$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft File: 68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft (raw, json) Hash identifier: sDBmZ5i6y1CZR8L3qmzKgoSEZfOqABnh7dH2t60O/3g= Subject key identifier: 21:4A:AB:0C:3A:F7:21:DA:BC:8B:20:5D:77:00:E3:C9:D1:F2:AF:D8 Authority key identifier: 68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE Certificate issuer: /CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE Certificate serial: 1899740F5718B10AE20CD76C9C913DFF05278FAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft Manifest number: C2 Signing time: Sat 26 Sep 2026 02:28:12 +0000 Manifest this update: Sat 26 Sep 2026 02:23:12 +0000 Manifest next update: Sun 27 Sep 2026 06:21:12 +0000 Files and hashes: 1: 323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (hash: RqzBnuxk9dxcoh/IjiKr1/twWJoSn5/CF9hmDw/2Ve8=) 2: 68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl (hash: VuZlkkCeP+a88JcC6VOkldWHa5mWlCYLpZtQATC1WLI=) 3: 3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (hash: AfcLIhCoxrNIL4gRzBZvaf0VEddtgYfRViPlzgx7Sn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 06:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:99:74:0f:57:18:b1:0a:e2:0c:d7:6c:9c:91:3d:ff:05:27:8f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE Validity Not Before: Sep 26 02:23:12 2026 GMT Not After : Sep 27 06:21:12 2026 GMT Subject: CN=214AAB0C3AF721DABC8B205D7700E3C9D1F2AFD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:fb:3d:bd:bd:a3:b8:7e:0d:d7:9c:f1:07: bc:68:2b:a9:a4:cc:19:6e:e9:91:1a:b7:4f:72:5e: ff:2e:f1:f6:93:33:5e:5d:31:c2:d1:a1:d6:2f:2c: cd:5a:90:71:21:e3:2f:ae:01:fc:b3:31:b3:8a:7c: d8:69:d1:5d:14:0a:74:5c:8e:f9:9e:6a:7f:d8:5b: a1:36:db:d0:29:b4:31:e1:6d:fd:70:6b:39:08:06: 90:ec:2c:96:3f:c7:d8:07:cd:8b:1e:da:0e:a5:4f: b4:82:e2:13:d7:c8:9d:f4:7d:89:d0:f3:04:c4:4e: 82:ae:d0:f9:11:1c:4d:7a:84:8d:9a:8c:24:f2:2d: 78:40:38:53:95:70:38:e3:23:8e:de:5f:86:db:28: 87:f9:78:27:75:c3:5b:33:4c:4f:02:27:69:94:53: 2e:7c:cf:6a:83:6a:0a:74:72:8f:86:2f:48:e6:3b: 52:88:46:01:82:ff:69:22:12:4f:ba:9f:8f:83:e7: 4a:e4:79:f5:e6:4d:78:7e:eb:1f:06:10:54:0f:42: 50:df:40:fd:6a:22:05:af:a6:c7:9d:5f:58:b1:96: 99:a0:e7:e4:c9:4d:27:a3:cc:e0:34:70:49:b3:ad: ab:80:0f:bb:e0:8e:e4:ff:ae:12:a8:8a:af:70:0c: 0b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4A:AB:0C:3A:F7:21:DA:BC:8B:20:5D:77:00:E3:C9:D1:F2:AF:D8 X509v3 Authority Key Identifier: keyid:68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:b1:6d:b5:67:ed:ca:76:12:16:59:69:c1:04:40:f1:5b:c1: 64:f3:7b:ef:87:7d:64:83:71:19:ff:ba:a1:46:95:63:a6:2c: d7:1f:1a:46:7b:38:c1:7d:94:b2:fb:cd:d1:3a:d6:c5:d4:d9: 98:e6:e3:c6:f3:e0:44:c9:ac:0d:ce:78:23:4a:59:03:21:9d: b6:b2:be:be:dd:06:c9:9b:81:2a:d1:3b:64:a6:e6:80:ea:38: 70:dc:a1:2f:70:d9:0c:d7:77:19:13:81:7a:7a:6f:26:6f:3c: 27:86:1a:a7:9c:95:a8:fb:b7:b9:3c:ea:7c:8d:db:2c:f9:8c: 5a:1d:29:33:2b:fb:73:3a:21:c8:f1:12:53:84:92:67:74:b9: f1:4a:2e:6f:77:b0:8b:d3:57:d4:86:a7:3d:66:35:28:e2:84: 27:fc:bc:3c:5c:b1:49:19:3f:ad:1b:c1:fc:1b:60:23:63:20: d3:df:15:81:75:7a:d7:05:48:2d:1d:42:ca:14:64:65:01:29: 77:4e:7c:95:77:40:65:52:e4:08:8f:cf:a8:02:e6:9b:a3:da: b3:9e:21:a6:c9:27:8d:39:b1:58:9a:7e:fc:19:46:d5:c0:e6: 7e:c2:35:9c:a9:95:97:5f:b2:2a:3f:d0:30:ab:8f:70:28:8b: fd:54:be:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJl0D1cYsQriDNdsnJE9/wUnj6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhGMDA3RDcxMDIzMkE0OTlCRUI2OEUzRTNCRjVFN0Ix MzI1QTlERTAeFw0yNjA5MjYwMjIzMTJaFw0yNjA5MjcwNjIxMTJaMDMxMTAvBgNV BAMTKDIxNEFBQjBDM0FGNzIxREFCQzhCMjA1RDc3MDBFM0M5RDFGMkFGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4YPs9vb2juH4N15zxB7xoK6mk zBlu6ZEat09yXv8u8faTM15dMcLRodYvLM1akHEh4y+uAfyzMbOKfNhp0V0UCnRc jvmean/YW6E229AptDHhbf1wazkIBpDsLJY/x9gHzYse2g6lT7SC4hPXyJ30fYnQ 8wTEToKu0PkRHE16hI2ajCTyLXhAOFOVcDjjI47eX4bbKIf5eCd1w1szTE8CJ2mU Uy58z2qDagp0co+GL0jmO1KIRgGC/2kiEk+6n4+D50rkefXmTXh+6x8GEFQPQlDf QP1qIgWvpsedX1ixlpmg5+TJTSejzOA0cEmzrauAD7vgjuT/rhKoiq9wDAs/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIUqrDDr3Idq8iyBddwDjydHyr9gwHwYDVR0j BBgwFoAUaPAH1xAjKkmb62jj479eexMlqd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzgxOWNkZGYtNmRkOS00ZDljLWI1MzgtOGI3NmI3YzljZTYxLzAvNjhGMDA3RDcx MDIzMkE0OTlCRUI2OEUzRTNCRjVFN0IxMzI1QTlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEYwMDdENzEwMjMyQTQ5OUJFQjY4RTNFM0JGNUU3QjEzMjVB OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzgxOWNkZGYtNmRkOS00ZDljLWI1 MzgtOGI3NmI3YzljZTYxLzAvNjhGMDA3RDcxMDIzMkE0OTlCRUI2OEUzRTNCRjVF N0IxMzI1QTlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+xbbVn7cp2EhZZacEEQPFbwWTze++HfWSD cRn/uqFGlWOmLNcfGkZ7OMF9lLL7zdE61sXU2Zjm48bz4ETJrA3OeCNKWQMhnbay vr7dBsmbgSrRO2Sm5oDqOHDcoS9w2QzXdxkTgXp6byZvPCeGGqeclaj7t7k86nyN 2yz5jFodKTMr+3M6IcjxElOEkmd0ufFKLm93sIvTV9SGpz1mNSjihCf8vDxcsUkZ P60bwfwbYCNjINPfFYF1etcFSC0dQsoUZGUBKXdOfJV3QGVS5AiPz6gC5puj2rOe IabJJ405sViafvwZRtXA5n7CNZyplZdfsio/0DCrj3Aoi/1UvrQ= -----END CERTIFICATE-----Generated at Sat Sep 26 18:39:14 2026 by rpki-client