$ rpki-client -vvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft File: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft (raw, json) Hash identifier: w/px8oVqxkFkfEg7xkOVjfxl6DfP+CBNk/gFv+lvUcs= Subject key identifier: 35:37:A1:BF:9F:6F:D5:07:1C:D4:A2:6B:FD:CD:72:34:7D:7E:EA:1A Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Certificate serial: 2BDB066A0FFCE687DD3E6E4634A8CBA176B750C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 19:15:25 +0000 Manifest this update: Tue 28 Jul 2026 19:10:25 +0000 Manifest next update: Wed 29 Jul 2026 23:14:25 +0000 Files and hashes: 1: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: q3EmEpNbHapfK5Arcd9ZblsuZXEZdJPpzKqJnzLo0DY=) 2: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: GMFkIV2sJittLK9WJRbpUUZTvqKbZ67tY6581Ugt0f0=) 3: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: dOi5t8zi5JAQodBD98mcsNs1h4au7JIDI+EvfriW4vk=) 4: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl (hash: m6B0JiD5SGvSRfMtiTPctqq9pGk5J5ktBlovQEpnh68=) 5: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: dKZb6aaVbPeaaWDRCiGgkOh/h5qEP/6edHL6dbBuTxw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:db:06:6a:0f:fc:e6:87:dd:3e:6e:46:34:a8:cb:a1:76:b7:50:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Validity Not Before: Jul 28 19:10:25 2026 GMT Not After : Jul 29 23:14:25 2026 GMT Subject: CN=3537A1BF9F6FD5071CD4A26BFDCD72347D7EEA1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:04:e6:60:c9:f2:8f:20:62:b5:ec:b3:56: 84:82:f5:b8:01:21:58:7c:4e:68:61:c6:ca:f3:be: 78:2a:be:79:cd:7a:fe:98:12:e5:96:a6:42:88:91: fb:94:8a:23:e4:03:bb:d1:c5:36:7e:68:4e:b4:e5: fe:1a:04:8e:f2:f1:ae:07:e2:b2:0d:3e:a3:15:c4: 20:e6:fa:b6:ef:52:f0:5e:b4:c6:79:9d:7d:3a:8d: 7b:25:45:ef:4c:02:e0:82:39:ee:80:04:f2:de:a8: 4f:1f:76:d2:eb:67:e6:28:42:6f:74:73:85:af:a5: 07:5c:6f:08:6d:1b:e1:11:c4:92:eb:85:44:3d:3e: 05:55:48:f8:21:5a:c5:9b:e9:a1:5a:e3:72:8a:7d: 11:bf:4c:af:b0:8b:c2:63:dd:f2:9a:4b:1e:35:7e: 94:d2:ac:26:88:7a:a8:19:9a:a5:22:f1:1f:11:4f: b7:1d:ef:94:b3:2f:7d:13:b5:e9:1f:c7:4c:33:eb: eb:dd:91:74:b0:84:91:f3:06:b5:f0:30:12:24:50: 4a:78:38:0d:15:77:a2:5d:8e:4f:6f:5b:90:27:df: 7a:da:0c:1e:d8:59:9b:98:01:9e:bb:47:9d:82:25: 1b:01:2c:de:71:a6:d2:9c:fa:55:4c:68:b9:99:6c: 6a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:37:A1:BF:9F:6F:D5:07:1C:D4:A2:6B:FD:CD:72:34:7D:7E:EA:1A X509v3 Authority Key Identifier: keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:09:ff:83:1d:a3:c7:8e:80:96:28:0f:5b:5f:63:f1:10:57: af:20:c0:00:90:cf:e8:a9:f0:73:d3:ba:20:33:7b:96:59:de: 6f:b7:5c:17:b1:b6:a5:9e:8e:06:9e:e4:c1:03:9c:fb:42:ca: eb:ac:dd:b7:e0:de:e5:07:a6:c6:b8:c3:92:c6:ce:1b:51:24: 33:f1:10:3d:1c:dd:81:8e:8c:a8:a7:93:12:b3:79:ac:28:3f: b7:be:71:24:4b:f6:04:fe:42:c1:e3:3e:59:9f:ae:7a:1e:c9: af:b5:36:2e:41:ca:34:cd:dc:aa:ec:d2:64:86:b0:b2:3c:61: 87:45:07:e6:eb:88:bd:44:64:d9:e4:89:81:2d:42:22:c6:af: 8a:c5:29:b2:dd:13:c6:61:dd:7d:b2:06:0e:b0:a4:48:c6:4e: ab:31:40:58:6f:fb:27:b4:59:55:a4:de:d0:6c:fe:23:a2:4c: 6f:a5:5f:60:c9:a1:ce:22:09:03:d6:f4:36:b1:07:f4:6f:66: 11:7c:cb:34:4c:97:d1:b6:3c:fe:5d:d2:2a:67:c7:1b:ad:83: 4f:c8:79:2d:db:ac:69:dc:f5:14:74:b6:96:49:6d:af:36:ff: 52:4f:18:a5:2e:f3:80:18:ba:ae:68:24:7c:80:29:b5:63:e3: 08:52:aa:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9sGag/85ofdPm5GNKjLoXa3UMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBB QzFGQkY2RTAeFw0yNjA3MjgxOTEwMjVaFw0yNjA3MjkyMzE0MjVaMDMxMTAvBgNV BAMTKDM1MzdBMUJGOUY2RkQ1MDcxQ0Q0QTI2QkZEQ0Q3MjM0N0Q3RUVBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jATmYMnyjyBiteyzVoSC9bgB IVh8TmhhxsrzvngqvnnNev6YEuWWpkKIkfuUiiPkA7vRxTZ+aE605f4aBI7y8a4H 4rINPqMVxCDm+rbvUvBetMZ5nX06jXslRe9MAuCCOe6ABPLeqE8fdtLrZ+YoQm90 c4WvpQdcbwhtG+ERxJLrhUQ9PgVVSPghWsWb6aFa43KKfRG/TK+wi8Jj3fKaSx41 fpTSrCaIeqgZmqUi8R8RT7cd75SzL30Ttekfx0wz6+vdkXSwhJHzBrXwMBIkUEp4 OA0Vd6Jdjk9vW5An33raDB7YWZuYAZ67R52CJRsBLN5xptKc+lVMaLmZbGpFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNTehv59v1Qcc1KJr/c1yNH1+6howHwYDVR0j BBgwFoAUsWjPo3n06s0V2w73bOvFgKwfv24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIxMjdmZWItOTYxNS00YzU4LWEzYmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3 OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBBQzFGQkY2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTY4Q0ZBMzc5RjRFQUNEMTVEQjBFRjc2Q0VCQzU4MEFDMUZC RjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1 ODBBQzFGQkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEJ/4Mdo8eOgJYoD1tfY/EQV68gwACQz+ip 8HPTuiAze5ZZ3m+3XBextqWejgae5MEDnPtCyuus3bfg3uUHpsa4w5LGzhtRJDPx ED0c3YGOjKinkxKzeawoP7e+cSRL9gT+QsHjPlmfrnoeya+1Ni5ByjTN3Krs0mSG sLI8YYdFB+briL1EZNnkiYEtQiLGr4rFKbLdE8Zh3X2yBg6wpEjGTqsxQFhv+ye0 WVWk3tBs/iOiTG+lX2DJoc4iCQPW9DaxB/RvZhF8yzRMl9G2PP5d0ipnxxutg0/I eS3brGnc9RR0tpZJba82/1JPGKUu84AYuq5oJHyAKbVj4whSqi4= -----END CERTIFICATE-----Generated at Wed Jul 29 12:50:16 2026 by rpki-client