$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft File: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft (raw, json) Hash identifier: Y1ylsYMjCihwNCteqBQC8Ke/lgiLbdExbOLRK1JBVQc= Subject key identifier: 7C:0C:EA:7A:D1:83:89:C8:70:03:15:4D:AE:2A:E7:EE:EA:F1:CE:06 Authority key identifier: 68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 Certificate issuer: /CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Certificate serial: 2DE29A8CA359A4681B6AC807E675E9D8484F6CC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:52:49 +0000 Manifest this update: Fri 24 Jul 2026 02:47:49 +0000 Manifest next update: Sat 25 Jul 2026 04:12:49 +0000 Files and hashes: 1: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: cwLPRSN2w6mZj3tlDvow1ecrXm+F+7b6N36wRKhpvIw=) 2: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl (hash: yHYQkzArmUMVpIALRbHE7xJU3SlG8downCiDDobrBkM=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: eNviqEPANiU+R88ED/BdXauQGAcTaPYxgTmStYUAEXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e2:9a:8c:a3:59:a4:68:1b:6a:c8:07:e6:75:e9:d8:48:4f:6c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Validity Not Before: Jul 24 02:47:49 2026 GMT Not After : Jul 25 04:12:49 2026 GMT Subject: CN=7C0CEA7AD18389C87003154DAE2AE7EEEAF1CE06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:1d:9c:19:e2:5e:bb:55:4f:cb:65:02:4a: 0b:ff:92:3e:1d:68:f4:0b:8b:76:5f:58:d2:9a:2d: c1:43:ea:02:8e:73:01:55:42:4e:00:39:93:9c:7f: e9:cc:18:30:2e:e1:3c:fa:62:14:63:d7:e7:88:44: f2:88:aa:8e:39:48:b3:cb:dc:f7:7b:53:3b:9f:b5: a3:28:bd:f1:f5:bf:83:ad:8b:6b:bc:db:23:a7:af: 99:d4:f2:9a:ff:94:04:9a:c7:1c:6a:c0:08:93:23: 83:a3:b7:bc:7b:1e:b1:5d:6c:4a:27:1d:b2:04:00: 57:9a:68:1d:87:91:7b:01:6d:6b:29:84:7d:5f:d2: 6e:0b:19:86:a1:1e:60:ce:bb:b4:35:26:d1:79:78: ad:2c:0b:9b:23:15:5e:3f:4f:bc:f4:48:6c:f5:8f: 3e:60:43:20:57:ef:96:57:9a:a4:3b:dd:95:8e:1e: 80:a8:be:6a:ce:8d:33:ca:87:00:ec:0d:43:22:5f: b6:90:5f:26:4e:b7:2c:6c:b7:89:a3:b2:23:3e:39: 64:34:98:28:e1:36:99:62:ca:e9:7f:be:0a:2c:ae: 1e:51:a7:28:67:93:0e:41:74:f8:eb:b8:57:8c:0b: b1:27:47:c8:b9:05:b7:9e:ca:32:d8:70:1b:c2:69: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0C:EA:7A:D1:83:89:C8:70:03:15:4D:AE:2A:E7:EE:EA:F1:CE:06 X509v3 Authority Key Identifier: keyid:68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:28:f1:bd:fe:d8:63:db:96:29:53:c4:dc:de:a7:52:c5:1b: 05:5c:92:e1:7b:d1:38:f7:d5:50:28:14:30:52:29:36:8d:2c: 9d:f5:3f:56:46:6d:1d:4b:f8:ef:71:54:22:1c:a7:d0:c7:75: 8d:e6:86:20:af:b5:55:53:9e:55:cf:c9:c4:e6:0b:60:6d:e9: 2d:5f:36:c7:12:5f:aa:56:31:9b:75:be:96:4e:39:7f:f4:14: b4:38:07:9b:22:a5:af:c9:41:cc:fc:f1:c9:08:87:72:48:9a: 5f:c8:48:28:8e:4b:98:19:c1:d4:b2:7f:01:8d:c8:92:98:28: 53:23:5b:04:be:b4:8c:26:a0:12:e5:23:5a:cf:aa:7c:ef:ed: 35:4a:ff:96:4c:2a:ac:4d:2c:54:5d:1c:39:5a:3b:c6:58:9c: 83:d9:05:a6:5c:ce:ca:bb:15:cc:60:cb:35:dd:ab:37:f6:2d: 19:67:94:fb:ed:ed:39:8d:27:53:2f:33:37:5c:1e:9c:1e:25: b1:3b:53:3c:e1:94:32:cd:3b:ed:fe:88:ea:b6:01:c2:fb:82: 5a:99:74:d2:12:16:f8:e9:80:0b:1e:9e:0a:b4:44:d9:65:15: 8a:3c:25:eb:5c:89:76:01:d6:b6:2e:39:5a:ea:76:5d:f7:98: 0f:d0:fe:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeKajKNZpGgbasgH5nXp2EhPbMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdG RUMxQUNDMTAeFw0yNjA3MjQwMjQ3NDlaFw0yNjA3MjUwNDEyNDlaMDMxMTAvBgNV BAMTKDdDMENFQTdBRDE4Mzg5Qzg3MDAzMTU0REFFMkFFN0VFRUFGMUNFMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkRh2cGeJeu1VPy2UCSgv/kj4d aPQLi3ZfWNKaLcFD6gKOcwFVQk4AOZOcf+nMGDAu4Tz6YhRj1+eIRPKIqo45SLPL 3Pd7UzuftaMovfH1v4Oti2u82yOnr5nU8pr/lASaxxxqwAiTI4Ojt7x7HrFdbEon HbIEAFeaaB2HkXsBbWsphH1f0m4LGYahHmDOu7Q1JtF5eK0sC5sjFV4/T7z0SGz1 jz5gQyBX75ZXmqQ73ZWOHoCovmrOjTPKhwDsDUMiX7aQXyZOtyxst4mjsiM+OWQ0 mCjhNpliyul/vgosrh5Rpyhnkw5BdPjruFeMC7EnR8i5BbeeyjLYcBvCaQq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfAzqetGDichwAxVNrirn7urxzgYwHwYDVR0j BBgwFoAUaKeoxSws8xN4L5PcXRLK9/7BrMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFmN2MyNWItNDEwYi00ODJhLTk0MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUy QzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdGRUMxQUNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3QThDNTJDMkNGMzEzNzgyRjkzREM1RDEyQ0FGN0ZFQzFB Q0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNB RjdGRUMxQUNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIo8b3+2GPblilTxNzep1LFGwVckuF70Tj3 1VAoFDBSKTaNLJ31P1ZGbR1L+O9xVCIcp9DHdY3mhiCvtVVTnlXPycTmC2Bt6S1f NscSX6pWMZt1vpZOOX/0FLQ4B5sipa/JQcz88ckIh3JIml/ISCiOS5gZwdSyfwGN yJKYKFMjWwS+tIwmoBLlI1rPqnzv7TVK/5ZMKqxNLFRdHDlaO8ZYnIPZBaZczsq7 FcxgyzXdqzf2LRlnlPvt7TmNJ1MvMzdcHpweJbE7UzzhlDLNO+3+iOq2AcL7glqZ dNISFvjpgAsengq0RNllFYo8JetciXYB1rYuOVrqdl33mA/Q/jA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:10 2026 by rpki-client