$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: 8lm5SlUA41kkuVgxvBqo/JbNNN42XSFzHLfBKt6QAMU= Subject key identifier: 79:72:A0:17:C7:BE:7F:6F:A7:F2:F8:95:7B:13:4C:F0:42:90:96:01 Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 6583DB0EE8EA07318A5AD8B530A8E028F7E9B682 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 025F Signing time: Wed 25 Mar 2026 08:31:25 +0000 Manifest this update: Wed 25 Mar 2026 08:26:25 +0000 Manifest next update: Sat 28 Mar 2026 12:49:25 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) 3: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: 99qCUU60g8XMJKBBdHsluzNP66s5yoiz8fNQ3NbU9oo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:83:db:0e:e8:ea:07:31:8a:5a:d8:b5:30:a8:e0:28:f7:e9:b6:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Mar 25 08:26:25 2026 GMT Not After : Mar 28 12:49:25 2026 GMT Subject: CN=7972A017C7BE7F6FA7F2F8957B134CF042909601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:7a:fa:f9:fa:79:cc:0f:d6:0d:a5:4c:45: 5c:ea:c2:b5:52:ef:f2:81:b9:15:a6:24:dc:84:12: 9b:0d:96:14:c0:b3:29:53:5f:66:58:71:2d:53:84: e0:5e:68:15:d6:e0:47:51:a5:99:48:d9:91:c3:b0: cb:10:0c:82:b7:ed:f8:c7:3d:8b:70:cd:38:9a:e6: 88:cb:af:5e:34:99:6e:87:91:e0:49:ec:ec:b1:69: e6:b3:09:81:f9:33:22:12:ea:8c:76:7c:57:cd:a9: d3:10:5e:a7:8b:e2:27:7a:a1:3b:9c:91:fb:9b:e5: e5:02:85:fa:f1:e6:4b:76:9a:eb:9c:79:65:3d:14: bc:ca:29:7a:5c:1b:8b:2b:4a:09:0c:56:58:3c:2a: 6c:a5:58:0e:89:b0:3a:b6:57:a0:17:ce:34:4d:54: 29:b9:9e:b8:d7:a7:56:8f:7d:d5:8f:08:f2:13:68: 13:bd:b4:f9:2b:34:bf:3a:75:64:dd:25:31:a9:26: 65:66:56:ec:3d:57:9e:28:be:aa:27:12:c2:ed:fa: 63:d2:b6:24:e4:b3:43:fb:38:1d:dd:38:04:d7:ef: fc:25:32:10:61:5c:89:0a:45:7a:d2:64:51:2c:55: db:22:ea:0b:42:09:f2:2e:2f:6d:68:fe:b4:dc:b9: a2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:72:A0:17:C7:BE:7F:6F:A7:F2:F8:95:7B:13:4C:F0:42:90:96:01 X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f2:3c:67:d1:12:c9:22:9b:ab:0a:6a:90:28:64:6b:57:f4: f5:ab:f3:c9:ac:76:a8:87:3c:ef:35:a6:c1:72:85:06:9c:b9: 85:05:b0:1c:10:62:d1:4b:9b:ab:1c:29:d9:7c:3e:2f:d8:ae: 66:47:4f:fd:62:42:de:01:76:c4:cf:a7:d2:15:90:df:aa:d9: 44:af:dd:ea:5b:eb:f1:bf:ee:03:93:b4:fc:f7:d7:62:05:c4: f3:08:1d:78:11:b1:ce:03:c3:51:0e:c9:90:f6:68:aa:11:62: 7b:3a:94:fd:f3:76:51:5d:74:c2:40:2e:1c:62:43:c6:2f:20: 60:bb:82:05:45:6b:e0:8d:10:af:f8:fd:72:98:d1:db:e6:04: e8:50:12:52:04:09:6d:de:67:77:a6:b4:6e:d5:09:22:94:3b: 75:12:26:39:fe:af:a4:7e:7d:10:fd:d5:e3:a2:39:a7:dd:46: f6:5e:d1:ea:a5:5f:79:cc:46:f1:ad:01:fd:a3:30:43:dc:5d: 04:63:5f:34:cc:55:41:5d:97:e3:4c:23:ea:7f:3b:55:f4:e4: 08:91:76:5a:f7:52:f0:14:bc:53:fe:c3:c6:d8:a3:a1:29:66: 5a:ee:08:aa:b9:fc:60:84:81:d1:07:fd:d5:d6:b1:0a:43:8e: 19:88:e8:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZYPbDujqBzGKWti1MKjgKPfptoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNjAzMjUwODI2MjVaFw0yNjAzMjgxMjQ5MjVaMDMxMTAvBgNV BAMTKDc5NzJBMDE3QzdCRTdGNkZBN0YyRjg5NTdCMTM0Q0YwNDI5MDk2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjHr6+fp5zA/WDaVMRVzqwrVS 7/KBuRWmJNyEEpsNlhTAsylTX2ZYcS1ThOBeaBXW4EdRpZlI2ZHDsMsQDIK37fjH PYtwzTia5ojLr140mW6HkeBJ7OyxaeazCYH5MyIS6ox2fFfNqdMQXqeL4id6oTuc kfub5eUChfrx5kt2muuceWU9FLzKKXpcG4srSgkMVlg8KmylWA6JsDq2V6AXzjRN VCm5nrjXp1aPfdWPCPITaBO9tPkrNL86dWTdJTGpJmVmVuw9V54ovqonEsLt+mPS tiTks0P7OB3dOATX7/wlMhBhXIkKRXrSZFEsVdsi6gtCCfIuL21o/rTcuaKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeXKgF8e+f2+n8viVexNM8EKQlgEwHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXyPGfREskim6sKapAoZGtX9PWr88msdqiH PO81psFyhQacuYUFsBwQYtFLm6scKdl8Pi/YrmZHT/1iQt4BdsTPp9IVkN+q2USv 3epb6/G/7gOTtPz312IFxPMIHXgRsc4Dw1EOyZD2aKoRYns6lP3zdlFddMJALhxi Q8YvIGC7ggVFa+CNEK/4/XKY0dvmBOhQElIECW3eZ3emtG7VCSKUO3USJjn+r6R+ fRD91eOiOafdRvZe0eqlX3nMRvGtAf2jMEPcXQRjXzTMVUFdl+NMI+p/O1X05AiR dlr3UvAUvFP+w8bYo6EpZlruCKq5/GCEgdEH/dXWsQpDjhmI6Gk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:57:43 2026 by rpki-client