$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft File: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft (raw, json) Hash identifier: NBeZ73pBjxJbuufPSQY3r+f1Q1SC33MqUokZqqUFPcQ= Subject key identifier: 75:22:00:F8:D8:23:12:B0:6A:A0:FD:0E:B5:E3:CE:B6:2F:89:7C:65 Authority key identifier: 68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF Certificate issuer: /CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Certificate serial: 4BD453731ED4338F6B6968806692AD9208ACACA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 22:03:24 +0000 Manifest this update: Wed 23 Sep 2026 21:58:24 +0000 Manifest next update: Fri 25 Sep 2026 00:02:24 +0000 Files and hashes: 1: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl (hash: k/w2KwfW2RLc7e5wKob83UHAS1oGs+8y75yz9oVhI6E=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: yL9CLlILHqLbQJKBIi0ABV5wanAH6ejKvh6ick9wGpY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d4:53:73:1e:d4:33:8f:6b:69:68:80:66:92:ad:92:08:ac:ac:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Validity Not Before: Sep 23 21:58:24 2026 GMT Not After : Sep 25 00:02:24 2026 GMT Subject: CN=752200F8D82312B06AA0FD0EB5E3CEB62F897C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:11:35:95:b5:e8:3f:7f:ba:e6:53:16:0e:19: be:27:eb:7f:02:5c:f3:53:7c:33:d8:31:d8:04:84: 49:cd:52:d3:4d:4c:40:ee:69:be:17:5c:f8:cd:25: b6:77:f4:43:8b:b8:71:5e:dc:ce:8e:06:43:8e:fa: 44:19:e5:97:83:16:85:f1:2f:a4:bd:11:77:45:49: af:0f:1f:31:12:94:ff:ad:fd:a5:34:e3:2d:3f:2a: 15:9f:02:f2:85:6e:d5:4c:d8:4e:d2:eb:47:29:f1: 36:99:23:ac:5b:8b:6d:29:1b:b4:45:47:da:6b:94: 90:d2:cd:0b:9d:51:24:7f:e7:72:42:7f:4e:01:72: f7:e9:c4:f2:c7:25:03:d9:8f:2e:11:d0:62:c0:71: 6f:7f:25:75:46:e9:a9:21:ba:5c:16:0a:76:d0:52: 00:54:91:8b:d6:e7:6d:43:7f:8d:0d:c3:a6:26:b8: 68:c5:78:39:a8:8f:56:08:58:39:06:d0:5c:a3:87: 58:41:f0:6d:a4:19:b5:9d:4c:a8:84:9c:05:00:3a: ae:cf:c8:d2:46:71:8b:53:1a:d0:6e:3f:0f:f9:37: 27:31:08:ac:65:98:63:2e:e3:8d:bd:af:47:29:85: 5d:6b:8a:f2:10:2c:32:a4:b2:63:eb:79:2e:36:6a: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:22:00:F8:D8:23:12:B0:6A:A0:FD:0E:B5:E3:CE:B6:2F:89:7C:65 X509v3 Authority Key Identifier: keyid:68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f6:b8:cc:2a:7b:19:e6:ec:b3:11:93:8e:0d:4d:8f:49:98: 47:f0:84:80:ff:e9:95:fe:31:00:b5:be:3c:4d:ae:93:56:98: 12:96:1a:6a:20:ec:c4:be:4f:12:4e:ba:cd:16:7f:fe:26:a7: 59:73:a7:73:e4:cc:48:64:71:99:f4:c5:7e:0f:20:02:0f:0a: 89:37:1f:f1:d0:04:67:7d:6e:08:e1:ab:ed:ea:4c:7f:67:df: 2f:05:f3:28:c9:8c:10:73:54:10:64:b6:5e:57:80:00:10:44: f4:c6:95:04:26:75:f0:ba:9c:c4:a3:6d:49:53:0e:c5:1a:d3: 9e:ab:92:1f:1b:fc:13:47:0a:c9:85:8f:df:9d:7a:7c:58:52: 8e:81:f7:bb:24:92:59:06:1d:7a:ed:4f:ec:39:d0:3c:ee:6c: cc:6e:1e:6a:d1:b0:3d:b3:86:4f:da:a5:4d:28:ec:4b:92:3d: b1:09:ac:a4:8a:b7:bc:be:28:ac:c4:e5:e6:07:bb:42:40:45: 70:59:c2:ef:ee:fa:c9:18:82:36:5e:0e:33:32:8c:a8:a7:83: de:5b:81:51:79:65:1c:b2:23:9a:48:0b:b1:ee:c0:b3:3e:df: a6:2d:33:90:ec:60:42:19:50:d0:ce:c9:a3:ec:b8:d2:3b:f9: 1b:23:8e:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9RTcx7UM49raWiAZpKtkgisrKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYxQTc3 REZGNzBDRjAeFw0yNjA5MjMyMTU4MjRaFw0yNjA5MjUwMDAyMjRaMDMxMTAvBgNV BAMTKDc1MjIwMEY4RDgyMzEyQjA2QUEwRkQwRUI1RTNDRUI2MkY4OTdDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQETWVteg/f7rmUxYOGb4n638C XPNTfDPYMdgEhEnNUtNNTEDuab4XXPjNJbZ39EOLuHFe3M6OBkOO+kQZ5ZeDFoXx L6S9EXdFSa8PHzESlP+t/aU04y0/KhWfAvKFbtVM2E7S60cp8TaZI6xbi20pG7RF R9prlJDSzQudUSR/53JCf04BcvfpxPLHJQPZjy4R0GLAcW9/JXVG6akhulwWCnbQ UgBUkYvW521Df40Nw6YmuGjFeDmoj1YIWDkG0Fyjh1hB8G2kGbWdTKiEnAUAOq7P yNJGcYtTGtBuPw/5NycxCKxlmGMu4429r0cphV1rivIQLDKksmPreS42amXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdSIA+NgjErBqoP0OtePOti+JfGUwHwYDVR0j BBgwFoAUaLUDUyL/25yNbuwQtdLxp33/cM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQzYTJmZGYtYmNiYS00NzU3LWIzNjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMy MkZGREI5QzhENkVFQzEwQjVEMkYxQTc3REZGNzBDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82OEI1MDM1MzIyRkZEQjlDOEQ2RUVDMTBCNUQyRjFBNzdERkY3 MENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYx QTc3REZGNzBDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFD2uMwqexnm7LMRk44NTY9JmEfwhID/6ZX+ MQC1vjxNrpNWmBKWGmog7MS+TxJOus0Wf/4mp1lzp3PkzEhkcZn0xX4PIAIPCok3 H/HQBGd9bgjhq+3qTH9n3y8F8yjJjBBzVBBktl5XgAAQRPTGlQQmdfC6nMSjbUlT DsUa056rkh8b/BNHCsmFj9+denxYUo6B97skklkGHXrtT+w50DzubMxuHmrRsD2z hk/apU0o7EuSPbEJrKSKt7y+KKzE5eYHu0JARXBZwu/u+skYgjZeDjMyjKing95b gVF5ZRyyI5pIC7HuwLM+36YtM5DsYEIZUNDOyaPsuNI7+RsjjvA= -----END CERTIFICATE-----Generated at Thu Sep 24 04:17:02 2026 by rpki-client