$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft File: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft (raw, json) Hash identifier: v9m0803QdKG8s8FLrf36jzPazNJHQAqhz+iH6FfM3ag= Subject key identifier: 1D:2F:7C:09:41:93:44:B6:07:4A:6D:02:E4:6B:AE:F6:73:98:8A:0C Authority key identifier: 68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 Certificate issuer: /CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Certificate serial: 7026DDA190C7E4F6743B7E590714773E3BB7DF3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft Manifest number: BD Signing time: Sun 20 Sep 2026 16:47:40 +0000 Manifest this update: Sun 20 Sep 2026 16:42:40 +0000 Manifest next update: Mon 21 Sep 2026 20:07:40 +0000 Files and hashes: 1: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: Gadh6mfTzxhcQcO3hchTOHrPBLDM8NpuBwUUrXS+WEE=) 2: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 7S4S4G9FGD28Sv926fG87e0exOc068CcSp9OM3k7SEc=) 3: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl (hash: U9TI5nOfkQjn2mJNK+G11ZKsyBMD80K/Lt9nbB66x2M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:26:dd:a1:90:c7:e4:f6:74:3b:7e:59:07:14:77:3e:3b:b7:df:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Validity Not Before: Sep 20 16:42:40 2026 GMT Not After : Sep 21 20:07:40 2026 GMT Subject: CN=1D2F7C09419344B6074A6D02E46BAEF673988A0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cd:e4:38:22:c6:25:a3:7d:08:23:4c:5a:d7: 2c:3f:8b:d3:01:4c:9c:90:67:d3:4e:d0:7e:e3:f9: 11:f5:18:8a:d9:20:b1:34:6b:66:0b:48:4b:3c:94: 12:0b:4c:12:2f:c6:83:d4:25:6c:71:89:12:c9:69: 63:b4:9f:90:30:c6:a5:66:e6:86:81:53:3a:7e:1e: 47:60:b9:b4:58:22:52:d9:5b:74:75:11:ce:66:af: ac:39:68:cd:b6:fe:a4:01:f4:a1:95:9d:4a:c2:74: 8e:bf:1a:52:3a:a3:a6:3f:b5:86:f4:5b:33:24:81: 11:01:40:c3:cf:89:45:43:a0:33:cb:cf:1b:8c:67: 24:f4:c3:9e:c3:af:f3:b0:90:54:b2:57:5b:94:8b: 97:7b:c5:f8:a1:3b:3e:b0:c3:f8:9a:cf:6a:a5:55: f9:64:08:b8:a0:e8:a7:ce:e0:dd:bc:5b:de:bc:a5: cd:e2:97:03:f4:ac:dc:eb:97:dd:06:6b:18:7e:b6: c8:55:d6:6f:a9:3c:84:0e:65:2d:a0:72:bd:96:d3: 02:f6:8f:8e:75:c0:e0:92:d5:92:e4:91:21:0d:5b: c1:40:4b:02:95:79:7f:34:0a:f7:8e:41:b2:bd:51: 95:63:8c:3f:0a:f6:99:88:2f:fa:a9:dc:85:86:b9: e9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2F:7C:09:41:93:44:B6:07:4A:6D:02:E4:6B:AE:F6:73:98:8A:0C X509v3 Authority Key Identifier: keyid:68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:76:74:a2:a3:59:e9:7b:19:8d:0c:fe:fd:5c:15:ca:3e:9c: 39:c6:94:69:8d:75:ab:d5:cf:ec:d3:8c:a1:79:d3:41:f3:0b: 16:f0:5f:73:bc:29:00:02:df:20:52:04:7d:ab:3d:57:7e:fb: 28:9b:ed:bf:9b:02:55:4d:29:d2:aa:aa:85:8f:e7:3c:aa:4e: a6:82:5f:fb:a8:08:c7:91:0c:17:73:2a:f7:fa:91:36:15:d2: 83:5b:e6:85:4c:73:46:3b:1f:af:93:bd:03:d0:67:28:9d:d2: a4:7e:fd:6c:6f:73:50:40:97:5c:ed:89:0d:51:0c:1a:6a:a0: 04:1c:ba:a6:4a:b2:fd:5f:96:94:a8:69:25:05:4e:5f:a2:9c: 7f:48:6b:97:6e:be:d3:1c:0b:82:44:52:44:18:c3:f7:71:6e: 78:77:6f:53:ea:2b:0a:8b:fe:bf:7c:75:ca:d7:c8:b1:3e:c8: c6:c5:67:86:a0:d8:a2:c2:45:22:57:b2:98:03:dd:b1:9c:fa: 29:83:24:bc:51:b5:b8:36:06:cb:49:3d:fd:75:eb:06:aa:be: e9:dc:34:8a:09:5e:40:82:6a:35:0b:ad:6c:61:97:f0:d8:3b: 00:00:f3:c1:9a:eb:a9:2d:aa:6f:2e:25:9b:13:03:82:55:fe: 23:e9:a7:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCbdoZDH5PZ0O35ZBxR3Pju33zowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEw MEMyQTdCNTAeFw0yNjA5MjAxNjQyNDBaFw0yNjA5MjEyMDA3NDBaMDMxMTAvBgNV BAMTKDFEMkY3QzA5NDE5MzQ0QjYwNzRBNkQwMkU0NkJBRUY2NzM5ODhBMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrzeQ4IsYlo30II0xa1yw/i9MB TJyQZ9NO0H7j+RH1GIrZILE0a2YLSEs8lBILTBIvxoPUJWxxiRLJaWO0n5AwxqVm 5oaBUzp+HkdgubRYIlLZW3R1Ec5mr6w5aM22/qQB9KGVnUrCdI6/GlI6o6Y/tYb0 WzMkgREBQMPPiUVDoDPLzxuMZyT0w57Dr/OwkFSyV1uUi5d7xfihOz6ww/iaz2ql VflkCLig6KfO4N28W968pc3ilwP0rNzrl90Gaxh+tshV1m+pPIQOZS2gcr2W0wL2 j451wOCS1ZLkkSENW8FASwKVeX80CveOQbK9UZVjjD8K9pmIL/qp3IWGuelxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHS98CUGTRLYHSm0C5Guu9nOYigwwHwYDVR0j BBgwFoAUaODfT6x+YgJB1sRelZnLIQDCp7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmMwNzJkYjctMDEyNy00NTY0LThkMjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZB QzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEwMEMyQTdCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEUwREY0RkFDN0U2MjAyNDFENkM0NUU5NTk5Q0IyMTAwQzJB N0I1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNC MjEwMEMyQTdCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJ2dKKjWel7GY0M/v1cFco+nDnGlGmNdavV z+zTjKF500HzCxbwX3O8KQAC3yBSBH2rPVd++yib7b+bAlVNKdKqqoWP5zyqTqaC X/uoCMeRDBdzKvf6kTYV0oNb5oVMc0Y7H6+TvQPQZyid0qR+/Wxvc1BAl1ztiQ1R DBpqoAQcuqZKsv1flpSoaSUFTl+inH9Ia5duvtMcC4JEUkQYw/dxbnh3b1PqKwqL /r98dcrXyLE+yMbFZ4ag2KLCRSJXspgD3bGc+imDJLxRtbg2BstJPf116waqvunc NIoJXkCCajULrWxhl/DYOwAA88Ga66ktqm8uJZsTA4JV/iPpp0E= -----END CERTIFICATE-----Generated at Mon Sep 21 06:17:20 2026 by rpki-client