$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft File: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft (raw, json) Hash identifier: LYN06MpfioNATOSs4tO/uBwtPaD+vWUUh/0c+Bw90IM= Subject key identifier: 96:67:B8:62:88:93:21:5B:69:ED:F0:E1:88:24:AC:AB:76:8F:F2:E8 Authority key identifier: 68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 Certificate issuer: /CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Certificate serial: 523F7CBDB4D73FE321C3B1F49A26EDF17844026D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft Manifest number: 0F Signing time: Wed 13 May 2026 03:32:25 +0000 Manifest this update: Wed 13 May 2026 03:27:25 +0000 Manifest next update: Thu 14 May 2026 03:56:25 +0000 Files and hashes: 1: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: GQgQVMDtxFDkqPjuHN/9ksx5BAe6A6G9N08FMHk3oZk=) 2: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: /CDimDlLGoFwieJxhxPKJxVZVpw8NVAKdG9UUGzsEz8=) 3: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: aBcK0NarT0nImTnt9nV5uNk7IL6hRk/eBBV0YB7Rf0U=) 4: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl (hash: G5AMsNgWuxyAY9cGqPyjuCZ2B421CkbvIhOdB7tH4TU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3f:7c:bd:b4:d7:3f:e3:21:c3:b1:f4:9a:26:ed:f1:78:44:02:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Validity Not Before: May 13 03:27:25 2026 GMT Not After : May 14 03:56:25 2026 GMT Subject: CN=9667B8628893215B69EDF0E18824ACAB768FF2E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ad:70:5a:f6:c8:1b:7b:07:df:63:a3:14:a5: b0:a4:10:c3:d3:4c:46:65:ec:b8:bc:8e:bf:3c:f2: 8d:ce:04:b7:73:b1:1e:e9:1a:2b:48:aa:ea:08:b5: f4:64:cd:f9:39:3e:6b:d3:66:b2:61:7f:18:68:26: 0f:9c:7e:ba:51:49:a4:91:98:70:df:0c:c4:47:a8: db:de:b8:1a:fa:19:d1:8c:16:85:a4:ee:2f:13:9f: 01:9e:05:70:d2:bf:89:ab:bb:8a:69:65:9d:7d:79: 8f:e5:c2:20:74:68:ca:5e:a3:6d:41:29:10:e0:a2: 55:54:ed:0b:62:60:75:9c:cf:7d:4e:c7:90:51:4b: 91:6f:c9:98:e0:b7:a6:a1:c2:2f:b0:bf:d7:75:31: 14:ff:97:7a:db:c1:80:9a:13:6f:a3:f2:07:2c:94: ca:01:45:9f:a9:ff:91:62:27:78:38:e4:7f:a8:51: ed:1a:f0:d2:65:7d:f9:cf:99:f2:b0:8a:10:2d:43: 40:5f:f4:3d:ba:08:00:cd:a6:7b:7e:cd:f0:4b:84: f0:79:ea:6a:5c:09:d4:74:f5:e7:a1:9e:e7:30:18: 6f:ca:01:28:51:1d:9e:a6:e5:f7:71:59:99:0b:e6: 05:1f:61:39:58:2a:a0:57:c7:da:cf:27:fc:53:fc: 87:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:67:B8:62:88:93:21:5B:69:ED:F0:E1:88:24:AC:AB:76:8F:F2:E8 X509v3 Authority Key Identifier: keyid:68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:42:86:ce:9b:54:e8:eb:3a:4d:66:d5:19:f5:46:36:81:1a: cc:a5:a8:ba:d5:da:95:81:63:8e:52:03:48:77:ef:da:d7:ab: 01:0c:33:ac:27:06:33:50:be:62:e0:c8:8a:22:f0:e2:cb:bf: 47:d5:35:38:a9:81:c5:64:c1:ba:c1:ee:b4:b9:0e:cb:6d:69: 29:22:50:07:29:2d:c1:67:43:4f:92:78:f5:51:45:c9:fa:a1: c9:b9:3e:84:28:10:41:d8:22:58:3c:64:9c:d7:8e:4c:fc:5a: 74:0e:47:80:ae:7d:5c:27:7e:95:70:17:3a:e6:13:c7:80:dc: a9:58:ba:2a:69:20:63:e4:43:72:f7:c3:a4:e4:8a:8f:63:17: 8a:4c:72:a0:87:56:df:f6:ad:1d:7f:ad:97:e0:87:02:89:37: bd:0a:80:10:22:f0:83:5e:8a:95:31:40:49:c4:fa:82:b9:99: b7:7a:26:f1:f4:d3:36:6c:1f:aa:b9:66:ca:35:f8:78:9a:93: e2:ca:cc:df:d7:bd:4c:43:83:0b:ba:cc:5a:dc:72:3f:31:1e: 55:15:19:a3:98:e7:8b:bf:bd:ec:f0:e1:90:ec:d1:ee:6d:80: f9:1f:b4:31:6c:b6:f3:cd:4f:45:e1:3d:25:89:fc:23:fd:4f: 20:44:5b:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUj98vbTXP+Mhw7H0mibt8XhEAm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUEx MDA4QkNGMDAeFw0yNjA1MTMwMzI3MjVaFw0yNjA1MTQwMzU2MjVaMDMxMTAvBgNV BAMTKDk2NjdCODYyODg5MzIxNUI2OUVERjBFMTg4MjRBQ0FCNzY4RkYyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtrXBa9sgbewffY6MUpbCkEMPT TEZl7Li8jr888o3OBLdzsR7pGitIquoItfRkzfk5PmvTZrJhfxhoJg+cfrpRSaSR mHDfDMRHqNveuBr6GdGMFoWk7i8TnwGeBXDSv4mru4ppZZ19eY/lwiB0aMpeo21B KRDgolVU7QtiYHWcz31Ox5BRS5FvyZjgt6ahwi+wv9d1MRT/l3rbwYCaE2+j8gcs lMoBRZ+p/5FiJ3g45H+oUe0a8NJlffnPmfKwihAtQ0Bf9D26CADNpnt+zfBLhPB5 6mpcCdR09eehnucwGG/KAShRHZ6m5fdxWZkL5gUfYTlYKqBXx9rPJ/xT/IepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlme4YoiTIVtp7fDhiCSsq3aP8ugwHwYDVR0j BBgwFoAUaCJ6y2DT6eEMa5pX04MTmhAIvPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZWNkNzQtNDQyNC00ZDQwLTk2YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2 MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUExMDA4QkNGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODIyN0FDQjYwRDNFOUUxMEM2QjlBNTdEMzgzMTM5QTEwMDhC Q0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEz OUExMDA4QkNGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJChs6bVOjrOk1m1Rn1RjaBGsylqLrV2pWB Y45SA0h379rXqwEMM6wnBjNQvmLgyIoi8OLLv0fVNTipgcVkwbrB7rS5DsttaSki UAcpLcFnQ0+SePVRRcn6ocm5PoQoEEHYIlg8ZJzXjkz8WnQOR4CufVwnfpVwFzrm E8eA3KlYuippIGPkQ3L3w6Tkio9jF4pMcqCHVt/2rR1/rZfghwKJN70KgBAi8INe ipUxQEnE+oK5mbd6JvH00zZsH6q5Zso1+Hiak+LKzN/XvUxDgwu6zFrccj8xHlUV GaOY54u/vezw4ZDs0e5tgPkftDFstvPNT0XhPSWJ/CP9TyBEW/Y= -----END CERTIFICATE-----Generated at Wed May 13 06:47:40 2026 by rpki-client