$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft File: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft (raw, json) Hash identifier: YKTTTrQfXXkb7ZRYPJK5fR1W9dYQR2sotjieDeZyD7w= Subject key identifier: 5E:6C:A8:F5:55:B3:2C:3A:5A:21:F8:F0:F0:A1:0C:E3:43:EC:4B:40 Authority key identifier: 68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 Certificate issuer: /CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Certificate serial: 415DA42B5E61529D49C8D1719977FCC0797AF71A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:19:48 +0000 Manifest this update: Fri 24 Jul 2026 04:14:48 +0000 Manifest next update: Sat 25 Jul 2026 07:21:48 +0000 Files and hashes: 1: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 7S4S4G9FGD28Sv926fG87e0exOc068CcSp9OM3k7SEc=) 2: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: Gadh6mfTzxhcQcO3hchTOHrPBLDM8NpuBwUUrXS+WEE=) 3: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl (hash: 55U4V+ByaEHqDFLNKKytqbLSZg6zTV8oF4pOxOqcx4k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5d:a4:2b:5e:61:52:9d:49:c8:d1:71:99:77:fc:c0:79:7a:f7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Validity Not Before: Jul 24 04:14:48 2026 GMT Not After : Jul 25 07:21:48 2026 GMT Subject: CN=5E6CA8F555B32C3A5A21F8F0F0A10CE343EC4B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:c0:94:cb:4e:b1:2b:cb:60:15:e4:89:9d: 81:d6:ab:5b:0a:b5:ba:9b:d8:e2:6c:2c:52:b1:56: a0:e3:43:00:52:01:c7:d0:0d:74:05:70:8a:6c:02: d1:39:4b:a4:20:02:fe:07:e1:4a:67:7b:e5:a1:90: 8b:1e:c9:a8:34:da:8a:95:20:a3:56:29:a0:8d:4e: 1b:c2:af:84:a6:22:eb:b5:6f:61:d6:b5:9f:ef:9b: d8:f3:1e:c6:1c:c0:c0:93:bf:20:b3:86:a6:b3:45: 99:63:ec:34:54:12:a9:c3:16:a6:ea:ea:05:18:fd: 09:15:86:cb:cf:c9:a8:f6:83:6c:d3:ab:53:06:a6: 18:09:01:9e:9b:a6:e8:ac:5c:00:59:d6:ee:5d:c0: d3:fd:68:d7:dd:81:9d:43:24:53:78:ae:9d:66:b0: a1:b0:2f:46:39:be:11:ac:ca:7d:10:e9:98:49:11: 21:62:79:c6:e3:4f:8b:fd:78:87:0f:31:dd:c3:0e: 2f:9f:fa:4e:f4:17:9f:18:6f:9f:12:6d:84:1d:86: d5:78:47:fe:33:2b:91:ba:f9:b5:fa:19:28:b1:7d: 58:39:22:f8:25:47:7f:ca:28:72:6f:59:c1:0f:f3: 9c:27:23:c8:51:cc:4b:f8:f1:ee:7f:e2:11:4c:13: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6C:A8:F5:55:B3:2C:3A:5A:21:F8:F0:F0:A1:0C:E3:43:EC:4B:40 X509v3 Authority Key Identifier: keyid:68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:1d:be:d4:a3:74:52:ba:31:bf:19:e0:50:af:63:f1:a8:6b: 5d:e9:3d:58:e2:78:92:77:60:92:5d:2b:72:cc:74:e5:e7:20: a9:8f:13:35:95:2e:0b:2e:fd:47:f2:bf:f7:c7:19:15:bf:aa: 35:e5:7c:8b:c6:5a:2a:a0:d9:07:99:af:4b:50:e7:ec:52:41: 63:8f:5e:f4:fe:f0:fa:ac:c5:95:3f:77:37:a7:33:8b:2d:bc: 4c:0d:3a:95:ae:26:db:ac:8a:a2:cc:ae:fb:ab:fd:61:2b:68: 7d:07:ee:51:29:df:0a:39:a2:a4:2b:10:af:2e:32:fd:1a:b3: 4f:10:66:e7:55:58:80:56:74:68:55:78:91:0b:3c:66:57:e3: de:e6:c4:15:b2:f7:65:70:b0:f4:34:01:94:26:b6:f0:48:d2: 75:f6:ff:74:76:a9:30:3f:34:d5:c8:6d:ba:93:c8:72:61:dd: 8e:f9:14:bc:48:ce:63:54:16:3d:8e:43:b2:8d:fe:d7:39:7e: 05:bd:73:d2:b2:ef:87:e2:6c:68:c0:3b:b0:85:07:e9:a9:b5: 7f:42:1b:ee:09:7c:c9:46:1d:a1:f5:5c:ea:16:b6:3e:3a:01: e7:bc:ed:43:be:8a:68:68:21:ee:24:b3:23:3b:c4:60:4c:ce: 70:99:17:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQV2kK15hUp1JyNFxmXf8wHl69xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEw MEMyQTdCNTAeFw0yNjA3MjQwNDE0NDhaFw0yNjA3MjUwNzIxNDhaMDMxMTAvBgNV BAMTKDVFNkNBOEY1NTVCMzJDM0E1QTIxRjhGMEYwQTEwQ0UzNDNFQzRCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFMCUy06xK8tgFeSJnYHWq1sK tbqb2OJsLFKxVqDjQwBSAcfQDXQFcIpsAtE5S6QgAv4H4Upne+WhkIseyag02oqV IKNWKaCNThvCr4SmIuu1b2HWtZ/vm9jzHsYcwMCTvyCzhqazRZlj7DRUEqnDFqbq 6gUY/QkVhsvPyaj2g2zTq1MGphgJAZ6bpuisXABZ1u5dwNP9aNfdgZ1DJFN4rp1m sKGwL0Y5vhGsyn0Q6ZhJESFiecbjT4v9eIcPMd3DDi+f+k70F58Yb58SbYQdhtV4 R/4zK5G6+bX6GSixfVg5IvglR3/KKHJvWcEP85wnI8hRzEv48e5/4hFME1OpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXmyo9VWzLDpaIfjw8KEM40PsS0AwHwYDVR0j BBgwFoAUaODfT6x+YgJB1sRelZnLIQDCp7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmMwNzJkYjctMDEyNy00NTY0LThkMjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZB QzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEwMEMyQTdCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEUwREY0RkFDN0U2MjAyNDFENkM0NUU5NTk5Q0IyMTAwQzJB N0I1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNC MjEwMEMyQTdCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQdvtSjdFK6Mb8Z4FCvY/Goa13pPVjieJJ3 YJJdK3LMdOXnIKmPEzWVLgsu/Ufyv/fHGRW/qjXlfIvGWiqg2QeZr0tQ5+xSQWOP XvT+8PqsxZU/dzenM4stvEwNOpWuJtusiqLMrvur/WEraH0H7lEp3wo5oqQrEK8u Mv0as08QZudVWIBWdGhVeJELPGZX497mxBWy92VwsPQ0AZQmtvBI0nX2/3R2qTA/ NNXIbbqTyHJh3Y75FLxIzmNUFj2OQ7KN/tc5fgW9c9Ky74fibGjAO7CFB+mptX9C G+4JfMlGHaH1XOoWtj46Aee87UO+imhoIe4ksyM7xGBMznCZF0o= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:38 2026 by rpki-client