$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft File: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft (raw, json) Hash identifier: Ixq7wh/3MurEIKxJ7ebOXwhTY0KhbL0akJi9puHWqPQ= Subject key identifier: B9:52:F6:FC:FC:FB:AD:E1:A9:6E:5B:56:D1:1E:AC:1C:3D:B0:AB:56 Authority key identifier: 68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 Certificate issuer: /CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Certificate serial: 495CFDCC7B3663D68043FC7930A37AF773CF17DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft Manifest number: 0E Signing time: Tue 12 May 2026 13:33:35 +0000 Manifest this update: Tue 12 May 2026 13:28:35 +0000 Manifest next update: Wed 13 May 2026 14:51:35 +0000 Files and hashes: 1: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl (hash: ogU4Xwlr9JjlpFJPUn6aOOHUPjUIej5HsConhPnDHkw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5c:fd:cc:7b:36:63:d6:80:43:fc:79:30:a3:7a:f7:73:cf:17:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Validity Not Before: May 12 13:28:35 2026 GMT Not After : May 13 14:51:35 2026 GMT Subject: CN=B952F6FCFCFBADE1A96E5B56D11EAC1C3DB0AB56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:d4:91:31:bd:e3:1e:9b:d1:32:85:46:cc: 51:06:60:89:e9:99:c8:e7:43:47:82:53:13:4b:84: aa:47:a2:53:04:27:27:26:a2:22:72:2a:e9:26:37: 39:42:3a:38:39:ed:b2:18:17:f1:26:c4:1a:ec:91: 95:5b:7f:1d:a2:36:84:58:fe:ed:85:2e:33:5d:a1: 01:c5:fa:d3:bb:9e:dc:8a:6d:0a:c2:31:95:7f:06: 4a:66:7e:8f:76:56:68:84:d6:6e:bc:81:0a:ee:4d: a0:ed:0d:37:ff:d7:db:c9:b9:e1:a4:d5:af:67:1e: 86:23:78:2b:10:33:df:a7:d3:c8:4f:8d:27:70:8f: f6:12:a6:3a:a3:32:58:53:67:f8:08:4c:64:50:ce: dd:a1:80:04:49:50:fa:34:ac:f6:25:9f:5f:91:96: 44:02:23:20:56:45:6d:dd:21:56:64:61:c7:a3:81: 5a:ed:9b:7f:ce:fd:cc:05:7c:f9:75:55:9f:68:d8: ba:ef:70:51:70:dd:f7:6a:18:db:6a:67:cb:34:a0: bf:43:12:fb:27:cb:c7:c9:37:96:1e:93:70:7b:7c: 45:1a:8b:a2:3c:d6:1b:6a:c5:ef:11:b8:ac:76:7e: 42:be:1f:5a:ab:58:b8:e2:c9:3e:c4:5f:6d:04:f0: ae:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:52:F6:FC:FC:FB:AD:E1:A9:6E:5B:56:D1:1E:AC:1C:3D:B0:AB:56 X509v3 Authority Key Identifier: keyid:68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:2e:bc:a6:5b:46:51:16:36:6d:82:c0:46:f4:66:ca:3b:12: 4f:38:8f:4b:60:b8:bb:32:37:45:9e:c6:eb:03:1a:50:4f:0a: ad:a8:15:a4:b8:7f:97:1a:9a:46:aa:a2:0c:1f:5f:03:1a:95: d3:66:ea:6a:01:03:61:b3:2a:c6:08:18:44:ba:54:35:94:4e: 3b:fc:a2:5f:75:78:04:d8:bb:b2:80:45:b1:c6:39:f0:b3:43: 27:61:9f:9f:ef:fc:d2:bd:77:b9:1b:ef:90:8c:a5:93:47:c6: 5e:8e:43:f8:8e:4f:4f:16:85:f6:28:09:42:34:1f:d8:4f:ca: cf:c1:8e:d7:e3:e3:39:4e:7c:a6:7a:a8:4d:5b:47:3d:37:d9: 3f:4b:70:54:fe:fe:96:89:eb:cb:e7:58:33:36:d3:e6:85:74: d4:ea:41:3c:72:17:74:4e:8f:f0:e1:9c:99:f1:95:97:df:37: 1b:9d:ac:53:23:82:16:fc:5f:78:0f:33:99:d9:9c:1f:61:2c: dc:b9:88:8a:2d:dc:2e:4c:00:50:62:29:aa:ec:77:54:d7:90: e2:8c:b2:85:64:14:91:4e:7b:22:a6:34:e5:b8:1c:bd:ed:ac: f9:7e:23:cb:e3:ad:29:dd:5d:d9:cb:a7:6d:af:05:f1:37:42: 6c:08:bf:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVz9zHs2Y9aAQ/x5MKN693PPF94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAw M0I3RDkwNTAeFw0yNjA1MTIxMzI4MzVaFw0yNjA1MTMxNDUxMzVaMDMxMTAvBgNV BAMTKEI5NTJGNkZDRkNGQkFERTFBOTZFNUI1NkQxMUVBQzFDM0RCMEFCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisdSRMb3jHpvRMoVGzFEGYInp mcjnQ0eCUxNLhKpHolMEJycmoiJyKukmNzlCOjg57bIYF/EmxBrskZVbfx2iNoRY /u2FLjNdoQHF+tO7ntyKbQrCMZV/Bkpmfo92VmiE1m68gQruTaDtDTf/19vJueGk 1a9nHoYjeCsQM9+n08hPjSdwj/YSpjqjMlhTZ/gITGRQzt2hgARJUPo0rPYln1+R lkQCIyBWRW3dIVZkYcejgVrtm3/O/cwFfPl1VZ9o2LrvcFFw3fdqGNtqZ8s0oL9D Evsny8fJN5Yek3B7fEUai6I81htqxe8RuKx2fkK+H1qrWLjiyT7EX20E8K55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuVL2/Pz7reGpbltW0R6sHD2wq1YwHwYDVR0j BBgwFoAUaKkK5a7jXJnUIPEqwO5PYAO32QUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMxOTg3NGMtYTZiMi00YjBiLTljYzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVB RUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAwM0I3RDkwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE5MEFFNUFFRTM1Qzk5RDQyMEYxMkFDMEVFNEY2MDAzQjdE OTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRG NjAwM0I3RDkwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMuvKZbRlEWNm2CwEb0Zso7Ek84j0tguLsy N0WexusDGlBPCq2oFaS4f5camkaqogwfXwMaldNm6moBA2GzKsYIGES6VDWUTjv8 ol91eATYu7KARbHGOfCzQydhn5/v/NK9d7kb75CMpZNHxl6OQ/iOT08WhfYoCUI0 H9hPys/Bjtfj4zlOfKZ6qE1bRz032T9LcFT+/paJ68vnWDM20+aFdNTqQTxyF3RO j/DhnJnxlZffNxudrFMjghb8X3gPM5nZnB9hLNy5iIot3C5MAFBiKarsd1TXkOKM soVkFJFOeyKmNOW4HL3trPl+I8vjrSndXdnLp22vBfE3QmwIv6k= -----END CERTIFICATE-----Generated at Tue May 12 22:13:24 2026 by rpki-client