$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft File: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft (raw, json) Hash identifier: 8xvfTJlLHdQel5vQrhjY7ehIDDOwd7NRfWNCek7xlSQ= Subject key identifier: 90:28:9A:B8:EA:41:46:DD:B7:07:50:24:C2:B3:88:AF:C3:8F:99:23 Authority key identifier: 61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 Certificate issuer: /CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Certificate serial: 44E52B45AE11C6EEC1131B3EDD30A25400AA5D03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:22:34 +0000 Manifest this update: Tue 02 Jun 2026 14:17:34 +0000 Manifest next update: Wed 03 Jun 2026 14:43:34 +0000 Files and hashes: 1: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl (hash: er6jkLC5LhsvlbKK9cjg+4wu3xFj+7ur8pyIOsvDn4A=) 2: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: a3QIiaTsy8MOmYYKu9Aftofqk5cR/1nQkqFwNPo3MJU=) 3: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: LuRIWLyAew0juP41dvh4zIo1vh+0WRov4D4XfQ/6pVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 14:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e5:2b:45:ae:11:c6:ee:c1:13:1b:3e:dd:30:a2:54:00:aa:5d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Validity Not Before: Jun 2 14:17:34 2026 GMT Not After : Jun 3 14:43:34 2026 GMT Subject: CN=90289AB8EA4146DDB7075024C2B388AFC38F9923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:34:7e:0d:57:8b:d1:d1:74:ff:19:90:0b:62: 1f:42:a7:ad:ff:f5:ad:7d:8d:53:37:a8:b7:48:2e: 88:f7:cd:04:56:c3:ea:6b:28:7c:08:bc:6e:71:b8: 9e:cb:09:d8:82:cf:be:cd:d2:46:03:00:d5:0a:84: 98:7a:09:b9:0a:3e:8b:1c:b5:62:c0:7e:d9:47:38: 01:cd:00:58:f4:0b:3c:47:36:ac:f2:ff:86:d9:b3: 46:4d:cb:8f:84:94:ad:2d:cf:81:8a:6c:d9:7d:ca: af:c6:7c:5c:08:a7:4a:88:a5:76:e2:3e:88:77:23: 4d:be:7f:4a:09:75:68:7a:7b:93:86:97:7a:85:55: 0a:ca:9b:bb:a0:e1:22:64:09:b9:e8:ed:0b:78:2c: a0:10:ac:e9:93:bf:83:4a:b6:26:5b:bf:e2:0e:4f: 92:57:b8:76:7a:11:b8:19:05:f9:9e:db:1b:3c:4a: 67:2d:b2:d4:84:90:2a:99:f8:65:d1:85:a9:e7:4d: e0:c0:05:99:22:d3:d2:56:1a:1f:76:c9:5e:24:9a: 60:fa:ee:61:24:82:98:6a:7d:6e:26:fb:e8:7d:54: 27:de:73:55:14:da:55:50:9d:46:78:a0:bc:c6:dc: ea:99:d4:a5:bd:60:d8:f1:c5:86:d0:81:09:a3:da: a0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:28:9A:B8:EA:41:46:DD:B7:07:50:24:C2:B3:88:AF:C3:8F:99:23 X509v3 Authority Key Identifier: keyid:61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:61:c7:9e:21:cb:ee:35:b9:87:3d:48:01:1f:5a:77:67:f7: 73:1b:c4:97:98:f3:d4:87:7c:74:4a:c3:85:b1:7e:c1:78:37: 6b:fc:5d:11:2b:47:6d:d8:e1:1a:08:63:7a:3c:d3:74:ce:6a: df:ba:09:e2:74:19:e1:1b:c5:a3:01:1c:d2:b1:24:12:a5:2c: ac:3d:95:cb:37:66:2c:40:50:fe:bb:6b:c8:70:e0:50:54:ba: 4b:33:c1:8a:df:66:1b:9e:98:c5:f0:54:69:c0:51:9f:55:83: 10:26:29:cc:a7:cc:a5:57:e9:4f:d2:e7:ef:ec:f2:63:94:3c: 18:cc:e1:9d:08:05:c8:5c:bb:25:80:b5:e9:3e:0e:25:6d:da: 09:17:20:22:c3:e7:6e:92:94:75:18:31:8a:17:84:ce:ba:1e: 41:45:53:5c:97:87:00:f5:9f:b7:40:9c:cc:29:49:ae:d8:fc: 4a:03:e1:02:f0:88:95:40:36:dc:9f:86:7f:d6:9a:59:de:50: f3:66:c9:7f:e7:d7:5d:86:ca:dd:06:5f:99:fc:f9:5f:81:df: ef:71:95:d9:d1:10:da:28:bd:46:20:f1:c3:68:a2:bb:a7:ed: 0d:08:b3:14:38:79:56:ae:ed:35:0b:dc:0b:27:78:0c:e4:3e: 91:4e:56:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROUrRa4Rxu7BExs+3TCiVACqXQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3 QUEyOThEMDAeFw0yNjA2MDIxNDE3MzRaFw0yNjA2MDMxNDQzMzRaMDMxMTAvBgNV BAMTKDkwMjg5QUI4RUE0MTQ2RERCNzA3NTAyNEMyQjM4OEFGQzM4Rjk5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkNH4NV4vR0XT/GZALYh9Cp63/ 9a19jVM3qLdILoj3zQRWw+prKHwIvG5xuJ7LCdiCz77N0kYDANUKhJh6CbkKPosc tWLAftlHOAHNAFj0CzxHNqzy/4bZs0ZNy4+ElK0tz4GKbNl9yq/GfFwIp0qIpXbi Poh3I02+f0oJdWh6e5OGl3qFVQrKm7ug4SJkCbno7Qt4LKAQrOmTv4NKtiZbv+IO T5JXuHZ6EbgZBfme2xs8SmctstSEkCqZ+GXRhannTeDABZki09JWGh92yV4kmmD6 7mEkgphqfW4m++h9VCfec1UU2lVQnUZ4oLzG3OqZ1KW9YNjxxYbQgQmj2qCxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkCiauOpBRt23B1AkwrOIr8OPmSMwHwYDVR0j BBgwFoAUYf/T3DkkntaFDF+URTH0THqimNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMyYzQ5NDgtNjg3Yi00MDIwLTg3ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMz OTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3QUEyOThEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MUZGRDNEQzM5MjQ5RUQ2ODUwQzVGOTQ0NTMxRjQ0QzdBQTI5 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0 NEM3QUEyOThEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9hx54hy+41uYc9SAEfWndn93MbxJeY89SH fHRKw4WxfsF4N2v8XRErR23Y4RoIY3o803TOat+6CeJ0GeEbxaMBHNKxJBKlLKw9 lcs3ZixAUP67a8hw4FBUukszwYrfZhuemMXwVGnAUZ9VgxAmKcynzKVX6U/S5+/s 8mOUPBjM4Z0IBchcuyWAtek+DiVt2gkXICLD526SlHUYMYoXhM66HkFFU1yXhwD1 n7dAnMwpSa7Y/EoD4QLwiJVANtyfhn/WmlneUPNmyX/n112Gyt0GX5n8+V+B3+9x ldnRENoovUYg8cNoorun7Q0IsxQ4eVau7TUL3AsneAzkPpFOVjI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:44 2026 by rpki-client