$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft File: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft (raw, json) Hash identifier: c8JPGTAmbacnTFq500pfJ+DSGiV0HK4Lsk8+NiHsDJU= Subject key identifier: 5D:E4:C2:06:D1:F3:B6:85:DF:4A:C4:07:A4:0F:F7:D4:3B:22:FD:91 Authority key identifier: 68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 Certificate issuer: /CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Certificate serial: 353478B7E3FDEB2E15DCE59ACAEADD8D6673FBDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:49:18 +0000 Manifest this update: Wed 23 Sep 2026 18:44:18 +0000 Manifest next update: Thu 24 Sep 2026 21:53:18 +0000 Files and hashes: 1: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 7S4S4G9FGD28Sv926fG87e0exOc068CcSp9OM3k7SEc=) 2: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl (hash: Y9FB8ocj0vvvZY0mzFzdFekzGCeL7KUg9TiPZk9IisA=) 3: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: Gadh6mfTzxhcQcO3hchTOHrPBLDM8NpuBwUUrXS+WEE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:34:78:b7:e3:fd:eb:2e:15:dc:e5:9a:ca:ea:dd:8d:66:73:fb:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Validity Not Before: Sep 23 18:44:18 2026 GMT Not After : Sep 24 21:53:18 2026 GMT Subject: CN=5DE4C206D1F3B685DF4AC407A40FF7D43B22FD91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2a:68:fc:26:9b:8e:d0:0e:f7:f1:5f:64:61: 4a:ed:0f:ad:ee:80:49:dc:90:ee:d3:a8:6c:d6:83: 43:3d:13:b8:d9:15:8c:21:d1:93:c8:35:53:15:84: dc:8a:b8:3d:a9:30:e0:0f:51:b1:3b:3e:f5:8c:6e: 9a:d5:4b:6b:c0:4b:70:5b:91:b6:e2:85:60:7e:fd: 43:e5:22:43:ba:08:1a:29:87:0c:e2:3b:9c:a5:0c: 5d:5c:dd:2b:0f:b3:47:71:87:93:0a:33:3d:19:35: 5f:8a:ab:85:82:9b:8d:a1:bd:12:3b:a3:1e:85:4e: ce:35:20:d9:48:3e:de:ba:36:d2:e9:f5:a4:be:80: b8:c9:74:69:87:19:1f:d1:61:ec:b0:53:96:a1:1c: e5:78:3b:3a:a8:d3:e0:1c:ac:02:5d:df:08:62:14: 90:34:30:26:97:f9:cc:1c:0e:9f:d4:79:6e:49:44: e5:c1:57:b2:41:27:6b:ba:92:3c:7f:34:71:91:6a: f3:ee:36:49:b7:93:f3:70:bd:10:99:90:8a:5c:e0: a6:3d:29:6f:63:53:92:52:36:56:99:9b:f9:b7:0e: 02:ff:b3:85:0e:b9:71:db:38:31:92:cd:33:bd:4d: 5a:ea:f4:c7:d3:dc:c1:97:2a:5d:05:f7:2b:62:2c: 7a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E4:C2:06:D1:F3:B6:85:DF:4A:C4:07:A4:0F:F7:D4:3B:22:FD:91 X509v3 Authority Key Identifier: keyid:68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:6b:eb:cb:b3:de:ce:1b:cf:ab:a6:14:dd:84:63:82:eb:cf: b0:e2:8d:c0:8d:d7:5a:7f:2f:68:14:cf:24:5c:5e:dd:55:4d: be:c4:f6:14:2e:fb:81:89:57:db:62:57:6c:b6:be:fb:35:35: 2f:cb:f8:56:ce:54:e8:6e:61:dc:88:6a:96:85:7d:47:42:3a: 41:20:8f:a0:ac:77:cf:4a:56:12:5b:64:f4:c0:aa:54:d6:2f: 2a:70:44:9e:6b:b0:70:cc:26:fb:fd:1c:bc:29:14:4f:0c:85: 6f:a1:19:9a:d9:c2:5d:5a:4c:40:f4:38:bc:bf:05:5f:a5:22: 89:63:c0:10:a4:55:bc:15:55:0d:cb:5e:32:96:50:d9:e3:4d: e3:a7:4f:ae:57:ad:3b:54:7d:57:c7:88:5e:4e:ee:95:6e:6b: b8:57:ed:73:0b:a9:43:d6:01:e8:ca:da:3a:be:5f:55:24:cb: 4b:48:15:40:8e:d6:bd:f5:b7:68:25:2e:bb:cf:63:ca:3e:2a: d8:43:a5:fd:41:b2:83:e4:f5:8c:5d:dc:a9:18:b1:9d:b5:be: fb:fa:0c:d4:fd:87:ea:f8:80:d1:a8:50:b1:e9:24:75:59:93: e0:af:68:b2:9a:58:04:19:85:25:98:fa:14:7e:17:ed:df:c1: c1:7b:44:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNTR4t+P96y4V3OWayurdjWZz+9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEw MEMyQTdCNTAeFw0yNjA5MjMxODQ0MThaFw0yNjA5MjQyMTUzMThaMDMxMTAvBgNV BAMTKDVERTRDMjA2RDFGM0I2ODVERjRBQzQwN0E0MEZGN0Q0M0IyMkZEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKmj8JpuO0A738V9kYUrtD63u gEnckO7TqGzWg0M9E7jZFYwh0ZPINVMVhNyKuD2pMOAPUbE7PvWMbprVS2vAS3Bb kbbihWB+/UPlIkO6CBophwziO5ylDF1c3SsPs0dxh5MKMz0ZNV+Kq4WCm42hvRI7 ox6FTs41INlIPt66NtLp9aS+gLjJdGmHGR/RYeywU5ahHOV4Ozqo0+AcrAJd3whi FJA0MCaX+cwcDp/UeW5JROXBV7JBJ2u6kjx/NHGRavPuNkm3k/NwvRCZkIpc4KY9 KW9jU5JSNlaZm/m3DgL/s4UOuXHbODGSzTO9TVrq9MfT3MGXKl0F9ytiLHovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXeTCBtHztoXfSsQHpA/31Dsi/ZEwHwYDVR0j BBgwFoAUaODfT6x+YgJB1sRelZnLIQDCp7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmMwNzJkYjctMDEyNy00NTY0LThkMjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZB QzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEwMEMyQTdCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEUwREY0RkFDN0U2MjAyNDFENkM0NUU5NTk5Q0IyMTAwQzJB N0I1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNC MjEwMEMyQTdCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVr68uz3s4bz6umFN2EY4Lrz7DijcCN11p/ L2gUzyRcXt1VTb7E9hQu+4GJV9tiV2y2vvs1NS/L+FbOVOhuYdyIapaFfUdCOkEg j6Csd89KVhJbZPTAqlTWLypwRJ5rsHDMJvv9HLwpFE8MhW+hGZrZwl1aTED0OLy/ BV+lIoljwBCkVbwVVQ3LXjKWUNnjTeOnT65XrTtUfVfHiF5O7pVua7hX7XMLqUPW AejK2jq+X1Uky0tIFUCO1r31t2glLrvPY8o+KthDpf1BsoPk9Yxd3KkYsZ21vvv6 DNT9h+r4gNGoULHpJHVZk+CvaLKaWAQZhSWY+hR+F+3fwcF7ROE= -----END CERTIFICATE-----Generated at Thu Sep 24 00:00:29 2026 by rpki-client