$ rpki-client -vvf rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft File: 68ECB00B63436E13214F12C7732F716D44E5E72D.mft (raw, json) Hash identifier: Ig9D1JOyJ8NHfvdFaDZcuzxZTbBj7GbH43sGAfY8+2w= Subject key identifier: 7C:48:5B:65:B8:23:40:A5:41:61:3E:BF:F0:C4:11:17:61:21:86:BA Authority key identifier: 68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D Certificate issuer: /CN=68ECB00B63436E13214F12C7732F716D44E5E72D Certificate serial: 04AB4AA63904EB53F579137230508758885E623B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 16:24:25 +0000 Manifest this update: Sat 13 Jun 2026 16:19:25 +0000 Manifest next update: Sun 14 Jun 2026 17:21:25 +0000 Files and hashes: 1: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: rPmnLfRHW0MsBvRLZTu2XZb2TPdVWPSkbs3wCW3iaxE=) 2: 68ECB00B63436E13214F12C7732F716D44E5E72D.crl (hash: lIa/nSLi+bzxj2Nudix8jqNnwOO67M8K3RJphCNGx/c=) 3: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: OqiAXacTaTMvrJqwT1wd9NgwR8chI6fLuF/nnIi/ym4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ab:4a:a6:39:04:eb:53:f5:79:13:72:30:50:87:58:88:5e:62:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ECB00B63436E13214F12C7732F716D44E5E72D Validity Not Before: Jun 13 16:19:25 2026 GMT Not After : Jun 14 17:21:25 2026 GMT Subject: CN=7C485B65B82340A541613EBFF0C41117612186BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:e1:c8:ad:5c:df:d6:df:10:36:4b:1f:fb: 88:d9:ae:ea:48:f4:ab:89:36:7a:aa:80:74:78:45: 5d:01:f5:1a:c0:62:3a:de:ba:48:60:d2:2a:b2:a7: 08:41:88:6a:56:f3:a5:19:ce:0a:34:2a:7d:e1:77: 57:52:71:04:f4:4c:a3:36:9b:7b:84:bf:be:20:25: 1e:d6:0e:d7:50:9f:30:bc:7f:e0:c8:9b:f9:79:8d: 97:45:fc:33:70:bf:f7:69:40:5a:0b:a8:66:49:db: 15:82:4d:e5:a7:22:61:d2:c7:93:c0:59:95:30:5e: cb:86:99:06:f6:33:67:ac:b4:b9:28:2e:3c:2e:29: 30:5c:2c:2c:ef:07:e3:99:aa:cc:54:46:88:61:01: 17:b2:03:83:84:4b:18:e6:f3:75:b0:ce:12:f7:eb: c5:ed:f6:15:8a:24:a2:4e:0f:eb:bb:a0:29:4d:ff: 88:45:d0:fa:65:57:12:6a:68:f0:ce:32:44:27:65: 3b:bc:0d:25:d7:3e:f7:29:af:ee:64:bc:b5:8e:13: bc:c0:38:ca:db:1f:b0:d6:88:fa:7d:8e:1f:77:5a: 35:15:46:cb:ef:ba:c7:e1:d1:48:b4:95:fb:5c:6a: b8:83:3c:5f:6a:88:fd:bc:49:36:0c:eb:2b:9e:78: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:48:5B:65:B8:23:40:A5:41:61:3E:BF:F0:C4:11:17:61:21:86:BA X509v3 Authority Key Identifier: keyid:68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:43:79:ff:78:44:13:28:11:2b:5f:98:37:6b:88:06:de:8d: 56:2c:39:ee:ee:12:77:6a:ef:4c:ba:b9:41:1a:b2:42:b9:29: 0a:b9:2b:5e:98:b4:f2:4c:4f:3c:1e:f2:35:89:1a:91:d2:b5: 0d:32:12:c3:97:fb:7c:fe:bd:c1:7f:21:c0:e4:cc:35:0d:96: 36:af:46:d1:d9:76:7b:fa:ef:3a:aa:57:e8:3b:e7:3d:ff:fc: c3:7e:03:a3:d2:f6:62:11:10:9a:55:1e:49:9e:12:bb:d0:d5: 93:8f:b2:26:8d:1b:76:43:14:e9:82:db:4e:af:44:a2:6b:8a: 17:50:f5:76:5a:89:4b:08:5f:a4:a2:13:02:0d:cc:3f:13:15: d3:15:ae:5b:ab:2a:08:c3:3b:f0:1d:a4:74:c6:7e:df:25:f8: cc:7c:e8:26:97:59:e5:b8:dc:17:de:f9:5d:1b:a0:64:60:3c: 1b:8c:05:d2:e5:a3:26:18:b5:b5:1b:e8:13:0f:8e:97:2a:b8: c5:ac:0b:6f:52:a1:ec:71:47:ff:c1:23:f0:2d:22:ba:dc:d7: 91:94:b5:90:b2:32:9a:7c:2b:1f:4a:78:9d:2d:05:e4:b3:4f: 88:25:d3:a5:32:cd:54:cc:4d:5f:4b:72:da:78:3a:9f:6f:60: 66:77:d9:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKtKpjkE61P1eRNyMFCHWIheYjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0 NEU1RTcyRDAeFw0yNjA2MTMxNjE5MjVaFw0yNjA2MTQxNzIxMjVaMDMxMTAvBgNV BAMTKDdDNDg1QjY1QjgyMzQwQTU0MTYxM0VCRkYwQzQxMTE3NjEyMTg2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCeHIrVzf1t8QNksf+4jZrupI 9KuJNnqqgHR4RV0B9RrAYjreukhg0iqypwhBiGpW86UZzgo0Kn3hd1dScQT0TKM2 m3uEv74gJR7WDtdQnzC8f+DIm/l5jZdF/DNwv/dpQFoLqGZJ2xWCTeWnImHSx5PA WZUwXsuGmQb2M2estLkoLjwuKTBcLCzvB+OZqsxURohhAReyA4OESxjm83WwzhL3 68Xt9hWKJKJOD+u7oClN/4hF0PplVxJqaPDOMkQnZTu8DSXXPvcpr+5kvLWOE7zA OMrbH7DWiPp9jh93WjUVRsvvusfh0Ui0lftcariDPF9qiP28STYM6yueeMPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfEhbZbgjQKVBYT6/8MQRF2EhhrowHwYDVR0j BBgwFoAUaOywC2NDbhMhTxLHcy9xbUTl5y0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM5YzU0ODQtMmUzNy00OGY5LThlYmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2 MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0NEU1RTcyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEVDQjAwQjYzNDM2RTEzMjE0RjEyQzc3MzJGNzE2RDQ0RTVF NzJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcx NkQ0NEU1RTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVDef94RBMoEStfmDdriAbejVYsOe7uEndq 70y6uUEaskK5KQq5K16YtPJMTzwe8jWJGpHStQ0yEsOX+3z+vcF/IcDkzDUNljav RtHZdnv67zqqV+g75z3//MN+A6PS9mIREJpVHkmeErvQ1ZOPsiaNG3ZDFOmC206v RKJrihdQ9XZaiUsIX6SiEwINzD8TFdMVrlurKgjDO/AdpHTGft8l+Mx86CaXWeW4 3Bfe+V0boGRgPBuMBdLloyYYtbUb6BMPjpcquMWsC29SoexxR//BI/AtIrrc15GU tZCyMpp8Kx9KeJ0tBeSzT4gl06UyzVTMTV9Lctp4Op9vYGZ32WM= -----END CERTIFICATE-----Generated at Sat Jun 13 22:50:48 2026 by rpki-client