$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft File: 610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft (raw, json) Hash identifier: kg/H7vJoBxgX2H9aXh/lb9jVrBRu3miXjZmLAu889io= Subject key identifier: 5D:DF:D6:27:81:FA:5F:38:83:7E:B7:1A:58:39:6A:FD:17:66:DA:4F Authority key identifier: 61:0D:31:D4:D6:A8:65:C3:A5:73:2C:77:94:E5:A1:9B:AE:55:E8:82 Certificate issuer: /CN=610D31D4D6A865C3A5732C7794E5A19BAE55E882 Certificate serial: 73E94AA0B1D62DBF9C4C121D217FCC7622F0ABE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 23:19:04 +0000 Manifest this update: Fri 19 Jun 2026 23:14:04 +0000 Manifest next update: Sun 21 Jun 2026 01:31:04 +0000 Files and hashes: 1: 610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl (hash: 3s52ipFk8v3JsSt5d1JGA5xlWK8VCphC48j5FIW0Vok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e9:4a:a0:b1:d6:2d:bf:9c:4c:12:1d:21:7f:cc:76:22:f0:ab:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=610D31D4D6A865C3A5732C7794E5A19BAE55E882 Validity Not Before: Jun 19 23:14:04 2026 GMT Not After : Jun 21 01:31:04 2026 GMT Subject: CN=5DDFD62781FA5F38837EB71A58396AFD1766DA4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:36:ae:e3:3d:d2:15:f5:52:a0:47:71:0a:68: c8:90:f1:9c:d8:6b:d7:ed:69:17:8d:bc:07:70:55: c5:e8:a6:47:e6:0c:42:5d:3d:48:38:5d:05:32:55: d6:fb:7f:f2:20:ff:80:32:06:72:6f:3e:aa:71:4b: 06:8c:15:36:37:4a:44:4e:f3:47:8d:09:40:80:74: 3c:18:de:e1:ef:4d:ef:67:76:8f:b0:51:14:4c:27: 1a:f7:45:19:4f:b6:e8:86:64:73:e4:8a:50:7c:0f: b3:16:42:43:57:33:f3:af:98:ed:85:77:66:ba:6e: d5:08:02:6e:36:c2:68:3c:a1:e4:64:e7:55:f3:30: 26:32:af:ef:da:4c:2f:bd:ca:96:ed:30:a4:f0:9b: 8f:43:ce:38:2d:41:71:29:b3:06:0e:a9:97:22:3d: c6:4a:95:1b:af:10:ca:70:4f:80:d5:90:ee:b2:b9: 4a:50:ed:ac:2f:1c:fe:c7:6e:71:ba:15:4e:98:33: 9f:1f:34:07:4b:ab:fa:61:ed:21:22:bb:db:da:75: 5b:ca:18:98:28:7a:05:1d:3d:ce:2a:a3:44:e2:7d: ea:7c:f3:cc:75:48:43:d8:b8:5f:bb:7b:ce:06:f9: d3:8a:16:7c:ea:5b:c6:3d:ef:d5:0f:e8:92:89:a9: 82:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DF:D6:27:81:FA:5F:38:83:7E:B7:1A:58:39:6A:FD:17:66:DA:4F X509v3 Authority Key Identifier: keyid:61:0D:31:D4:D6:A8:65:C3:A5:73:2C:77:94:E5:A1:9B:AE:55:E8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:14:d5:84:74:bd:94:8f:be:12:54:b6:b1:9b:96:17:e7:d8: ac:7f:34:07:26:e1:b4:cd:78:79:ad:dd:74:98:ed:0a:5f:d6: 45:e0:bc:87:9b:22:f1:40:e1:78:9b:e1:4f:38:a8:67:c0:bd: 8f:38:ab:91:b1:bf:b9:3b:e8:8f:9f:08:aa:46:9e:39:0a:34: d7:6b:e1:e8:9f:7d:c2:62:3a:32:e9:fc:0d:94:2b:b6:c6:14: 43:9e:83:d7:fe:84:d3:c4:cc:53:11:99:ba:41:d8:e9:52:e4: d6:df:5e:42:9d:9c:9d:90:f7:df:b0:92:82:1c:c5:e8:8e:b2: 8b:2a:e5:b4:6a:d7:ae:af:2a:e9:e5:b5:52:72:4f:9c:90:32: 73:26:c9:85:88:1c:73:21:8e:ed:18:38:2c:97:e1:b2:fc:49: 78:3f:95:c1:73:15:98:c1:07:b0:3e:23:23:b3:5d:d3:c3:de: fe:fa:d5:ea:34:45:7c:c7:f1:20:3b:0e:28:b5:cf:c3:39:9b: f3:9f:ee:29:9a:2d:e6:32:86:06:11:a4:3f:40:54:1a:7d:36: b2:48:f6:20:ed:f7:7a:0f:cc:93:2c:72:ea:54:f8:aa:29:5e: d6:70:06:17:9e:f8:61:76:23:29:c5:15:68:1c:ef:62:e8:99: b4:01:03:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+lKoLHWLb+cTBIdIX/MdiLwq+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjEwRDMxRDRENkE4NjVDM0E1NzMyQzc3OTRFNUExOUJB RTU1RTg4MjAeFw0yNjA2MTkyMzE0MDRaFw0yNjA2MjEwMTMxMDRaMDMxMTAvBgNV BAMTKDVEREZENjI3ODFGQTVGMzg4MzdFQjcxQTU4Mzk2QUZEMTc2NkRBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNq7jPdIV9VKgR3EKaMiQ8ZzY a9ftaReNvAdwVcXopkfmDEJdPUg4XQUyVdb7f/Ig/4AyBnJvPqpxSwaMFTY3SkRO 80eNCUCAdDwY3uHvTe9ndo+wURRMJxr3RRlPtuiGZHPkilB8D7MWQkNXM/OvmO2F d2a6btUIAm42wmg8oeRk51XzMCYyr+/aTC+9ypbtMKTwm49DzjgtQXEpswYOqZci PcZKlRuvEMpwT4DVkO6yuUpQ7awvHP7HbnG6FU6YM58fNAdLq/ph7SEiu9vadVvK GJgoegUdPc4qo0Tifep888x1SEPYuF+7e84G+dOKFnzqW8Y979UP6JKJqYIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXd/WJ4H6XziDfrcaWDlq/Rdm2k8wHwYDVR0j BBgwFoAUYQ0x1NaoZcOlcyx3lOWhm65V6IIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI3NGQ3NmItNWIxNi00YWI1LWFiY2YtZTRhODYwN2EyOGIyLzAvNjEwRDMxRDRE NkE4NjVDM0E1NzMyQzc3OTRFNUExOUJBRTU1RTg4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MTBEMzFENEQ2QTg2NUMzQTU3MzJDNzc5NEU1QTE5QkFFNTVF ODgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNjEwRDMxRDRENkE4NjVDM0E1NzMyQzc3OTRFNUEx OUJBRTU1RTg4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8U1YR0vZSPvhJUtrGblhfn2Kx/NAcm4bTN eHmt3XSY7Qpf1kXgvIebIvFA4Xib4U84qGfAvY84q5Gxv7k76I+fCKpGnjkKNNdr 4eiffcJiOjLp/A2UK7bGFEOeg9f+hNPEzFMRmbpB2OlS5NbfXkKdnJ2Q99+wkoIc xeiOsosq5bRq166vKunltVJyT5yQMnMmyYWIHHMhju0YOCyX4bL8SXg/lcFzFZjB B7A+IyOzXdPD3v761eo0RXzH8SA7Dii1z8M5m/Of7imaLeYyhgYRpD9AVBp9NrJI 9iDt93oPzJMscupU+KopXtZwBhee+GF2IynFFWgc72LombQBA2U= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:15 2026 by rpki-client