$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft File: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft (raw, json) Hash identifier: LU3qsK72JUZOUlkhaP/6lUR86zk/FIodbQjeKebCqVI= Subject key identifier: 30:AE:99:CB:1E:4B:BE:6F:A4:3A:D3:B9:3F:EE:89:53:0A:10:29:80 Authority key identifier: 68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 Certificate issuer: /CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Certificate serial: 34F58B08FD7BF179E3AC7D28BA28367751CA344D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft Manifest number: BD Signing time: Sun 20 Sep 2026 17:54:02 +0000 Manifest this update: Sun 20 Sep 2026 17:49:02 +0000 Manifest next update: Mon 21 Sep 2026 18:02:02 +0000 Files and hashes: 1: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl (hash: a8qTVLaBC1MHvtpt4Adhme8ZMAVGuH0y5FirFrIGaK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f5:8b:08:fd:7b:f1:79:e3:ac:7d:28:ba:28:36:77:51:ca:34:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Validity Not Before: Sep 20 17:49:02 2026 GMT Not After : Sep 21 18:02:02 2026 GMT Subject: CN=30AE99CB1E4BBE6FA43AD3B93FEE89530A102980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:31:a9:36:ad:c9:55:ac:79:81:1f:22:87: 51:8a:91:3b:86:12:d1:04:ba:fc:21:32:5f:9f:8d: 4e:8c:ad:bc:03:15:a1:0c:0a:42:a5:d9:cf:ec:69: 40:05:72:c6:85:07:61:2f:2a:f6:35:84:5d:35:09: e7:8d:7e:08:ab:21:44:f6:ac:6e:c3:3b:e8:43:5c: 45:e6:3d:55:9f:22:bb:e5:f3:c7:05:bc:2b:24:28: 9a:04:6d:23:3c:43:9c:5c:65:2a:3e:fb:43:67:73: 34:8d:27:cb:1b:9f:47:28:7a:d9:8b:41:37:e7:9b: 79:82:2e:fe:13:ad:28:e9:f0:15:85:27:42:25:7e: 15:ef:42:81:73:77:72:2a:7e:08:69:ef:f2:e8:94: ca:e5:33:fc:c4:19:0b:e1:cd:cb:f5:d5:c6:49:ce: 9f:ec:d2:fa:6a:2c:b9:fb:95:24:84:dc:0a:71:10: 38:74:af:1f:6d:27:2f:7b:6e:78:b8:87:61:5e:b7: e1:f6:c7:a1:b0:e8:f4:ec:4e:96:2d:3c:a9:bf:be: db:7e:b4:50:bf:01:6a:19:a5:e1:73:9b:e6:51:36: cd:c3:35:44:b2:55:0c:67:3f:5d:eb:59:df:6d:91: 0e:c6:d3:22:e8:01:14:cb:77:a2:bc:c4:bf:d8:b3: 72:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AE:99:CB:1E:4B:BE:6F:A4:3A:D3:B9:3F:EE:89:53:0A:10:29:80 X509v3 Authority Key Identifier: keyid:68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:3c:83:a4:82:79:ad:9f:fa:e4:9c:bf:95:c7:9a:e3:11:25: 6a:23:a7:f4:37:a0:ac:53:d2:80:63:5b:85:76:8c:40:be:93: a5:f9:7d:0d:8b:21:32:43:71:f5:72:87:82:14:fa:ae:19:61: b9:b9:5f:5a:74:2d:91:70:1b:e5:b4:68:16:6c:16:7e:e9:3f: 75:99:40:e2:46:2b:ab:a3:1c:88:4e:0c:ee:d8:ff:5f:c3:31: 86:f2:69:b5:78:ed:09:93:3e:eb:95:ce:81:b4:41:48:b2:49: 2f:e7:52:41:f0:c4:6b:44:e6:2f:dd:81:4d:6b:d1:5b:35:ef: af:5a:ab:d0:e4:4e:ae:ec:ce:e1:6a:5d:57:31:62:1f:07:e4: 8c:3b:40:4f:d2:ce:24:f0:21:2b:e5:48:11:66:c8:f6:ab:f7: 69:a3:69:e9:1b:e4:3a:e6:ce:b0:78:5e:d1:6e:0a:3c:47:00: b5:f0:68:5a:88:a9:09:29:3e:34:6e:8c:43:80:96:93:39:bc: 5f:d6:3a:86:cd:bf:f8:c7:a6:08:c1:35:42:c9:48:de:c8:c8: c8:6c:99:99:3b:be:e3:0f:2e:ad:ce:29:ff:a6:69:ce:98:3a: fa:e5:36:23:b4:e6:c8:f2:93:f0:02:91:a2:11:7e:dd:44:87: 48:83:94:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPWLCP178XnjrH0ouig2d1HKNE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAw M0I3RDkwNTAeFw0yNjA5MjAxNzQ5MDJaFw0yNjA5MjExODAyMDJaMDMxMTAvBgNV BAMTKDMwQUU5OUNCMUU0QkJFNkZBNDNBRDNCOTNGRUU4OTUzMEExMDI5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIyzGpNq3JVax5gR8ih1GKkTuG EtEEuvwhMl+fjU6MrbwDFaEMCkKl2c/saUAFcsaFB2EvKvY1hF01CeeNfgirIUT2 rG7DO+hDXEXmPVWfIrvl88cFvCskKJoEbSM8Q5xcZSo++0NnczSNJ8sbn0coetmL QTfnm3mCLv4TrSjp8BWFJ0IlfhXvQoFzd3Iqfghp7/LolMrlM/zEGQvhzcv11cZJ zp/s0vpqLLn7lSSE3ApxEDh0rx9tJy97bni4h2Fet+H2x6Gw6PTsTpYtPKm/vtt+ tFC/AWoZpeFzm+ZRNs3DNUSyVQxnP13rWd9tkQ7G0yLoARTLd6K8xL/Ys3KnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMK6Zyx5Lvm+kOtO5P+6JUwoQKYAwHwYDVR0j BBgwFoAUaKkK5a7jXJnUIPEqwO5PYAO32QUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMxOTg3NGMtYTZiMi00YjBiLTljYzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVB RUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAwM0I3RDkwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE5MEFFNUFFRTM1Qzk5RDQyMEYxMkFDMEVFNEY2MDAzQjdE OTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRG NjAwM0I3RDkwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGE8g6SCea2f+uScv5XHmuMRJWojp/Q3oKxT 0oBjW4V2jEC+k6X5fQ2LITJDcfVyh4IU+q4ZYbm5X1p0LZFwG+W0aBZsFn7pP3WZ QOJGK6ujHIhODO7Y/1/DMYbyabV47QmTPuuVzoG0QUiySS/nUkHwxGtE5i/dgU1r 0Vs1769aq9DkTq7szuFqXVcxYh8H5Iw7QE/SziTwISvlSBFmyPar92mjaekb5Drm zrB4XtFuCjxHALXwaFqIqQkpPjRujEOAlpM5vF/WOobNv/jHpgjBNULJSN7IyMhs mZk7vuMPLq3OKf+mac6YOvrlNiO05sjyk/ACkaIRft1Eh0iDlA0= -----END CERTIFICATE-----Generated at Mon Sep 21 07:22:47 2026 by rpki-client