$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft File: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft (raw, json) Hash identifier: pO4hr3f+irLmVhT/YlX9EGLsQRR0RYmnprzxuu8u6WU= Subject key identifier: 6E:AF:DC:82:85:B7:FF:B4:DA:AD:B0:0B:44:75:F8:A5:3D:65:50:64 Authority key identifier: 68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 Certificate issuer: /CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Certificate serial: 042341C10BBDFAB2C72E957106D0565A5CB712A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 03:42:19 +0000 Manifest this update: Wed 17 Jun 2026 03:37:19 +0000 Manifest next update: Thu 18 Jun 2026 05:22:19 +0000 Files and hashes: 1: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl (hash: uY4VWTwGs5UI3MNSzgGA5e7ixvahde6gTqipfISOYMc=) 2: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 7S4S4G9FGD28Sv926fG87e0exOc068CcSp9OM3k7SEc=) 3: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: Gadh6mfTzxhcQcO3hchTOHrPBLDM8NpuBwUUrXS+WEE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:23:41:c1:0b:bd:fa:b2:c7:2e:95:71:06:d0:56:5a:5c:b7:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Validity Not Before: Jun 17 03:37:19 2026 GMT Not After : Jun 18 05:22:19 2026 GMT Subject: CN=6EAFDC8285B7FFB4DAADB00B4475F8A53D655064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:54:eb:24:7d:7b:5f:72:68:5f:4b:c9:b3: 91:20:18:9c:2a:b7:ff:10:20:52:6a:2c:20:6f:c5: 44:a7:8e:17:57:cf:a2:6c:45:c7:f9:25:64:98:54: d2:42:a4:4e:8d:20:dc:f0:2a:22:ea:df:45:73:b7: a9:1a:a6:45:b4:87:df:65:50:d9:b8:a5:0d:c8:06: 2f:6e:10:e8:0b:81:b1:df:64:3e:7a:b2:91:ef:61: b9:81:36:e2:ad:73:e1:08:2f:75:a2:06:1a:37:43: 6a:f6:12:e3:ac:37:cd:97:c7:a6:b0:f1:87:49:d2: db:41:a1:70:bb:a8:39:eb:ee:fa:03:a9:2b:e3:76: 27:e2:c3:2c:85:10:39:86:46:52:47:98:20:3c:58: c2:44:fe:32:ec:2e:c6:39:20:4b:ff:97:e5:f7:ac: c7:8d:8f:b8:11:fb:62:d5:81:43:37:0d:83:66:42: b0:63:a6:7d:63:53:7e:5a:57:99:9e:df:11:59:6f: 79:38:b3:2e:35:9a:b1:76:a9:11:f9:3e:be:14:31: 73:04:50:d9:59:a0:20:f8:1b:a6:d5:f6:56:ad:cd: 8e:e1:62:88:26:8c:ed:ea:46:19:c9:31:38:d4:a9: c6:80:0f:56:59:be:7c:df:2b:dc:48:f5:7b:1a:9b: 05:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AF:DC:82:85:B7:FF:B4:DA:AD:B0:0B:44:75:F8:A5:3D:65:50:64 X509v3 Authority Key Identifier: keyid:68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:86:c7:b4:e2:19:3e:bf:20:a4:20:42:5f:50:3f:ec:7c:53: b0:40:70:6b:28:2f:8e:cd:35:1f:53:be:4b:27:70:72:38:e2: 04:69:76:a2:70:59:a0:b8:2e:6a:55:06:1c:50:8c:8f:35:08: 81:cd:7a:7f:18:6e:0f:8b:f8:18:ef:4a:f5:78:48:7e:f8:0d: 78:a1:c9:73:17:c3:0e:37:ef:f3:df:f3:47:ba:ce:c1:bc:e9: 1f:ec:38:25:e2:88:82:58:e1:6b:96:5a:56:df:e6:fb:ca:2e: 5b:3c:81:b0:24:d0:bd:77:b7:30:ec:8a:6c:e5:fd:fe:8b:c1: 8d:6e:05:12:58:66:6b:ae:a5:83:c9:76:dc:f4:dd:d9:8e:cf: 92:ab:c7:4b:db:d5:32:64:e4:c1:e4:8b:02:1b:13:00:45:01: 3a:9e:3d:d0:bf:59:e0:08:b3:c2:45:e3:ec:74:c6:94:5a:fb: 65:80:6a:3e:93:76:35:d5:c5:ea:61:d6:2a:7d:94:14:f3:fd: 4c:47:80:cc:b7:08:d3:6b:8e:51:a1:c1:43:a1:f0:88:88:00: c1:dc:f7:04:e6:35:39:23:93:3f:b9:45:2b:e3:e7:2b:b1:3d: cc:0f:c4:24:02:ab:51:17:db:b9:71:d7:f9:48:bc:5d:3e:fc: 09:bb:c9:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCNBwQu9+rLHLpVxBtBWWly3EqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEw MEMyQTdCNTAeFw0yNjA2MTcwMzM3MTlaFw0yNjA2MTgwNTIyMTlaMDMxMTAvBgNV BAMTKDZFQUZEQzgyODVCN0ZGQjREQUFEQjAwQjQ0NzVGOEE1M0Q2NTUwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTK1TrJH17X3JoX0vJs5EgGJwq t/8QIFJqLCBvxUSnjhdXz6JsRcf5JWSYVNJCpE6NINzwKiLq30Vzt6kapkW0h99l UNm4pQ3IBi9uEOgLgbHfZD56spHvYbmBNuKtc+EIL3WiBho3Q2r2EuOsN82Xx6aw 8YdJ0ttBoXC7qDnr7voDqSvjdifiwyyFEDmGRlJHmCA8WMJE/jLsLsY5IEv/l+X3 rMeNj7gR+2LVgUM3DYNmQrBjpn1jU35aV5me3xFZb3k4sy41mrF2qRH5Pr4UMXME UNlZoCD4G6bV9latzY7hYogmjO3qRhnJMTjUqcaAD1ZZvnzfK9xI9XsamwVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbq/cgoW3/7TarbALRHX4pT1lUGQwHwYDVR0j BBgwFoAUaODfT6x+YgJB1sRelZnLIQDCp7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmMwNzJkYjctMDEyNy00NTY0LThkMjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZB QzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEwMEMyQTdCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEUwREY0RkFDN0U2MjAyNDFENkM0NUU5NTk5Q0IyMTAwQzJB N0I1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNC MjEwMEMyQTdCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCGx7TiGT6/IKQgQl9QP+x8U7BAcGsoL47N NR9TvksncHI44gRpdqJwWaC4LmpVBhxQjI81CIHNen8Ybg+L+BjvSvV4SH74DXih yXMXww437/Pf80e6zsG86R/sOCXiiIJY4WuWWlbf5vvKLls8gbAk0L13tzDsimzl /f6LwY1uBRJYZmuupYPJdtz03dmOz5Krx0vb1TJk5MHkiwIbEwBFATqePdC/WeAI s8JF4+x0xpRa+2WAaj6TdjXVxeph1ip9lBTz/UxHgMy3CNNrjlGhwUOh8IiIAMHc 9wTmNTkjkz+5RSvj5yuxPcwPxCQCq1EX27lx1/lIvF0+/Am7ydM= -----END CERTIFICATE-----Generated at Wed Jun 17 11:05:15 2026 by rpki-client