$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft File: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft (raw, json) Hash identifier: zDTArEdpp5X0L+c3LUER0vRRDKy/UsDFrznpYCXOucE= Subject key identifier: 8A:FC:59:99:64:D3:6B:5C:70:6C:43:D4:EE:E9:32:83:D3:55:80:BC Authority key identifier: 68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 Certificate issuer: /CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Certificate serial: 6D072C229BB9254C316F2D0F67202447311C6074 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:58:06 +0000 Manifest this update: Tue 12 May 2026 06:53:06 +0000 Manifest next update: Wed 13 May 2026 07:10:06 +0000 Files and hashes: 1: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl (hash: kp2dcuYdZNu8DZZvNYwP0nQ/gA88aQxZ8P9nWME5/lU=) 2: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: eNviqEPANiU+R88ED/BdXauQGAcTaPYxgTmStYUAEXw=) 3: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: cwLPRSN2w6mZj3tlDvow1ecrXm+F+7b6N36wRKhpvIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:07:2c:22:9b:b9:25:4c:31:6f:2d:0f:67:20:24:47:31:1c:60:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Validity Not Before: May 12 06:53:06 2026 GMT Not After : May 13 07:10:06 2026 GMT Subject: CN=8AFC599964D36B5C706C43D4EEE93283D35580BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:a7:91:ee:3d:54:cc:8b:54:85:58:72:89: e8:24:24:77:2d:1c:0f:aa:ad:ff:16:f4:94:a3:dc: 47:06:3b:de:bd:f4:56:1c:98:35:e3:32:f6:f6:08: 03:b7:c3:82:7c:3d:1e:08:3a:15:47:82:d6:9b:a6: 8e:ca:94:8e:92:4e:6f:59:43:4e:0e:eb:6a:e5:fc: 0c:44:3d:9c:a9:b0:97:7a:9e:59:7b:53:54:01:81: be:c6:cb:4a:54:b5:15:9a:13:37:6f:23:fd:e3:c4: cf:3e:43:ba:32:c3:c4:12:ab:1d:44:7b:27:3a:bf: 93:d0:c2:4f:9d:6f:ca:87:6d:44:13:b2:bc:69:4c: 11:7f:42:d2:dd:1e:89:7e:a1:f7:79:b2:0c:62:e5: df:cc:29:52:bc:f5:4f:b4:ce:ee:69:9a:81:36:91: e3:b2:8f:36:f0:04:22:2f:9b:61:54:e2:de:0a:72: a0:22:4d:44:d4:16:07:a8:75:14:20:e3:a7:eb:5c: 23:6e:5b:2d:96:5e:f0:7c:ab:58:0f:ec:ab:a9:6f: 77:7b:26:93:d3:b2:ae:4a:a0:e9:63:de:75:0a:a1: 6d:c0:05:b7:b2:2d:3d:9e:1a:7a:1b:dd:d5:2a:70: eb:ba:14:8a:bc:18:f5:d6:d8:81:85:29:f6:ca:86: 96:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FC:59:99:64:D3:6B:5C:70:6C:43:D4:EE:E9:32:83:D3:55:80:BC X509v3 Authority Key Identifier: keyid:68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:98:2f:29:73:0b:b2:49:cf:45:d3:f8:b2:4b:83:bf:e3:83: 24:eb:56:d9:f4:fd:70:c8:62:52:59:84:23:8d:16:f8:67:19: 92:4c:ce:26:81:d4:0c:d5:19:07:4a:1e:97:50:bc:9b:3b:46: 4f:19:2d:07:5b:07:f8:ec:14:ba:00:45:e0:53:f8:70:72:fa: 69:36:04:8e:b6:00:d3:e2:3c:52:d5:23:52:a0:48:86:da:74: 8c:e9:36:57:55:25:40:3b:ef:37:12:f6:95:f8:b9:f0:64:d5: 12:d9:8e:70:0c:e7:72:55:dd:f4:44:7f:08:e0:87:44:b2:66: ca:71:85:bd:11:a3:4d:d1:2b:07:f8:00:54:69:94:d6:37:95: a6:c8:46:48:5e:8d:52:d6:7c:f1:4b:f5:e7:96:23:c7:ed:2b: 94:ee:11:04:9c:8d:2c:b0:b3:76:07:df:34:95:c3:3a:35:75: da:e6:25:d9:85:09:5c:ca:6c:f8:47:38:2a:f1:f9:8d:19:43: cc:da:c4:28:8d:ba:f9:c0:ed:f1:f4:95:03:13:35:60:03:4d: 7a:83:e9:9f:9b:83:77:b8:b9:77:46:8c:bd:f6:df:82:61:c5: a8:e5:da:d0:0f:a4:47:78:cc:1c:3c:f8:2c:b7:33:69:6e:60: e9:52:3b:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbQcsIpu5JUwxby0PZyAkRzEcYHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdG RUMxQUNDMTAeFw0yNjA1MTIwNjUzMDZaFw0yNjA1MTMwNzEwMDZaMDMxMTAvBgNV BAMTKDhBRkM1OTk5NjREMzZCNUM3MDZDNDNENEVFRTkzMjgzRDM1NTgwQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSaeR7j1UzItUhVhyiegkJHct HA+qrf8W9JSj3EcGO9699FYcmDXjMvb2CAO3w4J8PR4IOhVHgtabpo7KlI6STm9Z Q04O62rl/AxEPZypsJd6nll7U1QBgb7Gy0pUtRWaEzdvI/3jxM8+Q7oyw8QSqx1E eyc6v5PQwk+db8qHbUQTsrxpTBF/QtLdHol+ofd5sgxi5d/MKVK89U+0zu5pmoE2 keOyjzbwBCIvm2FU4t4KcqAiTUTUFgeodRQg46frXCNuWy2WXvB8q1gP7Kupb3d7 JpPTsq5KoOlj3nUKoW3ABbeyLT2eGnob3dUqcOu6FIq8GPXW2IGFKfbKhpYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivxZmWTTa1xwbEPU7ukyg9NVgLwwHwYDVR0j BBgwFoAUaKeoxSws8xN4L5PcXRLK9/7BrMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFmN2MyNWItNDEwYi00ODJhLTk0MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUy QzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdGRUMxQUNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3QThDNTJDMkNGMzEzNzgyRjkzREM1RDEyQ0FGN0ZFQzFB Q0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNB RjdGRUMxQUNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyYLylzC7JJz0XT+LJLg7/jgyTrVtn0/XDI YlJZhCONFvhnGZJMziaB1AzVGQdKHpdQvJs7Rk8ZLQdbB/jsFLoAReBT+HBy+mk2 BI62ANPiPFLVI1KgSIbadIzpNldVJUA77zcS9pX4ufBk1RLZjnAM53JV3fREfwjg h0SyZspxhb0Ro03RKwf4AFRplNY3labIRkhejVLWfPFL9eeWI8ftK5TuEQScjSyw s3YH3zSVwzo1ddrmJdmFCVzKbPhHOCrx+Y0ZQ8zaxCiNuvnA7fH0lQMTNWADTXqD 6Z+bg3e4uXdGjL3234Jhxajl2tAPpEd4zBw8+Cy3M2luYOlSO/Y= -----END CERTIFICATE-----Generated at Tue May 12 22:19:40 2026 by rpki-client