$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json) Hash identifier: Xdo9BLo1jDjFAO6E39aHHREzjUz7up9/dSwnaAR0MJU= Subject key identifier: FF:51:2E:88:C8:7D:05:4D:9A:E1:68:DA:EC:94:7C:BC:57:E6:3A:7B Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 4005E9D1A316B1EB11E3CA321F1A2053FBEAD1AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft Manifest number: 04BA Signing time: Sun 01 Mar 2026 07:11:06 +0000 Manifest this update: Sun 01 Mar 2026 07:06:06 +0000 Manifest next update: Wed 04 Mar 2026 14:51:06 +0000 Files and hashes: 1: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: 1T9Mzpjg1JesmSKQ2mxgjvVHW3e6K96UDs7/kAWvFUE=) 2: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: g4MCHQFO3MQThoyM2TjwQb6nRcwAjTBYmahYDBr6bho=) 3: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: LmeqzYeHbwqjRvKuIbroVaXCpVEz8bLJBtycTcCFJu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:05:e9:d1:a3:16:b1:eb:11:e3:ca:32:1f:1a:20:53:fb:ea:d1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Mar 1 07:06:06 2026 GMT Not After : Mar 4 14:51:06 2026 GMT Subject: CN=FF512E88C87D054D9AE168DAEC947CBC57E63A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:86:8c:c4:3a:01:46:ea:d0:df:cd:8e:aa: a3:ff:f7:5c:83:b3:f9:d1:99:2d:36:be:39:29:18: dd:b1:8b:04:45:86:d0:aa:0b:9c:d5:f5:5d:0b:3c: b2:db:49:fe:64:25:9b:35:4b:a9:0e:6b:d8:51:e9: c8:a2:6e:94:56:bd:4b:60:ba:a8:ef:01:6c:79:19: 9d:ca:cf:cf:27:41:38:68:44:ab:72:4a:c0:23:87: 0c:3b:c1:43:96:51:dd:20:7c:74:42:fd:bd:2c:f3: 0d:a1:62:06:d9:23:25:4c:8c:78:08:89:ac:89:7d: 88:02:70:78:00:55:be:28:7a:ec:12:36:a3:99:f1: 3a:6a:97:2c:5c:2c:bf:8d:bd:55:44:2e:54:b3:e1: 45:f0:a2:e8:1c:77:d5:c4:a3:1c:45:c6:c1:48:e8: 1d:a3:6a:58:06:85:94:f3:1b:15:d6:16:63:22:b9: e6:c8:dc:43:61:30:d6:43:53:6f:44:ac:89:df:35: e8:56:6a:ad:28:17:b9:57:28:fd:c6:81:89:7d:1b: 7c:a3:80:6f:cc:53:2e:bd:ea:35:7d:ba:39:1e:70: 9e:d8:7f:fe:e4:ba:ae:c3:71:c4:27:df:c6:76:98: c7:c0:06:64:ea:2b:11:3a:e3:fe:0a:20:77:dd:1a: f8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:51:2E:88:C8:7D:05:4D:9A:E1:68:DA:EC:94:7C:BC:57:E6:3A:7B X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:92:9d:f2:ad:29:a4:b2:8c:1f:66:27:ed:c7:f4:ba:88:99: ec:1b:aa:b2:ed:61:86:00:c8:75:6a:f0:a2:8e:91:03:81:40: 19:fb:14:a4:4f:16:8e:73:98:d2:16:d9:50:4e:b3:23:6e:f6: e0:09:38:6e:02:55:f3:04:2c:92:57:52:37:ca:c0:92:04:0e: 1d:4e:f4:c2:e6:78:ad:5e:c5:d7:c8:ab:92:4c:1f:34:e4:3d: 86:32:4b:ae:6c:af:10:73:c5:35:59:2d:d4:ed:51:9c:3a:b8: e7:5b:71:fc:14:8b:8a:97:84:da:a7:87:fd:3a:40:df:e9:b7: 91:43:cd:6c:d1:91:f6:d6:40:c5:0c:80:6a:5d:a3:be:a2:06: b8:59:16:0c:64:6a:e1:b7:c1:7b:bc:8e:a1:77:ea:1a:e1:60: a9:f0:f3:90:3d:3e:d8:2b:3f:d0:26:03:57:08:b0:f3:f7:9d: 97:83:38:4f:1e:72:91:cd:da:f1:ac:c9:5d:e6:87:35:1b:c6: 51:9c:d8:bf:9d:cb:20:2c:51:3e:29:56:ed:8d:6d:2d:11:e1: f1:be:1f:c3:89:23:cd:60:fc:22:56:f0:ee:70:f9:0a:fe:05: 50:bd:58:76:08:98:ae:12:3c:c0:ab:ff:78:19:4a:e4:df:16: 53:5e:5c:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAXp0aMWsesR48oyHxogU/vq0a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNjAzMDEwNzA2MDZaFw0yNjAzMDQxNDUxMDZaMDMxMTAvBgNV BAMTKEZGNTEyRTg4Qzg3RDA1NEQ5QUUxNjhEQUVDOTQ3Q0JDNTdFNjNBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/IaMxDoBRurQ382OqqP/91yD s/nRmS02vjkpGN2xiwRFhtCqC5zV9V0LPLLbSf5kJZs1S6kOa9hR6ciibpRWvUtg uqjvAWx5GZ3Kz88nQThoRKtySsAjhww7wUOWUd0gfHRC/b0s8w2hYgbZIyVMjHgI iayJfYgCcHgAVb4oeuwSNqOZ8TpqlyxcLL+NvVVELlSz4UXwougcd9XEoxxFxsFI 6B2jalgGhZTzGxXWFmMiuebI3ENhMNZDU29ErInfNehWaq0oF7lXKP3GgYl9G3yj gG/MUy696jV9ujkecJ7Yf/7kuq7DccQn38Z2mMfABmTqKxE64/4KIHfdGvivAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/1EuiMh9BU2a4Wja7JR8vFfmOnswHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4 NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuSnfKtKaSyjB9mJ+3H9LqImewbqrLtYYYA yHVq8KKOkQOBQBn7FKRPFo5zmNIW2VBOsyNu9uAJOG4CVfMELJJXUjfKwJIEDh1O 9MLmeK1exdfIq5JMHzTkPYYyS65srxBzxTVZLdTtUZw6uOdbcfwUi4qXhNqnh/06 QN/pt5FDzWzRkfbWQMUMgGpdo76iBrhZFgxkauG3wXu8jqF36hrhYKnw85A9Ptgr P9AmA1cIsPP3nZeDOE8ecpHN2vGsyV3mhzUbxlGc2L+dyyAsUT4pVu2NbS0R4fG+ H8OJI81g/CJW8O5w+Qr+BVC9WHYImK4SPMCr/3gZSuTfFlNeXI0= -----END CERTIFICATE-----Generated at Mon Mar 2 21:55:34 2026 by rpki-client