$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft File: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft (raw, json) Hash identifier: b97OVnZHbLVgarJ3hP3EPubvxgZ9jen7Ui0w0xB9UlM= Subject key identifier: 56:4E:FC:08:0D:9B:71:26:F3:3E:68:2E:2F:4F:21:EF:45:94:16:84 Authority key identifier: 68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 Certificate issuer: /CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Certificate serial: 7850B9A924F01AD2D9A5508F070897DD915B3D5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 08:00:43 +0000 Manifest this update: Fri 25 Sep 2026 07:55:43 +0000 Manifest next update: Sat 26 Sep 2026 11:53:43 +0000 Files and hashes: 1: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: cwLPRSN2w6mZj3tlDvow1ecrXm+F+7b6N36wRKhpvIw=) 2: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl (hash: Qk9pLMS+2Smq5GQlr+WtNoKlajrmuawflhEMhVABkRA=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: eNviqEPANiU+R88ED/BdXauQGAcTaPYxgTmStYUAEXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:50:b9:a9:24:f0:1a:d2:d9:a5:50:8f:07:08:97:dd:91:5b:3d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Validity Not Before: Sep 25 07:55:43 2026 GMT Not After : Sep 26 11:53:43 2026 GMT Subject: CN=564EFC080D9B7126F33E682E2F4F21EF45941684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:de:72:42:6d:c0:d6:69:96:72:2a:f8:fe: a3:74:de:be:e0:49:09:d5:08:11:e6:c1:3f:0b:b5: 96:6d:67:d9:93:17:c9:29:2b:b1:bc:54:1d:bf:09: 38:a2:96:1d:cd:36:49:c1:05:31:49:63:12:ff:68: 46:5e:eb:df:30:5a:f5:79:5a:4e:6a:a7:ea:5e:c9: f4:31:b0:19:39:9f:26:a9:ce:07:14:15:b9:50:71: 96:95:25:c7:c7:50:6a:fc:a1:c6:38:87:7d:8c:82: c8:99:1b:5d:6a:d4:f9:69:0f:30:94:db:4c:d8:04: 05:68:d0:2c:26:99:69:5e:0b:70:79:97:fe:98:4e: 92:02:51:60:d1:ba:fd:36:5d:1e:45:de:13:86:20: 7a:8d:6f:82:7a:80:1b:e8:ac:e6:7a:52:8f:4b:10: 4c:80:5e:9f:4c:db:04:db:2f:f2:8b:7a:6b:16:d4: ea:26:81:fd:a4:29:cf:e0:60:a4:34:7f:e8:e5:fc: da:50:81:64:3f:57:47:41:09:95:20:6a:d1:6a:1c: 1b:63:77:23:64:04:3f:d9:7e:5e:94:8b:2a:a9:91: 0d:c4:6e:a3:a3:6b:22:70:3a:83:1f:82:36:8f:10: da:03:69:aa:36:43:a4:65:53:c2:38:71:4d:24:d3: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4E:FC:08:0D:9B:71:26:F3:3E:68:2E:2F:4F:21:EF:45:94:16:84 X509v3 Authority Key Identifier: keyid:68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:18:25:4e:c6:b8:cc:4c:0a:df:a4:28:fa:b3:65:e5:9f:28: ec:25:84:a6:b9:5a:57:26:94:f1:72:f3:c2:8e:15:82:39:f5: c4:63:d9:c0:aa:fd:5c:55:e4:97:13:62:1b:c8:0d:d2:4a:9d: 81:39:7b:b0:2a:38:4c:1d:e7:76:04:2b:75:c6:cd:50:b8:61: 8b:9c:66:99:07:9d:54:c8:a4:e6:d7:ef:b3:6b:72:35:52:70: ca:3f:0a:de:0a:13:65:0c:88:0d:c6:30:9c:29:d5:24:fc:97: 39:a0:a4:e2:80:50:02:2e:12:0f:b9:08:41:de:b5:36:34:f7: 3b:52:5e:fe:b3:c6:c7:8b:02:3d:d3:73:73:28:ac:c8:15:79: 5c:00:0c:2e:fd:28:09:e5:63:df:b9:fd:15:4d:08:f2:4d:7e: 29:04:0f:01:e2:ed:f6:3e:25:14:4a:94:29:5e:0d:87:40:07: e3:24:00:86:3e:0d:9f:8f:a8:e2:3a:40:04:da:fb:00:2e:13: e7:85:7d:5c:a8:47:90:92:5b:4b:1f:98:b1:2f:fa:f0:8b:11: b3:ad:3d:7f:af:50:9c:af:98:9b:e1:61:19:68:2a:b6:0f:79: 2b:5d:12:9d:68:7f:46:7f:65:49:42:7b:a3:7e:1d:37:5c:dd: 81:ae:2b:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeFC5qSTwGtLZpVCPBwiX3ZFbPVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdG RUMxQUNDMTAeFw0yNjA5MjUwNzU1NDNaFw0yNjA5MjYxMTUzNDNaMDMxMTAvBgNV BAMTKDU2NEVGQzA4MEQ5QjcxMjZGMzNFNjgyRTJGNEYyMUVGNDU5NDE2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfd5yQm3A1mmWcir4/qN03r7g SQnVCBHmwT8LtZZtZ9mTF8kpK7G8VB2/CTiilh3NNknBBTFJYxL/aEZe698wWvV5 Wk5qp+peyfQxsBk5nyapzgcUFblQcZaVJcfHUGr8ocY4h32MgsiZG11q1PlpDzCU 20zYBAVo0CwmmWleC3B5l/6YTpICUWDRuv02XR5F3hOGIHqNb4J6gBvorOZ6Uo9L EEyAXp9M2wTbL/KLemsW1Oomgf2kKc/gYKQ0f+jl/NpQgWQ/V0dBCZUgatFqHBtj dyNkBD/Zfl6UiyqpkQ3EbqOjayJwOoMfgjaPENoDaao2Q6RlU8I4cU0k071bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVk78CA2bcSbzPmguL08h70WUFoQwHwYDVR0j BBgwFoAUaKeoxSws8xN4L5PcXRLK9/7BrMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFmN2MyNWItNDEwYi00ODJhLTk0MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUy QzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdGRUMxQUNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3QThDNTJDMkNGMzEzNzgyRjkzREM1RDEyQ0FGN0ZFQzFB Q0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNB RjdGRUMxQUNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4YJU7GuMxMCt+kKPqzZeWfKOwlhKa5Wlcm lPFy88KOFYI59cRj2cCq/VxV5JcTYhvIDdJKnYE5e7AqOEwd53YEK3XGzVC4YYuc ZpkHnVTIpObX77NrcjVScMo/Ct4KE2UMiA3GMJwp1ST8lzmgpOKAUAIuEg+5CEHe tTY09ztSXv6zxseLAj3Tc3MorMgVeVwADC79KAnlY9+5/RVNCPJNfikEDwHi7fY+ JRRKlCleDYdAB+MkAIY+DZ+PqOI6QATa+wAuE+eFfVyoR5CSW0sfmLEv+vCLEbOt PX+vUJyvmJvhYRloKrYPeStdEp1of0Z/ZUlCe6N+HTdc3YGuKxg= -----END CERTIFICATE-----Generated at Fri Sep 25 16:25:39 2026 by rpki-client