$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft File: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft (raw, json) Hash identifier: p2oajsmw+dodvKvnXvkJysNPEwgkyKMSd9nxaJhuacs= Subject key identifier: 2E:0B:ED:6C:D5:2B:A3:21:21:2F:2D:73:CE:F0:38:0F:68:4E:36:AE Authority key identifier: 68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 Certificate issuer: /CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Certificate serial: 6706AA960E0C89A6860E69BBF4BAF150CD9094EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 17:32:01 +0000 Manifest this update: Wed 29 Jul 2026 17:27:01 +0000 Manifest next update: Thu 30 Jul 2026 17:57:01 +0000 Files and hashes: 1: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl (hash: TEbY5qd6V3EQxjCEvNskyJhTMfEM3oJXFhp1RjEA1KM=) 2: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: /CDimDlLGoFwieJxhxPKJxVZVpw8NVAKdG9UUGzsEz8=) 3: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: GQgQVMDtxFDkqPjuHN/9ksx5BAe6A6G9N08FMHk3oZk=) 4: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: aBcK0NarT0nImTnt9nV5uNk7IL6hRk/eBBV0YB7Rf0U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:06:aa:96:0e:0c:89:a6:86:0e:69:bb:f4:ba:f1:50:cd:90:94:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Validity Not Before: Jul 29 17:27:01 2026 GMT Not After : Jul 30 17:57:01 2026 GMT Subject: CN=2E0BED6CD52BA321212F2D73CEF0380F684E36AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:05:48:01:67:ad:6e:e5:86:34:07:e9:e3:2f: 98:13:e6:d8:cc:4e:a9:4f:b2:b5:41:b1:60:9e:59: 3a:25:18:18:ce:4b:11:18:52:74:36:0d:c3:53:ef: f4:c8:41:da:d9:c0:41:bd:40:1e:4e:14:ba:63:58: a5:a5:2d:02:b7:55:97:8b:a3:e7:40:87:79:6d:fa: 2e:b5:e6:a8:84:c6:a0:2d:8c:75:7b:46:07:b2:80: 1d:21:a6:97:24:59:32:cf:ec:b3:d4:7f:ad:ea:6b: 6e:e5:f8:05:ab:39:58:98:50:75:ca:fc:0a:b1:59: 2e:ea:1c:2c:08:c3:2b:3f:c7:a1:e2:b9:5c:57:6e: d9:d6:dc:3d:d2:1b:0c:41:33:e6:11:c9:53:ef:5d: 8b:48:1c:8f:95:30:a0:0f:eb:84:51:51:4f:2d:77: 38:94:ac:50:64:85:cf:69:38:a1:63:12:4a:99:c2: 08:4d:71:45:57:47:f6:92:19:3d:53:c8:ab:53:8a: 25:3e:99:24:1d:b7:12:38:0d:05:6b:f7:03:1c:d1: f9:99:a5:41:41:d3:1d:0c:7f:3a:d5:6e:a4:18:55: 1f:54:76:76:20:79:d3:63:2d:7e:f0:41:c1:ab:2d: 8f:f3:c9:47:30:3c:31:a7:a3:cf:78:51:03:43:73: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0B:ED:6C:D5:2B:A3:21:21:2F:2D:73:CE:F0:38:0F:68:4E:36:AE X509v3 Authority Key Identifier: keyid:68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:33:da:af:51:55:d2:63:47:b2:08:f4:81:36:fa:29:15:64: e0:f7:74:d9:c8:ba:26:cb:cd:16:9f:f2:e5:47:4f:c9:07:80: ea:01:63:e6:b1:e1:33:af:9e:2d:1f:ed:21:18:4d:52:7c:5f: 2e:ee:3d:fb:65:a7:7d:a8:04:71:da:5c:e3:34:ad:9f:dd:7d: b1:4a:c3:a4:a4:64:77:83:4c:31:36:bd:47:57:64:cf:27:f3: 6d:38:49:cc:ef:e1:6c:77:5c:35:f4:95:f1:3f:82:e1:1d:b4: 4b:e7:81:d8:ea:9b:3b:11:9a:20:64:ef:bd:c7:cf:16:a3:93: 1d:c9:53:89:ea:43:3e:61:5d:9f:79:9e:76:e2:e0:89:c2:33: a7:97:a9:46:bb:ba:7f:e7:0f:e4:4d:25:98:bc:de:df:6b:8d: d3:28:a8:42:94:7d:32:4f:66:81:29:28:11:74:79:49:68:cf: 51:ab:49:97:cb:4e:ae:82:6e:d8:03:18:c5:87:f4:5b:68:7d: 7d:2a:d0:bc:55:a6:a0:a0:d7:c4:d8:4f:74:f2:8f:c6:94:84: 30:1f:61:75:3d:b7:c2:30:9d:c6:f0:b2:c9:63:2b:50:ee:30: 12:3c:27:68:4b:5b:74:9e:fa:8d:cf:56:68:c1:d5:d8:51:7e: 30:d5:4b:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwaqlg4MiaaGDmm79LrxUM2QlOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUEx MDA4QkNGMDAeFw0yNjA3MjkxNzI3MDFaFw0yNjA3MzAxNzU3MDFaMDMxMTAvBgNV BAMTKDJFMEJFRDZDRDUyQkEzMjEyMTJGMkQ3M0NFRjAzODBGNjg0RTM2QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKBUgBZ61u5YY0B+njL5gT5tjM TqlPsrVBsWCeWTolGBjOSxEYUnQ2DcNT7/TIQdrZwEG9QB5OFLpjWKWlLQK3VZeL o+dAh3lt+i615qiExqAtjHV7RgeygB0hppckWTLP7LPUf63qa27l+AWrOViYUHXK /AqxWS7qHCwIwys/x6HiuVxXbtnW3D3SGwxBM+YRyVPvXYtIHI+VMKAP64RRUU8t dziUrFBkhc9pOKFjEkqZwghNcUVXR/aSGT1TyKtTiiU+mSQdtxI4DQVr9wMc0fmZ pUFB0x0MfzrVbqQYVR9UdnYgedNjLX7wQcGrLY/zyUcwPDGno894UQNDc+1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgvtbNUroyEhLy1zzvA4D2hONq4wHwYDVR0j BBgwFoAUaCJ6y2DT6eEMa5pX04MTmhAIvPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZWNkNzQtNDQyNC00ZDQwLTk2YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2 MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUExMDA4QkNGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODIyN0FDQjYwRDNFOUUxMEM2QjlBNTdEMzgzMTM5QTEwMDhC Q0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEz OUExMDA4QkNGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAz2q9RVdJjR7II9IE2+ikVZOD3dNnIuibL zRaf8uVHT8kHgOoBY+ax4TOvni0f7SEYTVJ8Xy7uPftlp32oBHHaXOM0rZ/dfbFK w6SkZHeDTDE2vUdXZM8n8204Sczv4Wx3XDX0lfE/guEdtEvngdjqmzsRmiBk773H zxajkx3JU4nqQz5hXZ95nnbi4InCM6eXqUa7un/nD+RNJZi83t9rjdMoqEKUfTJP ZoEpKBF0eUloz1GrSZfLTq6CbtgDGMWH9FtofX0q0LxVpqCg18TYT3Tyj8aUhDAf YXU9t8IwncbwssljK1DuMBI8J2hLW3Se+o3PVmjB1dhRfjDVS2M= -----END CERTIFICATE-----Generated at Wed Jul 29 20:12:13 2026 by rpki-client