3fzhRWD6w0GmWeUuVR8WHwZsW7LptZV P3AHGGwToMmrqMZGRTSfDtRNvg8DOFctTZUGr/5G7IDzLyBIH+9ONEty/0nd11xY ZHaYrgmSvoZjaolNuiPkaxo7trKLrbjYKo/ZwsGIjf7iY5cdSKlwgjLoGa3O3bC6 fQuOuauncbaGsnnGE6Nt+hARyxtrUcKUDb0qDj8160WhQwf2x4/ui/U1RNynQfvb ExhiYDAIbTiXXURlAg72kQzHqFQU1369fyPeu+qN3VIFhVIHtUqWmFmU0psPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURvy5pwdchRWAfNgvhMbQLPuPn70wHwYDVR0j BBgwFoAUYf/T3DkkntaFDF+URTH0THqimNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMyYzQ5NDgtNjg3Yi00MDIwLTg3ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMz OTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3QUEyOThEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MUZGRDNEQzM5MjQ5RUQ2ODUwQzVGOTQ0NTMxRjQ0QzdBQTI5 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0 NEM3QUEyOThEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdfx8nNkKQS16VwUznPfk+CXl6v+3eaxITH cmoThcRtsElPNeNMIJa9q18fHk7HvB/lCFWlopLCG5mQYpmowuS/6StWu/Vy4J0Z nOtbzmzSIBxnr2Rq1gag0Nj3dYiKHCFHpiZlVR6XxCmw3nO+zRVMyXxtzYG1WdVr /Fqsticrd3RU/8FL3pxhdupZ0IQEmjLi5bpasKim8ILyYKBLhLEY//Hwk6PxrLvI JOqj8nVCMXW7e6ScAM1xeh7DRrRFvqsFbQlw08aHke17YaJh10QQ3XJaciDIRCmC RyBGWlBQy8rBOn/cK7a80AFybhIHoCALs3YjBL3HEhWnlaznKwY= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:19 2026 by rpki-client