$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft File: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft (raw, json) Hash identifier: lIgrG1DQY738hyP3Vs7iRzX3Rkptaqg6Kum/KQ++mLg= Subject key identifier: C6:49:30:7B:69:DA:27:03:30:7A:80:B0:7E:B0:41:1A:06:C0:36:39 Authority key identifier: 68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 Certificate issuer: /CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Certificate serial: 6D99E584C66AF1B8FCABEE37272E0D2B8D895138 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:30:59 +0000 Manifest this update: Tue 12 May 2026 05:25:59 +0000 Manifest next update: Wed 13 May 2026 09:29:59 +0000 Files and hashes: 1: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 7S4S4G9FGD28Sv926fG87e0exOc068CcSp9OM3k7SEc=) 2: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: Gadh6mfTzxhcQcO3hchTOHrPBLDM8NpuBwUUrXS+WEE=) 3: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl (hash: tto3LJ633aPJGtQCZXmVFRpeKbf1EhOZk6EXQ2S+pmY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:99:e5:84:c6:6a:f1:b8:fc:ab:ee:37:27:2e:0d:2b:8d:89:51:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Validity Not Before: May 12 05:25:59 2026 GMT Not After : May 13 09:29:59 2026 GMT Subject: CN=C649307B69DA2703307A80B07EB0411A06C03639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:e7:29:01:ac:e2:22:88:ec:47:19:6d:b0: 30:ab:c9:6d:94:1f:ab:2d:55:2f:bb:a7:c7:f6:cb: 87:7e:1a:81:ac:65:7a:bc:48:67:0d:f9:5a:ab:74: 4d:02:d5:bb:23:86:67:b2:d9:eb:d7:ed:51:f5:92: b5:4f:c0:13:60:3a:2a:22:49:9c:fe:ab:86:08:f4: cc:5d:00:48:21:01:c4:15:0f:89:cf:1e:44:6a:73: 93:26:04:b9:6c:1f:fe:82:f8:a1:a2:9a:08:ab:da: 01:aa:61:2c:8e:77:7d:ca:a4:60:ce:57:02:a9:fa: 76:2f:50:39:04:ed:de:72:92:6b:04:27:c1:81:83: f1:02:83:8e:ec:aa:7a:81:2e:a3:41:17:bc:a4:49: 25:5a:c0:98:89:df:08:0d:5c:77:0f:cc:da:1c:e9: 33:d2:c3:77:81:3c:fa:3f:f5:26:27:b6:d3:f1:79: 3a:cd:0c:16:ae:1f:cd:96:ec:7d:07:7c:80:61:60: ba:a4:3e:ef:73:fa:2a:ca:64:6e:b1:90:02:fc:6a: 0a:95:3b:56:c3:8a:7a:c1:d8:d8:0e:93:40:f9:88: 1c:db:26:d9:04:fc:e5:78:c7:46:7a:b5:a6:40:d1: 1d:b6:2b:58:92:ec:be:fa:01:9d:04:cd:9a:fd:eb: 24:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:49:30:7B:69:DA:27:03:30:7A:80:B0:7E:B0:41:1A:06:C0:36:39 X509v3 Authority Key Identifier: keyid:68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fe:3c:66:e1:31:4f:2f:98:bf:62:17:f3:8a:be:8e:c3:77: 1b:aa:32:d5:d1:0b:70:e4:3c:d2:30:0d:4c:fd:e7:58:f6:98: 2a:eb:45:6f:61:a2:37:f2:6d:74:6d:cd:47:3b:e1:5e:51:63: b1:14:6a:ca:97:b4:4f:19:e0:88:39:e8:ef:23:3a:e8:65:b7: ce:e9:89:b4:31:3d:0c:e7:e7:4e:d8:75:5b:24:83:8f:2e:03: 7e:ba:11:bb:29:94:f2:18:a0:d7:b1:a0:a9:bc:cd:10:9f:9c: b3:cb:50:b8:da:18:d1:e0:a3:e3:ef:7b:01:67:6f:fb:f4:d8: 9d:ed:ca:0c:89:8a:92:2c:38:f8:bb:40:a2:7b:fe:8b:47:c2: 98:3f:9c:d0:f7:2b:5a:50:e2:58:0a:80:06:cf:94:5a:71:5c: 6f:54:c2:fc:5f:9d:76:db:9d:08:c9:e3:65:ff:bd:0e:d3:ea: 23:48:50:33:2e:5e:2c:d8:16:8b:e2:bf:28:6a:c5:c2:49:9f: f7:c6:c6:3a:fe:36:d8:56:88:4c:ef:ff:0b:8b:ae:e5:bd:fc: 17:4b:a3:92:b1:b4:47:32:cc:7f:73:4f:b3:a6:5f:01:f3:26: fe:57:2c:d5:bd:f2:9d:7e:e3:24:42:a4:a5:67:3d:83:89:2b: fb:df:da:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZnlhMZq8bj8q+43Jy4NK42JUTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEw MEMyQTdCNTAeFw0yNjA1MTIwNTI1NTlaFw0yNjA1MTMwOTI5NTlaMDMxMTAvBgNV BAMTKEM2NDkzMDdCNjlEQTI3MDMzMDdBODBCMDdFQjA0MTFBMDZDMDM2MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmBecpAaziIojsRxltsDCryW2U H6stVS+7p8f2y4d+GoGsZXq8SGcN+VqrdE0C1bsjhmey2evX7VH1krVPwBNgOioi SZz+q4YI9MxdAEghAcQVD4nPHkRqc5MmBLlsH/6C+KGimgir2gGqYSyOd33KpGDO VwKp+nYvUDkE7d5ykmsEJ8GBg/ECg47sqnqBLqNBF7ykSSVawJiJ3wgNXHcPzNoc 6TPSw3eBPPo/9SYnttPxeTrNDBauH82W7H0HfIBhYLqkPu9z+irKZG6xkAL8agqV O1bDinrB2NgOk0D5iBzbJtkE/OV4x0Z6taZA0R22K1iS7L76AZ0EzZr96yR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxkkwe2naJwMweoCwfrBBGgbANjkwHwYDVR0j BBgwFoAUaODfT6x+YgJB1sRelZnLIQDCp7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmMwNzJkYjctMDEyNy00NTY0LThkMjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZB QzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEwMEMyQTdCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEUwREY0RkFDN0U2MjAyNDFENkM0NUU5NTk5Q0IyMTAwQzJB N0I1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNC MjEwMEMyQTdCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIz+PGbhMU8vmL9iF/OKvo7DdxuqMtXRC3Dk PNIwDUz951j2mCrrRW9hojfybXRtzUc74V5RY7EUasqXtE8Z4Ig56O8jOuhlt87p ibQxPQzn507YdVskg48uA366EbsplPIYoNexoKm8zRCfnLPLULjaGNHgo+PvewFn b/v02J3tygyJipIsOPi7QKJ7/otHwpg/nND3K1pQ4lgKgAbPlFpxXG9UwvxfnXbb nQjJ42X/vQ7T6iNIUDMuXizYFovivyhqxcJJn/fGxjr+NthWiEzv/wuLruW9/BdL o5KxtEcyzH9zT7OmXwHzJv5XLNW98p1+4yRCpKVnPYOJK/vf2rI= -----END CERTIFICATE-----Generated at Tue May 12 22:20:14 2026 by rpki-client