$ rpki-client -vvf rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft File: 68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft (raw, json) Hash identifier: elc7FbRxZ9vyNh/n7WllmvnG26nYaeGSgkt4K9G3QKg= Subject key identifier: DD:5E:BD:EE:C6:CB:7F:7D:56:A4:D9:13:A2:74:15:1B:7F:EC:6E:18 Authority key identifier: 68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE Certificate issuer: /CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE Certificate serial: 18DA3A63BC78C6B057AFB926DEA8ABD46D3EE64A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 09:52:06 +0000 Manifest this update: Thu 23 Jul 2026 09:47:06 +0000 Manifest next update: Fri 24 Jul 2026 10:42:06 +0000 Files and hashes: 1: 323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (hash: RqzBnuxk9dxcoh/IjiKr1/twWJoSn5/CF9hmDw/2Ve8=) 2: 68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl (hash: XzoPSZZoJPHgGrQbHzjngsC+tGchEOq5tb3a8hJB+70=) 3: 3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (hash: AfcLIhCoxrNIL4gRzBZvaf0VEddtgYfRViPlzgx7Sn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:da:3a:63:bc:78:c6:b0:57:af:b9:26:de:a8:ab:d4:6d:3e:e6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE Validity Not Before: Jul 23 09:47:06 2026 GMT Not After : Jul 24 10:42:06 2026 GMT Subject: CN=DD5EBDEEC6CB7F7D56A4D913A274151B7FEC6E18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:db:20:ed:bf:6e:a5:0c:61:e3:03:25:4a: 6c:d4:c6:a2:de:57:fc:ec:bc:5f:95:2f:c9:76:21: e0:72:1c:b4:b5:c2:66:89:25:20:6f:d0:b8:0b:e8: 24:ef:05:04:88:22:21:74:23:3b:92:00:47:16:a3: e2:48:cd:fa:58:5a:92:21:5a:c0:fa:b6:a8:f9:b1: ff:89:e8:05:81:d3:1d:da:85:e5:98:ee:c3:0e:50: 91:fc:2f:6c:3f:5c:82:43:36:54:6d:a1:7d:fa:e7: 7a:58:76:62:60:89:90:b1:c3:54:0d:e6:e4:ab:a5: fe:fd:ea:4f:bb:d9:5b:5f:4b:5b:5f:3c:b7:0c:52: 3d:cf:dd:37:4e:83:60:0e:d9:07:c2:c6:37:42:86: 75:9a:e6:fc:b4:d6:17:07:57:d4:05:1b:40:47:2b: 9d:e9:98:3e:42:91:25:25:74:64:6b:51:e7:5f:86: b9:61:5a:c9:e4:d0:25:c5:01:e3:68:8f:71:90:3a: 41:fa:1e:a1:59:6a:70:53:72:17:0f:ce:7d:18:5c: a6:ae:ba:a7:15:20:f2:46:a4:88:d2:73:72:22:8c: 2e:b9:e6:2d:e7:43:3e:2f:84:2d:92:69:b2:6b:b4: 6c:ec:cb:3d:bf:a0:04:05:22:47:0f:df:49:48:aa: da:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5E:BD:EE:C6:CB:7F:7D:56:A4:D9:13:A2:74:15:1B:7F:EC:6E:18 X509v3 Authority Key Identifier: keyid:68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b4:19:59:99:61:04:83:36:da:38:12:a8:10:a9:09:0e:ed: 84:37:18:69:e4:6f:80:57:85:45:9c:41:ef:c2:7d:11:df:53: 62:b2:d5:72:1f:c6:29:f6:55:a5:1d:cd:34:8a:4b:ff:f4:21: 36:0a:3c:c4:f2:02:fd:ff:b2:63:25:5f:19:9f:db:fb:6f:09: 9f:38:48:61:68:05:bf:58:bd:09:53:10:a3:ed:8c:08:94:d3: 98:e7:46:f1:b2:74:fb:c5:2d:8e:ed:73:5d:fe:1e:2f:cb:84: 48:4d:1f:98:8d:c4:c8:32:96:6f:ea:16:d5:52:83:0d:8b:15: 19:d2:88:31:e0:82:f9:35:a8:f9:f9:36:42:dc:53:6f:28:98: 70:87:54:9f:5a:27:1b:7a:a6:44:f1:cc:19:37:51:7f:14:7e: c1:b8:a3:16:3e:c4:0f:59:1d:3f:6f:fc:d4:f1:cb:a6:85:fc: e7:58:d2:ea:4c:15:7f:70:2d:23:c4:e7:9f:c3:09:bd:61:07: e4:f2:0e:23:40:ac:9f:e9:9f:bc:21:b3:e4:2d:16:e0:6d:26: c5:b6:05:24:0d:2f:55:1a:ce:ec:e9:57:64:25:26:67:51:5a: 20:57:8b:5f:c0:9e:d4:79:f8:de:e6:ea:dc:84:b1:10:cc:0b: 84:be:db:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNo6Y7x4xrBXr7km3qir1G0+5kowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhGMDA3RDcxMDIzMkE0OTlCRUI2OEUzRTNCRjVFN0Ix MzI1QTlERTAeFw0yNjA3MjMwOTQ3MDZaFw0yNjA3MjQxMDQyMDZaMDMxMTAvBgNV BAMTKERENUVCREVFQzZDQjdGN0Q1NkE0RDkxM0EyNzQxNTFCN0ZFQzZFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChetsg7b9upQxh4wMlSmzUxqLe V/zsvF+VL8l2IeByHLS1wmaJJSBv0LgL6CTvBQSIIiF0IzuSAEcWo+JIzfpYWpIh WsD6tqj5sf+J6AWB0x3aheWY7sMOUJH8L2w/XIJDNlRtoX3653pYdmJgiZCxw1QN 5uSrpf796k+72VtfS1tfPLcMUj3P3TdOg2AO2QfCxjdChnWa5vy01hcHV9QFG0BH K53pmD5CkSUldGRrUedfhrlhWsnk0CXFAeNoj3GQOkH6HqFZanBTchcPzn0YXKau uqcVIPJGpIjSc3IijC655i3nQz4vhC2SabJrtGzsyz2/oAQFIkcP30lIqtrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3V697sbLf31WpNkTonQVG3/sbhgwHwYDVR0j BBgwFoAUaPAH1xAjKkmb62jj479eexMlqd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzgxOWNkZGYtNmRkOS00ZDljLWI1MzgtOGI3NmI3YzljZTYxLzAvNjhGMDA3RDcx MDIzMkE0OTlCRUI2OEUzRTNCRjVFN0IxMzI1QTlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEYwMDdENzEwMjMyQTQ5OUJFQjY4RTNFM0JGNUU3QjEzMjVB OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzgxOWNkZGYtNmRkOS00ZDljLWI1 MzgtOGI3NmI3YzljZTYxLzAvNjhGMDA3RDcxMDIzMkE0OTlCRUI2OEUzRTNCRjVF N0IxMzI1QTlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+0GVmZYQSDNto4EqgQqQkO7YQ3GGnkb4BX hUWcQe/CfRHfU2Ky1XIfxin2VaUdzTSKS//0ITYKPMTyAv3/smMlXxmf2/tvCZ84 SGFoBb9YvQlTEKPtjAiU05jnRvGydPvFLY7tc13+Hi/LhEhNH5iNxMgylm/qFtVS gw2LFRnSiDHggvk1qPn5NkLcU28omHCHVJ9aJxt6pkTxzBk3UX8UfsG4oxY+xA9Z HT9v/NTxy6aF/OdY0upMFX9wLSPE55/DCb1hB+TyDiNArJ/pn7whs+QtFuBtJsW2 BSQNL1UazuzpV2QlJmdRWiBXi1/AntR5+N7m6tyEsRDMC4S+21Q= -----END CERTIFICATE-----Generated at Fri Jul 24 01:50:53 2026 by rpki-client