$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json) Hash identifier: KKQVO5H+3PxzaUKVwxbEozNjNu3aaHgEUUqyBwM8WYQ= Subject key identifier: 56:09:4F:C0:7C:95:35:FB:19:68:1F:81:A2:60:8B:4D:4E:2E:E9:EC Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 3DB3C9817F107F59CAD43DCE4EADBD672EEFF542 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft Manifest number: 04CE Signing time: Thu 16 Apr 2026 04:21:10 +0000 Manifest this update: Thu 16 Apr 2026 04:16:10 +0000 Manifest next update: Sun 19 Apr 2026 11:29:10 +0000 Files and hashes: 1: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: LmeqzYeHbwqjRvKuIbroVaXCpVEz8bLJBtycTcCFJu4=) 2: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: g4MCHQFO3MQThoyM2TjwQb6nRcwAjTBYmahYDBr6bho=) 3: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: TTlyEGXpuwNLoHRkQe7X6ygbygJmgui1hL107q/NcRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 11:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b3:c9:81:7f:10:7f:59:ca:d4:3d:ce:4e:ad:bd:67:2e:ef:f5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Apr 16 04:16:10 2026 GMT Not After : Apr 19 11:29:10 2026 GMT Subject: CN=56094FC07C9535FB19681F81A2608B4D4E2EE9EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:d9:35:0f:cf:61:fc:65:05:08:13:3b:98: 2a:28:e7:7d:0b:28:7f:cb:03:43:c4:1f:c7:c0:ac: d3:d2:23:bd:b2:31:1f:ae:61:79:18:79:70:53:f0: 5d:c0:17:74:4a:8d:20:17:6b:46:4d:44:9d:69:ed: b1:09:cd:dd:ff:d9:dc:96:56:e3:81:9b:67:41:6b: 4a:10:31:d2:09:73:f2:24:4b:2e:3d:3f:47:09:92: 3f:44:a0:df:c0:7e:b3:de:4a:ed:0b:b9:de:58:4b: 40:38:f8:a3:6f:74:c2:b3:73:c3:10:33:a9:10:7b: e2:37:fd:72:b6:1b:a4:a7:28:06:f9:83:b3:5a:aa: 1c:ad:48:32:c3:1d:6a:0f:1a:ec:88:c9:6a:15:87: a4:75:18:d7:bb:c2:78:7f:0d:3a:13:81:98:ba:59: 01:ab:8a:92:c5:cd:80:80:d6:a5:d5:11:04:b0:80: a8:0e:09:f7:f5:48:35:d4:19:66:cc:14:bb:65:51: 89:01:46:d2:51:b9:5a:c6:2a:43:74:ad:45:11:ac: 2c:48:87:c6:65:6b:9a:59:04:b5:ac:8c:54:16:44: 2c:eb:a3:e9:d4:e6:d9:d3:1c:a1:b3:2d:15:b0:05: 0f:c0:fa:af:ef:73:b8:94:00:c1:66:45:ba:b7:4f: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:09:4F:C0:7C:95:35:FB:19:68:1F:81:A2:60:8B:4D:4E:2E:E9:EC X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b7:31:a0:0a:7c:71:b0:20:c1:c5:a4:77:e9:c8:16:93:10: b2:6c:4b:2f:0d:40:f7:19:19:16:65:c2:c9:cd:13:3a:28:13: 26:7b:df:65:d7:85:8f:e9:34:01:58:1c:0f:4b:f6:25:b3:7b: c3:b7:5a:04:34:5b:61:70:2b:48:31:78:07:68:fd:9e:3d:26: d5:a9:20:a4:e5:88:c5:0c:61:6b:2d:40:84:0a:23:9d:72:7d: b4:2c:11:dd:fa:70:86:31:3c:f1:05:9a:b7:43:f3:90:9c:90: f1:b8:2a:bd:e0:89:97:26:b7:d4:6c:b9:3d:85:93:27:20:09: 1b:a2:52:33:68:f6:78:72:df:51:04:06:dd:1d:00:1b:80:e7: 4e:ca:a8:af:ac:74:e5:f7:eb:7f:d4:12:bd:e6:e6:dd:65:c1: f7:1a:d1:22:89:08:db:90:c8:44:7c:a2:a7:d5:c2:02:30:c6: a3:46:11:10:18:c7:3c:be:83:dc:f8:ce:7c:0f:c6:31:89:98: 16:9e:32:c5:36:31:56:6b:7d:b2:ee:ef:38:04:d4:32:bd:51: 05:d9:8a:c4:c6:62:e9:1c:3c:2f:7b:a1:8c:cb:44:40:d4:d9: 42:1f:24:ba:5c:76:cf:98:26:e2:5b:8a:5c:80:4a:40:76:fe: 95:0a:42:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbPJgX8Qf1nK1D3OTq29Zy7v9UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNjA0MTYwNDE2MTBaFw0yNjA0MTkxMTI5MTBaMDMxMTAvBgNV BAMTKDU2MDk0RkMwN0M5NTM1RkIxOTY4MUY4MUEyNjA4QjRENEUyRUU5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYdk1D89h/GUFCBM7mCoo530L KH/LA0PEH8fArNPSI72yMR+uYXkYeXBT8F3AF3RKjSAXa0ZNRJ1p7bEJzd3/2dyW VuOBm2dBa0oQMdIJc/IkSy49P0cJkj9EoN/AfrPeSu0Lud5YS0A4+KNvdMKzc8MQ M6kQe+I3/XK2G6SnKAb5g7NaqhytSDLDHWoPGuyIyWoVh6R1GNe7wnh/DToTgZi6 WQGripLFzYCA1qXVEQSwgKgOCff1SDXUGWbMFLtlUYkBRtJRuVrGKkN0rUURrCxI h8Zla5pZBLWsjFQWRCzro+nU5tnTHKGzLRWwBQ/A+q/vc7iUAMFmRbq3T0wHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVglPwHyVNfsZaB+BomCLTU4u6ewwHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4 NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGa3MaAKfHGwIMHFpHfpyBaTELJsSy8NQPcZ GRZlwsnNEzooEyZ732XXhY/pNAFYHA9L9iWze8O3WgQ0W2FwK0gxeAdo/Z49JtWp IKTliMUMYWstQIQKI51yfbQsEd36cIYxPPEFmrdD85CckPG4Kr3giZcmt9RsuT2F kycgCRuiUjNo9nhy31EEBt0dABuA507KqK+sdOX363/UEr3m5t1lwfca0SKJCNuQ yER8oqfVwgIwxqNGERAYxzy+g9z4znwPxjGJmBaeMsU2MVZrfbLu7zgE1DK9UQXZ isTGYukcPC97oYzLREDU2UIfJLpcds+YJuJbilyASkB2/pUKQjM= -----END CERTIFICATE-----Generated at Fri Apr 17 20:29:49 2026 by rpki-client