$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft File: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft (raw, json) Hash identifier: d6p13CyZi/4uVcq4aG/BDCqsokEyG9MdQzbThWa/Y14= Subject key identifier: 6D:EB:02:4D:6C:19:2A:6B:DD:42:5F:6E:74:C3:01:18:70:58:77:6A Authority key identifier: 68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 Certificate issuer: /CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Certificate serial: F38C8FC1706CEF027D615298754CD9F91BCEA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 20:00:10 +0000 Manifest this update: Thu 24 Sep 2026 19:55:10 +0000 Manifest next update: Fri 25 Sep 2026 20:45:10 +0000 Files and hashes: 1: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl (hash: nS0Ikqr4eEzfHHePDZ3jXDrtdjoZdDz7q8CtyGitX1g=) 2: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: aBcK0NarT0nImTnt9nV5uNk7IL6hRk/eBBV0YB7Rf0U=) 3: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: /CDimDlLGoFwieJxhxPKJxVZVpw8NVAKdG9UUGzsEz8=) 4: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: GQgQVMDtxFDkqPjuHN/9ksx5BAe6A6G9N08FMHk3oZk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f3:8c:8f:c1:70:6c:ef:02:7d:61:52:98:75:4c:d9:f9:1b:ce:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Validity Not Before: Sep 24 19:55:10 2026 GMT Not After : Sep 25 20:45:10 2026 GMT Subject: CN=6DEB024D6C192A6BDD425F6E74C301187058776A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:be:b5:5d:a8:7a:65:c0:69:9e:a7:2a:69: c7:37:3d:fc:7b:06:af:5a:01:f0:24:40:aa:af:96: ee:2a:70:b2:35:85:c4:6e:53:e0:ef:36:91:04:54: 5f:02:f9:75:76:2e:83:ed:5d:b5:08:e1:86:48:a6: e6:14:32:da:08:1a:84:b3:42:50:fd:7e:37:c9:b0: 5d:12:aa:61:e5:d8:df:a3:6d:5b:59:8f:2c:3c:84: 37:13:eb:02:7c:87:66:e9:a8:e5:ce:46:cd:81:29: 14:50:a7:58:35:82:8b:cb:1b:ad:2a:06:de:c2:f8: 1b:07:db:00:1c:e8:c3:73:6b:58:45:a8:fa:ee:62: 41:ae:c0:40:2e:af:b8:ca:dd:3d:34:83:34:21:c9: 99:76:2d:66:9c:f8:bf:13:1d:2d:4f:71:87:69:56: 0d:5f:b2:4f:02:96:63:25:5b:cf:7d:37:29:6a:95: 6f:fb:31:19:96:0d:9d:5b:98:ca:57:76:8b:ac:1d: 9d:41:06:0f:47:44:0f:6b:24:0e:c3:df:e3:3a:4c: 31:b5:f5:83:d1:e3:9c:9e:a3:88:7d:97:07:fa:1d: 15:f6:0c:d4:37:18:18:52:13:72:24:0c:38:13:a2: e1:fa:45:07:68:41:d4:25:4d:a8:2d:3c:85:1d:ef: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EB:02:4D:6C:19:2A:6B:DD:42:5F:6E:74:C3:01:18:70:58:77:6A X509v3 Authority Key Identifier: keyid:68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6f:da:9c:0a:2c:93:9c:3d:ca:2d:f8:d0:77:89:fa:85:1a: 24:55:cb:98:fd:27:d8:91:f7:e0:9f:37:de:01:ec:f7:04:9c: 5c:d1:18:65:30:06:e4:16:58:91:49:ed:1c:2b:e5:74:e9:37: f8:7b:52:cf:db:8a:2a:17:03:65:cc:2e:5c:fe:c2:b6:8c:51: 92:ff:98:c3:88:74:92:04:31:b9:54:9b:e4:a8:bf:f6:07:37: 8b:ee:3b:ab:f3:d9:b4:d5:97:14:d6:5a:d4:77:0d:ff:54:6d: 81:98:4c:28:c7:8d:c6:40:f6:38:15:b8:8f:e5:2b:d3:4c:72: 39:be:83:46:30:0c:b3:8e:03:ce:ba:c0:4a:4f:f9:9f:f5:00: 20:cc:90:66:12:cb:6c:54:41:e2:4a:f3:b1:e2:9e:47:8e:cf: db:79:9c:79:a2:3b:e7:a1:b4:0a:f4:90:01:d2:f3:b2:38:18: 71:0c:47:22:44:1e:a3:a1:7f:e3:1f:58:3a:08:ad:f6:3c:20: 0f:7e:d4:84:59:6b:ac:27:b2:4f:48:ab:9f:e0:a2:f6:d1:1b: ea:3b:f1:56:25:29:32:71:69:4c:d4:87:34:da:da:7f:4d:90: a4:cc:f7:fe:91:f8:76:42:e6:80:9c:1d:38:ad:ea:88:e8:b2: d0:96:8a:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPOMj8FwbO8CfWFSmHVM2fkbzqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUEx MDA4QkNGMDAeFw0yNjA5MjQxOTU1MTBaFw0yNjA5MjUyMDQ1MTBaMDMxMTAvBgNV BAMTKDZERUIwMjRENkMxOTJBNkJERDQyNUY2RTc0QzMwMTE4NzA1ODc3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEt761Xah6ZcBpnqcqacc3Pfx7 Bq9aAfAkQKqvlu4qcLI1hcRuU+DvNpEEVF8C+XV2LoPtXbUI4YZIpuYUMtoIGoSz QlD9fjfJsF0SqmHl2N+jbVtZjyw8hDcT6wJ8h2bpqOXORs2BKRRQp1g1govLG60q Bt7C+BsH2wAc6MNza1hFqPruYkGuwEAur7jK3T00gzQhyZl2LWac+L8THS1PcYdp Vg1fsk8ClmMlW899NylqlW/7MRmWDZ1bmMpXdousHZ1BBg9HRA9rJA7D3+M6TDG1 9YPR45yeo4h9lwf6HRX2DNQ3GBhSE3IkDDgTouH6RQdoQdQlTagtPIUd76+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbesCTWwZKmvdQl9udMMBGHBYd2owHwYDVR0j BBgwFoAUaCJ6y2DT6eEMa5pX04MTmhAIvPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZWNkNzQtNDQyNC00ZDQwLTk2YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2 MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUExMDA4QkNGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODIyN0FDQjYwRDNFOUUxMEM2QjlBNTdEMzgzMTM5QTEwMDhC Q0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEz OUExMDA4QkNGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpv2pwKLJOcPcot+NB3ifqFGiRVy5j9J9iR 9+CfN94B7PcEnFzRGGUwBuQWWJFJ7Rwr5XTpN/h7Us/biioXA2XMLlz+wraMUZL/ mMOIdJIEMblUm+Sov/YHN4vuO6vz2bTVlxTWWtR3Df9UbYGYTCjHjcZA9jgVuI/l K9NMcjm+g0YwDLOOA866wEpP+Z/1ACDMkGYSy2xUQeJK87HinkeOz9t5nHmiO+eh tAr0kAHS87I4GHEMRyJEHqOhf+MfWDoIrfY8IA9+1IRZa6wnsk9Iq5/govbRG+o7 8VYlKTJxaUzUhzTa2n9NkKTM9/6R+HZC5oCcHTit6ojostCWio8= -----END CERTIFICATE-----Generated at Fri Sep 25 03:24:43 2026 by rpki-client