$ rpki-client -vvf rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft File: B68C761C821AA1629C9F6105D99B85E34433B478.mft (raw, json) Hash identifier: +Rig/PzIZrKSI9CM+USe5+V31bbFFaY4X9W9YJ2hy20= Subject key identifier: 9E:6F:9A:48:03:C1:1B:A3:59:71:E4:64:92:D4:81:2F:4A:C7:87:0E Authority key identifier: B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78 Certificate issuer: /CN=B68C761C821AA1629C9F6105D99B85E34433B478 Certificate serial: 7C6C859FC6439B8E6E6AC76D21AC864525F71EB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:38:28 +0000 Manifest this update: Wed 17 Jun 2026 04:33:28 +0000 Manifest next update: Thu 18 Jun 2026 05:57:28 +0000 Files and hashes: 1: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: eM4zTeT5x8zRTCedGRk54XligMqqPoDVVW+mAmQIEvQ=) 2: B68C761C821AA1629C9F6105D99B85E34433B478.crl (hash: wAjOAGYDQvjR/CxMk3xbmOwh+DU2kCOMnGkp99rZ91U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6c:85:9f:c6:43:9b:8e:6e:6a:c7:6d:21:ac:86:45:25:f7:1e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B68C761C821AA1629C9F6105D99B85E34433B478 Validity Not Before: Jun 17 04:33:28 2026 GMT Not After : Jun 18 05:57:28 2026 GMT Subject: CN=9E6F9A4803C11BA35971E46492D4812F4AC7870E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:1c:5a:08:86:21:bd:7f:09:22:0f:e1:1a: 89:23:54:ab:20:b3:1d:41:e3:c6:9f:9e:3e:83:6c: f1:aa:8e:9d:b1:09:8b:fb:9f:dd:59:5c:08:f7:19: 5b:8a:ce:ce:0e:e4:2f:91:88:6a:e8:0a:8c:58:72: 2d:5f:78:ec:04:73:9c:14:93:f8:54:83:88:b8:ef: be:e7:22:c6:f3:ee:a9:10:32:b7:47:aa:ac:1f:1d: cf:26:9f:ea:a9:4c:1f:ff:29:62:5a:b8:0e:91:48: c9:d0:d9:2b:db:9a:8e:40:7c:7b:70:f4:5c:b3:52: 80:4e:a1:ff:84:17:9c:20:0c:27:e4:f0:91:de:d0: 77:76:21:26:79:76:74:70:e1:23:34:74:d0:a6:a9: 2c:38:09:7f:81:3a:8f:3d:9f:ae:b4:28:dd:4f:22: 82:d5:04:6b:9e:b3:29:52:5a:56:ca:77:cd:9d:b1: 8d:92:58:28:bb:04:64:a3:6d:73:55:5a:e5:9e:3a: fa:d3:be:3b:07:88:28:9a:96:dc:56:35:22:1b:3b: df:67:40:6c:67:1d:bc:8c:a9:5c:a9:22:51:c5:26: f1:06:3a:27:b0:b1:65:a1:ff:ac:30:05:c5:92:29: b0:dd:5c:4b:7c:2b:c0:98:f0:b5:48:9f:b6:53:2c: 55:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6F:9A:48:03:C1:1B:A3:59:71:E4:64:92:D4:81:2F:4A:C7:87:0E X509v3 Authority Key Identifier: keyid:B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a5:a1:49:a3:9e:06:f0:9d:5c:56:30:7e:11:6e:66:f7:57: 13:56:92:5a:86:44:bb:9c:2f:54:cb:18:fb:00:59:33:b8:59: d2:78:ea:d9:f0:7d:b2:eb:63:e6:45:5e:84:bc:d9:f4:de:b7: b6:e5:f4:0a:30:df:c8:12:e1:35:f1:9a:e7:6b:33:82:ab:21: 3e:05:ca:e6:61:62:da:3a:e6:c9:9d:74:a8:9c:63:ae:0d:ad: ea:33:bf:54:a2:8b:bb:cf:7c:51:b8:93:10:77:36:b0:2e:42: 2d:32:75:f5:9b:32:60:40:c6:c6:1e:f6:85:f7:2d:b0:b6:b7: b2:20:88:b8:3e:45:58:f5:82:2c:fb:02:a6:ef:c7:ec:19:e5: 51:5b:56:ec:07:07:7a:25:11:7e:a1:b5:f3:22:81:3d:76:40: 4c:1f:c1:31:e9:5d:e3:ce:cc:15:e4:38:57:31:dd:2c:82:7f: 83:6c:cc:4a:40:2e:d4:a3:f4:dc:d1:c5:b2:e7:60:73:e0:d9: 3f:82:43:ad:41:a5:88:a5:08:89:8c:fc:d1:c2:86:42:28:bf: d3:28:22:18:8f:28:40:92:a8:3d:2c:c3:06:e9:6e:59:e9:60: df:4b:92:84:ea:af:9a:41:16:4d:18:4b:7e:44:ef:48:92:8c: 71:ad:8f:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfGyFn8ZDm45uasdtIayGRSX3HrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4Qzc2MUM4MjFBQTE2MjlDOUY2MTA1RDk5Qjg1RTM0 NDMzQjQ3ODAeFw0yNjA2MTcwNDMzMjhaFw0yNjA2MTgwNTU3MjhaMDMxMTAvBgNV BAMTKDlFNkY5QTQ4MDNDMTFCQTM1OTcxRTQ2NDkyRDQ4MTJGNEFDNzg3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3xxaCIYhvX8JIg/hGokjVKsg sx1B48afnj6DbPGqjp2xCYv7n91ZXAj3GVuKzs4O5C+RiGroCoxYci1feOwEc5wU k/hUg4i4777nIsbz7qkQMrdHqqwfHc8mn+qpTB//KWJauA6RSMnQ2Svbmo5AfHtw 9FyzUoBOof+EF5wgDCfk8JHe0Hd2ISZ5dnRw4SM0dNCmqSw4CX+BOo89n660KN1P IoLVBGuesylSWlbKd82dsY2SWCi7BGSjbXNVWuWeOvrTvjsHiCialtxWNSIbO99n QGxnHbyMqVypIlHFJvEGOiewsWWh/6wwBcWSKbDdXEt8K8CY8LVIn7ZTLFXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnm+aSAPBG6NZceRkktSBL0rHhw4wHwYDVR0j BBgwFoAUtox2HIIaoWKcn2EF2ZuF40QztHgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzNTYzNzUtOGUyOS00NDc3LWIwMTMtYzQ0MTUwYTI1YTMxLzAvQjY4Qzc2MUM4 MjFBQTE2MjlDOUY2MTA1RDk5Qjg1RTM0NDMzQjQ3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjhDNzYxQzgyMUFBMTYyOUM5RjYxMDVEOTlCODVFMzQ0MzNC NDc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQjY4Qzc2MUM4MjFBQTE2MjlDOUY2MTA1RDk5Qjg1 RTM0NDMzQjQ3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+loUmjngbwnVxWMH4Rbmb3VxNWklqGRLuc L1TLGPsAWTO4WdJ46tnwfbLrY+ZFXoS82fTet7bl9Aow38gS4TXxmudrM4KrIT4F yuZhYto65smddKicY64Nreozv1Sii7vPfFG4kxB3NrAuQi0ydfWbMmBAxsYe9oX3 LbC2t7IgiLg+RVj1giz7Aqbvx+wZ5VFbVuwHB3olEX6htfMigT12QEwfwTHpXePO zBXkOFcx3SyCf4NszEpALtSj9NzRxbLnYHPg2T+CQ61BpYilCImM/NHChkIov9Mo IhiPKECSqD0swwbpblnpYN9LkoTqr5pBFk0YS35E70iSjHGtj5w= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:06 2026 by rpki-client