$ rpki-client -vvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft File: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft (raw, json) Hash identifier: z+RZ8fC6iq8pNNKoBj1aeA1j6LEjsLCfhwF6ETC/huI= Subject key identifier: 3D:AA:10:72:CB:65:82:F5:01:A9:35:D3:17:BC:07:6C:5D:9C:CF:43 Authority key identifier: 5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF Certificate issuer: /CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Certificate serial: 610994D0D6B3A366C403C54DE5F7E4B9CB3BC623 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 09:54:09 +0000 Manifest this update: Tue 28 Jul 2026 09:49:09 +0000 Manifest next update: Wed 29 Jul 2026 12:39:09 +0000 Files and hashes: 1: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl (hash: xDfN5MlYICiAOtW6B16icuG1F7R4X+w/izXlXBNHEQw=) 2: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: vnC+Tp+yt/9nwnboVLS+akmr5GJGP+dBJLMu3nh/zV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:09:94:d0:d6:b3:a3:66:c4:03:c5:4d:e5:f7:e4:b9:cb:3b:c6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Validity Not Before: Jul 28 09:49:09 2026 GMT Not After : Jul 29 12:39:09 2026 GMT Subject: CN=3DAA1072CB6582F501A935D317BC076C5D9CCF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c1:cb:fc:f6:66:ac:8c:75:ab:72:ca:46:d4: 50:34:df:8d:70:c6:c1:c4:77:a2:9d:96:04:ea:c6: 35:a7:87:97:c2:2b:11:87:2f:b4:5c:b2:c8:dc:ea: 66:38:93:00:19:79:65:8c:ee:2f:f9:d2:bb:99:9d: 55:bf:c7:c1:76:ad:ff:da:72:24:14:e1:33:d6:29: 6b:2a:b6:14:19:38:9e:3f:a6:1f:0b:90:b0:25:92: fc:e2:d0:8f:ab:31:3c:00:8c:c0:bf:54:e8:69:45: c2:7f:01:ae:78:7c:5c:2d:2b:2d:4e:cf:df:42:a5: d9:4d:8e:ec:f7:c3:2d:57:a9:70:0c:c4:c4:55:ad: ce:45:e0:df:71:6f:36:8f:d8:85:b1:4a:83:ff:08: d4:c5:77:6e:e8:06:37:de:ea:d8:ed:b2:71:9e:53: 50:01:71:ff:59:0b:62:c9:62:b6:55:3e:20:e3:fd: 3a:86:0c:0f:66:5e:3f:76:9b:29:7c:a4:a6:a7:d9: 3e:36:2a:6a:97:99:33:e5:fa:27:50:f0:c8:42:e5: f5:f7:7b:c6:5c:06:f9:66:e9:d7:c8:56:fd:fb:54: 19:a6:65:7c:e7:dc:83:b9:ba:f2:d3:28:58:d6:fd: d4:01:ae:d5:dc:19:8f:b2:03:84:5d:c9:94:62:f2: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AA:10:72:CB:65:82:F5:01:A9:35:D3:17:BC:07:6C:5D:9C:CF:43 X509v3 Authority Key Identifier: keyid:5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:da:e8:4b:96:52:57:b3:44:19:cb:13:81:5c:ec:e8:98:69: c3:df:e2:ac:cb:e5:aa:82:3e:90:d2:4a:76:77:b7:e0:6c:11: f6:0b:64:f7:2f:ce:90:d8:ae:fb:6e:ab:60:22:8e:07:ae:79: 8a:cc:ac:bf:96:e2:12:ec:79:0f:f7:04:a0:82:85:6c:ef:3e: 3d:51:e2:0e:5e:9e:ff:1c:41:9d:2a:26:86:e4:36:46:c1:05: 0d:1a:df:86:04:5a:42:c0:78:8b:00:6e:7e:19:67:66:fa:1a: fd:75:e4:38:14:c5:a0:c2:b0:91:b0:01:0c:41:51:b7:82:fa: ab:ae:7b:02:20:0c:4e:63:64:a7:dd:32:68:08:0b:4d:c9:d8: 13:d0:73:5f:8a:e7:f1:40:21:07:06:3c:0e:21:32:fb:a8:6f: 74:26:9b:d6:69:45:9f:fb:99:15:69:c0:73:7a:e7:7b:8a:42: a8:7d:01:7a:79:4f:96:ff:a2:e5:57:68:01:2a:fc:3e:26:6e: de:79:06:91:44:2a:3e:b0:40:be:e2:4f:14:c3:48:39:02:72: 84:af:f5:67:f0:7b:7b:8e:11:04:a2:c9:0b:84:99:9f:49:01: 9c:82:7e:f7:da:cc:c9:65:9c:e1:a2:b5:07:d7:89:da:3a:4f: 48:a5:2b:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQmU0Nazo2bEA8VN5ffkucs7xiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVENTlD MDNCQkVCRjAeFw0yNjA3MjgwOTQ5MDlaFw0yNjA3MjkxMjM5MDlaMDMxMTAvBgNV BAMTKDNEQUExMDcyQ0I2NTgyRjUwMUE5MzVEMzE3QkMwNzZDNUQ5Q0NGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQwcv89masjHWrcspG1FA0341w xsHEd6KdlgTqxjWnh5fCKxGHL7Rcssjc6mY4kwAZeWWM7i/50ruZnVW/x8F2rf/a ciQU4TPWKWsqthQZOJ4/ph8LkLAlkvzi0I+rMTwAjMC/VOhpRcJ/Aa54fFwtKy1O z99CpdlNjuz3wy1XqXAMxMRVrc5F4N9xbzaP2IWxSoP/CNTFd27oBjfe6tjtsnGe U1ABcf9ZC2LJYrZVPiDj/TqGDA9mXj92myl8pKan2T42KmqXmTPl+idQ8MhC5fX3 e8ZcBvlm6dfIVv37VBmmZXzn3IO5uvLTKFjW/dQBrtXcGY+yA4RdyZRi8hrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPaoQcstlgvUBqTXTF7wHbF2cz0MwHwYDVR0j BBgwFoAUX2HBClb7Cjja2hflf1hdWcA7vr8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODRkYTQxNWItNWYxNy00NjAyLTliZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1 NkZCMEEzOERBREExN0U1N0Y1ODVENTlDMDNCQkVCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RjYxQzEwQTU2RkIwQTM4REFEQTE3RTU3RjU4NUQ1OUMwM0JC RUJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVE NTlDMDNCQkVCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHa6EuWUlezRBnLE4Fc7OiYacPf4qzL5aqC PpDSSnZ3t+BsEfYLZPcvzpDYrvtuq2AijgeueYrMrL+W4hLseQ/3BKCChWzvPj1R 4g5env8cQZ0qJobkNkbBBQ0a34YEWkLAeIsAbn4ZZ2b6Gv115DgUxaDCsJGwAQxB UbeC+quuewIgDE5jZKfdMmgIC03J2BPQc1+K5/FAIQcGPA4hMvuob3Qmm9ZpRZ/7 mRVpwHN653uKQqh9AXp5T5b/ouVXaAEq/D4mbt55BpFEKj6wQL7iTxTDSDkCcoSv 9Wfwe3uOEQSiyQuEmZ9JAZyCfvfazMllnOGitQfXido6T0ilK0U= -----END CERTIFICATE-----Generated at Tue Jul 28 20:40:00 2026 by rpki-client