$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: taRFZMv+iws0DGlLvTlFZAKCGNyxmxsUbHslVhArPX4= Subject key identifier: D8:03:80:ED:05:8F:E1:1A:57:61:85:24:42:94:09:47:A5:F7:3B:BA Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 49CE7D049BB1435516BC4C7FA97F74EB141D3686 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 026A Signing time: Sat 18 Apr 2026 13:41:26 +0000 Manifest this update: Sat 18 Apr 2026 13:36:26 +0000 Manifest next update: Tue 21 Apr 2026 15:18:26 +0000 Files and hashes: 1: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) 2: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: Cy8vRmUG8iCmcMt3LLgFacgHMIhHkbYr7c67bzovSNg=) 3: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 15:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ce:7d:04:9b:b1:43:55:16:bc:4c:7f:a9:7f:74:eb:14:1d:36:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Apr 18 13:36:26 2026 GMT Not After : Apr 21 15:18:26 2026 GMT Subject: CN=D80380ED058FE11A5761852442940947A5F73BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:e0:b2:6a:ae:b9:9c:c1:10:bf:c5:6f:23: d5:43:d8:63:5a:96:b4:6f:b2:ac:8c:e8:68:76:fa: 4c:0d:f3:75:10:2b:2f:ee:fd:52:14:d8:40:f5:4b: 68:e6:a7:b5:a9:0a:8f:37:47:db:ba:eb:5c:26:f1: 11:50:dc:99:1b:8f:0c:0a:0e:3c:20:8a:78:c1:5f: 02:4e:9c:ba:9c:64:a4:80:a8:9e:c8:25:dc:21:8c: 4d:d1:37:5c:5c:50:e1:c6:eb:e6:96:dc:9e:5a:29: b5:d8:2a:a1:12:81:39:cf:aa:48:a1:56:42:12:54: 9e:0b:c2:e4:c3:54:86:d2:77:13:f8:9d:fe:d9:b9: 9d:fd:f1:29:25:fa:44:47:16:7d:6f:d8:78:39:3a: 86:89:7c:11:ba:a7:8c:17:3c:57:8a:37:ae:75:da: ea:c9:34:53:83:69:be:97:6f:ed:0d:0c:db:41:12: 6d:96:e2:4b:0c:ef:fb:bd:83:cd:a4:31:1b:7a:5d: d3:05:d4:0d:2f:a2:c5:e4:6c:a2:96:2d:0d:f8:4e: 67:19:45:f1:f7:b0:f9:5e:54:75:d7:1a:80:cd:e7: 9b:0a:84:5e:fc:7f:d8:7f:2b:71:52:b6:39:24:96: b3:bb:3c:cb:93:cc:b1:04:06:71:40:44:91:ba:5c: 49:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:03:80:ED:05:8F:E1:1A:57:61:85:24:42:94:09:47:A5:F7:3B:BA X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:08:4a:70:41:a9:1b:d1:29:bc:19:7c:84:05:7d:c1:59:cf: 3c:ed:34:86:7d:49:52:b4:04:28:e6:df:0d:77:19:71:37:5b: 49:d9:c2:0d:77:d8:fb:cb:a0:0f:d3:06:f3:fb:e8:e1:2f:dd: 9b:8c:1a:49:48:26:61:85:50:86:b2:71:52:1c:2b:7f:fe:9a: 3e:21:0f:10:c6:ad:04:b5:43:1b:d8:b9:ea:50:f1:77:6f:c7: 22:ca:8b:85:b0:1e:24:73:71:75:cf:64:fc:7a:0f:e2:4f:30: 71:07:2d:98:a4:10:31:c0:d2:fb:05:c1:63:b2:94:73:5e:a7: 61:06:04:6e:7c:8b:56:11:78:06:de:fc:e6:cf:ea:6f:72:ea: ad:fc:86:f2:d1:6d:4b:15:b7:68:bb:d9:f5:54:2f:f9:22:99: 7e:9f:f2:cf:d2:6e:93:fb:3b:dc:25:18:ba:d7:8e:2c:59:54: 4c:4d:27:59:a1:6d:56:f2:85:45:cc:87:4d:20:e4:bc:f2:c4: ae:11:d1:d1:2b:8c:3a:95:63:2c:5e:39:8e:60:18:f5:d2:71: 5d:d1:08:66:13:9c:50:c7:4b:f2:b0:af:82:4b:f5:b4:40:ee: 57:53:52:2b:25:49:bb:0e:16:6b:12:66:19:b7:81:89:af:a3: eb:45:f6:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSc59BJuxQ1UWvEx/qX906xQdNoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNjA0MTgxMzM2MjZaFw0yNjA0MjExNTE4MjZaMDMxMTAvBgNV BAMTKEQ4MDM4MEVEMDU4RkUxMUE1NzYxODUyNDQyOTQwOTQ3QTVGNzNCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaq+Cyaq65nMEQv8VvI9VD2GNa lrRvsqyM6Gh2+kwN83UQKy/u/VIU2ED1S2jmp7WpCo83R9u661wm8RFQ3JkbjwwK DjwginjBXwJOnLqcZKSAqJ7IJdwhjE3RN1xcUOHG6+aW3J5aKbXYKqESgTnPqkih VkISVJ4LwuTDVIbSdxP4nf7ZuZ398Skl+kRHFn1v2Hg5OoaJfBG6p4wXPFeKN651 2urJNFODab6Xb+0NDNtBEm2W4ksM7/u9g82kMRt6XdMF1A0vosXkbKKWLQ34TmcZ RfH3sPleVHXXGoDN55sKhF78f9h/K3FStjkklrO7PMuTzLEEBnFARJG6XEnrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2AOA7QWP4RpXYYUkQpQJR6X3O7owHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0ISnBBqRvRKbwZfIQFfcFZzzztNIZ9SVK0 BCjm3w13GXE3W0nZwg132PvLoA/TBvP76OEv3ZuMGklIJmGFUIaycVIcK3/+mj4h DxDGrQS1QxvYuepQ8XdvxyLKi4WwHiRzcXXPZPx6D+JPMHEHLZikEDHA0vsFwWOy lHNep2EGBG58i1YReAbe/ObP6m9y6q38hvLRbUsVt2i72fVUL/kimX6f8s/SbpP7 O9wlGLrXjixZVExNJ1mhbVbyhUXMh00g5LzyxK4R0dErjDqVYyxeOY5gGPXScV3R CGYTnFDHS/Kwr4JL9bRA7ldTUislSbsOFmsSZhm3gYmvo+tF9nI= -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:17 2026 by rpki-client