
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft
File: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft (raw, json)
Hash identifier: psvQj7gk1EJ+sxwF1yhrCmiX5syntSVhzEtBZPC7SkU=
Subject key identifier: 14:44:0A:13:3B:DB:5D:AE:BF:DA:66:DB:52:6B:F9:11:F7:D0:C2:5A
Authority key identifier: 61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0
Certificate issuer: /CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0
Certificate serial: 5E1565E93703C1DAA5D66C73CBD94EAC92D97F03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 00:23:26 +0000
Manifest this update: Wed 17 Jun 2026 00:18:26 +0000
Manifest next update: Thu 18 Jun 2026 01:28:26 +0000
Files and hashes: 1: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: a3QIiaTsy8MOmYYKu9Aftofqk5cR/1nQkqFwNPo3MJU=)
2: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: LuRIWLyAew0juP41dvh4zIo1vh+0WRov4D4XfQ/6pVs=)
3: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl (hash: G5DReUJ3Nwo56UHA6LZt3ySUUhal5NSgavLdpNegmTg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl
rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:15:65:e9:37:03:c1:da:a5:d6:6c:73:cb:d9:4e:ac:92:d9:7f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0
Validity
Not Before: Jun 17 00:18:26 2026 GMT
Not After : Jun 18 01:28:26 2026 GMT
Subject: CN=14440A133BDB5DAEBFDA66DB526BF911F7D0C25A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:26:67:37:09:7e:1b:ec:c6:de:12:d7:4d:
57:ca:15:8f:0f:02:8c:41:df:06:12:22:71:4e:95:
16:de:f3:64:ea:c7:bf:c1:57:ae:e0:16:96:ec:a8:
bc:40:f0:eb:5c:df:7e:5b:b0:63:5a:23:3d:24:61:
5d:be:76:86:57:1a:3d:dc:36:fb:3b:0a:51:74:2d:
b0:69:1c:40:20:3f:a7:8d:ae:77:02:d6:a4:64:75:
46:a6:39:9c:84:80:9e:ec:97:8c:c8:e4:44:8f:57:
a2:c1:37:32:29:7f:bf:6c:54:5d:99:6d:d9:1d:65:
ef:1d:a2:50:b6:7e:b7:d7:ea:99:9e:30:69:a9:89:
2c:eb:6c:86:92:a9:42:1c:c0:22:bc:1d:23:aa:e9:
ee:64:a3:1d:e9:8e:af:70:84:ed:84:6d:78:6b:d7:
ab:2b:2e:8d:11:35:ac:df:85:a0:f6:c7:12:27:f9:
e1:af:83:82:dc:5a:dd:6b:64:06:09:8f:83:fc:71:
49:db:9f:e6:0f:0b:67:1b:be:1d:70:74:1b:5d:75:
9a:2a:5a:ab:a6:aa:13:22:c9:a5:b1:53:4b:ad:68:
0d:af:a9:b6:95:68:9c:0c:05:f6:81:bd:eb:d7:33:
82:5c:fc:18:34:bb:38:d0:2d:7a:98:24:c0:c9:9e:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:0A:13:3B:DB:5D:AE:BF:DA:66:DB:52:6B:F9:11:F7:D0:C2:5A
X509v3 Authority Key Identifier:
keyid:61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ca:86:cc:23:8e:48:5c:3d:77:2f:7f:2b:65:b6:87:41:c2:
d3:55:9f:77:21:b6:b2:1d:aa:d2:72:f3:2a:43:75:77:cd:1f:
e7:8b:31:02:e0:14:23:89:02:54:d2:f5:cf:16:4a:17:e3:c9:
df:d8:04:20:32:77:6f:e3:98:89:e1:1a:aa:04:9d:c5:4f:b5:
2a:71:44:75:66:a8:f6:a6:88:7e:f7:0c:fb:21:02:2a:78:c0:
42:ac:13:4e:f1:f6:18:56:97:52:bf:30:5b:c5:74:1c:45:3c:
ab:a2:1b:96:30:89:70:2c:d0:26:d1:eb:2a:95:97:ed:aa:84:
56:a9:42:a3:85:53:63:10:d3:2e:fc:b5:e5:97:28:03:9b:c5:
f4:1f:a5:d2:95:f7:e3:b8:25:e5:46:3f:6d:db:5a:26:0e:95:
f3:22:3f:f5:e6:c9:a9:b5:b7:ee:0f:65:fa:30:1a:3e:03:e6:
e1:8a:7e:66:3f:b4:f9:91:2d:03:a8:66:ec:3f:50:9a:c9:bb:
19:7b:ef:40:91:29:5b:38:6b:af:85:fd:74:d8:16:98:39:f5:
e4:99:92:77:42:a5:9f:57:a0:58:fe:8b:13:8f:d1:73:5c:cb:
68:f2:79:a4:b4:ab:ee:67:73:65:a5:a9:08:d7:c3:9a:5b:2b:
92:a3:24:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:25 2026 by rpki-client