$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft File: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft (raw, json) Hash identifier: 07Sb/n8uDIXURQXYwH16sDyOUzoNDGrl1rgLQJhvLQk= Subject key identifier: 76:31:41:7B:A1:00:E0:DB:B4:7D:40:FF:69:59:86:DD:CB:42:80:A2 Authority key identifier: 68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 Certificate issuer: /CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Certificate serial: 392F159CA0F6E1FE7DB6F0724D7F840BB475AB0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:23:28 +0000 Manifest this update: Fri 24 Jul 2026 03:18:28 +0000 Manifest next update: Sat 25 Jul 2026 07:20:28 +0000 Files and hashes: 1: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl (hash: 9+OgkHiTNIm79BkBX+USSi0FTwBNsd1NhrlWIv5DQPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2f:15:9c:a0:f6:e1:fe:7d:b6:f0:72:4d:7f:84:0b:b4:75:ab:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Validity Not Before: Jul 24 03:18:28 2026 GMT Not After : Jul 25 07:20:28 2026 GMT Subject: CN=7631417BA100E0DBB47D40FF695986DDCB4280A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:4a:8c:95:52:41:17:f4:14:55:1e:dd:d7: 46:16:fd:98:5d:25:4c:2b:13:6e:bb:be:b6:b7:1f: b4:bd:46:75:4a:46:0b:3c:4a:53:90:75:b5:f1:ea: 5d:f3:b4:bd:be:3f:60:1c:4f:c8:e9:66:23:c9:9c: d2:c5:d9:cb:82:86:de:a2:e6:bd:cd:69:fe:63:4b: 90:8d:5c:a9:29:6b:23:05:1e:39:ea:8f:56:26:2f: 7d:16:e0:bd:95:32:35:f1:2c:d4:bf:76:7d:91:f8: 83:5a:92:4b:39:4f:6d:f8:bb:c7:48:4f:8c:72:a3: 9a:af:fd:81:92:c9:25:0f:33:db:77:59:47:d5:c9: 66:9b:cc:df:a2:ca:d3:ac:d8:fc:b0:34:40:46:67: 0f:08:1e:a5:c9:9c:e6:91:81:1f:d3:5b:c0:fc:b8: 51:30:2a:6f:88:f3:8f:05:7e:60:b1:bb:8a:73:08: 62:d8:08:c3:ad:fa:c4:33:71:0e:b9:e6:9a:52:47: 4f:62:b6:d5:c6:42:6c:9f:c3:45:b0:78:bb:07:6b: b7:12:f6:39:0c:e3:3d:b8:98:cb:4e:b0:da:56:0e: 4f:cb:35:03:55:31:2c:8d:3e:ae:0f:46:94:e3:a8: f3:4d:02:65:b4:73:9a:9c:96:34:ba:40:25:a7:90: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:31:41:7B:A1:00:E0:DB:B4:7D:40:FF:69:59:86:DD:CB:42:80:A2 X509v3 Authority Key Identifier: keyid:68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7a:ca:d6:ee:6e:0e:03:bc:b1:d4:0f:41:78:e1:4a:e5:50: c3:a8:13:3b:6c:38:b9:aa:47:18:48:a2:2d:73:32:eb:27:5f: ff:2b:58:4a:13:c3:75:be:7e:e3:b3:d4:a5:c1:bc:15:d7:fc: dc:84:82:e5:55:78:68:5b:32:89:bb:c8:84:0d:75:ea:1b:98: 75:ce:3e:2d:48:26:fb:86:e5:81:03:19:77:0f:82:8f:e1:0d: ad:c8:90:25:4a:0c:19:13:d2:f0:14:a1:b8:79:88:92:b0:40: c3:ae:ab:c4:ef:79:9a:44:d2:b5:6c:28:65:da:af:52:2f:a9: 9c:6a:58:ce:4a:4d:de:75:cb:86:79:32:d3:39:12:59:03:7e: 47:01:54:77:69:a7:cc:4a:f1:30:f3:58:24:f5:28:6a:ec:1e: 59:3c:31:34:1b:77:d3:1c:11:c0:dc:5e:b0:0b:2b:e7:b1:27: 6b:79:64:91:ed:26:de:26:05:ae:6c:db:72:4a:05:af:6d:94: 2b:36:79:21:d9:db:71:bb:73:d7:0e:00:9d:77:7c:1f:08:c7: dc:7f:23:23:7e:ce:5f:f5:88:5c:23:90:4a:f9:9d:85:9b:8b: cf:88:91:f3:49:7b:98:63:7e:f1:b0:aa:1c:61:c3:2f:8d:1e: e4:57:4d:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOS8VnKD24f59tvByTX+EC7R1qw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAw M0I3RDkwNTAeFw0yNjA3MjQwMzE4MjhaFw0yNjA3MjUwNzIwMjhaMDMxMTAvBgNV BAMTKDc2MzE0MTdCQTEwMEUwREJCNDdENDBGRjY5NTk4NkREQ0I0MjgwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnUqMlVJBF/QUVR7d10YW/Zhd JUwrE267vra3H7S9RnVKRgs8SlOQdbXx6l3ztL2+P2AcT8jpZiPJnNLF2cuCht6i 5r3Naf5jS5CNXKkpayMFHjnqj1YmL30W4L2VMjXxLNS/dn2R+INakks5T234u8dI T4xyo5qv/YGSySUPM9t3WUfVyWabzN+iytOs2PywNEBGZw8IHqXJnOaRgR/TW8D8 uFEwKm+I848FfmCxu4pzCGLYCMOt+sQzcQ655ppSR09ittXGQmyfw0WweLsHa7cS 9jkM4z24mMtOsNpWDk/LNQNVMSyNPq4PRpTjqPNNAmW0c5qcljS6QCWnkCE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdjFBe6EA4Nu0fUD/aVmG3ctCgKIwHwYDVR0j BBgwFoAUaKkK5a7jXJnUIPEqwO5PYAO32QUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMxOTg3NGMtYTZiMi00YjBiLTljYzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVB RUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAwM0I3RDkwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE5MEFFNUFFRTM1Qzk5RDQyMEYxMkFDMEVFNEY2MDAzQjdE OTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRG NjAwM0I3RDkwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGt6ytbubg4DvLHUD0F44UrlUMOoEztsOLmq RxhIoi1zMusnX/8rWEoTw3W+fuOz1KXBvBXX/NyEguVVeGhbMom7yIQNdeobmHXO Pi1IJvuG5YEDGXcPgo/hDa3IkCVKDBkT0vAUobh5iJKwQMOuq8TveZpE0rVsKGXa r1IvqZxqWM5KTd51y4Z5MtM5ElkDfkcBVHdpp8xK8TDzWCT1KGrsHlk8MTQbd9Mc EcDcXrALK+exJ2t5ZJHtJt4mBa5s23JKBa9tlCs2eSHZ23G7c9cOAJ13fB8Ix9x/ IyN+zl/1iFwjkEr5nYWbi8+IkfNJe5hjfvGwqhxhwy+NHuRXTWI= -----END CERTIFICATE-----Generated at Fri Jul 24 07:35:39 2026 by rpki-client