$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft File: 68ECB00B63436E13214F12C7732F716D44E5E72D.mft (raw, json) Hash identifier: TBy6ciKvDjWQhanQ0bxhIVpb/guBsTjVjGR0QkzjBPk= Subject key identifier: E2:44:CA:3D:8C:5D:E8:AC:BD:D9:59:0F:BA:E7:D6:BB:1C:AE:F8:72 Authority key identifier: 68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D Certificate issuer: /CN=68ECB00B63436E13214F12C7732F716D44E5E72D Certificate serial: 11892BB1A9C0F0AA8BE3F4E3956D41B764BCFDAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 15:55:27 +0000 Manifest this update: Thu 24 Sep 2026 15:50:27 +0000 Manifest next update: Fri 25 Sep 2026 18:00:27 +0000 Files and hashes: 1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: OqiAXacTaTMvrJqwT1wd9NgwR8chI6fLuF/nnIi/ym4=) 2: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: rPmnLfRHW0MsBvRLZTu2XZb2TPdVWPSkbs3wCW3iaxE=) 3: 68ECB00B63436E13214F12C7732F716D44E5E72D.crl (hash: 2Cbq8nA1BBzLQ3jdetYRvu6bey+c5HhqEK2okbB9wP0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 18:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:89:2b:b1:a9:c0:f0:aa:8b:e3:f4:e3:95:6d:41:b7:64:bc:fd:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ECB00B63436E13214F12C7732F716D44E5E72D Validity Not Before: Sep 24 15:50:27 2026 GMT Not After : Sep 25 18:00:27 2026 GMT Subject: CN=E244CA3D8C5DE8ACBDD9590FBAE7D6BB1CAEF872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:2c:eb:e7:6a:ee:fd:ac:5a:82:b6:73:4a: 82:38:1e:84:17:07:0e:32:c9:50:1b:2d:c4:bc:b8: ad:b8:46:26:3f:03:e9:8d:50:f7:39:04:7e:96:e5: 3e:68:c8:66:93:06:f4:37:b5:dc:f2:66:a5:68:fc: 61:03:ce:e5:de:fc:58:8e:63:53:9e:7f:eb:72:22: 54:e0:7f:d0:64:34:c1:b9:24:5b:6b:f9:bf:83:d5: 0a:26:b7:11:bf:74:6f:d0:df:35:36:8c:a4:d8:88: 38:32:05:65:50:7f:58:20:e3:21:17:a2:86:1c:17: 2b:6c:bc:14:ab:89:4a:43:45:4d:e4:36:f2:fb:fe: d6:30:d9:ef:95:7d:05:2b:4a:4b:64:a5:ad:8c:2b: e5:5b:c4:f8:75:ab:ab:e3:29:87:3e:a4:18:bf:35: 20:6f:ed:6e:ed:10:7f:2d:ab:0a:db:20:22:25:8e: c7:41:24:eb:ee:99:fe:e5:c6:39:f7:bc:8b:fe:31: 78:a1:44:1e:44:f8:dd:d0:a3:d9:15:ed:ca:ea:a5: fe:04:4e:5b:4c:87:b0:8b:2b:d6:d3:b2:76:63:8b: 0c:1a:d1:5f:cc:06:f1:3e:f1:6c:2d:b2:95:43:63: 01:e3:11:9c:75:c7:1e:b8:a3:4e:c8:6e:de:ed:55: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:44:CA:3D:8C:5D:E8:AC:BD:D9:59:0F:BA:E7:D6:BB:1C:AE:F8:72 X509v3 Authority Key Identifier: keyid:68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:96:1b:95:93:80:d7:7d:7d:bd:1f:cf:2e:5f:25:e9:0a:05: 72:9d:c4:e0:60:c0:14:dd:81:fd:ac:3b:9e:74:5a:68:8b:6a: b2:6a:c8:df:7d:13:03:8a:76:63:cd:3d:65:06:e6:c7:e3:e1: 2f:d4:00:48:e3:84:bc:a2:0e:17:ca:16:34:e0:a2:0e:a7:77: b1:8b:a3:73:2e:da:d6:c7:77:66:26:5b:cb:8d:49:de:6e:ea: 2e:09:af:5b:ae:6c:44:6f:f5:f3:31:90:c3:0a:aa:aa:21:54: a1:23:b4:85:8d:ec:1a:44:90:12:2c:2b:5b:47:d7:a4:47:3b: 54:e6:73:07:4b:55:e0:dd:c4:b1:5d:d5:3f:b4:8d:ac:73:d9: 62:e8:64:b7:82:fd:1f:7e:bd:0c:31:a6:b8:f4:95:78:d7:74: a1:99:a2:7c:23:2a:7b:be:69:df:0f:aa:69:c9:b3:4a:16:18: ea:91:ef:91:37:59:0e:6a:d9:84:e5:d3:15:2b:dd:3e:ae:31: ec:6f:22:aa:27:d9:f8:14:ff:30:5f:ed:00:41:60:1f:25:78: a3:2c:15:29:f6:85:d7:54:ac:42:a4:3f:b5:a4:d9:58:0e:02: 80:6a:6e:0d:0a:b7:74:a1:a4:89:e0:fb:31:3d:d8:29:e7:4d: 90:8c:1f:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEYkrsanA8KqL4/TjlW1Bt2S8/a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0 NEU1RTcyRDAeFw0yNjA5MjQxNTUwMjdaFw0yNjA5MjUxODAwMjdaMDMxMTAvBgNV BAMTKEUyNDRDQTNEOEM1REU4QUNCREQ5NTkwRkJBRTdENkJCMUNBRUY4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykyzr52ru/axagrZzSoI4HoQX Bw4yyVAbLcS8uK24RiY/A+mNUPc5BH6W5T5oyGaTBvQ3tdzyZqVo/GEDzuXe/FiO Y1Oef+tyIlTgf9BkNMG5JFtr+b+D1QomtxG/dG/Q3zU2jKTYiDgyBWVQf1gg4yEX ooYcFytsvBSriUpDRU3kNvL7/tYw2e+VfQUrSktkpa2MK+VbxPh1q6vjKYc+pBi/ NSBv7W7tEH8tqwrbICIljsdBJOvumf7lxjn3vIv+MXihRB5E+N3Qo9kV7crqpf4E TltMh7CLK9bTsnZjiwwa0V/MBvE+8WwtspVDYwHjEZx1xx64o07Ibt7tVaUpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4kTKPYxd6Ky92VkPuufWuxyu+HIwHwYDVR0j BBgwFoAUaOywC2NDbhMhTxLHcy9xbUTl5y0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM5YzU0ODQtMmUzNy00OGY5LThlYmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2 MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0NEU1RTcyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEVDQjAwQjYzNDM2RTEzMjE0RjEyQzc3MzJGNzE2RDQ0RTVF NzJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcx NkQ0NEU1RTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWWG5WTgNd9fb0fzy5fJekKBXKdxOBgwBTd gf2sO550WmiLarJqyN99EwOKdmPNPWUG5sfj4S/UAEjjhLyiDhfKFjTgog6nd7GL o3Mu2tbHd2YmW8uNSd5u6i4Jr1uubERv9fMxkMMKqqohVKEjtIWN7BpEkBIsK1tH 16RHO1TmcwdLVeDdxLFd1T+0jaxz2WLoZLeC/R9+vQwxprj0lXjXdKGZonwjKnu+ ad8PqmnJs0oWGOqR75E3WQ5q2YTl0xUr3T6uMexvIqon2fgU/zBf7QBBYB8leKMs FSn2hddUrEKkP7Wk2VgOAoBqbg0Kt3ShpIng+zE92CnnTZCMHyA= -----END CERTIFICATE-----Generated at Fri Sep 25 05:18:34 2026 by rpki-client