$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft File: B68CA352FD19570302F874C669E957D75A73CB1A.mft (raw, json) Hash identifier: K8IFcCGKD2Hsoq8JAAoDKe2AgBm+XXw0QrBY50Gh7FU= Subject key identifier: 92:52:73:D9:29:0F:2C:DC:06:A9:F0:2E:C5:4B:52:94:CD:6F:23:2C Authority key identifier: B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A Certificate issuer: /CN=B68CA352FD19570302F874C669E957D75A73CB1A Certificate serial: 6C16A01623F287E3C7DB5BAA6A65A6B417CD6479 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 03:15:31 +0000 Manifest this update: Mon 21 Sep 2026 03:10:31 +0000 Manifest next update: Tue 22 Sep 2026 05:24:31 +0000 Files and hashes: 1: B68CA352FD19570302F874C669E957D75A73CB1A.crl (hash: Q1yn+29QnG91OMaN/pI6i9CG27vc6bU/OjGp51/s/AA=) 2: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: PPKzPS1avC1hYARVLoXIKKmtPdbk4f7qBVqCnnsV8sM=) 3: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 5VrmWDNZS7if5g//ZdEtWvioHlEWvzJs1bPHJcalJoE=) 4: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: cz1cQtv7tCgDk2XS5KepF7E6Gy4H3IOmqv/4F0jBKKs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:16:a0:16:23:f2:87:e3:c7:db:5b:aa:6a:65:a6:b4:17:cd:64:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B68CA352FD19570302F874C669E957D75A73CB1A Validity Not Before: Sep 21 03:10:31 2026 GMT Not After : Sep 22 05:24:31 2026 GMT Subject: CN=925273D9290F2CDC06A9F02EC54B5294CD6F232C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:80:fd:37:5d:a5:11:67:bb:14:ae:e5:fb: b2:bd:b7:4b:29:fa:16:b3:86:eb:2a:30:10:21:17: 93:b1:6c:82:95:fd:90:45:ee:f5:42:df:18:d6:ae: 46:1d:ff:b4:52:59:d4:cd:94:ce:3f:53:67:0b:db: df:60:4a:e4:1f:67:5f:d7:f7:92:09:af:a9:54:6f: 68:ee:e2:bd:31:39:b8:6c:91:bc:78:5a:ca:10:7b: 1c:2f:ca:25:df:48:4b:8f:53:9e:d0:6e:b6:61:c0: 3f:1c:c7:75:5b:c8:4f:a9:80:b7:15:b4:86:e5:fe: 4f:1c:cd:f7:f9:59:cf:38:f3:c2:9c:e5:8a:45:52: 45:e5:fd:64:0d:fa:ec:9b:20:64:55:4b:a0:49:c1: 30:1d:8f:75:66:a0:8e:74:2b:30:e7:b8:dd:d9:57: 89:83:9c:ef:2c:fb:cd:93:e6:13:0e:6a:e8:91:c2: 18:29:6f:bb:b9:42:a2:ca:ca:a9:04:bb:4f:b8:78: 74:62:68:f9:cf:b6:eb:40:15:85:bc:49:d8:7c:a3: 08:d0:bb:f6:dd:14:0d:94:12:12:e0:00:5d:e0:0f: 98:7f:ad:1b:8d:26:4f:87:10:f2:40:0c:79:20:2d: 60:f0:e4:13:99:05:b1:e9:51:c4:bc:ef:37:ad:24: 2b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:52:73:D9:29:0F:2C:DC:06:A9:F0:2E:C5:4B:52:94:CD:6F:23:2C X509v3 Authority Key Identifier: keyid:B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e3:01:94:bc:c6:49:2d:d2:b7:13:a6:cf:fe:1a:bb:0f:88: 31:3d:10:91:0b:5c:61:3d:66:68:77:b9:c5:6a:68:cb:84:a9: 42:18:8e:7b:22:25:7c:1d:1d:5f:c8:9e:5a:01:ea:9b:f0:89: dc:53:23:d9:2d:fe:58:30:34:e3:af:df:a7:bb:4f:b1:cd:f6: 71:bf:98:ce:ca:26:e3:59:df:d8:1e:8d:17:dd:33:5e:67:bd: dd:cf:18:41:29:ef:ba:35:93:5a:21:73:b7:92:7c:0b:83:7c: 63:51:88:89:ac:98:26:11:3d:ee:3c:b1:5b:88:1b:f5:7c:5c: cc:5f:5f:9e:df:ad:42:48:40:ef:a4:3c:a0:7a:6a:84:aa:51: d8:7e:8d:fb:0c:10:8e:db:a8:2f:3f:5f:22:32:d6:5a:1d:8a: 35:83:6c:98:1a:6c:12:16:46:39:6c:8a:ed:99:f7:6a:fd:6b: 9e:8e:1e:84:4c:ea:55:98:eb:e1:6a:a6:69:a4:a3:77:e3:74: 37:11:f0:fc:2b:6f:14:96:36:ef:61:f3:a1:09:61:10:44:35: bb:19:30:c0:9e:9a:3d:5e:a6:8c:42:ac:7d:d4:26:93:25:ac: c5:c3:f1:f0:ad:33:b0:e3:c8:cf:a4:64:02:50:6c:cf:62:fd: 44:71:db:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBagFiPyh+PH21uqamWmtBfNZHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1 QTczQ0IxQTAeFw0yNjA5MjEwMzEwMzFaFw0yNjA5MjIwNTI0MzFaMDMxMTAvBgNV BAMTKDkyNTI3M0Q5MjkwRjJDREMwNkE5RjAyRUM1NEI1Mjk0Q0Q2RjIzMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tID9N12lEWe7FK7l+7K9t0sp +hazhusqMBAhF5OxbIKV/ZBF7vVC3xjWrkYd/7RSWdTNlM4/U2cL299gSuQfZ1/X 95IJr6lUb2ju4r0xObhskbx4WsoQexwvyiXfSEuPU57QbrZhwD8cx3VbyE+pgLcV tIbl/k8czff5Wc8488Kc5YpFUkXl/WQN+uybIGRVS6BJwTAdj3VmoI50KzDnuN3Z V4mDnO8s+82T5hMOauiRwhgpb7u5QqLKyqkEu0+4eHRiaPnPtutAFYW8Sdh8owjQ u/bdFA2UEhLgAF3gD5h/rRuNJk+HEPJADHkgLWDw5BOZBbHpUcS87zetJCupAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUklJz2SkPLNwGqfAuxUtSlM1vIywwHwYDVR0j BBgwFoAUtoyjUv0ZVwMC+HTGaelX11pzyxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAwNDIzM2YtYmIyYy00N2Q3LTkwMWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJG RDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1QTczQ0IxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjhDQTM1MkZEMTk1NzAzMDJGODc0QzY2OUU5NTdENzVBNzND QjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3 RDc1QTczQ0IxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDjAZS8xkkt0rcTps/+GrsPiDE9EJELXGE9 Zmh3ucVqaMuEqUIYjnsiJXwdHV/InloB6pvwidxTI9kt/lgwNOOv36e7T7HN9nG/ mM7KJuNZ39gejRfdM15nvd3PGEEp77o1k1ohc7eSfAuDfGNRiImsmCYRPe48sVuI G/V8XMxfX57frUJIQO+kPKB6aoSqUdh+jfsMEI7bqC8/XyIy1lodijWDbJgabBIW Rjlsiu2Z92r9a56OHoRM6lWY6+Fqpmmko3fjdDcR8PwrbxSWNu9h86EJYRBENbsZ MMCemj1epoxCrH3UJpMlrMXD8fCtM7DjyM+kZAJQbM9i/URx2z0= -----END CERTIFICATE-----Generated at Mon Sep 21 20:03:20 2026 by rpki-client