$ rpki-client -vvvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft File: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft (raw, json) Hash identifier: EE4dtVZLOmylqiTd5UehP5HLnF8aDR2YiAV+Y85WC84= Subject key identifier: 50:B6:22:FF:F9:6A:3C:CD:38:54:B0:BD:B3:9C:89:1E:71:1D:A6:64 Authority key identifier: 5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF Certificate issuer: /CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Certificate serial: 6292BF8B5B56D9793E173756059D68425D99D724 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft Manifest number: BF Signing time: Tue 22 Sep 2026 15:10:07 +0000 Manifest this update: Tue 22 Sep 2026 15:05:07 +0000 Manifest next update: Wed 23 Sep 2026 17:16:07 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: vnC+Tp+yt/9nwnboVLS+akmr5GJGP+dBJLMu3nh/zV0=) 2: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl (hash: iKMX8mu/W7sAcWEaC2D4ZKibTlRnW/Z5yujVWbmRJxA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:92:bf:8b:5b:56:d9:79:3e:17:37:56:05:9d:68:42:5d:99:d7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Validity Not Before: Sep 22 15:05:07 2026 GMT Not After : Sep 23 17:16:07 2026 GMT Subject: CN=50B622FFF96A3CCD3854B0BDB39C891E711DA664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:22:14:9d:7b:3e:dd:ca:90:46:12:14:cc: 4a:8c:d7:39:b8:d8:63:e7:99:9c:b8:6c:d6:6b:a6: 3d:67:4c:96:65:a1:24:09:e4:2c:7b:c6:22:0f:80: f1:1a:4d:41:88:58:24:20:a6:82:63:d1:fe:9e:3f: 05:3e:99:aa:67:27:7d:4e:4b:34:90:8d:78:ae:ae: 5e:b2:65:e9:e6:2c:cb:5d:a1:a0:b8:6f:9a:64:fb: 9c:d3:db:55:ba:99:be:bd:1b:b9:df:70:ed:35:5c: cf:7d:fa:6f:d7:78:f0:93:39:63:7f:3e:65:86:2c: 44:55:10:26:11:95:4a:f5:6a:f5:de:63:59:99:b3: be:be:77:96:45:7c:ba:b3:f8:f3:1c:38:e2:cb:34: b6:67:bb:78:39:dd:54:ac:d4:7a:8c:fb:92:bb:70: 05:8a:f7:17:64:00:15:bb:85:d5:29:9a:c8:b7:fd: 09:a5:7d:13:74:f9:84:3e:00:2e:9d:82:38:98:19: 23:3c:2a:39:58:37:ef:38:6e:1c:dd:41:5e:34:62: 71:80:ad:2c:dd:85:ae:67:38:2e:3a:c7:b3:c2:96: 3d:9d:5b:9e:f8:b0:6f:97:2a:3d:3f:db:be:7e:92: 76:b9:6e:c3:ee:51:c3:e7:b7:dd:ff:0d:ac:ac:bd: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B6:22:FF:F9:6A:3C:CD:38:54:B0:BD:B3:9C:89:1E:71:1D:A6:64 X509v3 Authority Key Identifier: keyid:5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1f:12:54:f8:b0:84:85:46:a7:5a:4f:04:ad:c6:4a:a9:7e: c6:c6:50:81:20:47:03:b2:b6:39:72:fc:e3:6e:24:6b:b5:1d: a7:fe:77:89:17:52:ae:63:c1:a7:cd:2d:17:f7:aa:f8:52:3a: 20:1b:5e:10:1a:5d:6e:9c:e0:a1:94:3a:31:ec:90:a3:68:46: 86:63:60:1c:f4:59:11:eb:ed:09:46:04:b4:f8:08:f8:a7:18: d9:7d:3c:65:86:8a:8a:18:b7:b9:fc:e9:c1:e6:2c:40:c3:13: 96:e9:97:13:a8:7e:2e:95:42:00:95:18:5e:6d:18:1c:b4:91: 07:0d:cc:b4:71:99:0f:0a:49:1e:ec:9a:3a:3e:d7:75:a0:b8: 3d:2b:83:b9:99:dc:28:ff:01:3f:b3:18:e8:03:f9:99:e3:ec: 2d:5e:66:04:49:8a:13:97:b7:28:d1:e6:d4:a0:b8:6e:a7:c1: 2c:6a:3b:6e:c1:25:b6:2f:2b:56:a9:b6:52:34:b0:18:cb:c8: ba:a1:9d:b0:c0:55:26:c5:5a:fd:86:52:78:c6:47:05:ee:fc: f5:f8:0f:90:dc:bf:29:3e:c9:40:e4:0c:44:7e:d9:aa:53:97: 5e:48:fe:5d:61:b2:9e:04:73:99:f6:9e:ba:a3:c3:60:d4:ad: b0:f9:69:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpK/i1tW2Xk+FzdWBZ1oQl2Z1yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVENTlD MDNCQkVCRjAeFw0yNjA5MjIxNTA1MDdaFw0yNjA5MjMxNzE2MDdaMDMxMTAvBgNV BAMTKDUwQjYyMkZGRjk2QTNDQ0QzODU0QjBCREIzOUM4OTFFNzExREE2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7yIUnXs+3cqQRhIUzEqM1zm4 2GPnmZy4bNZrpj1nTJZloSQJ5Cx7xiIPgPEaTUGIWCQgpoJj0f6ePwU+mapnJ31O SzSQjXiurl6yZenmLMtdoaC4b5pk+5zT21W6mb69G7nfcO01XM99+m/XePCTOWN/ PmWGLERVECYRlUr1avXeY1mZs76+d5ZFfLqz+PMcOOLLNLZnu3g53VSs1HqM+5K7 cAWK9xdkABW7hdUpmsi3/QmlfRN0+YQ+AC6dgjiYGSM8KjlYN+84bhzdQV40YnGA rSzdha5nOC46x7PClj2dW574sG+XKj0/275+kna5bsPuUcPnt93/DaysvZkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUULYi//lqPM04VLC9s5yJHnEdpmQwHwYDVR0j BBgwFoAUX2HBClb7Cjja2hflf1hdWcA7vr8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODRkYTQxNWItNWYxNy00NjAyLTliZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1 NkZCMEEzOERBREExN0U1N0Y1ODVENTlDMDNCQkVCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RjYxQzEwQTU2RkIwQTM4REFEQTE3RTU3RjU4NUQ1OUMwM0JC RUJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVE NTlDMDNCQkVCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUfElT4sISFRqdaTwStxkqpfsbGUIEgRwOy tjly/ONuJGu1Haf+d4kXUq5jwafNLRf3qvhSOiAbXhAaXW6c4KGUOjHskKNoRoZj YBz0WRHr7QlGBLT4CPinGNl9PGWGiooYt7n86cHmLEDDE5bplxOofi6VQgCVGF5t GBy0kQcNzLRxmQ8KSR7smjo+13WguD0rg7mZ3Cj/AT+zGOgD+Znj7C1eZgRJihOX tyjR5tSguG6nwSxqO27BJbYvK1aptlI0sBjLyLqhnbDAVSbFWv2GUnjGRwXu/PX4 D5Dcvyk+yUDkDER+2apTl15I/l1hsp4Ec5n2nrqjw2DUrbD5abA= -----END CERTIFICATE-----Generated at Tue Sep 22 19:11:42 2026 by rpki-client