$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft File: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft (raw, json) Hash identifier: at1ZYEGYj8+XEaYKWVmX7LDlbvUwTNmGGuaSJiYBrqw= Subject key identifier: 8B:EE:09:EB:BC:55:B0:AF:DD:02:0D:A5:3C:0D:96:1A:87:8D:BF:CB Authority key identifier: 61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 Certificate issuer: /CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Certificate serial: 58425992CFB2960B05F5CAD08639DF5AE4878B16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft Manifest number: BF Signing time: Tue 22 Sep 2026 00:52:35 +0000 Manifest this update: Tue 22 Sep 2026 00:47:35 +0000 Manifest next update: Wed 23 Sep 2026 04:02:35 +0000 Files and hashes: 1: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: a3QIiaTsy8MOmYYKu9Aftofqk5cR/1nQkqFwNPo3MJU=) 2: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl (hash: Pu/waAs3P5xuTQtZH6Bs9mF8uEAqezdIdDOd6EF4Lhs=) 3: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: LuRIWLyAew0juP41dvh4zIo1vh+0WRov4D4XfQ/6pVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:42:59:92:cf:b2:96:0b:05:f5:ca:d0:86:39:df:5a:e4:87:8b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Validity Not Before: Sep 22 00:47:35 2026 GMT Not After : Sep 23 04:02:35 2026 GMT Subject: CN=8BEE09EBBC55B0AFDD020DA53C0D961A878DBFCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:97:0d:40:90:11:ac:ca:8a:0c:09:3e:9a:a9: 42:5a:5a:f9:bc:60:4d:06:88:b0:a1:74:28:ea:1a: 89:73:e1:82:99:8a:c8:9c:f5:5b:fc:0f:57:91:25: b8:04:e9:0a:0c:41:7a:24:0b:28:4f:08:e1:c2:3d: 17:9d:8d:b5:16:0d:25:14:ed:7c:8a:9f:52:5e:dd: 67:36:4e:55:8d:8b:a4:ac:a3:ac:56:ca:18:e8:6d: 77:f6:b7:0a:37:31:05:34:14:b6:06:d4:69:5d:2a: 92:7e:2f:f2:bb:08:1f:6b:ce:5c:dd:f0:2a:4f:91: 41:06:a5:e1:3b:81:04:d0:de:75:3b:98:35:40:11: 23:32:3c:71:d4:e9:bd:57:2c:52:96:80:74:52:2e: a5:62:b4:1a:56:1a:70:0b:f7:71:bf:8d:d7:12:bd: 22:04:20:df:99:8b:af:81:4b:c9:b2:1b:23:48:0f: 49:e7:fc:41:46:f5:f7:f8:61:48:7d:f2:0a:c1:bc: f2:5f:fb:6c:37:aa:02:0c:6c:28:92:eb:b1:75:ee: 2a:a6:f8:56:68:b6:44:80:2a:6d:51:6b:c8:97:1f: a0:cb:34:ea:07:ed:e5:cf:d0:a7:bc:c0:d0:ce:5c: a2:68:12:3c:ff:79:a2:04:3a:ad:56:07:58:fe:6d: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EE:09:EB:BC:55:B0:AF:DD:02:0D:A5:3C:0D:96:1A:87:8D:BF:CB X509v3 Authority Key Identifier: keyid:61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:cc:fa:4e:62:6e:b3:2c:a5:e5:a8:f4:c2:e4:bc:83:a6:d0: 48:dd:a9:a4:4b:3b:42:8e:5e:8a:68:d7:1d:08:f5:6f:d8:3c: ec:0f:10:8e:dd:7e:7e:e1:55:29:90:1c:07:bb:aa:e0:b2:fd: 91:de:0d:2c:22:be:40:71:66:13:f6:b9:59:34:59:e7:e5:d8: 39:56:54:1c:98:72:1a:07:5e:48:d5:b5:5d:38:30:8e:d5:07: e8:5c:e0:94:c4:5a:4b:6d:76:97:c6:49:23:ad:a8:f8:bc:9f: 59:79:5e:2f:21:86:a6:72:5e:95:c5:54:2f:4f:53:a0:a8:e0: 71:68:b4:2a:d0:a8:5a:3d:0d:d2:25:d4:17:77:f2:58:e5:c1: 2c:ec:1c:60:a6:86:8f:10:ac:80:2c:4b:18:bc:94:10:c2:b0: f4:fb:f9:81:f8:d1:df:e0:05:20:35:9d:75:d3:1b:ef:f9:10: 22:d6:40:10:95:68:69:62:5f:3c:2d:9a:45:99:c1:32:34:65: 7c:cb:6b:a7:f1:6f:30:a3:19:f6:a2:6c:ae:72:9d:af:bb:9c: 33:e1:f9:3e:2f:7e:80:4c:06:1d:33:49:fa:b8:aa:9c:8a:1c: 33:9e:a6:49:f8:17:01:33:12:95:71:ef:74:5b:84:02:7c:ab: 02:5d:08:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEJZks+ylgsF9crQhjnfWuSHixYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3 QUEyOThEMDAeFw0yNjA5MjIwMDQ3MzVaFw0yNjA5MjMwNDAyMzVaMDMxMTAvBgNV BAMTKDhCRUUwOUVCQkM1NUIwQUZERDAyMERBNTNDMEQ5NjFBODc4REJGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlw1AkBGsyooMCT6aqUJaWvm8 YE0GiLChdCjqGolz4YKZisic9Vv8D1eRJbgE6QoMQXokCyhPCOHCPRedjbUWDSUU 7XyKn1Je3Wc2TlWNi6Sso6xWyhjobXf2two3MQU0FLYG1GldKpJ+L/K7CB9rzlzd 8CpPkUEGpeE7gQTQ3nU7mDVAESMyPHHU6b1XLFKWgHRSLqVitBpWGnAL93G/jdcS vSIEIN+Zi6+BS8myGyNID0nn/EFG9ff4YUh98grBvPJf+2w3qgIMbCiS67F17iqm +FZotkSAKm1Ra8iXH6DLNOoH7eXP0Ke8wNDOXKJoEjz/eaIEOq1WB1j+be45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi+4J67xVsK/dAg2lPA2WGoeNv8swHwYDVR0j BBgwFoAUYf/T3DkkntaFDF+URTH0THqimNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMyYzQ5NDgtNjg3Yi00MDIwLTg3ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMz OTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3QUEyOThEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MUZGRDNEQzM5MjQ5RUQ2ODUwQzVGOTQ0NTMxRjQ0QzdBQTI5 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0 NEM3QUEyOThEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMTM+k5ibrMspeWo9MLkvIOm0EjdqaRLO0KO Xopo1x0I9W/YPOwPEI7dfn7hVSmQHAe7quCy/ZHeDSwivkBxZhP2uVk0Wefl2DlW VByYchoHXkjVtV04MI7VB+hc4JTEWkttdpfGSSOtqPi8n1l5Xi8hhqZyXpXFVC9P U6Co4HFotCrQqFo9DdIl1Bd38ljlwSzsHGCmho8QrIAsSxi8lBDCsPT7+YH40d/g BSA1nXXTG+/5ECLWQBCVaGliXzwtmkWZwTI0ZXzLa6fxbzCjGfaibK5yna+7nDPh +T4vfoBMBh0zSfq4qpyKHDOepkn4FwEzEpVx73RbhAJ8qwJdCOA= -----END CERTIFICATE-----Generated at Tue Sep 22 10:12:18 2026 by rpki-client