$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft File: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft (raw, json) Hash identifier: t30VN8DwvUSIAJMlJZmSaEcVAPwY5gY3W73mh0FpxkM= Subject key identifier: D7:2B:B1:E1:B2:2B:D2:5B:E8:99:E2:BD:A5:A6:A4:B3:98:98:39:D4 Authority key identifier: 61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 Certificate issuer: /CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Certificate serial: 6F9CD3F4EDE8AD211C7894B323FE8E43687E8389 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft Manifest number: EC Signing time: Sun 25 Oct 2026 17:18:11 +0000 Manifest this update: Sun 25 Oct 2026 17:13:11 +0000 Manifest next update: Mon 26 Oct 2026 18:44:11 +0000 Files and hashes: 1: 61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl (hash: sABddXwv0bBgrcI/jLXdXfbFoNAt0Spfwzy7A85BfK4=) 2: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: a3QIiaTsy8MOmYYKu9Aftofqk5cR/1nQkqFwNPo3MJU=) 3: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: LuRIWLyAew0juP41dvh4zIo1vh+0WRov4D4XfQ/6pVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 18:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9c:d3:f4:ed:e8:ad:21:1c:78:94:b3:23:fe:8e:43:68:7e:83:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61FFD3DC39249ED6850C5F944531F44C7AA298D0 Validity Not Before: Oct 25 17:13:11 2026 GMT Not After : Oct 26 18:44:11 2026 GMT Subject: CN=D72BB1E1B22BD25BE899E2BDA5A6A4B3989839D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:5a:cb:f0:71:43:24:3a:a5:5c:2f:0a:1b: cc:ac:74:6a:1c:d9:46:71:d2:58:27:e0:b6:ae:63: 43:63:eb:fc:ab:56:c1:65:8e:03:0e:21:84:8a:cd: e1:27:34:c9:45:fa:d0:fe:5b:9a:11:ba:94:96:f2: df:6c:44:c0:6f:02:8e:53:f0:85:c6:fd:bd:39:cb: 6a:34:81:d1:13:79:05:2d:75:fc:1e:47:bd:94:99: 86:ed:f1:2c:17:9a:98:1a:72:10:b7:81:c8:b9:b8: 0e:c4:8f:d1:c4:97:0e:d8:ff:da:d3:03:ea:4d:23: 78:66:b3:b1:a1:30:f6:ca:c9:94:ec:ce:95:99:5b: c3:6e:48:07:c3:c4:33:c3:ee:9c:ff:63:56:07:31: 44:45:78:57:05:f6:ce:a5:ad:5c:f1:89:11:26:19: 9f:8a:45:5d:45:72:22:7a:8b:6d:c5:8b:20:ce:07: a1:81:c1:e8:4b:4d:19:db:ca:04:b2:ad:8e:54:a4: 93:d7:59:7c:42:e0:ac:f1:91:59:50:70:b3:3e:dc: 86:87:36:57:23:e4:17:f1:1d:c5:5c:35:ef:9c:4d: c2:87:22:9b:cb:10:34:a4:d3:05:14:35:71:92:dd: 10:09:dc:8f:9c:03:6b:7a:3c:d3:03:47:3f:a4:7f: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2B:B1:E1:B2:2B:D2:5B:E8:99:E2:BD:A5:A6:A4:B3:98:98:39:D4 X509v3 Authority Key Identifier: keyid:61:FF:D3:DC:39:24:9E:D6:85:0C:5F:94:45:31:F4:4C:7A:A2:98:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/61FFD3DC39249ED6850C5F944531F44C7AA298D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/61FFD3DC39249ED6850C5F944531F44C7AA298D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ec:b4:c4:d7:ca:b3:57:3c:c8:f3:65:db:4a:82:1f:60:f6: 14:d6:ad:67:6d:45:e8:8f:50:b8:ce:a2:00:eb:da:dd:17:42: f6:21:b7:62:86:5a:44:a5:2c:1f:fe:ac:44:28:ac:5c:ec:7f: 3f:3c:a5:c9:32:b2:54:cc:c6:6a:46:34:11:c2:92:42:d9:a7: 01:65:5f:dd:16:f1:97:da:3d:9b:cb:a3:46:35:8f:59:75:a6: d1:4b:29:f0:79:e1:c2:ba:d9:3a:86:e0:6c:39:c0:d1:98:71: d4:35:f2:7a:ee:17:81:79:da:b0:93:6a:8c:6e:5c:34:59:34: 27:e4:ed:32:22:5b:d8:f0:e0:c5:3c:c0:dc:45:49:0e:33:34: fc:4f:b6:72:63:94:7e:4c:f9:65:75:54:0d:fd:f7:cc:d8:5b: f9:ad:8d:ec:d4:78:28:81:69:48:c9:17:a1:69:5e:ab:b0:55: b4:21:4c:b9:1c:5c:ca:cb:45:80:83:26:be:66:86:de:aa:e0: ab:f8:b7:56:97:46:05:26:74:39:b9:cb:b2:c6:4c:5c:de:51: 08:2d:ff:8c:93:a7:fa:d4:8b:70:6f:50:14:07:5c:e4:51:20: fa:7d:1d:16:73:fb:8c:bd:ee:19:63:2d:62:a7:5f:ae:af:9d: 04:e3:db:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5zT9O3orSEceJSzI/6OQ2h+g4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3 QUEyOThEMDAeFw0yNjEwMjUxNzEzMTFaFw0yNjEwMjYxODQ0MTFaMDMxMTAvBgNV BAMTKEQ3MkJCMUUxQjIyQkQyNUJFODk5RTJCREE1QTZBNEIzOTg5ODM5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYFrL8HFDJDqlXC8KG8ysdGoc 2UZx0lgn4LauY0Nj6/yrVsFljgMOIYSKzeEnNMlF+tD+W5oRupSW8t9sRMBvAo5T 8IXG/b05y2o0gdETeQUtdfweR72UmYbt8SwXmpgachC3gci5uA7Ej9HElw7Y/9rT A+pNI3hms7GhMPbKyZTszpWZW8NuSAfDxDPD7pz/Y1YHMURFeFcF9s6lrVzxiREm GZ+KRV1FciJ6i23FiyDOB6GBwehLTRnbygSyrY5UpJPXWXxC4KzxkVlQcLM+3IaH Nlcj5BfxHcVcNe+cTcKHIpvLEDSk0wUUNXGS3RAJ3I+cA2t6PNMDRz+kf3ZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1yux4bIr0lvomeK9paaks5iYOdQwHwYDVR0j BBgwFoAUYf/T3DkkntaFDF+URTH0THqimNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMyYzQ5NDgtNjg3Yi00MDIwLTg3ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMz OTI0OUVENjg1MEM1Rjk0NDUzMUY0NEM3QUEyOThEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MUZGRDNEQzM5MjQ5RUQ2ODUwQzVGOTQ0NTMxRjQ0QzdBQTI5 OEQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvNjFGRkQzREMzOTI0OUVENjg1MEM1Rjk0NDUzMUY0 NEM3QUEyOThEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXstMTXyrNXPMjzZdtKgh9g9hTWrWdtReiP ULjOogDr2t0XQvYht2KGWkSlLB/+rEQorFzsfz88pckyslTMxmpGNBHCkkLZpwFl X90W8ZfaPZvLo0Y1j1l1ptFLKfB54cK62TqG4Gw5wNGYcdQ18nruF4F52rCTaoxu XDRZNCfk7TIiW9jw4MU8wNxFSQ4zNPxPtnJjlH5M+WV1VA3998zYW/mtjezUeCiB aUjJF6FpXquwVbQhTLkcXMrLRYCDJr5mht6q4Kv4t1aXRgUmdDm5y7LGTFzeUQgt /4yTp/rUi3BvUBQHXORRIPp9HRZz+4y97hljLWKnX66vnQTj2/A= -----END CERTIFICATE-----Generated at Mon Oct 26 08:28:55 2026 by rpki-client