$ rpki-client -vvvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft File: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft (raw, json) Hash identifier: Orj6ud1zUb6Ej9VNdakJWLmTS/RgiTPI/rc/R6mO7Ts= Subject key identifier: 6C:CB:07:A3:5B:07:BD:DC:81:F6:12:22:E8:F1:0A:42:E2:C5:2E:1F Authority key identifier: 5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF Certificate issuer: /CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Certificate serial: 3EAF2AFC4E4F6A28817B97CCCB4741D15205B3A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 01:09:21 +0000 Manifest this update: Wed 04 Nov 2026 01:04:21 +0000 Manifest next update: Thu 05 Nov 2026 04:04:21 +0000 Files and hashes: 1: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl (hash: AP+KSYRbpCOPjcZ71HkE7ObYj7DI3SAeJkcIaEi+u+I=) 2: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: vnC+Tp+yt/9nwnboVLS+akmr5GJGP+dBJLMu3nh/zV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 12:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:af:2a:fc:4e:4f:6a:28:81:7b:97:cc:cb:47:41:d1:52:05:b3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Validity Not Before: Nov 4 01:04:21 2026 GMT Not After : Nov 5 04:04:21 2026 GMT Subject: CN=6CCB07A35B07BDDC81F61222E8F10A42E2C52E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:0e:b4:b2:76:63:4e:6c:b9:e9:57:ec:c4: 03:ae:97:87:c7:56:96:0a:02:fc:d6:67:15:8d:d1: 7c:02:ee:65:01:12:b7:30:4d:62:8a:68:c4:48:e7: 7e:fb:9c:f6:e3:1b:e2:f2:34:f0:9b:93:57:c6:6b: 31:f6:3f:a0:28:c5:8f:12:63:c6:1e:b6:63:36:de: f4:a2:6e:11:ec:f5:0d:b4:aa:30:25:40:67:7f:c3: 22:d8:f8:67:23:2e:af:77:88:1a:88:4e:12:37:9b: 56:a3:74:39:c1:1f:05:92:3a:6d:42:30:1d:d0:d9: 16:c2:af:59:61:0a:b7:8e:11:00:4a:85:c1:d1:24: 18:88:4f:cc:56:b3:fb:76:32:67:6f:7a:f9:4d:42: dd:b4:6f:4d:d3:43:25:00:0d:7e:70:3b:97:10:b0: 65:6e:03:10:69:75:6a:5d:ca:89:79:73:b9:cb:c9: bf:73:7f:d5:35:ed:e5:8a:54:fb:08:0e:65:92:cf: 92:ea:53:fe:17:f9:74:7b:f3:9e:6d:38:80:84:b6: 6a:05:3d:31:3a:64:45:b7:65:25:3f:dd:4e:55:e3: e5:cd:4b:4e:ef:bb:ac:1d:1b:9f:7e:7d:0d:32:cb: a7:66:b2:49:e4:a0:47:38:54:48:e6:e4:be:0b:08: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CB:07:A3:5B:07:BD:DC:81:F6:12:22:E8:F1:0A:42:E2:C5:2E:1F X509v3 Authority Key Identifier: keyid:5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:df:05:4f:8e:82:77:9d:52:ef:6a:28:ad:8c:4e:31:60:82: 9e:69:49:e8:43:00:d7:a7:a8:b1:8d:f8:72:58:3f:5d:26:55: 86:74:ec:b0:42:b5:f0:16:10:76:79:d3:17:3a:00:ea:43:dd: 48:4e:11:f1:19:9b:40:ec:c0:fd:16:cc:fc:b1:b2:b6:46:a7: 41:88:2a:fa:a2:b0:3f:46:22:9e:ce:93:de:84:cf:fb:f2:e6: 70:45:de:2c:c2:73:90:8c:8e:ad:c8:fd:e7:77:f2:3b:70:27: 67:f2:88:64:65:63:0b:6d:68:3e:2e:6b:d8:b2:41:ae:ee:aa: fb:18:1c:e4:ee:ce:65:0b:ff:b9:45:88:32:bc:43:8e:be:8f: 84:49:56:07:fc:1d:7f:7e:e0:0b:c1:e2:12:ff:d4:1f:01:99: e6:34:5b:e0:f7:08:03:3f:39:ed:e3:e6:05:ed:0e:8e:4b:4a: 70:cf:7b:5e:c8:84:34:b8:f9:c0:7b:e7:ac:f2:aa:5b:10:9c: 0b:6e:07:07:a6:e2:17:42:1d:da:a3:ca:fa:e1:d3:e4:45:a2: cf:00:f4:13:8f:af:33:34:ca:67:0e:5d:25:17:22:b4:12:5b: 89:8c:81:a8:77:0b:b9:47:e4:8e:fb:b8:b3:49:54:f3:e1:d6: 6f:2d:c4:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPq8q/E5PaiiBe5fMy0dB0VIFs6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVENTlD MDNCQkVCRjAeFw0yNjExMDQwMTA0MjFaFw0yNjExMDUwNDA0MjFaMDMxMTAvBgNV BAMTKDZDQ0IwN0EzNUIwN0JEREM4MUY2MTIyMkU4RjEwQTQyRTJDNTJFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+Q60snZjTmy56VfsxAOul4fH VpYKAvzWZxWN0XwC7mUBErcwTWKKaMRI5377nPbjG+LyNPCbk1fGazH2P6AoxY8S Y8YetmM23vSibhHs9Q20qjAlQGd/wyLY+GcjLq93iBqIThI3m1ajdDnBHwWSOm1C MB3Q2RbCr1lhCreOEQBKhcHRJBiIT8xWs/t2MmdvevlNQt20b03TQyUADX5wO5cQ sGVuAxBpdWpdyol5c7nLyb9zf9U17eWKVPsIDmWSz5LqU/4X+XR7855tOICEtmoF PTE6ZEW3ZSU/3U5V4+XNS07vu6wdG59+fQ0yy6dmsknkoEc4VEjm5L4LCDbtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMsHo1sHvdyB9hIi6PEKQuLFLh8wHwYDVR0j BBgwFoAUX2HBClb7Cjja2hflf1hdWcA7vr8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODRkYTQxNWItNWYxNy00NjAyLTliZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1 NkZCMEEzOERBREExN0U1N0Y1ODVENTlDMDNCQkVCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RjYxQzEwQTU2RkIwQTM4REFEQTE3RTU3RjU4NUQ1OUMwM0JC RUJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVE NTlDMDNCQkVCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/fBU+OgnedUu9qKK2MTjFggp5pSehDANen qLGN+HJYP10mVYZ07LBCtfAWEHZ50xc6AOpD3UhOEfEZm0DswP0WzPyxsrZGp0GI KvqisD9GIp7Ok96Ez/vy5nBF3izCc5CMjq3I/ed38jtwJ2fyiGRlYwttaD4ua9iy Qa7uqvsYHOTuzmUL/7lFiDK8Q46+j4RJVgf8HX9+4AvB4hL/1B8BmeY0W+D3CAM/ Oe3j5gXtDo5LSnDPe17IhDS4+cB756zyqlsQnAtuBwem4hdCHdqjyvrh0+RFos8A 9BOPrzM0ymcOXSUXIrQSW4mMgah3C7lH5I77uLNJVPPh1m8txDw= -----END CERTIFICATE-----Generated at Wed Nov 4 05:30:44 2026 by rpki-client