$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft File: D61B761F0598B8998BF802A069F51103270C6CC0.mft (raw, json) Hash identifier: BoTNUcVlcyvrtJm/zy3OBIruvNExI9fh7phVLBWKdjA= Subject key identifier: C9:AD:B2:6B:DE:5A:EA:FC:96:B4:55:17:37:81:D7:F9:D3:1D:26:7D Authority key identifier: D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0 Certificate issuer: /CN=D61B761F0598B8998BF802A069F51103270C6CC0 Certificate serial: 25FA2CA6F1D360150440A066EC4DB147D3A56C06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft Manifest number: 5F Signing time: Mon 13 Jul 2026 00:03:49 +0000 Manifest this update: Sun 12 Jul 2026 23:58:49 +0000 Manifest next update: Tue 14 Jul 2026 03:10:49 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: JV7kYNU81vIjUMbIQ9WaFlRn0Vf3tZeMtDHyZF3sYe4=) 2: D61B761F0598B8998BF802A069F51103270C6CC0.crl (hash: 5Bb34RYyFIcra0x6plPPWWHIYp/LQ/7eGYJXjt5HC+A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 03:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fa:2c:a6:f1:d3:60:15:04:40:a0:66:ec:4d:b1:47:d3:a5:6c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D61B761F0598B8998BF802A069F51103270C6CC0 Validity Not Before: Jul 12 23:58:49 2026 GMT Not After : Jul 14 03:10:49 2026 GMT Subject: CN=C9ADB26BDE5AEAFC96B455173781D7F9D31D267D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:dc:46:3d:68:5b:19:f4:0b:76:98:d6:c8: ad:05:1e:3a:21:38:68:9f:0a:30:47:15:35:65:bc: cf:f3:50:85:4c:44:b0:02:97:27:47:a5:22:60:2f: 07:ef:0c:0c:fe:54:34:e0:cb:be:7b:01:ac:a7:ad: d0:ca:17:52:da:b4:ed:10:76:c4:37:1e:cd:12:12: 18:79:e9:27:3f:7d:72:85:98:2b:52:ab:26:44:a4: c6:b5:ca:a6:af:6e:c7:12:0c:e4:9f:eb:3b:5c:76: 33:b4:ea:ed:f6:f2:fa:4f:11:9f:d4:db:75:06:33: 11:3f:86:db:f7:d8:8e:42:3a:ec:5b:eb:dc:a5:10: 43:cc:f1:8a:30:c6:42:83:2f:61:6a:48:1b:bc:2c: 84:0a:40:e6:44:50:40:f5:40:a3:a8:2f:74:e3:8f: c5:f0:fe:90:c2:f9:69:93:c6:1c:02:7c:7d:df:70: 2a:35:49:15:29:d8:92:c6:4e:9d:26:69:18:bf:33: 81:56:bc:d9:6d:c3:48:b9:4b:bc:8b:c0:0c:f2:a7: c0:64:04:f6:c5:a5:c7:5d:d8:93:15:f4:40:03:ec: 25:04:48:48:47:f7:40:11:f5:80:d7:cb:19:6f:0d: e7:9c:8b:70:2c:26:d4:37:37:04:79:85:c4:f8:ce: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AD:B2:6B:DE:5A:EA:FC:96:B4:55:17:37:81:D7:F9:D3:1D:26:7D X509v3 Authority Key Identifier: keyid:D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c6:d7:56:b7:a3:cb:2c:ef:b9:34:0e:98:80:bb:e0:55:ad: e7:69:72:0c:c5:47:82:12:2a:32:ff:17:9f:14:f8:44:2f:35: 10:38:f1:35:6d:d1:97:84:8e:c7:10:86:6d:bd:fd:34:78:ab: 33:ca:ee:5a:dd:47:a1:11:2e:8e:06:3a:6b:29:a5:7c:0c:aa: 62:6b:9a:83:ee:c2:81:39:9f:7c:6e:e6:f9:6d:01:ac:84:2e: 04:11:85:09:e7:cf:b4:20:0a:60:33:c0:c4:e3:e7:e1:b4:d4: 33:0c:da:53:38:4d:5d:50:f7:d5:6d:bf:1f:fa:aa:c3:d1:79: 51:80:47:53:d0:ee:ea:52:2b:46:8a:0e:87:f4:34:aa:f9:12: 17:a9:f0:bc:b0:3d:aa:da:de:e7:14:f5:91:ef:40:f8:a4:57: bb:d2:90:e4:6b:b4:81:18:74:87:16:d0:ce:82:70:dd:96:08: 9a:c1:6c:e7:63:35:e4:2a:14:42:6f:36:1b:1b:79:6d:9c:9d: 25:8e:dc:1c:b7:80:6c:c6:38:ab:0e:d1:e0:68:d3:f5:92:8e: 59:f3:0a:98:0b:27:f6:49:93:ee:7a:8d:14:30:97:c6:01:17: 8a:aa:bd:fd:5b:f0:d0:cd:cd:37:3c:f6:29:76:a2:cd:49:c1: a9:c8:70:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfospvHTYBUEQKBm7E2xR9OlbAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxQjc2MUYwNTk4Qjg5OThCRjgwMkEwNjlGNTExMDMy NzBDNkNDMDAeFw0yNjA3MTIyMzU4NDlaFw0yNjA3MTQwMzEwNDlaMDMxMTAvBgNV BAMTKEM5QURCMjZCREU1QUVBRkM5NkI0NTUxNzM3ODFEN0Y5RDMxRDI2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PtxGPWhbGfQLdpjWyK0FHjoh OGifCjBHFTVlvM/zUIVMRLAClydHpSJgLwfvDAz+VDTgy757AaynrdDKF1LatO0Q dsQ3Hs0SEhh56Sc/fXKFmCtSqyZEpMa1yqavbscSDOSf6ztcdjO06u328vpPEZ/U 23UGMxE/htv32I5COuxb69ylEEPM8YowxkKDL2FqSBu8LIQKQOZEUED1QKOoL3Tj j8Xw/pDC+WmTxhwCfH3fcCo1SRUp2JLGTp0maRi/M4FWvNltw0i5S7yLwAzyp8Bk BPbFpcdd2JMV9EAD7CUESEhH90AR9YDXyxlvDeeci3AsJtQ3NwR5hcT4ztgtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUya2ya95a6vyWtFUXN4HX+dMdJn0wHwYDVR0j BBgwFoAU1ht2HwWYuJmL+AKgafURAycMbMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EyMmI0ZTItMjZmNi00MWU4LTg5MTAtMjA2YmVhNzgzZGI5LzAvRDYxQjc2MUYw NTk4Qjg5OThCRjgwMkEwNjlGNTExMDMyNzBDNkNDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjFCNzYxRjA1OThCODk5OEJGODAyQTA2OUY1MTEwMzI3MEM2 Q0MwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvRDYxQjc2MUYwNTk4Qjg5OThCRjgwMkEwNjlGNTEx MDMyNzBDNkNDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDG11a3o8ss77k0DpiAu+BVredpcgzFR4IS KjL/F58U+EQvNRA48TVt0ZeEjscQhm29/TR4qzPK7lrdR6ERLo4GOmsppXwMqmJr moPuwoE5n3xu5vltAayELgQRhQnnz7QgCmAzwMTj5+G01DMM2lM4TV1Q99Vtvx/6 qsPReVGAR1PQ7upSK0aKDof0NKr5Ehep8LywPara3ucU9ZHvQPikV7vSkORrtIEY dIcW0M6CcN2WCJrBbOdjNeQqFEJvNhsbeW2cnSWO3By3gGzGOKsO0eBo0/WSjlnz CpgLJ/ZJk+56jRQwl8YBF4qqvf1b8NDNzTc89il2os1JwanIcGI= -----END CERTIFICATE-----Generated at Mon Jul 13 11:35:13 2026 by rpki-client