$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft File: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft (raw, json) Hash identifier: 4O1/SfGbfLKSDQM7lAqWT2iRHKIMe+S039LmgjQsKfk= Subject key identifier: 1D:4C:4C:0F:33:67:23:E8:7A:40:A5:DB:B3:FB:F3:3E:0F:6B:31:6E Authority key identifier: 68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 Certificate issuer: /CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Certificate serial: 01A8133B97795A314F5926C159631AF9494731DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 23:48:58 +0000 Manifest this update: Sat 14 Nov 2026 23:43:58 +0000 Manifest next update: Mon 16 Nov 2026 03:30:58 +0000 Files and hashes: 1: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: Gadh6mfTzxhcQcO3hchTOHrPBLDM8NpuBwUUrXS+WEE=) 2: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl (hash: nUvhHig3UiPyfDBBN31FGysDeClAIOzXaGctb/S+UB8=) 3: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 7S4S4G9FGD28Sv926fG87e0exOc068CcSp9OM3k7SEc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a8:13:3b:97:79:5a:31:4f:59:26:c1:59:63:1a:f9:49:47:31:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Validity Not Before: Nov 14 23:43:58 2026 GMT Not After : Nov 16 03:30:58 2026 GMT Subject: CN=1D4C4C0F336723E87A40A5DBB3FBF33E0F6B316E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:10:03:89:ea:ea:85:d0:c3:ec:65:c2:2b: e2:67:e1:51:de:2d:fc:2a:78:0b:37:36:d4:d9:be: 18:d2:70:3a:53:63:98:b2:42:b7:b4:60:16:9e:f6: 8d:6f:a1:ee:03:e9:a3:f2:69:dd:fd:fd:fd:8f:a8: c3:80:80:3f:33:cc:3e:b2:d1:10:f9:06:70:02:58: 62:7f:33:43:cb:b9:05:a1:34:e6:e7:f5:5c:56:37: 8c:c2:85:72:04:18:ad:71:c5:e2:95:a8:ba:68:b5: 80:a4:e6:a7:d7:28:d5:08:36:e8:e7:c9:6c:d5:55: 0a:8c:65:96:1a:1b:10:c3:70:e5:1e:b9:d1:82:55: 2d:01:a2:d3:b6:91:3c:da:7a:a1:0d:85:17:6d:5f: f4:0f:9a:fd:11:1e:0a:16:aa:e0:9d:7c:93:4e:e8: 28:91:2c:0e:2d:7c:01:80:f9:29:8f:5d:69:4d:b0: be:9a:f5:a6:06:0e:7f:58:fb:bd:ac:c5:83:41:bd: 45:28:5d:f0:84:11:35:9b:96:f0:f8:5e:ef:9f:8b: 55:65:42:0e:33:c9:81:c3:a4:20:ce:34:e7:6d:6b: df:ee:88:84:25:c4:7a:fa:fd:67:50:7e:46:26:71: 9e:37:41:f4:6d:7e:5c:a0:26:29:cd:c9:67:d7:7e: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4C:4C:0F:33:67:23:E8:7A:40:A5:DB:B3:FB:F3:3E:0F:6B:31:6E X509v3 Authority Key Identifier: keyid:68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b6:16:e8:74:5d:ad:7e:b1:74:88:38:26:b4:48:c6:c8:ac: 35:cf:96:7d:3f:6b:82:e8:b6:5f:bc:18:fb:87:ab:f5:51:bc: 27:1f:16:f8:c8:e4:21:22:c4:59:be:f4:2f:fb:9e:b1:81:9e: 80:da:b3:5e:26:50:66:99:e7:15:3e:d2:97:5d:5d:8a:f4:5b: 3d:f6:f9:79:ca:d1:df:b6:4d:93:ac:2e:e0:82:bf:52:cc:b6: 49:94:f2:98:fa:1a:64:c1:05:24:12:d8:71:53:19:92:2c:f3: 15:87:c0:c3:b7:c0:1a:86:b9:9e:31:b4:04:a1:34:5a:6d:a1: a9:34:53:f8:45:ee:81:9b:ae:aa:23:e0:e1:89:b5:e1:84:f4: 5f:e8:9e:b2:ad:13:71:51:b3:8b:66:c0:ac:3f:35:68:87:77: e2:c2:00:4f:13:eb:f0:5a:9b:60:f7:69:82:82:0f:5b:de:c9: 1c:f0:5d:bd:39:73:43:60:bf:f6:d4:a9:06:97:cf:97:02:8b: ec:bb:28:0b:79:a1:46:b6:6b:1e:8e:c6:fa:3b:2b:21:db:3b: 20:c1:66:e1:ae:7d:09:19:ff:e4:e6:0b:85:3d:fd:69:81:4c: 89:99:29:00:e7:c8:12:61:8d:91:db:19:9e:53:4e:54:42:09: 4f:d7:3c:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAagTO5d5WjFPWSbBWWMa+UlHMd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEw MEMyQTdCNTAeFw0yNjExMTQyMzQzNThaFw0yNjExMTYwMzMwNThaMDMxMTAvBgNV BAMTKDFENEM0QzBGMzM2NzIzRTg3QTQwQTVEQkIzRkJGMzNFMEY2QjMxNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcyhADierqhdDD7GXCK+Jn4VHe LfwqeAs3NtTZvhjScDpTY5iyQre0YBae9o1voe4D6aPyad39/f2PqMOAgD8zzD6y 0RD5BnACWGJ/M0PLuQWhNObn9VxWN4zChXIEGK1xxeKVqLpotYCk5qfXKNUINujn yWzVVQqMZZYaGxDDcOUeudGCVS0BotO2kTzaeqENhRdtX/QPmv0RHgoWquCdfJNO 6CiRLA4tfAGA+SmPXWlNsL6a9aYGDn9Y+72sxYNBvUUoXfCEETWblvD4Xu+fi1Vl Qg4zyYHDpCDONOdta9/uiIQlxHr6/WdQfkYmcZ43QfRtflygJinNyWfXfjRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHUxMDzNnI+h6QKXbs/vzPg9rMW4wHwYDVR0j BBgwFoAUaODfT6x+YgJB1sRelZnLIQDCp7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmMwNzJkYjctMDEyNy00NTY0LThkMjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZB QzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEwMEMyQTdCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEUwREY0RkFDN0U2MjAyNDFENkM0NUU5NTk5Q0IyMTAwQzJB N0I1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNC MjEwMEMyQTdCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJa2Fuh0Xa1+sXSIOCa0SMbIrDXPln0/a4Lo tl+8GPuHq/VRvCcfFvjI5CEixFm+9C/7nrGBnoDas14mUGaZ5xU+0pddXYr0Wz32 +XnK0d+2TZOsLuCCv1LMtkmU8pj6GmTBBSQS2HFTGZIs8xWHwMO3wBqGuZ4xtASh NFptoak0U/hF7oGbrqoj4OGJteGE9F/onrKtE3FRs4tmwKw/NWiHd+LCAE8T6/Ba m2D3aYKCD1veyRzwXb05c0Ngv/bUqQaXz5cCi+y7KAt5oUa2ax6Oxvo7KyHbOyDB ZuGufQkZ/+TmC4U9/WmBTImZKQDnyBJhjZHbGZ5TTlRCCU/XPGg= -----END CERTIFICATE-----Generated at Sun Nov 15 11:50:57 2026 by rpki-client