$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft File: 610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft (raw, json) Hash identifier: 71pbpAOUOl0m1s9z5ebfb8z+F6jSyWty8mxEnxNpwvU= Subject key identifier: 5D:82:78:0E:89:70:EF:E2:69:9B:F2:06:90:E3:EE:47:67:1F:4E:CF Authority key identifier: 61:0D:31:D4:D6:A8:65:C3:A5:73:2C:77:94:E5:A1:9B:AE:55:E8:82 Certificate issuer: /CN=610D31D4D6A865C3A5732C7794E5A19BAE55E882 Certificate serial: 6BE855D2AF41D0F6130AEC72AB66D08739AC6709 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:14:06 +0000 Manifest this update: Wed 16 Sep 2026 20:09:06 +0000 Manifest next update: Thu 17 Sep 2026 21:25:06 +0000 Files and hashes: 1: 610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl (hash: ev1ER9SP+DBlPbbWoAbVhKOAOhLN4Oc3s07fPy/EccE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e8:55:d2:af:41:d0:f6:13:0a:ec:72:ab:66:d0:87:39:ac:67:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=610D31D4D6A865C3A5732C7794E5A19BAE55E882 Validity Not Before: Sep 16 20:09:06 2026 GMT Not After : Sep 17 21:25:06 2026 GMT Subject: CN=5D82780E8970EFE2699BF20690E3EE47671F4ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:bc:03:61:7c:55:f2:76:dd:11:16:de:04: b7:2d:66:86:2b:2d:14:fa:64:07:81:7e:55:9d:38: 80:19:f7:10:c6:dc:6b:60:90:a7:93:f8:eb:d9:00: 90:75:77:58:c6:66:6b:1d:ed:61:11:c4:ac:09:b2: 12:e6:6b:cf:73:c9:28:6d:32:03:a4:7c:55:03:73: 51:78:ac:98:1c:2a:33:6d:3b:eb:a8:47:a6:55:45: f9:d2:fc:72:95:dd:3e:4f:bb:be:19:27:dc:5a:2a: b1:6b:d1:53:bb:cc:39:e6:94:86:b0:b1:16:87:df: 1b:27:33:c7:b6:c7:62:72:ff:44:b4:0a:18:93:ff: ef:88:98:5e:e5:5b:07:91:19:be:59:57:34:19:d0: 5b:f8:ef:72:29:db:dc:85:9b:e6:f3:0c:46:11:9b: ab:75:04:b9:f3:84:05:1b:f2:e3:3e:63:bd:25:05: 3f:97:57:b0:eb:07:ab:3e:50:c5:ce:8c:9f:04:f4: 58:9e:49:d6:da:1d:6b:3d:15:dc:7b:57:56:1b:b0: 8f:bb:2d:f2:6b:b3:57:7b:8b:10:77:00:f6:c3:02: ee:bf:0d:26:5e:8f:ba:0f:f1:d7:75:31:5f:90:f0: 47:9d:da:91:e8:97:f9:9e:e8:85:00:e7:ef:a2:5b: aa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:82:78:0E:89:70:EF:E2:69:9B:F2:06:90:E3:EE:47:67:1F:4E:CF X509v3 Authority Key Identifier: keyid:61:0D:31:D4:D6:A8:65:C3:A5:73:2C:77:94:E5:A1:9B:AE:55:E8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/610D31D4D6A865C3A5732C7794E5A19BAE55E882.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/610D31D4D6A865C3A5732C7794E5A19BAE55E882.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:eb:cc:5e:6c:4a:7c:b8:2c:f4:8b:1f:a0:42:c8:f3:94:8b: 4d:62:38:09:02:8f:2d:df:80:50:1d:20:04:2a:13:e1:2e:29: c0:dc:8c:71:e7:71:87:03:e3:3c:bd:04:ba:5c:de:c8:98:4c: 40:3a:ee:3f:12:9b:e3:0c:e3:21:83:12:20:68:eb:ab:56:f6: 7f:69:6c:43:39:e5:94:f1:40:dc:c1:19:77:cb:c0:3e:6c:24: e4:fa:d8:d9:66:c2:19:fa:33:a4:38:85:0a:bc:6b:0f:18:ac: 35:ab:60:97:5f:88:dd:f7:0e:d9:0f:98:c8:1b:b0:39:d4:77: 48:7f:e9:b0:ba:68:15:b2:ae:fd:6b:95:26:5b:8c:6f:f3:1a: 9f:ac:45:3d:88:14:c1:41:fe:82:28:4c:a1:7e:2f:7c:93:50: 9f:62:4f:22:f1:63:09:cc:5e:81:4f:eb:b0:db:1e:4c:52:15: fb:61:e7:40:ae:e5:9e:e6:e7:3c:e6:1d:2a:33:33:e9:0a:96: 4f:2e:42:18:0d:92:bd:88:e8:0c:fb:9a:a6:b3:f2:4b:94:c3: 42:ca:46:f3:58:15:5f:55:ba:87:83:31:67:72:7c:70:bb:06: 14:fc:05:b6:8f:40:13:08:b5:2a:78:59:70:6d:ff:b7:29:da: e8:9e:70:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+hV0q9B0PYTCuxyq2bQhzmsZwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjEwRDMxRDRENkE4NjVDM0E1NzMyQzc3OTRFNUExOUJB RTU1RTg4MjAeFw0yNjA5MTYyMDA5MDZaFw0yNjA5MTcyMTI1MDZaMDMxMTAvBgNV BAMTKDVEODI3ODBFODk3MEVGRTI2OTlCRjIwNjkwRTNFRTQ3NjcxRjRFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwLwDYXxV8nbdERbeBLctZoYr LRT6ZAeBflWdOIAZ9xDG3GtgkKeT+OvZAJB1d1jGZmsd7WERxKwJshLma89zySht MgOkfFUDc1F4rJgcKjNtO+uoR6ZVRfnS/HKV3T5Pu74ZJ9xaKrFr0VO7zDnmlIaw sRaH3xsnM8e2x2Jy/0S0ChiT/++ImF7lWweRGb5ZVzQZ0Fv473Ip29yFm+bzDEYR m6t1BLnzhAUb8uM+Y70lBT+XV7DrB6s+UMXOjJ8E9FieSdbaHWs9Fdx7V1YbsI+7 LfJrs1d7ixB3APbDAu6/DSZej7oP8dd1MV+Q8Eed2pHol/me6IUA5++iW6ptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXYJ4Dolw7+Jpm/IGkOPuR2cfTs8wHwYDVR0j BBgwFoAUYQ0x1NaoZcOlcyx3lOWhm65V6IIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI3NGQ3NmItNWIxNi00YWI1LWFiY2YtZTRhODYwN2EyOGIyLzAvNjEwRDMxRDRE NkE4NjVDM0E1NzMyQzc3OTRFNUExOUJBRTU1RTg4Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MTBEMzFENEQ2QTg2NUMzQTU3MzJDNzc5NEU1QTE5QkFFNTVF ODgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNjEwRDMxRDRENkE4NjVDM0E1NzMyQzc3OTRFNUEx OUJBRTU1RTg4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvrzF5sSny4LPSLH6BCyPOUi01iOAkCjy3f gFAdIAQqE+EuKcDcjHHncYcD4zy9BLpc3siYTEA67j8Sm+MM4yGDEiBo66tW9n9p bEM55ZTxQNzBGXfLwD5sJOT62Nlmwhn6M6Q4hQq8aw8YrDWrYJdfiN33DtkPmMgb sDnUd0h/6bC6aBWyrv1rlSZbjG/zGp+sRT2IFMFB/oIoTKF+L3yTUJ9iTyLxYwnM XoFP67DbHkxSFfth50Cu5Z7m5zzmHSozM+kKlk8uQhgNkr2I6Az7mqaz8kuUw0LK RvNYFV9VuoeDMWdyfHC7BhT8BbaPQBMItSp4WXBt/7cp2uiecEk= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:54 2026 by rpki-client