$ rpki-client -vvf rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft File: F61FC33006E4D563052A74A3344CBDB712A9CE42.mft (raw, json) Hash identifier: RUYVZB1TRMNiPYy+TctsxY8t8jM6F55wTY35Wqq5c4Q= Subject key identifier: 35:D8:FB:88:5E:FF:49:2D:C4:76:4C:02:AB:B6:F0:DC:E3:5E:7F:83 Authority key identifier: F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42 Certificate issuer: /CN=F61FC33006E4D563052A74A3344CBDB712A9CE42 Certificate serial: 3F3691C5603F62EED7094849D1AE916ADA225A75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 04:27:17 +0000 Manifest this update: Thu 18 Jun 2026 04:22:17 +0000 Manifest next update: Fri 19 Jun 2026 04:28:17 +0000 Files and hashes: 1: F61FC33006E4D563052A74A3344CBDB712A9CE42.crl (hash: aSx8VSXIGLMRy/V3yLfxy71ZJlEOtRTGLr7x1dGeAMk=) 2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: slYjvzyCrVX4GgCGyd9rvovLqFZzNIshufZkbhVSrC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 04:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:36:91:c5:60:3f:62:ee:d7:09:48:49:d1:ae:91:6a:da:22:5a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61FC33006E4D563052A74A3344CBDB712A9CE42 Validity Not Before: Jun 18 04:22:17 2026 GMT Not After : Jun 19 04:28:17 2026 GMT Subject: CN=35D8FB885EFF492DC4764C02ABB6F0DCE35E7F83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:a7:2a:23:ad:6b:56:5b:e8:9b:e4:60:cd: 3d:aa:c8:16:39:33:a0:e2:72:ee:97:43:e0:0d:73: c0:e7:1a:3a:0a:b1:7c:ac:88:b7:60:e7:9b:ed:63: 73:8f:d8:71:fb:c4:66:ac:d0:eb:2d:01:cf:4e:76: d5:8f:4a:a1:e2:86:c7:73:59:5b:e2:73:60:e8:fb: f3:e6:d5:28:31:47:be:a3:43:bc:52:99:7d:a4:31: 20:d9:bd:51:78:9f:7c:3c:eb:bb:03:9a:93:82:96: 9c:99:ed:72:e7:74:f1:e9:ad:34:d4:31:8b:e7:77: 99:bd:38:e1:61:72:3f:9e:59:7a:eb:ac:b6:19:14: 81:0d:cb:a4:34:12:03:fc:a9:f0:f7:a7:67:a7:af: 15:52:09:ec:89:db:22:4e:78:4d:51:f0:cb:bd:9b: 66:bf:86:23:72:a8:fb:09:84:78:20:2b:0d:94:66: e2:e8:0c:e7:c3:44:10:7f:f2:9b:d4:6d:f8:4a:41: 23:51:f7:50:c7:81:99:5f:32:2e:01:38:61:88:2b: 99:f5:c7:07:ac:c6:b1:53:f2:19:60:c6:cc:79:58: 2c:f6:35:3f:96:a4:38:44:a0:5a:e8:f9:e5:e4:7e: 92:81:98:e7:c5:16:99:2e:8d:d2:ac:99:df:92:fe: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D8:FB:88:5E:FF:49:2D:C4:76:4C:02:AB:B6:F0:DC:E3:5E:7F:83 X509v3 Authority Key Identifier: keyid:F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2c:aa:c7:0c:08:4d:45:2f:50:6d:89:8b:e5:66:2e:66:6d: f2:3b:d9:83:fa:1d:11:a6:b7:a3:11:c5:1f:f5:c2:cc:30:7f: af:72:d4:3a:7f:93:51:68:4c:7e:43:0f:a3:6e:a0:7c:3e:fb: a8:b7:2f:05:80:ee:e0:2f:5c:f7:31:58:64:1f:cf:31:36:31: 4b:f4:3e:e8:fe:97:e0:e1:4b:cb:bc:00:66:91:a8:42:47:3c: c8:18:87:ff:0d:4c:8e:a7:bf:e4:8f:b6:df:45:db:16:ba:d2: 92:c8:ef:15:d1:03:6f:0c:8b:2b:61:88:f5:c3:66:28:a4:ac: 78:0b:82:87:dd:47:96:33:a6:c5:5a:c1:e1:16:58:29:f7:39: a7:3a:03:c1:85:bc:b2:48:77:8b:ac:1e:9f:4c:65:c3:9c:69: 84:f6:42:1e:50:31:f7:24:61:e0:d5:17:ac:04:4a:7a:16:14: 07:8e:4f:e7:d1:fa:5a:48:3d:99:8b:cd:75:53:88:b2:cc:54: dd:09:ef:82:4e:69:6c:77:7a:20:ab:74:88:30:1e:e6:78:0a: 16:34:0c:47:f8:c8:79:7c:d4:d0:53:09:46:2f:38:a9:65:4d: 96:c7:f4:6d:1e:52:67:78:6a:2d:70:20:30:36:8c:85:b4:d2: 64:72:e8:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPzaRxWA/Yu7XCUhJ0a6RatoiWnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRkMzMzAwNkU0RDU2MzA1MkE3NEEzMzQ0Q0JEQjcx MkE5Q0U0MjAeFw0yNjA2MTgwNDIyMTdaFw0yNjA2MTkwNDI4MTdaMDMxMTAvBgNV BAMTKDM1RDhGQjg4NUVGRjQ5MkRDNDc2NEMwMkFCQjZGMERDRTM1RTdGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xKcqI61rVlvom+RgzT2qyBY5 M6Dicu6XQ+ANc8DnGjoKsXysiLdg55vtY3OP2HH7xGas0OstAc9OdtWPSqHihsdz WVvic2Do+/Pm1SgxR76jQ7xSmX2kMSDZvVF4n3w867sDmpOClpyZ7XLndPHprTTU MYvnd5m9OOFhcj+eWXrrrLYZFIENy6Q0EgP8qfD3p2enrxVSCeyJ2yJOeE1R8Mu9 m2a/hiNyqPsJhHggKw2UZuLoDOfDRBB/8pvUbfhKQSNR91DHgZlfMi4BOGGIK5n1 xwesxrFT8hlgxsx5WCz2NT+WpDhEoFro+eXkfpKBmOfFFpkujdKsmd+S/rWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNdj7iF7/SS3EdkwCq7bw3ONef4MwHwYDVR0j BBgwFoAU9h/DMAbk1WMFKnSjNEy9txKpzkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgxZWY0NDAtNWE1Zi00YTRmLWI1MDktYjEwMzI0NWM1Y2YxLzAvRjYxRkMzMzAw NkU0RDU2MzA1MkE3NEEzMzQ0Q0JEQjcxMkE5Q0U0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNjFGQzMzMDA2RTRENTYzMDUyQTc0QTMzNDRDQkRCNzEyQTlD RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvRjYxRkMzMzAwNkU0RDU2MzA1MkE3NEEzMzQ0Q0JE QjcxMkE5Q0U0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFosqscMCE1FL1BtiYvlZi5mbfI72YP6HRGm t6MRxR/1wswwf69y1Dp/k1FoTH5DD6NuoHw++6i3LwWA7uAvXPcxWGQfzzE2MUv0 Puj+l+DhS8u8AGaRqEJHPMgYh/8NTI6nv+SPtt9F2xa60pLI7xXRA28MiythiPXD ZiikrHgLgofdR5YzpsVaweEWWCn3Oac6A8GFvLJId4usHp9MZcOcaYT2Qh5QMfck YeDVF6wESnoWFAeOT+fR+lpIPZmLzXVTiLLMVN0J74JOaWx3eiCrdIgwHuZ4ChY0 DEf4yHl81NBTCUYvOKllTZbH9G0eUmd4ai1wIDA2jIW00mRy6Kc= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:43 2026 by rpki-client