$ rpki-client -vvvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft File: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft (raw, json) Hash identifier: 1BVYhDc3UZV+m/wCSiqcPwKUUGrfcb7SMLkdHnCtPzE= Subject key identifier: 2C:CB:D3:B3:AC:E7:43:5E:BA:C4:46:20:27:75:00:B9:8F:E4:C8:64 Authority key identifier: 5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF Certificate issuer: /CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Certificate serial: 63418FC32CAB6388D3CFD87E82B0E9690F124DAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:21:14 +0000 Manifest this update: Thu 17 Sep 2026 06:16:14 +0000 Manifest next update: Fri 18 Sep 2026 08:51:14 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: vnC+Tp+yt/9nwnboVLS+akmr5GJGP+dBJLMu3nh/zV0=) 2: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl (hash: JF6bVZu3/GVFkXc9wsU2wL2Lm8O4d8sb3rGwXf5LyDE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:41:8f:c3:2c:ab:63:88:d3:cf:d8:7e:82:b0:e9:69:0f:12:4d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Validity Not Before: Sep 17 06:16:14 2026 GMT Not After : Sep 18 08:51:14 2026 GMT Subject: CN=2CCBD3B3ACE7435EBAC44620277500B98FE4C864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:20:ef:0f:16:97:97:81:37:8f:cc:b3:42:4d: 01:fd:4c:99:f1:a2:b0:ab:91:2b:38:2e:93:e7:b8: 03:6c:9a:37:e0:f8:29:25:76:92:8e:b3:40:ae:0f: 10:4c:63:f0:b7:81:46:2d:89:8b:80:d0:18:57:91: a4:4d:4e:6a:85:af:c4:e7:21:5f:67:6d:98:32:73: 7f:a6:0d:f7:ee:cb:77:a3:fd:f6:fb:30:67:b1:bc: e6:01:10:76:5f:bf:4e:0c:ef:3b:34:a1:17:16:0f: da:9a:5b:a1:7a:70:40:da:8e:67:da:17:ef:9a:b3: b0:88:ec:b4:9c:d7:b3:e0:40:1f:1f:dc:30:f4:5a: 8e:d9:ab:cd:5a:a9:84:3e:86:29:5c:2c:8d:0c:f0: 77:52:9a:4b:02:a7:78:8a:62:88:de:02:02:3d:20: 0c:46:0b:12:80:11:dd:07:00:1e:23:f3:f2:5b:79: f8:e6:78:bf:48:2b:d6:cd:5c:6f:7c:98:4f:78:0a: 6d:79:e4:38:28:45:a0:1a:d6:7d:00:cc:1c:f4:47: 3c:67:7c:b7:56:14:5b:66:f6:9a:41:2d:85:a4:29: 21:e8:f6:c8:c1:43:83:10:26:3c:ce:76:51:bc:47: b4:b7:ed:93:e2:fe:9d:eb:64:43:e0:b7:9d:73:c1: 68:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CB:D3:B3:AC:E7:43:5E:BA:C4:46:20:27:75:00:B9:8F:E4:C8:64 X509v3 Authority Key Identifier: keyid:5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:cb:bf:64:d9:ff:ea:7d:76:61:7f:16:02:d4:80:18:e7:76: 2b:63:ab:e7:e9:a8:0a:53:74:c7:29:a8:ee:2b:fc:47:11:1f: 26:40:e3:12:c9:83:13:ca:35:d9:de:8c:f7:8b:5f:47:3c:28: 2c:d5:0a:15:5a:94:02:7c:4f:6d:d6:4e:dc:de:e8:6e:a7:c3: 46:0f:12:be:62:56:29:f8:df:2d:5a:60:23:7c:a4:b4:26:2b: 82:02:a5:17:d2:09:8b:17:13:15:65:30:ca:07:3c:e9:b8:79: 4e:90:83:b4:da:c9:da:b6:be:88:3c:16:26:b6:6f:71:11:c2: 99:bf:16:c0:11:99:06:8e:f9:7f:2d:f6:a0:8d:84:87:62:14: 20:9a:39:54:5c:51:de:f5:8f:9f:ef:db:06:87:c0:2a:c4:83: 15:d6:59:98:04:6c:55:c4:3c:be:22:b9:9c:8e:86:da:28:82: 65:d2:23:2e:5e:4b:ab:f3:15:31:66:ee:3d:35:0c:8c:8c:bb: b5:e9:40:ac:bd:9c:c6:4c:2b:dd:81:e4:ec:00:a9:74:f4:b2: d8:a8:53:6c:1c:c0:fa:75:6b:03:94:fe:b6:00:5c:03:21:27: 2e:c3:ce:65:06:3b:88:d8:c9:de:1f:2f:c5:da:12:b3:44:9b: be:01:12:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0GPwyyrY4jTz9h+grDpaQ8STaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVENTlD MDNCQkVCRjAeFw0yNjA5MTcwNjE2MTRaFw0yNjA5MTgwODUxMTRaMDMxMTAvBgNV BAMTKDJDQ0JEM0IzQUNFNzQzNUVCQUM0NDYyMDI3NzUwMEI5OEZFNEM4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMIO8PFpeXgTePzLNCTQH9TJnx orCrkSs4LpPnuANsmjfg+CkldpKOs0CuDxBMY/C3gUYtiYuA0BhXkaRNTmqFr8Tn IV9nbZgyc3+mDffuy3ej/fb7MGexvOYBEHZfv04M7zs0oRcWD9qaW6F6cEDajmfa F++as7CI7LSc17PgQB8f3DD0Wo7Zq81aqYQ+hilcLI0M8HdSmksCp3iKYojeAgI9 IAxGCxKAEd0HAB4j8/JbefjmeL9IK9bNXG98mE94Cm155DgoRaAa1n0AzBz0Rzxn fLdWFFtm9ppBLYWkKSHo9sjBQ4MQJjzOdlG8R7S37ZPi/p3rZEPgt51zwWijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULMvTs6znQ166xEYgJ3UAuY/kyGQwHwYDVR0j BBgwFoAUX2HBClb7Cjja2hflf1hdWcA7vr8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODRkYTQxNWItNWYxNy00NjAyLTliZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1 NkZCMEEzOERBREExN0U1N0Y1ODVENTlDMDNCQkVCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RjYxQzEwQTU2RkIwQTM4REFEQTE3RTU3RjU4NUQ1OUMwM0JC RUJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVE NTlDMDNCQkVCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLLv2TZ/+p9dmF/FgLUgBjnditjq+fpqApT dMcpqO4r/EcRHyZA4xLJgxPKNdnejPeLX0c8KCzVChValAJ8T23WTtze6G6nw0YP Er5iVin43y1aYCN8pLQmK4ICpRfSCYsXExVlMMoHPOm4eU6Qg7Taydq2vog8Fia2 b3ERwpm/FsARmQaO+X8t9qCNhIdiFCCaOVRcUd71j5/v2waHwCrEgxXWWZgEbFXE PL4iuZyOhtoogmXSIy5eS6vzFTFm7j01DIyMu7XpQKy9nMZMK92B5OwAqXT0stio U2wcwPp1awOU/rYAXAMhJy7DzmUGO4jYyd4fL8XaErNEm74BEsA= -----END CERTIFICATE-----Generated at Thu Sep 17 11:36:03 2026 by rpki-client