$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft File: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft (raw, json) Hash identifier: uVcvHIAouPFG8WU+WI6ldiirHaxnV60O2DpzAdCY1UI= Subject key identifier: 79:FF:8C:9B:65:B0:D9:E8:8E:B0:59:45:09:AF:4F:06:D2:B6:D8:2D Authority key identifier: 68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 Certificate issuer: /CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Certificate serial: 3D6EE9BBA327557EF56618A8C97641BC479BFEAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:15:29 +0000 Manifest this update: Wed 17 Jun 2026 06:10:29 +0000 Manifest next update: Thu 18 Jun 2026 06:35:29 +0000 Files and hashes: 1: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl (hash: sNEiRdES0FpkVs+qqXUbPMfy38TobBv+GPuUZWV5Zq8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6e:e9:bb:a3:27:55:7e:f5:66:18:a8:c9:76:41:bc:47:9b:fe:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Validity Not Before: Jun 17 06:10:29 2026 GMT Not After : Jun 18 06:35:29 2026 GMT Subject: CN=79FF8C9B65B0D9E88EB0594509AF4F06D2B6D82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:b9:24:2f:4d:f6:bf:90:d0:72:dc:ee:2d: 41:4f:cb:7a:e1:4c:5d:da:dd:d1:af:d2:9a:c5:2e: 21:99:ee:5b:e3:c3:54:81:f3:d6:f6:ca:16:30:66: 47:8c:87:e4:5c:53:c7:f8:2a:a8:0a:c4:3f:7d:89: b4:03:5b:da:7d:4f:3b:e1:24:e1:90:da:9a:6a:c1: 4e:57:16:d1:a5:85:eb:d5:29:bf:7e:a7:e4:ce:4a: 82:64:d7:23:37:44:90:91:20:07:54:6d:33:ad:a1: 10:71:ab:4a:ab:8d:e0:34:4f:28:d3:4f:f2:1c:f6: ac:98:75:5c:dc:9a:52:5f:a5:47:7a:1f:7f:fc:c3: 34:e5:b7:86:a7:33:22:fd:50:f6:0e:99:07:e2:6e: 75:3f:34:00:76:3b:16:21:64:e4:bd:df:9b:16:1b: 9a:0b:d6:95:37:fb:5f:73:9c:fa:55:62:ec:0d:94: 04:c6:ca:44:af:17:61:7f:5b:38:6b:59:0e:5c:99: ea:c9:81:50:ac:ed:11:60:da:67:4d:c5:cf:85:f8: 82:4a:45:cc:2b:08:3b:23:21:82:21:ac:90:ab:e7: 74:c9:24:a8:17:c6:d5:c9:6d:23:20:48:07:37:7d: a5:1d:0a:76:03:e7:ca:54:39:98:cb:8f:31:09:2d: b4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FF:8C:9B:65:B0:D9:E8:8E:B0:59:45:09:AF:4F:06:D2:B6:D8:2D X509v3 Authority Key Identifier: keyid:68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:77:a1:07:70:8d:7f:a2:9b:56:44:f8:24:d0:14:86:83:b0: c4:9a:e3:d4:d5:b9:28:cb:5c:54:25:ea:be:be:52:0e:a3:e1: 12:0d:d8:9d:8c:1b:5a:1b:1e:a3:55:7e:f9:f0:65:7f:61:b1: 15:55:57:4e:4f:60:62:6a:1d:97:f0:f4:86:e1:28:32:05:0d: 68:fd:e7:51:c5:a1:74:f7:1a:e4:e0:17:77:ab:5c:8c:bd:2e: 48:90:b7:d7:5d:f8:34:63:4b:d9:01:d4:ae:0d:e9:48:b8:a3: 3e:3a:ba:62:8d:98:8f:14:fb:e8:3a:99:b8:41:65:7d:3a:57: 2f:56:eb:ce:36:62:56:94:6c:98:ab:76:46:89:c1:73:4b:11: 8d:73:20:1b:e4:6f:1f:51:be:a7:ff:3b:4b:f3:b4:60:78:6c: 5e:2e:24:bc:03:dc:da:57:d8:29:43:4a:63:3b:07:57:2f:ff: 53:6c:b4:f5:41:b8:82:22:21:77:a5:5a:10:c8:71:1a:9e:ee: 31:a3:a9:48:5a:0a:a3:91:1f:80:97:bd:74:47:c8:00:90:b5: 5f:20:bc:ca:a1:64:0b:50:37:8d:99:f6:24:71:dd:6d:57:5f: 37:92:d2:51:3c:3e:e4:67:67:c0:b0:2c:9a:14:18:23:a5:be: a5:af:38:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPW7pu6MnVX71ZhioyXZBvEeb/q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAw M0I3RDkwNTAeFw0yNjA2MTcwNjEwMjlaFw0yNjA2MTgwNjM1MjlaMDMxMTAvBgNV BAMTKDc5RkY4QzlCNjVCMEQ5RTg4RUIwNTk0NTA5QUY0RjA2RDJCNkQ4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjmLkkL032v5DQctzuLUFPy3rh TF3a3dGv0prFLiGZ7lvjw1SB89b2yhYwZkeMh+RcU8f4KqgKxD99ibQDW9p9Tzvh JOGQ2ppqwU5XFtGlhevVKb9+p+TOSoJk1yM3RJCRIAdUbTOtoRBxq0qrjeA0TyjT T/Ic9qyYdVzcmlJfpUd6H3/8wzTlt4anMyL9UPYOmQfibnU/NAB2OxYhZOS935sW G5oL1pU3+19znPpVYuwNlATGykSvF2F/WzhrWQ5cmerJgVCs7RFg2mdNxc+F+IJK RcwrCDsjIYIhrJCr53TJJKgXxtXJbSMgSAc3faUdCnYD58pUOZjLjzEJLbS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUef+Mm2Ww2eiOsFlFCa9PBtK22C0wHwYDVR0j BBgwFoAUaKkK5a7jXJnUIPEqwO5PYAO32QUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMxOTg3NGMtYTZiMi00YjBiLTljYzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVB RUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAwM0I3RDkwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE5MEFFNUFFRTM1Qzk5RDQyMEYxMkFDMEVFNEY2MDAzQjdE OTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRG NjAwM0I3RDkwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF3oQdwjX+im1ZE+CTQFIaDsMSa49TVuSjL XFQl6r6+Ug6j4RIN2J2MG1obHqNVfvnwZX9hsRVVV05PYGJqHZfw9IbhKDIFDWj9 51HFoXT3GuTgF3erXIy9LkiQt9dd+DRjS9kB1K4N6Ui4oz46umKNmI8U++g6mbhB ZX06Vy9W6842YlaUbJirdkaJwXNLEY1zIBvkbx9Rvqf/O0vztGB4bF4uJLwD3NpX 2ClDSmM7B1cv/1NstPVBuIIiIXelWhDIcRqe7jGjqUhaCqORH4CXvXRHyACQtV8g vMqhZAtQN42Z9iRx3W1XXzeS0lE8PuRnZ8CwLJoUGCOlvqWvOBU= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:14 2026 by rpki-client