$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft File: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft (raw, json) Hash identifier: Pd9t7HT/xnrpttMDwrfllNG15GPxMszlgdNIgX37o/M= Subject key identifier: 32:D5:A0:C7:D6:D1:6C:18:56:7F:44:46:20:E6:45:6C:9F:10:E0:9C Authority key identifier: 68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 Certificate issuer: /CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Certificate serial: 79D57D6C1CF1F2A6403D51587F65CB23663CEA21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 10:57:49 +0000 Manifest this update: Sat 13 Jun 2026 10:52:49 +0000 Manifest next update: Sun 14 Jun 2026 11:25:49 +0000 Files and hashes: 1: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl (hash: GuTdwbbji4xIAropkSBUe6ac5MryAaTfvn4Lu5Mc1gg=) 2: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: cwLPRSN2w6mZj3tlDvow1ecrXm+F+7b6N36wRKhpvIw=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: eNviqEPANiU+R88ED/BdXauQGAcTaPYxgTmStYUAEXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d5:7d:6c:1c:f1:f2:a6:40:3d:51:58:7f:65:cb:23:66:3c:ea:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Validity Not Before: Jun 13 10:52:49 2026 GMT Not After : Jun 14 11:25:49 2026 GMT Subject: CN=32D5A0C7D6D16C18567F444620E6456C9F10E09C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:da:db:82:3b:a4:2c:85:e9:b4:62:df:ec: 47:be:ec:a4:eb:28:79:3e:44:c7:95:46:8d:91:ba: c3:5f:ad:32:f5:b9:6d:02:72:89:42:97:00:f6:57: 82:4a:67:73:a9:f3:62:34:18:ff:28:f5:34:87:83: 25:9a:71:86:b1:8d:a3:a5:9c:ae:fd:48:17:7a:87: 9a:d3:ec:e1:d6:1c:10:4f:32:ff:48:cd:b0:38:be: 6d:3c:38:3d:5d:b1:5d:33:9f:72:46:9f:58:e2:94: 9b:1a:f7:3d:a1:2c:eb:70:ef:52:16:26:9a:bd:80: 98:34:b2:e0:09:c2:7c:5f:e4:3e:61:89:46:bc:41: 26:67:64:3f:5a:26:b9:aa:84:01:95:25:b1:77:f0: 50:db:25:13:23:e3:87:84:cc:2c:81:e2:2d:6c:60: 26:ee:a3:ad:b8:89:1a:de:8d:a7:a2:08:60:f6:5b: e5:bf:5c:1e:76:dc:3f:fb:5e:e8:52:da:27:e8:c4: 05:13:f4:eb:42:c1:38:12:ff:e1:1c:88:09:92:87: 02:5d:3a:10:de:2f:20:01:b5:53:65:1a:d6:d5:b9: e0:c2:ba:49:70:83:a6:14:43:b8:8a:5c:78:30:89: 28:4c:c8:10:20:c5:55:65:f7:88:2a:cc:16:b4:19: d4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D5:A0:C7:D6:D1:6C:18:56:7F:44:46:20:E6:45:6C:9F:10:E0:9C X509v3 Authority Key Identifier: keyid:68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a3:b6:b8:67:90:d4:a2:63:8c:68:5a:bb:65:5c:e5:7f:6a: 4a:60:e1:67:e3:fc:3a:7d:6d:4f:80:19:6e:7b:be:26:53:b5: 1a:3a:99:c0:f8:c2:8c:3d:17:dd:54:92:e4:fc:37:9c:36:96: b1:63:b8:a6:10:e7:fc:fe:eb:91:da:b7:d9:18:9e:09:e8:4d: 70:80:d9:d4:d4:f4:cd:6d:39:fe:a6:4b:61:71:ba:94:e7:93: d1:cd:b2:15:28:95:51:9c:1f:34:c7:1c:31:0a:31:03:f6:dc: d4:8a:00:73:9a:24:41:49:d3:f6:84:cf:59:42:7f:a5:5c:79: a0:5e:a5:2e:fc:a9:89:53:4d:9f:86:65:9c:01:eb:e4:8f:00: 80:c2:aa:15:26:89:6b:56:ec:f1:9d:0f:f5:5f:e3:36:b3:64: a8:19:6c:fe:75:dd:af:b2:44:15:ca:23:89:e4:2d:be:82:55: ea:bd:8c:26:86:44:76:17:1b:72:1f:a9:6b:5c:41:2c:a7:c5: 2d:6c:79:0d:9f:69:df:5a:9b:87:89:87:0c:dc:05:ed:ee:61: 3c:15:8b:88:39:85:66:1f:ad:1a:5b:8e:d5:4e:d9:59:f7:2b: 09:24:7e:58:4f:19:dc:bf:67:0f:b0:ec:b5:aa:4e:73:49:07: bf:67:e4:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUedV9bBzx8qZAPVFYf2XLI2Y86iEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdG RUMxQUNDMTAeFw0yNjA2MTMxMDUyNDlaFw0yNjA2MTQxMTI1NDlaMDMxMTAvBgNV BAMTKDMyRDVBMEM3RDZEMTZDMTg1NjdGNDQ0NjIwRTY0NTZDOUYxMEUwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsV9rbgjukLIXptGLf7Ee+7KTr KHk+RMeVRo2RusNfrTL1uW0CcolClwD2V4JKZ3Op82I0GP8o9TSHgyWacYaxjaOl nK79SBd6h5rT7OHWHBBPMv9IzbA4vm08OD1dsV0zn3JGn1jilJsa9z2hLOtw71IW Jpq9gJg0suAJwnxf5D5hiUa8QSZnZD9aJrmqhAGVJbF38FDbJRMj44eEzCyB4i1s YCbuo624iRrejaeiCGD2W+W/XB523D/7XuhS2ifoxAUT9OtCwTgS/+EciAmShwJd OhDeLyABtVNlGtbVueDCuklwg6YUQ7iKXHgwiShMyBAgxVVl94gqzBa0GdRbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMtWgx9bRbBhWf0RGIOZFbJ8Q4JwwHwYDVR0j BBgwFoAUaKeoxSws8xN4L5PcXRLK9/7BrMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFmN2MyNWItNDEwYi00ODJhLTk0MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUy QzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdGRUMxQUNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3QThDNTJDMkNGMzEzNzgyRjkzREM1RDEyQ0FGN0ZFQzFB Q0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNB RjdGRUMxQUNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICjtrhnkNSiY4xoWrtlXOV/akpg4Wfj/Dp9 bU+AGW57viZTtRo6mcD4wow9F91UkuT8N5w2lrFjuKYQ5/z+65Hat9kYngnoTXCA 2dTU9M1tOf6mS2FxupTnk9HNshUolVGcHzTHHDEKMQP23NSKAHOaJEFJ0/aEz1lC f6VceaBepS78qYlTTZ+GZZwB6+SPAIDCqhUmiWtW7PGdD/Vf4zazZKgZbP513a+y RBXKI4nkLb6CVeq9jCaGRHYXG3IfqWtcQSynxS1seQ2fad9am4eJhwzcBe3uYTwV i4g5hWYfrRpbjtVO2Vn3KwkkflhPGdy/Zw+w7LWqTnNJB79n5J4= -----END CERTIFICATE-----Generated at Sat Jun 13 22:39:19 2026 by rpki-client