$ rpki-client -vvf rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft File: B68C761C821AA1629C9F6105D99B85E34433B478.mft (raw, json) Hash identifier: ukOGWuukxvjjhojdZrXb1uFMli40vDvC7fILPUfq210= Subject key identifier: 7C:F4:94:B4:66:C3:51:C4:84:17:30:31:85:F8:66:29:9B:59:91:F1 Authority key identifier: B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78 Certificate issuer: /CN=B68C761C821AA1629C9F6105D99B85E34433B478 Certificate serial: 2C5FA73EAA923EEE75833B76E37425EE67A1D830 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:59:17 +0000 Manifest this update: Fri 24 Jul 2026 03:54:17 +0000 Manifest next update: Sat 25 Jul 2026 06:08:17 +0000 Files and hashes: 1: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: eM4zTeT5x8zRTCedGRk54XligMqqPoDVVW+mAmQIEvQ=) 2: B68C761C821AA1629C9F6105D99B85E34433B478.crl (hash: Kn9FIf2aRbpLL8JsC64KIj45P6uvLcrzpCFKCPzImtw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5f:a7:3e:aa:92:3e:ee:75:83:3b:76:e3:74:25:ee:67:a1:d8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B68C761C821AA1629C9F6105D99B85E34433B478 Validity Not Before: Jul 24 03:54:17 2026 GMT Not After : Jul 25 06:08:17 2026 GMT Subject: CN=7CF494B466C351C48417303185F866299B5991F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:16:bb:a5:6d:8e:6d:96:83:04:86:81:9a: 82:ba:8d:b1:09:58:84:88:78:15:85:4c:86:11:99: 1a:14:3b:01:57:04:b9:ba:7d:23:a2:4a:99:15:f3: c5:29:43:26:a9:f2:6d:2b:9f:cc:6f:43:03:2f:cc: b5:56:6a:51:41:1f:8b:de:b4:0f:44:14:bd:82:c2: 17:71:11:9e:89:6c:16:84:b9:c0:bb:29:5e:f6:de: 1d:ac:8f:4e:24:44:67:3e:50:5c:0b:eb:ae:ff:bc: 74:bb:ea:63:e5:13:f1:2e:b3:28:f7:50:cf:0c:19: 5a:28:ea:80:14:01:b6:08:03:79:bf:a6:ed:89:ea: af:1a:21:a7:e2:d4:f1:3a:f9:ec:80:1c:2f:4f:01: d5:5d:58:42:99:36:11:db:e2:1f:e1:4e:aa:67:a2: c9:e5:bd:87:ef:47:01:18:a2:9b:7c:9a:d3:b9:13: 1b:92:53:f2:df:19:50:ee:9d:f3:d6:39:c4:9d:b8: 6b:ab:c8:1f:99:78:6a:1e:24:7c:9a:c7:8c:d0:e7: 09:02:8d:5b:ba:b5:70:44:cc:95:52:f4:48:24:7d: 32:10:48:44:e8:db:d9:d1:e1:09:e5:4c:4b:82:73: 92:b4:d5:60:6e:92:db:e4:b8:dd:cd:2a:38:58:17: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F4:94:B4:66:C3:51:C4:84:17:30:31:85:F8:66:29:9B:59:91:F1 X509v3 Authority Key Identifier: keyid:B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8e:9a:4e:4f:01:06:77:18:56:61:91:3f:9d:ab:0e:6f:e6: 51:96:83:6d:96:92:65:70:94:70:2d:ef:2a:ba:5f:89:55:9b: 68:a5:b0:f0:84:f1:e4:1c:12:ca:d8:86:c6:59:13:d1:d8:52: 07:a0:37:eb:35:09:a0:2d:8d:8b:d9:23:2f:93:48:6f:6d:f3: 3b:b7:10:2f:59:71:26:b3:e3:4a:f6:b0:1b:49:5b:ce:72:7a: 0b:35:73:36:24:e4:25:aa:53:60:7e:d8:45:ee:e1:34:7d:13: a5:4d:85:ab:76:9c:0e:84:83:ad:d7:2d:6d:b3:48:31:fc:d6: c0:69:4c:ef:6a:9a:bc:2d:9b:d9:5d:0b:c8:d9:a8:b4:ed:13: 1e:02:5f:fa:2a:7c:16:27:ae:3d:12:12:98:1d:31:29:17:ca: f4:e3:5d:8e:54:d7:85:54:5a:52:1d:f1:c1:92:5e:ff:d1:68: 8c:64:3e:9e:9f:37:fd:51:b0:ee:c9:e1:ef:45:fb:1e:89:f8: 05:87:ad:f8:f5:57:6c:ff:9b:96:7f:1e:08:0b:a5:6c:85:f8: 15:d0:dc:19:74:49:03:f9:9a:15:f9:4d:0c:93:56:61:bc:fa: 7e:eb:5f:9c:11:26:88:08:26:62:64:72:6b:cf:49:09:f4:ed: 26:a1:6c:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULF+nPqqSPu51gzt243Ql7meh2DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4Qzc2MUM4MjFBQTE2MjlDOUY2MTA1RDk5Qjg1RTM0 NDMzQjQ3ODAeFw0yNjA3MjQwMzU0MTdaFw0yNjA3MjUwNjA4MTdaMDMxMTAvBgNV BAMTKDdDRjQ5NEI0NjZDMzUxQzQ4NDE3MzAzMTg1Rjg2NjI5OUI1OTkxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNxa7pW2ObZaDBIaBmoK6jbEJ WISIeBWFTIYRmRoUOwFXBLm6fSOiSpkV88UpQyap8m0rn8xvQwMvzLVWalFBH4ve tA9EFL2CwhdxEZ6JbBaEucC7KV723h2sj04kRGc+UFwL667/vHS76mPlE/Eusyj3 UM8MGVoo6oAUAbYIA3m/pu2J6q8aIafi1PE6+eyAHC9PAdVdWEKZNhHb4h/hTqpn osnlvYfvRwEYopt8mtO5ExuSU/LfGVDunfPWOcSduGuryB+ZeGoeJHyax4zQ5wkC jVu6tXBEzJVS9EgkfTIQSETo29nR4QnlTEuCc5K01WBuktvkuN3NKjhYF+MDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfPSUtGbDUcSEFzAxhfhmKZtZkfEwHwYDVR0j BBgwFoAUtox2HIIaoWKcn2EF2ZuF40QztHgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzNTYzNzUtOGUyOS00NDc3LWIwMTMtYzQ0MTUwYTI1YTMxLzAvQjY4Qzc2MUM4 MjFBQTE2MjlDOUY2MTA1RDk5Qjg1RTM0NDMzQjQ3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjhDNzYxQzgyMUFBMTYyOUM5RjYxMDVEOTlCODVFMzQ0MzNC NDc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQjY4Qzc2MUM4MjFBQTE2MjlDOUY2MTA1RDk5Qjg1 RTM0NDMzQjQ3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiOmk5PAQZ3GFZhkT+dqw5v5lGWg22WkmVw lHAt7yq6X4lVm2ilsPCE8eQcEsrYhsZZE9HYUgegN+s1CaAtjYvZIy+TSG9t8zu3 EC9ZcSaz40r2sBtJW85yegs1czYk5CWqU2B+2EXu4TR9E6VNhat2nA6Eg63XLW2z SDH81sBpTO9qmrwtm9ldC8jZqLTtEx4CX/oqfBYnrj0SEpgdMSkXyvTjXY5U14VU WlId8cGSXv/RaIxkPp6fN/1RsO7J4e9F+x6J+AWHrfj1V2z/m5Z/HggLpWyF+BXQ 3Bl0SQP5mhX5TQyTVmG8+n7rX5wRJogIJmJkcmvPSQn07SahbP0= -----END CERTIFICATE-----Generated at Fri Jul 24 10:05:36 2026 by rpki-client