$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft File: D61B761F0598B8998BF802A069F51103270C6CC0.mft (raw, json) Hash identifier: LCdMxu5QcGwz9mJqLsqJrVupSKkDgYJDk017YWF5VIc= Subject key identifier: C0:65:F7:EE:E7:D6:7E:A6:78:57:5B:78:3E:FD:E5:8A:E9:53:19:7E Authority key identifier: D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0 Certificate issuer: /CN=D61B761F0598B8998BF802A069F51103270C6CC0 Certificate serial: 6FDF26F030B64E626C3463E28D2A30C16465C1BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft Manifest number: BB Signing time: Sun 20 Sep 2026 19:41:10 +0000 Manifest this update: Sun 20 Sep 2026 19:36:10 +0000 Manifest next update: Mon 21 Sep 2026 21:26:10 +0000 Files and hashes: 1: D61B761F0598B8998BF802A069F51103270C6CC0.crl (hash: ZVR5Bn0bpZVuOzuoZXTXs0PTAQlCbg+X4uHBvc2cRhA=) 2: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: JV7kYNU81vIjUMbIQ9WaFlRn0Vf3tZeMtDHyZF3sYe4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 21:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:df:26:f0:30:b6:4e:62:6c:34:63:e2:8d:2a:30:c1:64:65:c1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D61B761F0598B8998BF802A069F51103270C6CC0 Validity Not Before: Sep 20 19:36:10 2026 GMT Not After : Sep 21 21:26:10 2026 GMT Subject: CN=C065F7EEE7D67EA678575B783EFDE58AE953197E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:48:86:10:3b:dc:2d:22:c6:f4:ea:87:95: 65:a2:f9:95:44:0f:f1:38:79:83:60:68:a9:e5:90: 6b:21:d4:dc:22:b1:27:23:5f:d6:b3:f8:c9:25:4c: 0e:d6:7b:ee:89:18:39:ca:a8:a3:a5:02:3f:6f:cc: 0d:1c:eb:27:bf:3c:79:f5:be:6a:2f:df:8a:10:d5: c7:89:fc:fa:f9:ee:7a:9b:de:bd:88:98:f0:44:9d: 75:79:b5:ec:55:a5:49:88:9d:ff:65:25:c2:e1:d6: 38:ba:ab:58:6f:72:d7:df:4e:3f:3f:0f:52:90:21: 42:b3:52:12:f6:3d:50:17:90:f4:7d:01:53:40:25: 10:c5:1c:97:41:af:1f:dd:1f:4a:47:a0:57:db:57: d7:3a:b2:94:43:49:4e:36:8a:d2:d5:66:fc:0e:05: 92:3f:8e:de:20:10:0a:8c:64:9a:6e:7a:3c:9a:27: f0:46:ba:10:a8:8c:54:63:0a:37:95:b1:cb:61:de: ed:62:47:90:07:a3:ba:ab:f6:ac:6c:63:11:a6:c0: f0:66:d5:69:c8:b9:f7:37:af:e8:04:ef:dc:23:51: 94:75:29:0c:21:b1:3e:aa:b4:eb:de:ab:50:84:5f: ae:8b:88:5d:e4:f3:06:b5:f6:89:2d:fb:02:0b:5d: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:65:F7:EE:E7:D6:7E:A6:78:57:5B:78:3E:FD:E5:8A:E9:53:19:7E X509v3 Authority Key Identifier: keyid:D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a4:3e:43:e0:60:3f:e9:b0:bf:b3:68:70:4b:46:3c:b4:c1: 32:bc:2e:90:5b:75:07:da:5d:52:25:2f:b2:88:f1:2c:90:98: 86:12:d1:3d:1e:4f:09:6f:7b:eb:ba:36:0d:4f:42:46:9f:39: 19:a4:1e:08:10:b8:1a:ed:35:c6:22:ed:f9:a1:e3:9a:eb:43: 2e:dd:93:eb:2e:32:1f:f2:8e:1e:03:80:4a:e3:5c:a9:6b:91: 24:e4:a6:b3:ee:94:37:ee:1e:0f:5a:b2:1e:8a:9c:ff:76:c6: 0e:ee:2a:4d:57:a5:48:33:d7:9c:68:79:c0:21:1e:46:e0:ea: 33:b8:e4:59:4d:b0:90:e8:59:2b:0c:65:68:99:90:c2:25:5f: 5c:87:98:b5:93:b5:39:08:d2:f6:10:5f:d3:f1:89:6c:16:ad: 7e:1b:49:78:9a:81:3f:45:15:05:fb:78:42:27:9b:62:30:48: 47:8b:22:9d:3b:11:d0:43:39:31:11:79:d5:6e:42:a3:8d:bc: d3:bd:57:06:27:85:64:e4:03:54:40:d5:1a:8f:2e:53:a2:36: ec:22:a5:f2:62:62:01:ab:f9:8d:53:12:03:66:b3:4e:b4:e9: b7:b1:be:8a:05:84:38:a3:48:5c:de:7a:30:5a:da:65:be:e6: 29:d3:37:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb98m8DC2TmJsNGPijSowwWRlwbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxQjc2MUYwNTk4Qjg5OThCRjgwMkEwNjlGNTExMDMy NzBDNkNDMDAeFw0yNjA5MjAxOTM2MTBaFw0yNjA5MjEyMTI2MTBaMDMxMTAvBgNV BAMTKEMwNjVGN0VFRTdENjdFQTY3ODU3NUI3ODNFRkRFNThBRTk1MzE5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClPEiGEDvcLSLG9OqHlWWi+ZVE D/E4eYNgaKnlkGsh1NwisScjX9az+MklTA7We+6JGDnKqKOlAj9vzA0c6ye/PHn1 vmov34oQ1ceJ/Pr57nqb3r2ImPBEnXV5texVpUmInf9lJcLh1ji6q1hvctffTj8/ D1KQIUKzUhL2PVAXkPR9AVNAJRDFHJdBrx/dH0pHoFfbV9c6spRDSU42itLVZvwO BZI/jt4gEAqMZJpuejyaJ/BGuhCojFRjCjeVscth3u1iR5AHo7qr9qxsYxGmwPBm 1WnIufc3r+gE79wjUZR1KQwhsT6qtOveq1CEX66LiF3k8wa19okt+wILXbXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwGX37ufWfqZ4V1t4Pv3liulTGX4wHwYDVR0j BBgwFoAU1ht2HwWYuJmL+AKgafURAycMbMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EyMmI0ZTItMjZmNi00MWU4LTg5MTAtMjA2YmVhNzgzZGI5LzAvRDYxQjc2MUYw NTk4Qjg5OThCRjgwMkEwNjlGNTExMDMyNzBDNkNDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjFCNzYxRjA1OThCODk5OEJGODAyQTA2OUY1MTEwMzI3MEM2 Q0MwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvRDYxQjc2MUYwNTk4Qjg5OThCRjgwMkEwNjlGNTEx MDMyNzBDNkNDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABukPkPgYD/psL+zaHBLRjy0wTK8LpBbdQfa XVIlL7KI8SyQmIYS0T0eTwlve+u6Ng1PQkafORmkHggQuBrtNcYi7fmh45rrQy7d k+suMh/yjh4DgErjXKlrkSTkprPulDfuHg9ash6KnP92xg7uKk1XpUgz15xoecAh Hkbg6jO45FlNsJDoWSsMZWiZkMIlX1yHmLWTtTkI0vYQX9PxiWwWrX4bSXiagT9F FQX7eEInm2IwSEeLIp07EdBDOTERedVuQqONvNO9VwYnhWTkA1RA1RqPLlOiNuwi pfJiYgGr+Y1TEgNms0606bexvooFhDijSFzeejBa2mW+5inTN9A= -----END CERTIFICATE-----Generated at Mon Sep 21 09:21:49 2026 by rpki-client