$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft File: B68CA352FD19570302F874C669E957D75A73CB1A.mft (raw, json) Hash identifier: d6W8W117y63bXXWN9F12ssu6Ryyj5ArBlf23sH1UwMA= Subject key identifier: 2E:04:64:2A:5D:50:F1:B1:68:CE:8E:02:BA:33:1E:C4:B0:78:0F:4A Authority key identifier: B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A Certificate issuer: /CN=B68CA352FD19570302F874C669E957D75A73CB1A Certificate serial: 092DED1887C170A19E594BB4F109513E575052B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 04:05:21 +0000 Manifest this update: Sat 26 Sep 2026 04:00:21 +0000 Manifest next update: Sun 27 Sep 2026 05:48:21 +0000 Files and hashes: 1: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: cz1cQtv7tCgDk2XS5KepF7E6Gy4H3IOmqv/4F0jBKKs=) 2: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: PPKzPS1avC1hYARVLoXIKKmtPdbk4f7qBVqCnnsV8sM=) 3: B68CA352FD19570302F874C669E957D75A73CB1A.crl (hash: aDwwnbetcJygiwlkdApmb/0Y1oxgGSFbOgPcPgWgYGU=) 4: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 5VrmWDNZS7if5g//ZdEtWvioHlEWvzJs1bPHJcalJoE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 05:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2d:ed:18:87:c1:70:a1:9e:59:4b:b4:f1:09:51:3e:57:50:52:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B68CA352FD19570302F874C669E957D75A73CB1A Validity Not Before: Sep 26 04:00:21 2026 GMT Not After : Sep 27 05:48:21 2026 GMT Subject: CN=2E04642A5D50F1B168CE8E02BA331EC4B0780F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:a4:3d:be:45:a6:07:78:d0:a5:0d:ee:d4: 99:fe:be:43:13:b3:c4:9a:aa:7a:06:6d:aa:d2:4f: 3c:39:cf:f4:2f:b6:82:f1:ea:34:56:5a:e8:b9:6f: 4d:81:16:05:81:4e:5e:b1:c4:13:4b:63:90:d7:b9: d1:d3:fd:37:61:29:a3:16:68:9a:f0:44:9b:e1:8e: 6f:1c:48:36:2c:fa:0b:3e:58:8d:a9:d8:04:91:5e: 27:57:3a:4d:9f:d7:1d:e5:1a:de:4a:7f:08:e0:1f: c8:ec:60:72:f3:8d:70:c0:6a:d0:5a:0e:eb:95:b6: 06:f2:0c:24:96:cd:aa:98:ee:bb:ea:a2:7e:2c:d8: a2:18:13:a0:a3:20:d2:09:90:b7:fa:7c:80:aa:55: eb:66:a9:4c:20:4d:d0:6d:a4:72:ea:01:78:a4:e3: 9e:65:64:73:b1:a1:c4:bd:e8:3c:b5:51:60:06:81: e0:cc:c9:83:30:e8:54:a2:4e:5f:d4:d4:f8:4f:e7: 87:67:20:29:9f:93:06:5d:b7:02:72:67:57:21:6e: 59:32:1a:75:51:4f:b2:6b:df:b0:9e:d9:a9:cc:3c: 16:03:d2:7f:cc:48:e6:0c:55:5e:e6:d1:50:47:d2: a9:7b:a9:09:0a:a6:76:f1:2d:e0:a2:31:31:45:de: e9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:04:64:2A:5D:50:F1:B1:68:CE:8E:02:BA:33:1E:C4:B0:78:0F:4A X509v3 Authority Key Identifier: keyid:B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c5:a3:f5:00:6d:02:a3:0e:0e:d4:50:44:61:a3:d5:b0:99: 45:4a:ee:7d:dc:1b:73:5d:72:38:f5:7c:c7:aa:16:92:ec:0b: 77:22:b7:ca:cb:c1:10:b0:dd:3b:84:2d:4c:bb:02:75:70:ba: 9d:cc:8a:ae:2b:09:9f:cc:b7:d3:e9:75:fc:f3:ec:40:ba:83: e8:db:78:2a:fa:53:28:87:b0:8a:03:f2:e0:cc:be:71:eb:a4: ba:3c:4a:5a:ba:1d:8d:2d:b8:b8:b1:19:70:49:2d:b0:00:e8: 5f:69:bf:83:12:e1:85:71:d9:c9:b0:d6:64:4e:01:87:b2:c5: 45:3d:1b:16:83:41:39:a4:a3:04:bd:13:ce:ae:4c:69:3a:4f: a8:68:bc:88:e6:8f:f8:cc:ad:96:d2:01:d6:7c:67:85:10:4b: 58:33:e3:77:93:0d:29:5f:74:82:42:1b:81:13:70:9e:6b:f4: 10:63:17:6d:38:6d:fe:c7:da:16:70:35:83:16:26:bc:45:15: 85:58:3b:b7:cf:83:aa:8a:47:fb:e0:dd:53:f2:54:6d:96:00: 2b:a7:e1:78:c9:ff:a7:f4:40:cf:dd:69:d4:d9:73:41:23:f2: 12:ed:f2:a9:52:ba:82:7f:b5:05:aa:cd:a0:54:46:16:ff:e5: 0f:74:54:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCS3tGIfBcKGeWUu08QlRPldQUrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1 QTczQ0IxQTAeFw0yNjA5MjYwNDAwMjFaFw0yNjA5MjcwNTQ4MjFaMDMxMTAvBgNV BAMTKDJFMDQ2NDJBNUQ1MEYxQjE2OENFOEUwMkJBMzMxRUM0QjA3ODBGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglKQ9vkWmB3jQpQ3u1Jn+vkMT s8SaqnoGbarSTzw5z/QvtoLx6jRWWui5b02BFgWBTl6xxBNLY5DXudHT/TdhKaMW aJrwRJvhjm8cSDYs+gs+WI2p2ASRXidXOk2f1x3lGt5KfwjgH8jsYHLzjXDAatBa DuuVtgbyDCSWzaqY7rvqon4s2KIYE6CjINIJkLf6fICqVetmqUwgTdBtpHLqAXik 455lZHOxocS96Dy1UWAGgeDMyYMw6FSiTl/U1PhP54dnICmfkwZdtwJyZ1chblky GnVRT7Jr37Ce2anMPBYD0n/MSOYMVV7m0VBH0ql7qQkKpnbxLeCiMTFF3uknAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgRkKl1Q8bFozo4CujMexLB4D0owHwYDVR0j BBgwFoAUtoyjUv0ZVwMC+HTGaelX11pzyxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAwNDIzM2YtYmIyYy00N2Q3LTkwMWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJG RDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1QTczQ0IxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjhDQTM1MkZEMTk1NzAzMDJGODc0QzY2OUU5NTdENzVBNzND QjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3 RDc1QTczQ0IxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3Fo/UAbQKjDg7UUERho9WwmUVK7n3cG3Nd cjj1fMeqFpLsC3cit8rLwRCw3TuELUy7AnVwup3Miq4rCZ/Mt9Ppdfzz7EC6g+jb eCr6UyiHsIoD8uDMvnHrpLo8Slq6HY0tuLixGXBJLbAA6F9pv4MS4YVx2cmw1mRO AYeyxUU9GxaDQTmkowS9E86uTGk6T6hovIjmj/jMrZbSAdZ8Z4UQS1gz43eTDSlf dIJCG4ETcJ5r9BBjF204bf7H2hZwNYMWJrxFFYVYO7fPg6qKR/vg3VPyVG2WACun 4XjJ/6f0QM/dadTZc0Ej8hLt8qlSuoJ/tQWqzaBURhb/5Q90VHY= -----END CERTIFICATE-----Generated at Sat Sep 26 14:19:10 2026 by rpki-client