$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft File: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft (raw, json) Hash identifier: ikWdhYxAfJEfGuYKinZCENhOuNA9G55d23RqmyM7PBA= Subject key identifier: DC:FA:80:8E:28:9F:CE:50:38:92:59:32:A3:6C:3D:78:9F:08:34:28 Authority key identifier: 68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 Certificate issuer: /CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Certificate serial: 40D0D24D407B80B47B40657832C25BA49DF27C47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 06:18:18 +0000 Manifest this update: Fri 25 Sep 2026 06:13:18 +0000 Manifest next update: Sat 26 Sep 2026 09:40:18 +0000 Files and hashes: 1: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl (hash: VDcw37+RSIbtp3uQ9nQCz0r+3o5FyHRjorxcOTCa2pY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d0:d2:4d:40:7b:80:b4:7b:40:65:78:32:c2:5b:a4:9d:f2:7c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Validity Not Before: Sep 25 06:13:18 2026 GMT Not After : Sep 26 09:40:18 2026 GMT Subject: CN=DCFA808E289FCE5038925932A36C3D789F083428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:4e:5f:73:4b:64:6e:f3:94:3b:e0:c9:33: b6:7d:6f:43:26:e5:54:b3:1e:28:02:45:2a:62:3c: 01:5c:c5:a2:4b:ae:15:da:e1:47:8a:1c:6b:96:67: 42:91:97:76:49:dc:f1:09:8b:a7:29:27:40:31:b8: 05:d7:b1:50:99:9f:da:eb:be:7a:85:da:01:4b:7f: fd:43:25:8b:9b:dd:b3:47:69:3e:2e:e0:7d:de:9a: 53:8b:c1:0e:41:9e:52:95:c5:01:8e:0b:4e:f0:c9: c7:c0:b1:c1:8c:3e:e7:8a:6b:22:02:c7:89:fc:14: e4:70:05:83:c7:67:61:17:e9:33:f3:25:48:90:43: 25:25:d0:dd:0c:86:41:d3:8f:06:16:00:00:c8:65: 86:f7:88:cc:a7:a5:c7:75:cf:19:bc:77:d4:b5:20: 58:db:fa:77:3b:55:a2:48:90:64:d5:a2:01:2d:12: 97:43:5e:19:aa:a3:c3:b3:6c:e8:b9:5c:f7:05:e9: 4c:b7:8a:b8:05:a6:34:95:16:f8:6b:2e:22:0f:98: 45:5a:06:03:f0:a5:01:fc:77:ff:91:81:8b:78:34: 4a:83:fb:18:5d:b2:11:46:99:9c:a0:53:ab:dc:12: 6d:8e:76:44:1a:f0:5a:0f:5b:1b:54:42:cb:79:18: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FA:80:8E:28:9F:CE:50:38:92:59:32:A3:6C:3D:78:9F:08:34:28 X509v3 Authority Key Identifier: keyid:68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3a:ed:30:5b:f2:17:e5:07:72:9f:89:77:9d:85:14:98:d7: 45:c7:64:d0:d3:23:55:b9:8c:8d:a4:05:a9:f5:72:44:0b:38: 54:01:8f:fc:1b:cd:3d:4b:47:f5:3b:2c:d6:2d:f8:26:50:7b: d7:3e:aa:a9:8c:f9:51:49:10:fb:68:e8:a2:d7:c3:0b:29:41: 09:5d:1b:f5:ee:4e:fd:ea:15:30:3f:c8:95:e4:f0:e3:90:95: 88:65:c0:82:09:f3:6b:e6:73:fe:2d:51:77:bf:53:67:3b:00: 86:08:bb:50:80:69:a2:0c:52:21:3f:d5:35:20:af:00:52:2b: e4:30:76:32:3e:3c:3d:a0:9c:c2:7d:a3:3b:c4:7d:30:71:ca: c2:ae:45:9e:02:12:39:38:e4:bb:c0:7e:e7:67:9b:66:49:b0: 15:7c:24:bd:4d:e3:e6:62:03:25:6a:ba:43:38:34:e5:1f:92: 8c:67:1c:5e:a3:1a:d1:61:e7:6f:47:b0:fb:7f:f1:32:01:e4: 59:3f:ba:6a:ef:1c:48:24:69:ed:b8:a1:cf:75:06:41:65:bb: e6:8b:63:cf:0c:c8:d4:96:0c:c5:75:db:9e:04:c1:3e:2d:be: 97:a3:cb:b4:e9:45:42:d1:14:e0:99:ee:55:d7:23:10:89:ef: e4:41:73:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNDSTUB7gLR7QGV4MsJbpJ3yfEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAw M0I3RDkwNTAeFw0yNjA5MjUwNjEzMThaFw0yNjA5MjYwOTQwMThaMDMxMTAvBgNV BAMTKERDRkE4MDhFMjg5RkNFNTAzODkyNTkzMkEzNkMzRDc4OUYwODM0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrsE5fc0tkbvOUO+DJM7Z9b0Mm 5VSzHigCRSpiPAFcxaJLrhXa4UeKHGuWZ0KRl3ZJ3PEJi6cpJ0AxuAXXsVCZn9rr vnqF2gFLf/1DJYub3bNHaT4u4H3emlOLwQ5BnlKVxQGOC07wycfAscGMPueKayIC x4n8FORwBYPHZ2EX6TPzJUiQQyUl0N0MhkHTjwYWAADIZYb3iMynpcd1zxm8d9S1 IFjb+nc7VaJIkGTVogEtEpdDXhmqo8OzbOi5XPcF6Uy3irgFpjSVFvhrLiIPmEVa BgPwpQH8d/+RgYt4NEqD+xhdshFGmZygU6vcEm2OdkQa8FoPWxtUQst5GJFDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3PqAjiifzlA4klkyo2w9eJ8INCgwHwYDVR0j BBgwFoAUaKkK5a7jXJnUIPEqwO5PYAO32QUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMxOTg3NGMtYTZiMi00YjBiLTljYzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVB RUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAwM0I3RDkwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE5MEFFNUFFRTM1Qzk5RDQyMEYxMkFDMEVFNEY2MDAzQjdE OTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRG NjAwM0I3RDkwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg67TBb8hflB3KfiXedhRSY10XHZNDTI1W5 jI2kBan1ckQLOFQBj/wbzT1LR/U7LNYt+CZQe9c+qqmM+VFJEPto6KLXwwspQQld G/XuTv3qFTA/yJXk8OOQlYhlwIIJ82vmc/4tUXe/U2c7AIYIu1CAaaIMUiE/1TUg rwBSK+QwdjI+PD2gnMJ9ozvEfTBxysKuRZ4CEjk45LvAfudnm2ZJsBV8JL1N4+Zi AyVqukM4NOUfkoxnHF6jGtFh529HsPt/8TIB5Fk/umrvHEgkae24oc91BkFlu+aL Y88MyNSWDMV1254EwT4tvpejy7TpRULRFOCZ7lXXIxCJ7+RBcy4= -----END CERTIFICATE-----Generated at Fri Sep 25 09:20:48 2026 by rpki-client