$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft File: 68ECB00B63436E13214F12C7732F716D44E5E72D.mft (raw, json) Hash identifier: PqaVqcHQziaPkhK3irPpTbzK9+C4yT99z/JShOyLIpQ= Subject key identifier: 42:2F:76:A6:FE:5B:2E:40:DB:03:5C:59:4C:C7:3E:F9:D0:B6:82:D1 Authority key identifier: 68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D Certificate issuer: /CN=68ECB00B63436E13214F12C7732F716D44E5E72D Certificate serial: 0FB9BE44870906D22A2434739966356B4D016523 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 23:14:52 +0000 Manifest this update: Wed 23 Sep 2026 23:09:52 +0000 Manifest next update: Thu 24 Sep 2026 23:54:52 +0000 Files and hashes: 1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: OqiAXacTaTMvrJqwT1wd9NgwR8chI6fLuF/nnIi/ym4=) 2: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: rPmnLfRHW0MsBvRLZTu2XZb2TPdVWPSkbs3wCW3iaxE=) 3: 68ECB00B63436E13214F12C7732F716D44E5E72D.crl (hash: yjT0xnD6LjHFHlX88gktLn9IomttFERLkvRCRNQ9QRs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b9:be:44:87:09:06:d2:2a:24:34:73:99:66:35:6b:4d:01:65:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ECB00B63436E13214F12C7732F716D44E5E72D Validity Not Before: Sep 23 23:09:52 2026 GMT Not After : Sep 24 23:54:52 2026 GMT Subject: CN=422F76A6FE5B2E40DB035C594CC73EF9D0B682D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:7a:4c:f2:54:a2:98:96:22:4e:ce:f9:ec: d5:78:16:26:40:bc:20:b0:56:b4:11:71:6a:81:66: f9:50:bf:5d:41:e1:1e:bb:50:69:55:ac:ba:93:93: 7f:3b:b6:1a:f3:57:8c:0b:fc:0b:2a:e2:51:c4:e6: ed:2b:59:ca:00:76:70:b9:5d:33:a9:e5:d3:03:20: b7:95:b1:78:d2:d3:19:a2:ac:f0:c2:a2:5b:59:9e: c8:d1:34:ae:8f:54:33:6c:a8:20:31:9a:a0:e2:49: b3:c4:7e:32:3d:c6:68:e4:71:22:1f:b8:10:9f:3c: 1e:56:8c:ca:bd:16:7c:e7:3a:9f:9d:c9:0a:6a:8a: 13:9b:41:56:10:70:f4:aa:3d:24:bc:72:58:33:2c: b4:6c:bc:9a:0b:a5:d1:91:f5:3f:02:42:3f:ef:9f: 34:d0:c6:88:2b:0a:81:c6:5e:31:fc:c0:91:00:0b: 4b:a9:35:ce:31:ab:24:73:ae:8e:0e:d1:44:68:87: ba:5a:ed:03:2c:77:1d:80:f4:75:88:7b:ba:54:07: 4f:f6:b2:3e:e3:dc:c9:99:84:da:48:8e:4e:83:fc: 5e:58:2e:7d:f9:e2:43:db:7a:a0:ef:c6:a0:6b:7d: 77:f7:4b:8f:13:8d:a7:20:75:50:41:a1:7e:d8:75: bb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2F:76:A6:FE:5B:2E:40:DB:03:5C:59:4C:C7:3E:F9:D0:B6:82:D1 X509v3 Authority Key Identifier: keyid:68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:54:fc:1d:9d:0b:34:f5:cb:72:c2:c4:04:63:f2:30:40:11: 5e:04:96:34:55:80:27:62:56:f0:b6:e9:22:ee:8e:f2:3f:f1: cc:96:21:69:45:6b:d9:de:31:47:de:1e:73:91:a9:09:1f:25: 6b:04:eb:98:e5:e8:ad:6a:06:79:44:33:99:72:f5:c0:ff:e1: c2:f7:cd:65:dc:41:99:ee:ae:cc:24:98:44:2f:b2:81:41:04: 13:15:ed:b5:95:87:01:99:05:c7:3d:76:52:6a:32:a9:8d:38: be:30:22:7b:e2:02:cf:3b:82:18:a7:30:38:6a:af:5d:ac:29: 4a:41:35:91:1e:15:f7:7f:33:70:da:3a:6b:63:70:db:8f:da: 60:50:fc:fe:6f:a3:0a:58:1b:ec:03:0c:95:a8:ab:59:9c:49: 7e:db:c9:9c:18:b2:c5:dd:5b:34:70:63:28:32:a4:eb:81:25: 06:f7:da:03:1d:a6:96:bd:d8:7d:8a:67:75:16:26:fd:11:4c: 54:30:0e:1e:a3:78:24:2a:59:38:0c:f1:6f:32:e4:29:99:61: fd:a1:64:3c:05:38:4f:cd:eb:af:e6:cf:95:20:e4:25:f0:3c: e3:22:f9:61:ae:a7:8e:27:65:f9:33:66:87:2a:84:79:10:9a: 32:cc:80:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7m+RIcJBtIqJDRzmWY1a00BZSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0 NEU1RTcyRDAeFw0yNjA5MjMyMzA5NTJaFw0yNjA5MjQyMzU0NTJaMDMxMTAvBgNV BAMTKDQyMkY3NkE2RkU1QjJFNDBEQjAzNUM1OTRDQzczRUY5RDBCNjgyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mXpM8lSimJYiTs757NV4FiZA vCCwVrQRcWqBZvlQv11B4R67UGlVrLqTk387thrzV4wL/Asq4lHE5u0rWcoAdnC5 XTOp5dMDILeVsXjS0xmirPDColtZnsjRNK6PVDNsqCAxmqDiSbPEfjI9xmjkcSIf uBCfPB5WjMq9FnznOp+dyQpqihObQVYQcPSqPSS8clgzLLRsvJoLpdGR9T8CQj/v nzTQxogrCoHGXjH8wJEAC0upNc4xqyRzro4O0URoh7pa7QMsdx2A9HWIe7pUB0/2 sj7j3MmZhNpIjk6D/F5YLn354kPbeqDvxqBrfXf3S48TjacgdVBBoX7YdbuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQi92pv5bLkDbA1xZTMc++dC2gtEwHwYDVR0j BBgwFoAUaOywC2NDbhMhTxLHcy9xbUTl5y0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM5YzU0ODQtMmUzNy00OGY5LThlYmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2 MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0NEU1RTcyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEVDQjAwQjYzNDM2RTEzMjE0RjEyQzc3MzJGNzE2RDQ0RTVF NzJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcx NkQ0NEU1RTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVU/B2dCzT1y3LCxARj8jBAEV4EljRVgCdi VvC26SLujvI/8cyWIWlFa9neMUfeHnORqQkfJWsE65jl6K1qBnlEM5ly9cD/4cL3 zWXcQZnurswkmEQvsoFBBBMV7bWVhwGZBcc9dlJqMqmNOL4wInviAs87ghinMDhq r12sKUpBNZEeFfd/M3DaOmtjcNuP2mBQ/P5vowpYG+wDDJWoq1mcSX7byZwYssXd WzRwYygypOuBJQb32gMdppa92H2KZ3UWJv0RTFQwDh6jeCQqWTgM8W8y5CmZYf2h ZDwFOE/N66/mz5Ug5CXwPOMi+WGup44nZfkzZocqhHkQmjLMgNs= -----END CERTIFICATE-----Generated at Thu Sep 24 09:25:44 2026 by rpki-client