$ rpki-client -vvf rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft File: 68ECB00B63436E13214F12C7732F716D44E5E72D.mft (raw, json) Hash identifier: DRV9Ic5EvVapAurPBqg45kaSHyhQGvj1oodqy/z6GuY= Subject key identifier: B8:B3:57:E9:F3:EA:44:6B:97:FC:73:E0:63:A4:45:EF:1C:DE:29:B6 Authority key identifier: 68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D Certificate issuer: /CN=68ECB00B63436E13214F12C7732F716D44E5E72D Certificate serial: 44B4B51A095984FF145A847A2CC833DFBA439180 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:13:12 +0000 Manifest this update: Fri 24 Jul 2026 03:08:12 +0000 Manifest next update: Sat 25 Jul 2026 06:58:12 +0000 Files and hashes: 1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: OqiAXacTaTMvrJqwT1wd9NgwR8chI6fLuF/nnIi/ym4=) 2: 68ECB00B63436E13214F12C7732F716D44E5E72D.crl (hash: H1rJAfmVxLloOHI7vjHfMH3KCEisqFy5wBMaqn1hD54=) 3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: rPmnLfRHW0MsBvRLZTu2XZb2TPdVWPSkbs3wCW3iaxE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b4:b5:1a:09:59:84:ff:14:5a:84:7a:2c:c8:33:df:ba:43:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ECB00B63436E13214F12C7732F716D44E5E72D Validity Not Before: Jul 24 03:08:12 2026 GMT Not After : Jul 25 06:58:12 2026 GMT Subject: CN=B8B357E9F3EA446B97FC73E063A445EF1CDE29B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7a:3b:4e:32:6d:f4:5d:8c:58:06:10:fd:73: 1d:a9:2a:8b:a6:f7:e4:e8:71:24:00:9a:c3:6f:3a: 1c:1b:f8:6f:93:16:ec:af:de:14:2e:43:d5:3f:9b: ab:af:b9:f3:c7:1f:6b:8b:33:d7:60:fc:39:d4:ff: f1:49:2f:ba:7a:2e:4b:19:ed:3c:32:62:8a:44:60: 44:fe:48:01:5c:7c:ef:de:96:5d:60:54:0a:9b:cc: 75:8b:34:f4:42:fd:61:c5:3d:40:a9:50:85:c4:5f: 64:77:f5:53:a7:85:00:c0:c6:7c:1d:cb:40:56:5b: 76:e8:a4:81:6d:0d:c6:05:22:29:c8:59:d3:0b:e0: 43:77:f2:f1:70:ca:e3:c9:b2:27:4e:c1:93:fe:e9: 12:74:77:cd:7a:19:00:9c:9c:e6:0d:86:aa:84:49: ba:1c:da:97:09:22:b0:e4:02:b1:7a:5f:06:fd:62: 72:53:e8:2f:c8:ee:b6:46:26:fa:3f:06:02:2d:1d: 07:cd:a1:44:f6:47:ec:29:7b:67:72:85:2a:36:62: 1a:b2:2c:73:83:b6:6e:a6:05:0b:6f:10:04:8a:a3: 63:05:2f:36:7a:3b:94:e8:54:dc:49:47:11:c4:f6: 3f:65:49:b2:ea:d1:b1:d4:d5:5f:fb:93:8f:13:d0: da:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B3:57:E9:F3:EA:44:6B:97:FC:73:E0:63:A4:45:EF:1C:DE:29:B6 X509v3 Authority Key Identifier: keyid:68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:83:e8:1c:ef:5e:4b:02:9b:1d:f7:f6:3b:78:51:da:5a:be: cb:c2:a8:d6:15:a5:86:5b:a1:91:c2:7a:d3:a8:04:ff:06:ba: 6b:c5:20:cf:f8:5f:19:c9:59:e7:89:8c:b3:58:83:4a:68:a8: 90:99:22:9a:e9:a2:99:d1:f6:e8:6a:ac:b3:ba:a7:d9:20:a7: 1b:b5:67:d6:12:cb:d5:d2:ad:82:30:f9:ce:9f:4c:ad:cc:6f: 49:b2:7a:b9:ce:b5:0e:49:d1:4d:a2:e6:55:e5:d9:1f:73:c7: 1d:af:28:19:d0:8c:47:70:b5:27:19:67:4a:d1:7c:69:15:82: eb:c5:06:1c:2b:92:39:a7:17:76:ec:ad:bd:8c:6f:e4:35:80: 04:4c:41:44:1c:a6:5b:4a:ac:86:38:44:b4:24:5f:b1:28:97: 2c:a3:7f:f5:b2:6a:db:c1:b0:3e:41:7d:66:4d:8e:24:21:3d: 6c:f3:b7:27:37:68:36:a5:b2:b8:75:5f:35:63:eb:76:e2:74: cb:d9:fd:b9:76:3c:e5:d3:3c:85:86:1f:f4:83:48:88:1a:6d: a0:41:4e:15:16:5c:62:1b:e3:ef:4a:d8:07:45:fc:cd:63:8c: 9f:6e:17:79:0d:90:f5:66:2e:f3:b0:24:f9:18:0f:a2:6a:ca: f7:b3:f9:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLS1GglZhP8UWoR6LMgz37pDkYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0 NEU1RTcyRDAeFw0yNjA3MjQwMzA4MTJaFw0yNjA3MjUwNjU4MTJaMDMxMTAvBgNV BAMTKEI4QjM1N0U5RjNFQTQ0NkI5N0ZDNzNFMDYzQTQ0NUVGMUNERTI5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiejtOMm30XYxYBhD9cx2pKoum 9+TocSQAmsNvOhwb+G+TFuyv3hQuQ9U/m6uvufPHH2uLM9dg/DnU//FJL7p6LksZ 7TwyYopEYET+SAFcfO/ell1gVAqbzHWLNPRC/WHFPUCpUIXEX2R39VOnhQDAxnwd y0BWW3bopIFtDcYFIinIWdML4EN38vFwyuPJsidOwZP+6RJ0d816GQCcnOYNhqqE Sboc2pcJIrDkArF6Xwb9YnJT6C/I7rZGJvo/BgItHQfNoUT2R+wpe2dyhSo2Yhqy LHODtm6mBQtvEASKo2MFLzZ6O5ToVNxJRxHE9j9lSbLq0bHU1V/7k48T0NoFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuLNX6fPqRGuX/HPgY6RF7xzeKbYwHwYDVR0j BBgwFoAUaOywC2NDbhMhTxLHcy9xbUTl5y0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM5YzU0ODQtMmUzNy00OGY5LThlYmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2 MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0NEU1RTcyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEVDQjAwQjYzNDM2RTEzMjE0RjEyQzc3MzJGNzE2RDQ0RTVF NzJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcx NkQ0NEU1RTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaD6BzvXksCmx339jt4UdpavsvCqNYVpYZb oZHCetOoBP8GumvFIM/4XxnJWeeJjLNYg0poqJCZIprpopnR9uhqrLO6p9kgpxu1 Z9YSy9XSrYIw+c6fTK3Mb0myernOtQ5J0U2i5lXl2R9zxx2vKBnQjEdwtScZZ0rR fGkVguvFBhwrkjmnF3bsrb2Mb+Q1gARMQUQcpltKrIY4RLQkX7Eolyyjf/WyatvB sD5BfWZNjiQhPWzztyc3aDalsrh1XzVj63bidMvZ/bl2POXTPIWGH/SDSIgabaBB ThUWXGIb4+9K2AdF/M1jjJ9uF3kNkPVmLvOwJPkYD6Jqyvez+Xk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:53:03 2026 by rpki-client