$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft File: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft (raw, json) Hash identifier: 4uDsWoBOyN0tSnW48sk3WWWCZNHBx5kux41RCSk0oXo= Subject key identifier: 35:08:2C:36:1C:86:11:FB:AF:CF:BA:F5:7F:C6:22:69:85:20:27:94 Authority key identifier: 68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 Certificate issuer: /CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Certificate serial: 17F9E01949A143D70118FB93C96F192D79619C5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft Manifest number: C7 Signing time: Mon 28 Sep 2026 11:08:36 +0000 Manifest this update: Mon 28 Sep 2026 11:03:36 +0000 Manifest next update: Tue 29 Sep 2026 11:40:36 +0000 Files and hashes: 1: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: aBcK0NarT0nImTnt9nV5uNk7IL6hRk/eBBV0YB7Rf0U=) 2: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: /CDimDlLGoFwieJxhxPKJxVZVpw8NVAKdG9UUGzsEz8=) 3: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: GQgQVMDtxFDkqPjuHN/9ksx5BAe6A6G9N08FMHk3oZk=) 4: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl (hash: Vba4WbRwQhQEYuAnQf1jLbFgqv96qYyVEPGnBNSP2II=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 11:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f9:e0:19:49:a1:43:d7:01:18:fb:93:c9:6f:19:2d:79:61:9c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Validity Not Before: Sep 28 11:03:36 2026 GMT Not After : Sep 29 11:40:36 2026 GMT Subject: CN=35082C361C8611FBAFCFBAF57FC6226985202794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:26:42:5a:71:be:19:b1:39:d5:2e:1b:18: 6a:48:40:da:00:bc:8e:46:c5:08:d8:af:54:ab:1e: 8f:1b:dd:b9:e2:ec:e2:10:98:00:41:34:ba:ba:38: 28:be:99:2d:6b:8c:37:c3:8c:d7:15:fb:fd:98:03: 4e:b0:1d:14:99:b1:a3:0d:a1:26:60:d2:89:3e:db: 3c:37:d9:5e:be:90:40:ff:84:e7:0a:5d:9e:ac:27: 1b:1c:5d:0e:8f:99:33:8a:ad:68:1f:38:81:7a:9c: 4d:6d:ed:6f:06:ae:cd:18:2b:8a:bd:8d:25:78:57: 15:7c:fe:bf:51:d1:79:0d:4c:4e:a1:78:65:d7:4b: 63:8a:e9:ae:ac:9e:3c:33:16:7e:7c:55:12:f6:76: 7d:60:6a:04:90:56:01:db:be:f1:3f:4c:2a:9b:58: ed:64:ab:95:2c:1b:4d:7f:45:cb:66:d2:71:fd:30: 1b:4e:8b:7c:79:18:fb:83:11:e6:2a:dd:38:ab:4a: a3:e6:ee:53:6d:00:a5:f8:c0:42:91:80:d5:42:88: 55:f2:9a:84:16:5a:b9:70:9d:53:46:ce:38:f0:fb: c4:b4:83:55:04:ee:94:40:fb:6d:57:88:df:f4:55: 3e:70:8d:a5:b7:ca:ed:a8:55:ad:2a:5b:71:9f:2d: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:08:2C:36:1C:86:11:FB:AF:CF:BA:F5:7F:C6:22:69:85:20:27:94 X509v3 Authority Key Identifier: keyid:68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c4:56:0e:84:60:b2:a5:f8:23:f8:12:a4:9f:10:6c:93:58: 7f:db:e4:18:0b:bc:c1:8a:aa:58:16:54:b9:9f:fe:ce:ec:d3: 3b:0c:20:5b:5c:d1:4b:1e:f3:77:72:fc:f8:5c:c2:4d:6a:44: 95:f7:cd:44:60:f1:61:45:9c:ef:14:50:cd:ce:56:ef:fa:53: f8:34:05:c4:69:86:30:22:a2:cb:f3:70:af:6c:b4:9f:76:18: f3:80:c8:9d:34:92:02:d6:7c:c2:67:f0:1f:eb:0d:2e:3d:1f: bc:59:7e:65:7b:fd:94:5c:10:dd:14:cf:73:5c:44:37:10:c5: e2:ff:1f:a6:30:fa:42:e0:2a:8f:f9:57:85:be:1b:80:43:29: f9:9a:5b:38:59:b6:59:19:13:fd:f0:c2:34:5a:11:d7:c3:70: 13:b9:24:c6:eb:44:47:17:41:20:59:25:6a:b5:ce:3b:ab:48: 1f:43:a3:84:dc:fc:f4:94:e8:24:1d:5f:f7:4a:34:e2:05:6d: 3d:25:90:96:d7:65:c1:8b:ee:17:9e:c1:09:bf:04:9a:47:ca: 29:1e:68:a5:95:fe:2a:47:72:b0:0d:5b:0f:15:a7:6a:99:0d: a0:03:37:b4:5c:2c:71:bc:94:c2:a3:46:2a:81:a1:4d:48:86: e5:8a:df:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/ngGUmhQ9cBGPuTyW8ZLXlhnFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUEx MDA4QkNGMDAeFw0yNjA5MjgxMTAzMzZaFw0yNjA5MjkxMTQwMzZaMDMxMTAvBgNV BAMTKDM1MDgyQzM2MUM4NjExRkJBRkNGQkFGNTdGQzYyMjY5ODUyMDI3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eSZCWnG+GbE51S4bGGpIQNoA vI5GxQjYr1SrHo8b3bni7OIQmABBNLq6OCi+mS1rjDfDjNcV+/2YA06wHRSZsaMN oSZg0ok+2zw32V6+kED/hOcKXZ6sJxscXQ6PmTOKrWgfOIF6nE1t7W8Grs0YK4q9 jSV4VxV8/r9R0XkNTE6heGXXS2OK6a6snjwzFn58VRL2dn1gagSQVgHbvvE/TCqb WO1kq5UsG01/Rctm0nH9MBtOi3x5GPuDEeYq3TirSqPm7lNtAKX4wEKRgNVCiFXy moQWWrlwnVNGzjjw+8S0g1UE7pRA+21XiN/0VT5wjaW3yu2oVa0qW3GfLcQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQgsNhyGEfuvz7r1f8YiaYUgJ5QwHwYDVR0j BBgwFoAUaCJ6y2DT6eEMa5pX04MTmhAIvPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZWNkNzQtNDQyNC00ZDQwLTk2YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2 MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUExMDA4QkNGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODIyN0FDQjYwRDNFOUUxMEM2QjlBNTdEMzgzMTM5QTEwMDhC Q0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEz OUExMDA4QkNGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzEVg6EYLKl+CP4EqSfEGyTWH/b5BgLvMGK qlgWVLmf/s7s0zsMIFtc0Use83dy/Phcwk1qRJX3zURg8WFFnO8UUM3OVu/6U/g0 BcRphjAiosvzcK9stJ92GPOAyJ00kgLWfMJn8B/rDS49H7xZfmV7/ZRcEN0Uz3Nc RDcQxeL/H6Yw+kLgKo/5V4W+G4BDKfmaWzhZtlkZE/3wwjRaEdfDcBO5JMbrREcX QSBZJWq1zjurSB9Do4Tc/PSU6CQdX/dKNOIFbT0lkJbXZcGL7heewQm/BJpHyike aKWV/ipHcrANWw8Vp2qZDaADN7RcLHG8lMKjRiqBoU1IhuWK3zg= -----END CERTIFICATE-----Generated at Mon Sep 28 21:46:31 2026 by rpki-client