$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft File: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft (raw, json) Hash identifier: Tl+duAGFIav8lmBmEceddXvLgzjzKj5EmtBO6t2gukg= Subject key identifier: CB:60:2F:62:D5:AA:DD:1C:F0:E2:EE:5D:90:DA:55:0B:B7:EA:F9:7C Authority key identifier: 61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 Certificate issuer: /CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Certificate serial: 21633B43DD4319CE807077C8418D5F6027FFF7AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft Manifest number: A7 Signing time: Fri 04 Sep 2026 00:12:03 +0000 Manifest this update: Fri 04 Sep 2026 00:07:03 +0000 Manifest next update: Sat 05 Sep 2026 02:19:03 +0000 Files and hashes: 1: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl (hash: NWEbM+7a0qxRGf1v6oK5eCBabxuzDnwIXYtA4Oqz56M=) 2: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: a3QIiaTsy8MOmYYKu9Aftofqk5cR/1nQkqFwNPo3MJU=) 3: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: LuRIWLyAew0juP41dvh4zIo1vh+0WRov4D4XfQ/6pVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 02:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:63:3b:43:dd:43:19:ce:80:70:77:c8:41:8d:5f:60:27:ff:f7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Validity Not Before: Sep 4 00:07:03 2026 GMT Not After : Sep 5 02:19:03 2026 GMT Subject: CN=CB602F62D5AADD1CF0E2EE5D90DA550BB7EAF97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1c:cf:99:03:6c:ea:cd:41:39:54:8d:8d:16: 4e:2d:2f:7c:79:91:97:68:52:7b:e2:9f:5e:16:26: 40:78:6a:d4:ef:73:88:ab:40:7f:b6:f4:b0:f2:1c: 23:20:7b:cc:9d:83:fd:5f:46:98:9b:d6:e1:2c:71: 33:ec:8e:6e:1b:63:18:ca:1b:b8:1e:c5:2b:ef:a3: 47:fc:26:eb:e6:18:78:77:70:62:44:09:60:6a:d1: 52:5c:0b:34:be:5d:e8:91:f8:f8:98:de:1c:5b:83: 6a:8d:c2:9f:e9:6c:29:73:91:c2:19:c3:08:27:19: 15:25:80:0d:bd:86:00:a4:34:06:74:72:ab:25:20: 1b:8c:df:2f:fe:57:c4:b2:0d:27:a5:a1:d0:8f:d5: 4a:6d:7e:a8:e2:0a:3b:57:d4:13:18:32:d7:78:05: ab:a3:73:48:8f:c8:f8:13:ae:c7:d3:06:6e:23:5d: 58:d4:b5:92:c0:c2:12:8f:6d:30:f4:63:db:9c:19: 86:b5:c7:c5:5a:89:bc:bf:9f:78:78:ff:a3:3f:be: f1:ab:65:0a:29:1b:de:60:2e:9f:96:d6:4d:92:ab: 85:e4:3c:f7:9b:a6:0d:64:2a:32:5c:b8:ba:fc:de: d5:c8:6c:fd:94:12:6b:ad:ee:62:46:99:00:ac:08: c6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:60:2F:62:D5:AA:DD:1C:F0:E2:EE:5D:90:DA:55:0B:B7:EA:F9:7C X509v3 Authority Key Identifier: keyid:61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fe:6e:1b:ad:e5:a6:d6:d2:5f:8d:1e:54:c5:bd:e7:b2:88: 7b:96:c6:e6:2c:e3:a3:d5:45:95:cd:47:1b:da:33:b7:1e:fd: 0f:f5:0f:da:3d:c8:d8:e8:dc:b1:f5:e8:05:6b:62:f2:27:21: e3:1f:5a:56:4c:e4:91:96:4a:48:56:24:77:80:2d:cc:7d:77: 46:4e:51:86:11:9b:70:59:b1:a9:83:2f:5d:a1:3c:57:d5:d0: 2a:28:bb:ce:06:11:5a:5d:ec:68:e2:77:34:70:8f:d8:b7:b8: 71:bc:96:19:db:83:3c:8b:ee:e5:da:3d:14:63:a4:ba:bd:34: fa:ed:64:4c:7b:c2:b4:f4:c3:aa:25:b5:83:65:2c:a6:7e:3c: 5e:6e:23:c0:da:30:b9:48:cd:63:cb:91:ca:46:63:c4:4e:75: bf:23:ff:93:c6:70:ed:22:4e:c3:2e:dc:f6:dc:b6:9d:7c:99: a2:a6:94:a8:34:f5:f7:f7:66:e1:8b:ad:bb:de:f8:b0:19:d7: 48:38:10:86:ce:92:8f:d3:97:e2:31:c6:9e:7e:45:91:ed:d7: 82:3c:f3:f8:cc:50:8f:59:96:ab:ca:ac:1f:45:ea:56:39:32: 6e:49:07:52:47:a6:ce:b4:d8:a3:de:d3:2d:2a:2a:e2:c7:f1: 1d:96:25:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWM7Q91DGc6AcHfIQY1fYCf/960wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3 QUEyOThEMDAeFw0yNjA5MDQwMDA3MDNaFw0yNjA5MDUwMjE5MDNaMDMxMTAvBgNV BAMTKENCNjAyRjYyRDVBQUREMUNGMEUyRUU1RDkwREE1NTBCQjdFQUY5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuHM+ZA2zqzUE5VI2NFk4tL3x5 kZdoUnvin14WJkB4atTvc4irQH+29LDyHCMge8ydg/1fRpib1uEscTPsjm4bYxjK G7gexSvvo0f8JuvmGHh3cGJECWBq0VJcCzS+XeiR+PiY3hxbg2qNwp/pbClzkcIZ wwgnGRUlgA29hgCkNAZ0cqslIBuM3y/+V8SyDSelodCP1UptfqjiCjtX1BMYMtd4 Baujc0iPyPgTrsfTBm4jXVjUtZLAwhKPbTD0Y9ucGYa1x8Vaiby/n3h4/6M/vvGr ZQopG95gLp+W1k2Sq4XkPPebpg1kKjJcuLr83tXIbP2UEmut7mJGmQCsCMaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy2AvYtWq3Rzw4u5dkNpVC7fq+XwwHwYDVR0j BBgwFoAUYf/T3DkkntaFDF+URTH0THqimNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMyYzQ5NDgtNjg3Yi00MDIwLTg3ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMz OTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3QUEyOThEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MUZGRDNEQzM5MjQ5RUQ2ODUwQzVGOTQ0NTMxRjQ0QzdBQTI5 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0 NEM3QUEyOThEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGj+bhut5abW0l+NHlTFveeyiHuWxuYs46PV RZXNRxvaM7ce/Q/1D9o9yNjo3LH16AVrYvInIeMfWlZM5JGWSkhWJHeALcx9d0ZO UYYRm3BZsamDL12hPFfV0Coou84GEVpd7GjidzRwj9i3uHG8lhnbgzyL7uXaPRRj pLq9NPrtZEx7wrT0w6oltYNlLKZ+PF5uI8DaMLlIzWPLkcpGY8ROdb8j/5PGcO0i TsMu3Pbctp18maKmlKg09ff3ZuGLrbve+LAZ10g4EIbOko/Tl+Ixxp5+RZHt14I8 8/jMUI9ZlqvKrB9F6lY5Mm5JB1JHps602KPe0y0qKuLH8R2WJao= -----END CERTIFICATE-----Generated at Fri Sep 4 15:17:27 2026 by rpki-client