$ rpki-client -vvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft File: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft (raw, json) Hash identifier: oidYsbYG7Hh6AnsQjjWQBODLf/BT1BLAhcc8vyMd5IA= Subject key identifier: B6:A4:02:8F:B2:65:EB:F1:DC:B1:C1:53:C3:45:EF:80:60:5B:59:F3 Authority key identifier: 5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF Certificate issuer: /CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Certificate serial: 4618082D1DAF2753F74599051697A518F1C56DF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 11:23:18 +0000 Manifest this update: Sat 13 Jun 2026 11:18:18 +0000 Manifest next update: Sun 14 Jun 2026 12:19:18 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: vnC+Tp+yt/9nwnboVLS+akmr5GJGP+dBJLMu3nh/zV0=) 2: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl (hash: XqaH2xwA/1YkQwaDKuykQ9rlBilXbqg4uW7uW2mqdNs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:18:08:2d:1d:af:27:53:f7:45:99:05:16:97:a5:18:f1:c5:6d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Validity Not Before: Jun 13 11:18:18 2026 GMT Not After : Jun 14 12:19:18 2026 GMT Subject: CN=B6A4028FB265EBF1DCB1C153C345EF80605B59F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:62:31:ad:82:cf:5d:1d:6d:e9:74:c7:c6:08: af:20:55:2e:c7:27:cf:db:ba:14:e1:f3:5e:6e:67: 42:d5:c9:88:1c:b2:de:9f:7b:51:41:8f:05:49:fa: 37:42:e7:20:72:00:f0:b1:79:b4:e4:11:ca:3f:9e: ac:50:3a:aa:6e:5f:c0:0d:2b:89:bb:7d:c2:b7:e6: 38:3f:7a:8f:a8:fd:77:f3:5e:66:9c:cb:85:f7:72: 6f:09:61:9d:f5:3c:28:f6:2b:dd:2a:32:ce:e4:8c: b5:34:32:26:25:92:6d:a8:21:45:a2:f9:4b:8b:73: 98:f0:df:af:c8:6e:09:86:00:ec:57:72:3f:7a:eb: c7:36:4a:84:00:62:2e:07:b4:b3:c5:6e:ba:14:06: 0c:66:1f:29:8a:c8:43:83:d0:e2:62:32:f0:f4:bb: bc:07:66:73:e8:f7:16:e4:b2:5f:17:16:a2:62:00: e5:00:d8:f7:44:41:14:90:1c:f0:eb:78:dc:ea:f2: 19:23:f6:ce:fb:c0:31:85:ed:b2:9e:e9:89:4d:ac: d5:6e:d3:27:64:85:be:1e:8c:b6:a5:6e:2a:d5:db: e3:04:c6:aa:9f:03:e5:f8:da:82:be:fa:5a:db:76: 0b:98:c2:66:2c:ca:b5:c9:62:9f:50:49:c0:35:f3: 04:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A4:02:8F:B2:65:EB:F1:DC:B1:C1:53:C3:45:EF:80:60:5B:59:F3 X509v3 Authority Key Identifier: keyid:5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:de:3e:3a:38:a3:47:f7:c5:a8:3d:75:cd:1f:52:26:80:d9: e4:a3:40:72:23:f8:86:86:33:f0:e4:ce:5d:72:3a:e3:0c:86: 18:19:a9:46:8a:1a:bf:51:8f:52:ff:cf:ec:15:24:27:dd:2a: ea:95:ed:ce:5f:43:3a:28:89:86:3d:8f:b4:bc:be:90:7a:1a: 31:0e:37:69:c8:78:ee:46:09:c6:05:04:4b:31:a6:0f:cf:1d: 2d:65:ca:93:29:e6:b5:5a:9d:c5:6f:9d:a5:24:31:0b:01:30: 45:74:03:96:77:53:4a:39:42:b3:cc:80:a4:04:91:d8:0b:f7: 82:c3:9d:29:87:75:da:6e:90:58:e5:e5:6c:76:be:44:49:a9: b3:83:22:e8:f7:f9:1d:70:d4:c7:15:e9:25:17:08:5e:68:3f: ea:8a:e7:b5:33:31:ac:1d:22:d0:b9:c7:c1:e9:46:6b:18:96: c7:71:cb:33:a8:98:9b:b1:46:33:59:36:bf:98:6e:f5:51:b8: bd:aa:d9:63:99:00:4a:c6:89:73:9d:1a:1c:76:88:79:22:58: 20:50:96:1a:7c:01:63:2a:c9:f5:a7:9d:69:18:37:c0:01:09: 85:c9:a6:0e:7b:6f:6d:a2:f8:4f:38:45:3a:2d:de:66:59:41: 13:97:fe:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhgILR2vJ1P3RZkFFpelGPHFbfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVENTlD MDNCQkVCRjAeFw0yNjA2MTMxMTE4MThaFw0yNjA2MTQxMjE5MThaMDMxMTAvBgNV BAMTKEI2QTQwMjhGQjI2NUVCRjFEQ0IxQzE1M0MzNDVFRjgwNjA1QjU5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYYjGtgs9dHW3pdMfGCK8gVS7H J8/buhTh815uZ0LVyYgcst6fe1FBjwVJ+jdC5yByAPCxebTkEco/nqxQOqpuX8AN K4m7fcK35jg/eo+o/XfzXmacy4X3cm8JYZ31PCj2K90qMs7kjLU0MiYlkm2oIUWi +UuLc5jw36/IbgmGAOxXcj9668c2SoQAYi4HtLPFbroUBgxmHymKyEOD0OJiMvD0 u7wHZnPo9xbksl8XFqJiAOUA2PdEQRSQHPDreNzq8hkj9s77wDGF7bKe6YlNrNVu 0ydkhb4ejLalbirV2+MExqqfA+X42oK++lrbdguYwmYsyrXJYp9QScA18wQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtqQCj7Jl6/HcscFTw0XvgGBbWfMwHwYDVR0j BBgwFoAUX2HBClb7Cjja2hflf1hdWcA7vr8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODRkYTQxNWItNWYxNy00NjAyLTliZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1 NkZCMEEzOERBREExN0U1N0Y1ODVENTlDMDNCQkVCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RjYxQzEwQTU2RkIwQTM4REFEQTE3RTU3RjU4NUQ1OUMwM0JC RUJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVE NTlDMDNCQkVCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrePjo4o0f3xag9dc0fUiaA2eSjQHIj+IaG M/Dkzl1yOuMMhhgZqUaKGr9Rj1L/z+wVJCfdKuqV7c5fQzooiYY9j7S8vpB6GjEO N2nIeO5GCcYFBEsxpg/PHS1lypMp5rVancVvnaUkMQsBMEV0A5Z3U0o5QrPMgKQE kdgL94LDnSmHddpukFjl5Wx2vkRJqbODIuj3+R1w1McV6SUXCF5oP+qK57UzMawd ItC5x8HpRmsYlsdxyzOomJuxRjNZNr+YbvVRuL2q2WOZAErGiXOdGhx2iHkiWCBQ lhp8AWMqyfWnnWkYN8ABCYXJpg57b22i+E84RTot3mZZQROX/qc= -----END CERTIFICATE-----Generated at Sat Jun 13 14:05:45 2026 by rpki-client