$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft File: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft (raw, json) Hash identifier: +wSKZ0g3xJM3nyvXWPq53cFPL+cU/eELKFtZIMbmF1I= Subject key identifier: DD:D7:29:64:5A:8E:9E:3E:D9:2B:84:BC:15:20:C9:63:7C:8C:D0:DC Authority key identifier: 68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF Certificate issuer: /CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Certificate serial: 3897DE3F10C7ADFB23CF4CD8F02DB0C9ABD57E3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 17:00:53 +0000 Manifest this update: Sat 14 Nov 2026 16:55:53 +0000 Manifest next update: Sun 15 Nov 2026 17:05:53 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: yL9CLlILHqLbQJKBIi0ABV5wanAH6ejKvh6ick9wGpY=) 2: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl (hash: sBOhgV/6gaec63PWpgjKBpxx0ge87dZTwWh0szNEeWw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:97:de:3f:10:c7:ad:fb:23:cf:4c:d8:f0:2d:b0:c9:ab:d5:7e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Validity Not Before: Nov 14 16:55:53 2026 GMT Not After : Nov 15 17:05:53 2026 GMT Subject: CN=DDD729645A8E9E3ED92B84BC1520C9637C8CD0DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:66:4c:4f:d5:db:ae:56:2a:db:39:4a:f8: d9:2b:5b:2a:d6:a4:ce:d8:c8:d1:3b:02:99:e7:69: f0:33:81:81:36:a4:90:61:07:57:ea:78:2e:b8:28: 00:7e:e6:1a:c0:6c:ae:c0:74:1d:36:5a:d8:64:f6: 35:21:54:f7:67:1b:69:13:a7:4b:e3:7f:38:ee:77: 7b:ee:32:1f:58:cb:be:55:03:f4:28:ca:fa:24:31: 12:bd:23:79:d7:d1:07:2f:ec:3c:3b:26:a0:da:6e: 95:95:88:e4:40:7e:50:75:86:db:b3:25:5a:10:61: be:86:75:fe:71:7f:b2:35:71:b9:4f:3f:27:a5:d7: 42:92:cd:d5:e3:fe:42:88:c5:62:e8:64:2b:75:de: e3:77:09:7d:13:12:a5:74:72:13:61:e9:5b:2a:81: da:93:18:eb:79:57:05:4b:2b:18:ba:ec:1e:36:e1: 78:6c:7c:45:f9:ff:0e:3e:dd:68:be:29:24:b4:32: ca:c0:d8:28:32:d0:d9:31:65:b3:c6:24:2a:13:39: c8:a2:5b:97:e2:60:b0:6c:e5:2c:28:52:95:a7:f3: 7b:a8:7a:f2:93:15:4b:1b:5d:7e:e0:1c:ab:03:b3: 44:d4:2d:b7:19:2e:e2:04:ff:38:66:4b:ee:3e:8c: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D7:29:64:5A:8E:9E:3E:D9:2B:84:BC:15:20:C9:63:7C:8C:D0:DC X509v3 Authority Key Identifier: keyid:68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ea:5f:d5:91:61:5d:1c:a3:6b:4d:64:69:62:ce:31:82:eb: 41:3a:22:45:9d:b0:4a:fd:02:f0:72:ab:94:3a:28:58:d2:a6: 30:a4:d4:05:e0:b9:65:6d:a3:be:a7:80:01:ea:ba:b0:c3:cb: 8c:65:6a:d6:ed:f8:20:07:14:d4:25:ac:05:3c:16:a1:f4:3c: dd:e6:ae:94:27:1a:75:f6:a9:5f:ef:3d:30:0e:fc:94:4e:91: 0b:5d:7d:67:54:ef:32:f8:75:0f:17:20:c3:20:27:de:00:b8: 86:18:ca:40:1b:ee:9a:62:4b:08:fb:f0:b3:4b:50:9f:33:31: 94:f9:3e:4a:85:a2:7b:a3:c1:92:25:4a:86:e2:9b:e6:4d:13: fc:9f:e8:25:92:50:71:9c:c3:35:3f:75:f2:2f:57:ab:4a:75: 17:34:24:25:77:de:0e:46:1e:3d:1e:b8:9b:c0:27:f3:d9:03: de:ae:ef:5b:53:f1:d4:79:c1:4f:a1:8e:4d:ff:2a:f6:f2:92: 7f:9a:df:95:34:23:5a:81:88:77:31:7d:1e:b7:4f:c0:d4:21: 11:ab:90:15:9f:fd:f0:be:44:8f:05:a0:1d:5a:85:28:97:4d: ac:c4:53:e5:20:3f:e1:e5:21:3e:b2:1d:f2:48:5c:21:a8:58: ea:07:01:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJfePxDHrfsjz0zY8C2wyavVfjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYxQTc3 REZGNzBDRjAeFw0yNjExMTQxNjU1NTNaFw0yNjExMTUxNzA1NTNaMDMxMTAvBgNV BAMTKERERDcyOTY0NUE4RTlFM0VEOTJCODRCQzE1MjBDOTYzN0M4Q0QwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdWZMT9XbrlYq2zlK+NkrWyrW pM7YyNE7ApnnafAzgYE2pJBhB1fqeC64KAB+5hrAbK7AdB02Wthk9jUhVPdnG2kT p0vjfzjud3vuMh9Yy75VA/QoyvokMRK9I3nX0Qcv7Dw7JqDabpWViORAflB1htuz JVoQYb6Gdf5xf7I1cblPPyel10KSzdXj/kKIxWLoZCt13uN3CX0TEqV0chNh6Vsq gdqTGOt5VwVLKxi67B424XhsfEX5/w4+3Wi+KSS0MsrA2Cgy0NkxZbPGJCoTOcii W5fiYLBs5SwoUpWn83uoevKTFUsbXX7gHKsDs0TULbcZLuIE/zhmS+4+jApLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3dcpZFqOnj7ZK4S8FSDJY3yM0NwwHwYDVR0j BBgwFoAUaLUDUyL/25yNbuwQtdLxp33/cM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQzYTJmZGYtYmNiYS00NzU3LWIzNjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMy MkZGREI5QzhENkVFQzEwQjVEMkYxQTc3REZGNzBDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82OEI1MDM1MzIyRkZEQjlDOEQ2RUVDMTBCNUQyRjFBNzdERkY3 MENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYx QTc3REZGNzBDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTqX9WRYV0co2tNZGlizjGC60E6IkWdsEr9 AvByq5Q6KFjSpjCk1AXguWVto76ngAHqurDDy4xlatbt+CAHFNQlrAU8FqH0PN3m rpQnGnX2qV/vPTAO/JROkQtdfWdU7zL4dQ8XIMMgJ94AuIYYykAb7ppiSwj78LNL UJ8zMZT5PkqFonujwZIlSobim+ZNE/yf6CWSUHGcwzU/dfIvV6tKdRc0JCV33g5G Hj0euJvAJ/PZA96u71tT8dR5wU+hjk3/Kvbykn+a35U0I1qBiHcxfR63T8DUIRGr kBWf/fC+RI8FoB1ahSiXTazEU+UgP+HlIT6yHfJIXCGoWOoHAdU= -----END CERTIFICATE-----Generated at Sat Nov 14 22:20:28 2026 by rpki-client