$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft File: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft (raw, json) Hash identifier: Ae3kkfqWkB4HyyHnqdkjnH3YVTuPybQKLxpSZN7987s= Subject key identifier: 9E:FC:31:5C:E4:A2:2A:81:36:DC:A3:B8:E3:59:D6:6C:58:3D:4F:BA Authority key identifier: 61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 Certificate issuer: /CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Certificate serial: 348403A1A388AACB74AF433F4C0F0068161E18F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 12:57:32 +0000 Manifest this update: Mon 20 Jul 2026 12:52:32 +0000 Manifest next update: Tue 21 Jul 2026 14:45:32 +0000 Files and hashes: 1: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: LuRIWLyAew0juP41dvh4zIo1vh+0WRov4D4XfQ/6pVs=) 2: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: a3QIiaTsy8MOmYYKu9Aftofqk5cR/1nQkqFwNPo3MJU=) 3: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl (hash: 2g7+ZIsxrQYfYQuOcAPFXYiN7/AWpmUoCetttp+qchY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:84:03:a1:a3:88:aa:cb:74:af:43:3f:4c:0f:00:68:16:1e:18:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Validity Not Before: Jul 20 12:52:32 2026 GMT Not After : Jul 21 14:45:32 2026 GMT Subject: CN=9EFC315CE4A22A8136DCA3B8E359D66C583D4FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b1:0e:26:57:18:2f:f6:7e:fc:76:14:7c:8d: df:af:77:3c:a1:75:7c:ba:47:00:07:60:fc:6e:b7: 62:62:74:8c:f0:b1:e1:c1:2a:d7:bd:82:04:98:b8: 1e:78:92:21:a2:c6:d8:df:50:be:94:51:7f:f7:9a: 8c:20:79:4e:63:e3:36:ed:3a:04:03:5f:4f:e6:5b: 3e:10:5f:91:45:fc:68:e8:ba:3e:44:58:9b:1d:33: 32:3e:bb:f7:c9:b4:8b:ec:d1:2e:97:17:0d:95:14: ae:e5:1e:66:7e:4b:69:85:b8:86:8c:03:2e:2d:d0: 36:19:9a:8b:c5:a3:3c:54:5c:34:fb:68:a0:b5:2d: b0:23:9f:2a:01:45:6c:9c:e6:0e:ff:cb:66:5a:42: 69:21:cf:df:1c:86:11:5f:2a:85:c9:0c:93:8f:e5: f0:ba:94:77:c7:44:1a:1e:28:48:e5:74:1d:bc:bf: 57:b8:c5:af:d1:89:99:0f:3f:bf:26:3a:4d:8f:55: 94:c2:52:d3:af:3f:06:97:bf:aa:5f:ef:5f:6c:6b: f2:8a:a6:de:af:54:46:1d:fb:ed:14:72:81:47:65: 92:31:6a:97:83:6d:c4:7d:46:88:61:f8:4b:eb:bc: 8b:60:1b:44:56:e6:04:0d:6f:3e:94:1d:e3:b5:20: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FC:31:5C:E4:A2:2A:81:36:DC:A3:B8:E3:59:D6:6C:58:3D:4F:BA X509v3 Authority Key Identifier: keyid:61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:58:94:6c:82:4e:48:2e:9e:ab:29:c7:63:fa:20:af:d2:54: 52:c3:d2:51:12:8c:d6:dc:93:9a:a8:97:f2:8d:9b:a6:11:cd: 7d:fb:3f:64:f0:76:47:af:85:9e:4b:94:d7:b3:a1:e7:c0:69: 27:35:eb:ef:7c:e1:72:5a:bd:39:4c:a7:86:b4:46:11:68:15: f8:4b:b8:57:1e:74:91:be:9a:d8:d9:2c:7f:a4:bc:e5:54:38: 64:80:49:7a:34:24:9f:41:aa:1b:60:be:af:d6:1e:f7:35:92: 39:c3:ca:06:cc:2a:28:3a:06:85:ed:4c:a7:82:cc:13:39:67: f5:7b:23:58:b9:11:5f:fd:8e:6f:5f:92:85:cb:dc:2b:39:10: d9:fb:b8:28:a7:d2:f4:b1:5d:9b:2e:be:62:66:ed:cb:a5:7f: 96:d0:3a:0a:c4:f4:04:86:92:bf:67:28:7f:2e:c4:8e:9f:4d: 30:78:bc:d5:e8:50:4b:da:7d:0f:6d:01:f3:72:dc:57:13:f6: 8c:d3:a1:49:7a:f1:95:6d:13:f5:be:85:47:61:ca:da:02:9d: 11:23:3b:19:ea:6e:9c:ce:98:de:4d:04:ce:44:2f:40:cf:15: 1f:95:ee:46:8d:95:55:43:44:6a:90:3b:0c:bb:14:13:c3:1d: f2:95:9f:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIQDoaOIqst0r0M/TA8AaBYeGPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3 QUEyOThEMDAeFw0yNjA3MjAxMjUyMzJaFw0yNjA3MjExNDQ1MzJaMDMxMTAvBgNV BAMTKDlFRkMzMTVDRTRBMjJBODEzNkRDQTNCOEUzNTlENjZDNTgzRDRGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSsQ4mVxgv9n78dhR8jd+vdzyh dXy6RwAHYPxut2JidIzwseHBKte9ggSYuB54kiGixtjfUL6UUX/3mowgeU5j4zbt OgQDX0/mWz4QX5FF/Gjouj5EWJsdMzI+u/fJtIvs0S6XFw2VFK7lHmZ+S2mFuIaM Ay4t0DYZmovFozxUXDT7aKC1LbAjnyoBRWyc5g7/y2ZaQmkhz98chhFfKoXJDJOP 5fC6lHfHRBoeKEjldB28v1e4xa/RiZkPP78mOk2PVZTCUtOvPwaXv6pf719sa/KK pt6vVEYd++0UcoFHZZIxapeDbcR9Rohh+EvrvItgG0RW5gQNbz6UHeO1IFpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnvwxXOSiKoE23KO441nWbFg9T7owHwYDVR0j BBgwFoAUYf/T3DkkntaFDF+URTH0THqimNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMyYzQ5NDgtNjg3Yi00MDIwLTg3ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMz OTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3QUEyOThEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MUZGRDNEQzM5MjQ5RUQ2ODUwQzVGOTQ0NTMxRjQ0QzdBQTI5 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0 NEM3QUEyOThEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1YlGyCTkgunqspx2P6IK/SVFLD0lESjNbc k5qol/KNm6YRzX37P2TwdkevhZ5LlNezoefAaSc16+984XJavTlMp4a0RhFoFfhL uFcedJG+mtjZLH+kvOVUOGSASXo0JJ9Bqhtgvq/WHvc1kjnDygbMKig6BoXtTKeC zBM5Z/V7I1i5EV/9jm9fkoXL3Cs5ENn7uCin0vSxXZsuvmJm7culf5bQOgrE9ASG kr9nKH8uxI6fTTB4vNXoUEvafQ9tAfNy3FcT9ozToUl68ZVtE/W+hUdhytoCnREj OxnqbpzOmN5NBM5EL0DPFR+V7kaNlVVDRGqQOwy7FBPDHfKVnzI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:32 2026 by rpki-client