$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft File: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft (raw, json) Hash identifier: DwQbibPbsApiijDUClnL7iova6ViYF0UfpcZJj7B8AY= Subject key identifier: A8:BF:26:AC:4B:F6:08:1E:9B:7A:24:16:CF:74:95:D7:DE:D0:52:13 Authority key identifier: 68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 Certificate issuer: /CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Certificate serial: 5ED418B526A166351F2AE73EB6C2527918349C0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 21:04:37 +0000 Manifest this update: Sat 13 Jun 2026 20:59:37 +0000 Manifest next update: Sun 14 Jun 2026 22:40:37 +0000 Files and hashes: 1: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: /CDimDlLGoFwieJxhxPKJxVZVpw8NVAKdG9UUGzsEz8=) 2: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: GQgQVMDtxFDkqPjuHN/9ksx5BAe6A6G9N08FMHk3oZk=) 3: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl (hash: 93cR8nGut3d7SA4UsD3fbVduCAEN04moznL009uvV1k=) 4: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: aBcK0NarT0nImTnt9nV5uNk7IL6hRk/eBBV0YB7Rf0U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 22:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d4:18:b5:26:a1:66:35:1f:2a:e7:3e:b6:c2:52:79:18:34:9c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Validity Not Before: Jun 13 20:59:37 2026 GMT Not After : Jun 14 22:40:37 2026 GMT Subject: CN=A8BF26AC4BF6081E9B7A2416CF7495D7DED05213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:98:b3:1c:e0:2e:fb:9b:93:c8:1e:44:f8: c6:c0:2a:e0:5c:7c:93:0b:3f:40:85:8f:97:5e:a4: 69:92:29:de:50:8a:48:99:a6:7d:b6:90:73:6c:ea: 49:6f:bf:af:e7:ba:92:0f:19:f6:d3:4e:65:14:65: b7:a3:b0:8c:ca:26:95:ff:27:a9:e3:09:08:43:c3: ab:61:15:b1:cd:2f:70:74:2a:df:23:78:6d:86:92: 1f:64:1e:aa:94:99:09:73:46:0a:e8:84:a9:02:c0: d8:0b:fd:a2:52:53:47:3a:8d:b2:d2:d5:66:bf:6a: 5c:69:f7:4f:d8:3e:bc:fd:0b:0d:02:24:f2:16:f3: 44:c1:20:fa:3a:2e:4c:f8:25:7a:70:a4:53:91:25: 08:7b:be:4d:5c:dd:1c:9b:3d:3d:e2:13:7e:00:11: 3d:75:74:b9:7d:fc:8d:14:64:b9:74:b7:52:54:b7: 50:21:a9:e6:bd:8f:5e:c5:89:c7:9a:97:df:52:bb: a2:57:11:2b:82:8e:38:01:6c:20:5c:a4:6c:5d:8a: e4:ac:94:9e:a0:6b:93:f6:eb:d5:bf:69:24:f8:db: 23:2f:89:47:20:22:4e:30:bb:cc:bd:f5:f5:b2:a7: cb:be:64:c8:06:88:58:ac:86:98:1b:4a:df:a9:27: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BF:26:AC:4B:F6:08:1E:9B:7A:24:16:CF:74:95:D7:DE:D0:52:13 X509v3 Authority Key Identifier: keyid:68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ec:71:7d:ff:8e:ef:c2:65:6a:f4:30:8b:75:2a:38:6e:23: 01:e4:df:ea:11:8d:83:9d:11:77:46:9b:d0:56:9f:c0:e5:b8: ba:55:28:b8:30:a4:e6:91:79:8c:78:f4:aa:b8:16:00:92:33: 45:aa:bf:0f:14:16:42:04:9e:a3:71:d3:03:3d:9b:b3:0e:bd: 84:27:b9:e7:18:9e:b7:8c:ee:93:8b:2b:dc:80:31:64:11:50: e1:9a:c5:44:41:34:be:84:ef:c8:1a:01:ee:65:90:1b:e8:aa: 22:c0:fd:b3:21:e6:1e:f0:0d:f6:e3:e0:5b:55:29:e6:26:67: 9a:d9:12:88:b8:62:dc:83:ea:e1:f0:dd:36:24:ce:25:1b:cb: 52:dc:7a:51:af:b1:c9:4d:dc:52:d2:80:cf:b4:d5:24:08:47: 30:59:e9:a5:23:88:f1:0f:62:44:3a:58:a2:d0:95:66:0e:f9: 52:e0:cc:f6:ee:05:17:39:d6:df:81:4c:1c:54:99:d4:38:8e: 05:0c:65:63:53:dd:b8:dd:ed:68:1d:24:d9:5c:52:70:21:0a: d2:fa:5e:2d:22:80:38:b1:f7:53:cf:0d:18:9c:4c:43:7c:76: 82:f0:bf:c1:43:bb:0f:dc:76:27:70:b5:08:0c:c3:ac:49:fb: ec:e6:d9:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtQYtSahZjUfKuc+tsJSeRg0nA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUEx MDA4QkNGMDAeFw0yNjA2MTMyMDU5MzdaFw0yNjA2MTQyMjQwMzdaMDMxMTAvBgNV BAMTKEE4QkYyNkFDNEJGNjA4MUU5QjdBMjQxNkNGNzQ5NUQ3REVEMDUyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOZizHOAu+5uTyB5E+MbAKuBc fJMLP0CFj5depGmSKd5QikiZpn22kHNs6klvv6/nupIPGfbTTmUUZbejsIzKJpX/ J6njCQhDw6thFbHNL3B0Kt8jeG2Gkh9kHqqUmQlzRgrohKkCwNgL/aJSU0c6jbLS 1Wa/alxp90/YPrz9Cw0CJPIW80TBIPo6Lkz4JXpwpFORJQh7vk1c3RybPT3iE34A ET11dLl9/I0UZLl0t1JUt1Ahqea9j17Ficeal99Su6JXESuCjjgBbCBcpGxdiuSs lJ6ga5P269W/aST42yMviUcgIk4wu8y99fWyp8u+ZMgGiFishpgbSt+pJ5+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqL8mrEv2CB6beiQWz3SV197QUhMwHwYDVR0j BBgwFoAUaCJ6y2DT6eEMa5pX04MTmhAIvPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZWNkNzQtNDQyNC00ZDQwLTk2YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2 MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUExMDA4QkNGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODIyN0FDQjYwRDNFOUUxMEM2QjlBNTdEMzgzMTM5QTEwMDhC Q0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEz OUExMDA4QkNGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbscX3/ju/CZWr0MIt1KjhuIwHk3+oRjYOd EXdGm9BWn8DluLpVKLgwpOaReYx49Kq4FgCSM0Wqvw8UFkIEnqNx0wM9m7MOvYQn uecYnreM7pOLK9yAMWQRUOGaxURBNL6E78gaAe5lkBvoqiLA/bMh5h7wDfbj4FtV KeYmZ5rZEoi4YtyD6uHw3TYkziUby1LcelGvsclN3FLSgM+01SQIRzBZ6aUjiPEP YkQ6WKLQlWYO+VLgzPbuBRc51t+BTBxUmdQ4jgUMZWNT3bjd7WgdJNlcUnAhCtL6 Xi0igDix91PPDRicTEN8doLwv8FDuw/cdidwtQgMw6xJ++zm2do= -----END CERTIFICATE-----Generated at Sun Jun 14 09:32:55 2026 by rpki-client