$ rpki-client -vvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft File: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft (raw, json) Hash identifier: 1bApgpjCYikiIJLwA/2Nyym2XwN5vzMq8GI8gXY9Fqo= Subject key identifier: 35:2F:22:43:9A:5E:A8:8A:92:2A:A3:AF:D2:41:5B:8A:6B:C6:C4:03 Authority key identifier: 5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF Certificate issuer: /CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Certificate serial: 17FD2E183B518147434AC8E65C365E5DBE5128EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 01:08:09 +0000 Manifest this update: Thu 18 Jun 2026 01:03:09 +0000 Manifest next update: Fri 19 Jun 2026 03:39:09 +0000 Files and hashes: 1: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl (hash: ztRNmXiYevbgRe5DbnenB+47NAwxxMAV+OFGOSJk3+4=) 2: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: vnC+Tp+yt/9nwnboVLS+akmr5GJGP+dBJLMu3nh/zV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 03:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:fd:2e:18:3b:51:81:47:43:4a:c8:e6:5c:36:5e:5d:be:51:28:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Validity Not Before: Jun 18 01:03:09 2026 GMT Not After : Jun 19 03:39:09 2026 GMT Subject: CN=352F22439A5EA88A922AA3AFD2415B8A6BC6C403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:1a:76:e5:cb:f0:17:0d:bd:01:87:c0:95: 4e:01:aa:af:49:d4:68:13:8e:dd:24:58:89:53:e8: 77:8c:42:f7:b7:5c:b3:17:27:5c:fa:7b:a6:aa:8c: 5a:72:92:97:47:4e:91:c4:7b:70:2d:f5:1b:50:6e: 51:57:20:6c:9d:a5:f9:d7:e1:bb:19:93:8c:7a:21: b2:36:2f:4a:83:24:41:c9:85:a7:9a:1a:2c:a5:4c: f9:05:e5:ee:9c:a6:1c:e4:14:9e:f5:c8:95:22:4a: 1a:d8:cd:0f:f5:8c:8f:de:1e:55:ac:3f:73:71:5e: 6a:55:81:b3:f8:ea:9c:c1:a3:9b:9c:df:21:d7:a2: 8a:53:9e:ce:3d:7b:40:2f:c8:39:eb:f9:84:2b:ec: 0c:96:9d:ec:6d:90:25:7d:d8:07:86:17:18:b9:73: 0b:ae:07:00:ac:7c:18:ca:be:e3:94:4d:58:f8:99: 50:c2:64:2a:41:88:12:bf:53:8f:26:f1:0a:a1:bc: 84:6a:79:ae:9c:00:27:97:32:86:ba:a7:2f:29:d8: ce:9a:6a:0c:5d:40:98:17:1b:0e:8d:c8:e6:c2:91: d2:1f:5b:31:4b:0b:63:8b:e2:90:fd:ad:dc:ab:a6: 51:7d:24:47:43:50:70:d7:74:2a:2d:80:0b:ab:99: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2F:22:43:9A:5E:A8:8A:92:2A:A3:AF:D2:41:5B:8A:6B:C6:C4:03 X509v3 Authority Key Identifier: keyid:5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:18:b5:9c:f3:27:bd:4f:a0:3a:fa:f1:c5:ba:6e:f2:cc:21: 68:57:75:50:8c:e0:05:bd:d0:8f:72:5b:11:3e:1e:3a:09:3f: 86:1a:d8:ef:1f:17:ef:16:44:0f:ef:0c:ff:91:d4:c4:a7:c2: 48:d4:6b:20:ae:5b:44:5f:4e:76:e4:4e:10:50:4f:06:38:4f: 33:40:fb:67:ec:cd:d6:95:7c:6f:56:23:38:71:d4:3f:19:bd: fa:9f:8c:f5:51:0d:f3:84:70:34:bb:1a:3f:94:2d:9f:44:13: d4:a1:a2:ce:2f:77:19:07:3f:b1:9d:45:0b:28:54:e7:18:d0: 04:de:e6:1a:07:d9:ba:06:1d:72:04:cc:1c:74:03:e0:c6:74: dd:ee:c5:b3:ae:2a:92:d8:78:f1:76:82:84:41:b8:3f:92:39: 2d:70:6f:f0:90:6f:d1:5b:23:d5:ad:0d:40:52:a9:5c:a9:31: ad:f1:5b:54:74:5a:76:e9:c1:63:a1:45:df:97:5a:66:7b:1f: 46:ba:a3:78:5b:ca:ae:84:be:3c:f2:a1:12:67:7e:7d:b2:dd: dc:13:85:57:f3:87:3c:dd:61:5c:55:87:78:d3:4c:d9:f1:c1: 48:89:48:78:a6:4a:82:fa:7a:33:f0:2b:97:74:e2:2d:c8:8a: 57:52:66:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/0uGDtRgUdDSsjmXDZeXb5RKO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVENTlD MDNCQkVCRjAeFw0yNjA2MTgwMTAzMDlaFw0yNjA2MTkwMzM5MDlaMDMxMTAvBgNV BAMTKDM1MkYyMjQzOUE1RUE4OEE5MjJBQTNBRkQyNDE1QjhBNkJDNkM0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hxp25cvwFw29AYfAlU4Bqq9J 1GgTjt0kWIlT6HeMQve3XLMXJ1z6e6aqjFpykpdHTpHEe3At9RtQblFXIGydpfnX 4bsZk4x6IbI2L0qDJEHJhaeaGiylTPkF5e6cphzkFJ71yJUiShrYzQ/1jI/eHlWs P3NxXmpVgbP46pzBo5uc3yHXoopTns49e0AvyDnr+YQr7AyWnextkCV92AeGFxi5 cwuuBwCsfBjKvuOUTVj4mVDCZCpBiBK/U48m8QqhvIRqea6cACeXMoa6py8p2M6a agxdQJgXGw6NyObCkdIfWzFLC2OL4pD9rdyrplF9JEdDUHDXdCotgAurmWXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNS8iQ5peqIqSKqOv0kFbimvGxAMwHwYDVR0j BBgwFoAUX2HBClb7Cjja2hflf1hdWcA7vr8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODRkYTQxNWItNWYxNy00NjAyLTliZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1 NkZCMEEzOERBREExN0U1N0Y1ODVENTlDMDNCQkVCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RjYxQzEwQTU2RkIwQTM4REFEQTE3RTU3RjU4NUQ1OUMwM0JC RUJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVE NTlDMDNCQkVCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoYtZzzJ71PoDr68cW6bvLMIWhXdVCM4AW9 0I9yWxE+HjoJP4Ya2O8fF+8WRA/vDP+R1MSnwkjUayCuW0RfTnbkThBQTwY4TzNA +2fszdaVfG9WIzhx1D8ZvfqfjPVRDfOEcDS7Gj+ULZ9EE9Shos4vdxkHP7GdRQso VOcY0ATe5hoH2boGHXIEzBx0A+DGdN3uxbOuKpLYePF2goRBuD+SOS1wb/CQb9Fb I9WtDUBSqVypMa3xW1R0WnbpwWOhRd+XWmZ7H0a6o3hbyq6EvjzyoRJnfn2y3dwT hVfzhzzdYVxVh3jTTNnxwUiJSHimSoL6ejPwK5d04i3IildSZlY= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:17 2026 by rpki-client