$ rpki-client -vvf rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft File: B68CA352FD19570302F874C669E957D75A73CB1A.mft (raw, json) Hash identifier: v4PZw6Pw3185MuEahMeW0CifinGeN3E/uBLhcjZX38I= Subject key identifier: 16:C6:8F:1D:99:38:0D:33:29:20:C0:D2:4D:A3:48:E5:CE:74:97:6D Authority key identifier: B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A Certificate issuer: /CN=B68CA352FD19570302F874C669E957D75A73CB1A Certificate serial: 520D09759C10F5E3213A1C33754556A6905AEFBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:23:22 +0000 Manifest this update: Thu 23 Jul 2026 23:18:22 +0000 Manifest next update: Sat 25 Jul 2026 01:09:22 +0000 Files and hashes: 1: B68CA352FD19570302F874C669E957D75A73CB1A.crl (hash: 7yjB8zpi7g0AS+iP5nsIRbgeTi9S0eGJYUoKDZsEYJQ=) 2: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 5VrmWDNZS7if5g//ZdEtWvioHlEWvzJs1bPHJcalJoE=) 3: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: PPKzPS1avC1hYARVLoXIKKmtPdbk4f7qBVqCnnsV8sM=) 4: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: cz1cQtv7tCgDk2XS5KepF7E6Gy4H3IOmqv/4F0jBKKs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0d:09:75:9c:10:f5:e3:21:3a:1c:33:75:45:56:a6:90:5a:ef:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B68CA352FD19570302F874C669E957D75A73CB1A Validity Not Before: Jul 23 23:18:22 2026 GMT Not After : Jul 25 01:09:22 2026 GMT Subject: CN=16C68F1D99380D332920C0D24DA348E5CE74976D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:fe:40:e7:1d:eb:85:28:21:4c:cf:77:47: b7:0b:a0:ae:55:8f:65:68:d2:bb:97:63:8b:75:a7: 36:25:e7:70:e5:d8:c4:5c:08:a9:7e:83:7d:e4:91: fb:19:ce:fb:d1:90:62:a5:6d:47:52:a0:3f:f7:1c: c1:b5:1f:f1:2a:e6:16:5d:e8:93:07:53:e9:e4:bd: b6:0a:37:ee:c1:96:10:49:8a:08:84:ad:14:dd:c9: 67:b0:1a:ad:77:f8:40:19:30:9c:53:05:21:f3:06: 8d:0e:ac:6f:8b:10:76:c0:c4:0b:a9:e2:32:0d:29: e7:73:db:e2:b4:5c:07:57:bc:6d:af:05:99:6f:c0: dc:f1:09:ae:65:cd:98:99:81:c5:95:86:a3:d8:72: 27:0f:51:9c:f8:c5:62:d7:64:0b:b1:d6:ea:ca:2d: 48:db:4c:49:37:1e:f9:0f:ff:67:c7:da:e8:ff:05: 1f:e0:ab:d9:41:2a:82:ef:ca:6d:d1:7d:74:2c:c7: 63:a3:c2:fb:0b:91:7c:f8:79:3e:29:ce:bf:35:4d: 44:cf:13:78:88:5f:8e:04:b2:bb:ce:77:6b:05:b5: 0c:f2:3e:79:4d:14:93:7c:1e:a7:b9:34:08:f3:33: 75:87:80:57:78:ed:4d:12:fc:b2:df:6f:84:31:80: 81:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C6:8F:1D:99:38:0D:33:29:20:C0:D2:4D:A3:48:E5:CE:74:97:6D X509v3 Authority Key Identifier: keyid:B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:77:db:db:02:00:f1:af:80:d7:1c:ff:4c:64:7f:27:66:ee: e4:39:df:f7:69:41:91:be:66:66:43:a9:86:15:b6:15:67:9a: 35:d4:a4:e6:a5:64:e5:33:7e:42:45:b1:cb:2c:80:27:05:88: 24:4c:90:29:ad:49:a8:55:ab:d2:a1:7d:d6:da:dd:2d:a8:20: b3:92:b5:eb:46:5b:43:45:5e:68:6c:a0:28:a0:8e:95:d1:d4: 45:72:23:07:cb:5f:1a:14:b4:8b:23:bb:bc:7e:93:c5:97:52: 97:69:b9:75:73:6b:37:4e:73:20:d7:49:2e:e0:2b:ae:df:38: 3c:ef:f1:e0:67:61:56:3f:e6:21:da:f8:4c:cf:55:16:5a:fa: 46:4e:b1:8e:e4:c5:17:99:b3:f4:a4:16:a5:8b:32:24:51:f6: 0c:25:cf:c0:a9:e0:5c:3c:83:a3:a8:00:61:e2:ce:f9:6a:3d: 91:39:03:96:d5:25:f9:7b:0d:11:57:f5:a7:c9:ec:a7:7a:70: 8e:0f:e3:b5:3d:72:e5:12:8e:3c:59:fa:bc:6f:91:30:d4:b2: 06:27:7f:ef:2a:01:54:b9:7f:97:8f:4a:a2:72:c3:2a:14:78: 05:6a:64:c6:2f:8f:a2:b1:a4:21:d2:88:6d:16:a6:9b:8d:10: 35:ac:b0:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUg0JdZwQ9eMhOhwzdUVWppBa77owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1 QTczQ0IxQTAeFw0yNjA3MjMyMzE4MjJaFw0yNjA3MjUwMTA5MjJaMDMxMTAvBgNV BAMTKDE2QzY4RjFEOTkzODBEMzMyOTIwQzBEMjREQTM0OEU1Q0U3NDk3NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CP5A5x3rhSghTM93R7cLoK5V j2Vo0ruXY4t1pzYl53Dl2MRcCKl+g33kkfsZzvvRkGKlbUdSoD/3HMG1H/Eq5hZd 6JMHU+nkvbYKN+7BlhBJigiErRTdyWewGq13+EAZMJxTBSHzBo0OrG+LEHbAxAup 4jINKedz2+K0XAdXvG2vBZlvwNzxCa5lzZiZgcWVhqPYcicPUZz4xWLXZAux1urK LUjbTEk3HvkP/2fH2uj/BR/gq9lBKoLvym3RfXQsx2OjwvsLkXz4eT4pzr81TUTP E3iIX44EsrvOd2sFtQzyPnlNFJN8Hqe5NAjzM3WHgFd47U0S/LLfb4QxgIHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFsaPHZk4DTMpIMDSTaNI5c50l20wHwYDVR0j BBgwFoAUtoyjUv0ZVwMC+HTGaelX11pzyxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAwNDIzM2YtYmIyYy00N2Q3LTkwMWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJG RDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1QTczQ0IxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjhDQTM1MkZEMTk1NzAzMDJGODc0QzY2OUU5NTdENzVBNzND QjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3 RDc1QTczQ0IxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACd329sCAPGvgNcc/0xkfydm7uQ53/dpQZG+ ZmZDqYYVthVnmjXUpOalZOUzfkJFscssgCcFiCRMkCmtSahVq9Khfdba3S2oILOS tetGW0NFXmhsoCigjpXR1EVyIwfLXxoUtIsju7x+k8WXUpdpuXVzazdOcyDXSS7g K67fODzv8eBnYVY/5iHa+EzPVRZa+kZOsY7kxReZs/SkFqWLMiRR9gwlz8Cp4Fw8 g6OoAGHizvlqPZE5A5bVJfl7DRFX9afJ7Kd6cI4P47U9cuUSjjxZ+rxvkTDUsgYn f+8qAVS5f5ePSqJywyoUeAVqZMYvj6KxpCHSiG0WppuNEDWssNw= -----END CERTIFICATE-----Generated at Fri Jul 24 07:38:58 2026 by rpki-client