$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft File: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft (raw, json) Hash identifier: NT01Z0j5M4Qs6gZGdyml6pvvIBxYFoAkarKCkCzI8tY= Subject key identifier: 37:04:61:E4:E2:C9:0F:C5:31:34:51:D2:2E:6D:39:DD:3C:A3:33:65 Authority key identifier: 68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF Certificate issuer: /CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Certificate serial: 3B714139807E1905CFA36BE9816B56F9573A360E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:30:05 +0000 Manifest this update: Thu 23 Jul 2026 16:25:05 +0000 Manifest next update: Fri 24 Jul 2026 19:01:05 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: yL9CLlILHqLbQJKBIi0ABV5wanAH6ejKvh6ick9wGpY=) 2: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl (hash: hKRrWsYE+YbDTsxZHms68QPnlqx3J6ydagVYmZi0zdc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:71:41:39:80:7e:19:05:cf:a3:6b:e9:81:6b:56:f9:57:3a:36:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Validity Not Before: Jul 23 16:25:05 2026 GMT Not After : Jul 24 19:01:05 2026 GMT Subject: CN=370461E4E2C90FC5313451D22E6D39DD3CA33365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:1f:4a:fe:12:95:57:23:de:cb:4a:16:1e: 21:76:eb:4a:e4:78:aa:98:a9:74:9e:42:71:10:b6: 2c:86:b0:2b:21:46:7b:a0:d5:db:df:28:0e:10:60: a9:ba:ff:13:70:d8:b9:d7:00:0c:00:7c:75:2a:14: 2c:df:3a:6d:2a:0e:35:ab:34:90:cc:5b:66:66:a2: 6d:34:16:92:b2:3d:6d:31:23:d2:07:b9:3f:81:7b: 9f:59:3f:6c:93:35:51:17:82:40:bf:fb:34:1a:08: f4:b4:55:39:42:4f:52:da:14:8d:f5:29:66:68:26: f0:68:7e:6c:c4:78:c7:59:8a:1b:4e:fd:6c:92:0d: 2e:0d:c1:16:9c:ee:4c:92:56:0d:00:d0:e5:1f:b4: b3:45:2d:4d:d6:2c:37:8a:61:4a:62:08:0f:5d:ab: 41:0d:45:ba:bc:d0:2b:94:0a:42:ba:9c:78:0d:cd: f5:b0:f1:17:d6:7d:a3:1e:cb:a6:8f:6d:52:b2:1a: 85:fe:7a:4b:b2:63:02:59:dc:94:18:72:ce:40:ad: 8c:a8:c7:ef:d6:4e:99:ad:e5:b3:c6:e1:8f:2d:5f: c7:9f:cd:c5:08:5e:f0:ad:cb:0d:70:1c:78:53:33: 57:87:77:a7:6e:e8:76:65:2e:c3:0b:0d:12:72:96: ca:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:04:61:E4:E2:C9:0F:C5:31:34:51:D2:2E:6D:39:DD:3C:A3:33:65 X509v3 Authority Key Identifier: keyid:68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d9:32:22:42:9c:be:42:c5:51:50:e9:1b:51:f1:1a:2d:3d: 65:98:fb:b0:a2:27:19:54:b5:b1:e2:cd:e2:f6:89:e5:67:74: 34:00:9f:94:cf:8c:79:27:dc:1c:08:d7:92:4e:3f:2f:38:1a: f5:79:6a:e2:ff:cf:a6:a0:a7:e0:17:5f:4e:3c:f9:cf:5a:a9: 66:a5:c4:fc:1e:17:df:d4:59:0a:36:63:03:89:c3:6b:82:51: 1a:84:8a:c6:ed:34:09:60:ee:9c:0b:cf:75:8a:93:a4:b2:4b: 63:e5:85:4b:97:13:bb:e9:60:14:15:92:74:76:b2:17:d8:a4: 0f:b9:cb:41:62:94:a6:f9:22:05:a0:2c:4e:a0:1c:c9:79:64: 90:ae:37:26:4e:95:07:fb:eb:af:ed:17:2a:c1:dc:6a:82:50: dc:6d:f1:7d:95:bb:13:f1:1b:dd:69:d8:14:21:5f:d0:5d:24: 6e:c8:f9:20:f2:e7:50:e5:9f:90:3d:6b:9f:90:6c:7d:d1:3b: d9:6d:ef:f5:a1:42:ba:41:1f:b9:60:62:29:74:44:1b:2e:72: 30:44:d6:09:e0:89:e6:4e:89:45:d3:c9:e3:69:bc:ac:72:8a: 37:ce:e2:97:c9:f2:1a:75:e7:9d:75:8e:21:70:2a:11:7b:80: b4:36:74:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3FBOYB+GQXPo2vpgWtW+Vc6Ng4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYxQTc3 REZGNzBDRjAeFw0yNjA3MjMxNjI1MDVaFw0yNjA3MjQxOTAxMDVaMDMxMTAvBgNV BAMTKDM3MDQ2MUU0RTJDOTBGQzUzMTM0NTFEMjJFNkQzOUREM0NBMzMzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0fh9K/hKVVyPey0oWHiF260rk eKqYqXSeQnEQtiyGsCshRnug1dvfKA4QYKm6/xNw2LnXAAwAfHUqFCzfOm0qDjWr NJDMW2Zmom00FpKyPW0xI9IHuT+Be59ZP2yTNVEXgkC/+zQaCPS0VTlCT1LaFI31 KWZoJvBofmzEeMdZihtO/WySDS4NwRac7kySVg0A0OUftLNFLU3WLDeKYUpiCA9d q0ENRbq80CuUCkK6nHgNzfWw8RfWfaMey6aPbVKyGoX+ekuyYwJZ3JQYcs5ArYyo x+/WTpmt5bPG4Y8tX8efzcUIXvCtyw1wHHhTM1eHd6du6HZlLsMLDRJylspZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNwRh5OLJD8UxNFHSLm053TyjM2UwHwYDVR0j BBgwFoAUaLUDUyL/25yNbuwQtdLxp33/cM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQzYTJmZGYtYmNiYS00NzU3LWIzNjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMy MkZGREI5QzhENkVFQzEwQjVEMkYxQTc3REZGNzBDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82OEI1MDM1MzIyRkZEQjlDOEQ2RUVDMTBCNUQyRjFBNzdERkY3 MENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYx QTc3REZGNzBDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrZMiJCnL5CxVFQ6RtR8RotPWWY+7CiJxlU tbHizeL2ieVndDQAn5TPjHkn3BwI15JOPy84GvV5auL/z6agp+AXX048+c9aqWal xPweF9/UWQo2YwOJw2uCURqEisbtNAlg7pwLz3WKk6SyS2PlhUuXE7vpYBQVknR2 shfYpA+5y0FilKb5IgWgLE6gHMl5ZJCuNyZOlQf766/tFyrB3GqCUNxt8X2VuxPx G91p2BQhX9BdJG7I+SDy51Dln5A9a5+QbH3RO9lt7/WhQrpBH7lgYil0RBsucjBE 1gngieZOiUXTyeNpvKxyijfO4pfJ8hp15511jiFwKhF7gLQ2dPw= -----END CERTIFICATE-----Generated at Fri Jul 24 09:51:30 2026 by rpki-client