$ rpki-client -vvf rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft File: 68ECB00B63436E13214F12C7732F716D44E5E72D.mft (raw, json) Hash identifier: XkSfOf28mgfHUSaJebcKnUUT6VhlAKLmlbKitUZR6+0= Subject key identifier: 4E:4C:B7:8F:F0:B3:E1:15:98:45:4D:19:39:76:BA:8C:B7:0E:03:B6 Authority key identifier: 68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D Certificate issuer: /CN=68ECB00B63436E13214F12C7732F716D44E5E72D Certificate serial: 21CF73B0ABFA70E37879A5E06AA78BFBAE3EA176 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:06:45 +0000 Manifest this update: Tue 12 May 2026 20:01:45 +0000 Manifest next update: Wed 13 May 2026 20:20:45 +0000 Files and hashes: 1: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: rPmnLfRHW0MsBvRLZTu2XZb2TPdVWPSkbs3wCW3iaxE=) 2: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: OqiAXacTaTMvrJqwT1wd9NgwR8chI6fLuF/nnIi/ym4=) 3: 68ECB00B63436E13214F12C7732F716D44E5E72D.crl (hash: o+9P8oRJVUnOv0d/leKoWIzdJsrmgqQwJDbx77J33bo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:cf:73:b0:ab:fa:70:e3:78:79:a5:e0:6a:a7:8b:fb:ae:3e:a1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ECB00B63436E13214F12C7732F716D44E5E72D Validity Not Before: May 12 20:01:45 2026 GMT Not After : May 13 20:20:45 2026 GMT Subject: CN=4E4CB78FF0B3E11598454D193976BA8CB70E03B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:24:ae:75:8c:a9:d6:0c:8a:4e:17:a8:10:d0: 14:cd:07:a4:86:43:f5:27:0a:65:d8:ba:05:1b:44: 66:2e:07:37:ee:6f:84:d9:9c:0e:68:f5:42:aa:c5: 36:8d:af:4d:43:ea:6b:6a:89:e2:cb:a4:d6:d7:44: 67:85:23:46:b1:81:0b:07:45:0c:0f:0b:12:d9:53: 4c:a9:d4:57:6b:81:74:55:f3:3a:ea:93:b9:d0:9d: c3:0f:95:d2:11:95:96:63:bf:69:3e:d5:4d:bf:db: 9d:0e:a1:79:f4:f3:24:0d:7d:0e:17:47:81:a7:a1: 11:a4:35:a9:b5:f8:55:56:ef:f6:d6:81:ba:08:3e: 55:e2:f6:87:65:eb:87:95:2b:39:5c:03:2d:8a:c2: 6b:00:b4:d9:bc:ab:2c:50:c5:44:5e:75:c2:06:59: 44:dc:d1:13:61:d6:da:af:76:73:3e:93:c6:d2:41: 1d:bf:74:22:a6:c2:31:0f:98:15:04:b8:e1:1a:bb: f8:a2:50:3d:bf:ea:70:b1:12:e6:1c:c0:cc:aa:3d: 07:f2:ec:2a:1e:47:d6:e5:81:8c:83:40:72:c5:48: 1b:f0:e0:03:81:c6:cf:6a:89:c6:26:95:8f:46:a8: 82:d7:f8:65:3a:e3:e6:b3:45:71:a0:90:b0:85:9a: ea:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4C:B7:8F:F0:B3:E1:15:98:45:4D:19:39:76:BA:8C:B7:0E:03:B6 X509v3 Authority Key Identifier: keyid:68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:f6:d8:29:83:7f:ce:80:4c:3e:25:fd:fe:e1:20:7a:8e:4e: 92:15:0d:bb:e4:fa:65:e6:d2:0f:2f:bf:e6:d5:21:4a:ca:ab: 93:60:9c:2e:d0:9a:25:6e:dd:fa:71:bd:fb:81:70:dd:7f:27: c7:e4:02:92:3e:21:11:b8:ef:04:dd:25:3f:1a:1c:dd:a3:95: e0:e3:6c:08:58:17:7c:56:ba:6c:f2:c7:6c:11:58:ee:4c:6b: 63:2c:65:58:f2:37:0a:ae:0b:a3:a6:25:45:5e:60:9f:05:17: ad:d1:1c:48:78:2e:ab:88:48:d1:20:30:0d:3d:b4:e2:d4:63: 94:a0:87:8c:d2:e0:4b:86:07:79:d8:0f:17:90:70:19:c0:05: 6c:57:6c:9c:f4:10:3d:59:f1:18:8a:31:19:bc:ac:b6:c1:c7: 53:0a:db:00:8d:03:6f:b9:b0:b1:3f:ce:6e:c9:f6:d1:56:dc: dd:18:ef:3d:c7:ed:74:85:31:59:af:89:c6:8b:fe:ab:e3:91: 4d:a8:5e:24:98:9f:4d:f6:b1:cc:05:0a:74:76:6a:21:95:c1: 28:83:f0:f0:f3:37:79:82:e6:83:e0:64:6e:f3:d0:66:e5:9a: 75:0c:a1:12:e4:27:59:27:4e:61:12:1d:f1:31:83:29:d9:b4: cc:a8:1d:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIc9zsKv6cON4eaXgaqeL+64+oXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0 NEU1RTcyRDAeFw0yNjA1MTIyMDAxNDVaFw0yNjA1MTMyMDIwNDVaMDMxMTAvBgNV BAMTKDRFNENCNzhGRjBCM0UxMTU5ODQ1NEQxOTM5NzZCQThDQjcwRTAzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaJK51jKnWDIpOF6gQ0BTNB6SG Q/UnCmXYugUbRGYuBzfub4TZnA5o9UKqxTaNr01D6mtqieLLpNbXRGeFI0axgQsH RQwPCxLZU0yp1FdrgXRV8zrqk7nQncMPldIRlZZjv2k+1U2/250OoXn08yQNfQ4X R4GnoRGkNam1+FVW7/bWgboIPlXi9odl64eVKzlcAy2KwmsAtNm8qyxQxURedcIG WUTc0RNh1tqvdnM+k8bSQR2/dCKmwjEPmBUEuOEau/iiUD2/6nCxEuYcwMyqPQfy 7CoeR9blgYyDQHLFSBvw4AOBxs9qicYmlY9GqILX+GU64+azRXGgkLCFmuqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTky3j/Cz4RWYRU0ZOXa6jLcOA7YwHwYDVR0j BBgwFoAUaOywC2NDbhMhTxLHcy9xbUTl5y0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM5YzU0ODQtMmUzNy00OGY5LThlYmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2 MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0NEU1RTcyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEVDQjAwQjYzNDM2RTEzMjE0RjEyQzc3MzJGNzE2RDQ0RTVF NzJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcx NkQ0NEU1RTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/22CmDf86ATD4l/f7hIHqOTpIVDbvk+mXm 0g8vv+bVIUrKq5NgnC7QmiVu3fpxvfuBcN1/J8fkApI+IRG47wTdJT8aHN2jleDj bAhYF3xWumzyx2wRWO5Ma2MsZVjyNwquC6OmJUVeYJ8FF63RHEh4LquISNEgMA09 tOLUY5Sgh4zS4EuGB3nYDxeQcBnABWxXbJz0ED1Z8RiKMRm8rLbBx1MK2wCNA2+5 sLE/zm7J9tFW3N0Y7z3H7XSFMVmvicaL/qvjkU2oXiSYn032scwFCnR2aiGVwSiD 8PDzN3mC5oPgZG7z0GblmnUMoRLkJ1knTmESHfExgynZtMyoHdk= -----END CERTIFICATE-----Generated at Wed May 13 04:26:34 2026 by rpki-client