$ rpki-client -vvf rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft File: B68CA352FD19570302F874C669E957D75A73CB1A.mft (raw, json) Hash identifier: 6whKUSyEh2GHJLz4y7+3STYOtFJBYbtiQSpHvVMDjAk= Subject key identifier: 53:4B:85:26:B2:E7:98:ED:48:5A:E0:4F:A7:61:AA:CB:93:21:E6:3C Authority key identifier: B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A Certificate issuer: /CN=B68CA352FD19570302F874C669E957D75A73CB1A Certificate serial: 3E17166FF11B4AF45EFDD170C3495E9A85426888 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:06:31 +0000 Manifest this update: Wed 17 Jun 2026 03:01:31 +0000 Manifest next update: Thu 18 Jun 2026 03:57:31 +0000 Files and hashes: 1: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: cz1cQtv7tCgDk2XS5KepF7E6Gy4H3IOmqv/4F0jBKKs=) 2: B68CA352FD19570302F874C669E957D75A73CB1A.crl (hash: s5CCk1QSUGx/4/Wi+0/UqtwtmEcw38E0Q7Pcm+rIXos=) 3: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: PPKzPS1avC1hYARVLoXIKKmtPdbk4f7qBVqCnnsV8sM=) 4: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 5VrmWDNZS7if5g//ZdEtWvioHlEWvzJs1bPHJcalJoE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:17:16:6f:f1:1b:4a:f4:5e:fd:d1:70:c3:49:5e:9a:85:42:68:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B68CA352FD19570302F874C669E957D75A73CB1A Validity Not Before: Jun 17 03:01:31 2026 GMT Not After : Jun 18 03:57:31 2026 GMT Subject: CN=534B8526B2E798ED485AE04FA761AACB9321E63C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:20:cb:23:0c:3c:ca:6c:84:46:5a:1f:12: 5e:18:83:44:5a:d7:4d:2d:47:8a:dc:69:61:e5:eb: 90:cf:e5:c9:29:a1:ef:ac:d4:6a:e3:0e:15:a1:21: 61:08:7b:b5:b8:7d:a4:9c:60:a3:6c:a0:b9:bb:0f: 31:7b:e7:e8:1f:6d:bd:00:ec:23:53:34:9d:ac:a8: 07:60:6f:97:e3:95:0a:60:72:19:9e:b9:0d:3d:e0: 5a:16:ae:39:f6:44:32:64:8f:51:10:f9:76:2d:69: 44:eb:36:55:84:d8:f6:44:1d:94:4d:33:73:45:24: d2:87:28:d0:58:ba:1f:7a:4a:ad:65:bd:40:c4:ed: a4:79:2f:bf:f3:f5:0d:d9:fb:83:d6:23:c6:f6:d7: 7f:19:9a:8e:28:f8:e2:0b:3c:fb:93:76:1d:c5:ff: de:c5:29:3f:11:c6:9a:a6:3b:b9:8d:0f:fb:a8:60: 2c:34:12:6c:ae:c0:22:d4:74:c5:07:63:4f:42:03: 0b:7c:a4:90:cc:f8:97:3a:0d:53:31:ed:e5:17:51: 45:a1:a3:d7:1d:86:54:c9:b8:c9:d5:ce:db:8e:a7: e9:67:5b:4f:d8:ac:09:dd:4a:31:dc:27:4f:24:41: 2c:16:c1:b9:99:ab:13:3f:30:a8:6a:52:98:b9:02: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4B:85:26:B2:E7:98:ED:48:5A:E0:4F:A7:61:AA:CB:93:21:E6:3C X509v3 Authority Key Identifier: keyid:B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:9a:34:e6:dd:6f:19:7a:e4:7d:fe:80:cf:d0:80:34:4e:d3: b8:a2:a9:96:51:3d:cc:f4:e8:87:5a:39:93:7e:8f:63:85:d0: ca:82:89:ed:1f:2d:33:37:81:34:55:0e:a6:c6:a9:96:35:46: 52:6c:d5:4b:43:11:79:5d:03:0a:7a:47:d5:16:98:ed:af:25: dc:6b:ad:91:2d:26:3f:a1:f3:cb:db:db:9d:ee:50:79:48:25: 5f:32:ea:76:2f:53:8a:2e:b3:98:40:8d:64:1d:79:b2:ee:d9: cc:3c:75:96:4f:3a:fa:c5:23:52:af:42:9a:3c:e9:7a:45:8b: 0c:d0:9c:57:d1:60:1c:67:e2:87:2f:27:98:93:32:d2:44:a5: b5:40:a3:6f:00:ce:bc:bb:8f:09:e5:09:00:ef:ff:43:52:19: 60:50:f2:cf:c8:72:ef:2a:a0:8b:27:93:92:ce:da:67:e9:c1: 33:2b:64:7e:27:30:00:fa:56:9d:1b:35:2f:3d:22:2e:23:66: 27:63:de:9d:1e:ce:5b:3d:3a:1e:8d:80:3c:1b:2c:7b:43:66: 51:ec:64:6a:23:cc:bc:4a:14:e7:66:86:fb:67:d2:a5:6c:af: a3:ac:1c:80:61:12:f9:c7:03:68:3d:b8:18:95:13:c5:88:f0: 46:27:09:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhcWb/EbSvRe/dFww0lemoVCaIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1 QTczQ0IxQTAeFw0yNjA2MTcwMzAxMzFaFw0yNjA2MTgwMzU3MzFaMDMxMTAvBgNV BAMTKDUzNEI4NTI2QjJFNzk4RUQ0ODVBRTA0RkE3NjFBQUNCOTMyMUU2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXCDLIww8ymyERlofEl4Yg0Ra 100tR4rcaWHl65DP5ckpoe+s1GrjDhWhIWEIe7W4faScYKNsoLm7DzF75+gfbb0A 7CNTNJ2sqAdgb5fjlQpgchmeuQ094FoWrjn2RDJkj1EQ+XYtaUTrNlWE2PZEHZRN M3NFJNKHKNBYuh96Sq1lvUDE7aR5L7/z9Q3Z+4PWI8b2138Zmo4o+OILPPuTdh3F /97FKT8RxpqmO7mND/uoYCw0EmyuwCLUdMUHY09CAwt8pJDM+Jc6DVMx7eUXUUWh o9cdhlTJuMnVztuOp+lnW0/YrAndSjHcJ08kQSwWwbmZqxM/MKhqUpi5AgC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU0uFJrLnmO1IWuBPp2Gqy5Mh5jwwHwYDVR0j BBgwFoAUtoyjUv0ZVwMC+HTGaelX11pzyxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAwNDIzM2YtYmIyYy00N2Q3LTkwMWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJG RDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1QTczQ0IxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjhDQTM1MkZEMTk1NzAzMDJGODc0QzY2OUU5NTdENzVBNzND QjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3 RDc1QTczQ0IxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmaNObdbxl65H3+gM/QgDRO07iiqZZRPcz0 6IdaOZN+j2OF0MqCie0fLTM3gTRVDqbGqZY1RlJs1UtDEXldAwp6R9UWmO2vJdxr rZEtJj+h88vb253uUHlIJV8y6nYvU4ous5hAjWQdebLu2cw8dZZPOvrFI1KvQpo8 6XpFiwzQnFfRYBxn4ocvJ5iTMtJEpbVAo28Azry7jwnlCQDv/0NSGWBQ8s/Icu8q oIsnk5LO2mfpwTMrZH4nMAD6Vp0bNS89Ii4jZidj3p0ezls9Oh6NgDwbLHtDZlHs ZGojzLxKFOdmhvtn0qVsr6OsHIBhEvnHA2g9uBiVE8WI8EYnCXc= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:22 2026 by rpki-client