$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft File: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft (raw, json) Hash identifier: WiP1xGjVmyGwmkb+1AGCMjVWzSmrFOFxjXPn6+sPWZM= Subject key identifier: 86:88:6B:14:D3:37:0D:EC:83:8A:78:35:38:0B:58:2E:E1:11:86:AC Authority key identifier: 68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 Certificate issuer: /CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Certificate serial: 405D31AA5F28D8BA1DE666C5EE05F2A751D9E60E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 12:11:49 +0000 Manifest this update: Tue 28 Jul 2026 12:06:49 +0000 Manifest next update: Wed 29 Jul 2026 12:54:49 +0000 Files and hashes: 1: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: eNviqEPANiU+R88ED/BdXauQGAcTaPYxgTmStYUAEXw=) 2: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl (hash: 740KA4s5a56JDB9miy+pBcCjCV0Q0ZUvpaSttzQ0U18=) 3: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: cwLPRSN2w6mZj3tlDvow1ecrXm+F+7b6N36wRKhpvIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5d:31:aa:5f:28:d8:ba:1d:e6:66:c5:ee:05:f2:a7:51:d9:e6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Validity Not Before: Jul 28 12:06:49 2026 GMT Not After : Jul 29 12:54:49 2026 GMT Subject: CN=86886B14D3370DEC838A7835380B582EE11186AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:eb:9b:f8:b1:0d:e8:9a:d6:73:6b:ee:e9: 5d:7e:9d:5d:38:f8:32:1e:54:4a:0d:cb:64:f9:2d: 86:d3:f6:c2:e7:41:87:9e:93:25:16:c4:43:b8:ed: 4e:ad:a3:d2:28:83:de:d3:49:e6:48:3a:1c:a9:1c: 54:79:57:2d:44:c6:d9:54:bd:f3:2b:32:ef:b2:41: 7f:7f:65:f4:28:dd:3c:34:3d:fe:34:04:49:cd:fb: a2:2d:aa:f1:f6:6e:67:23:29:d9:63:c8:cb:ef:a6: 00:a0:f4:d2:c3:72:2e:7e:c9:42:01:6e:00:70:28: 1a:d6:7a:8e:d1:2e:22:df:49:9f:c9:c2:b1:ee:d0: 32:3f:3b:44:47:0c:db:24:02:0c:ca:12:1a:dd:ac: a1:22:57:55:a7:51:1b:a9:e9:7a:90:60:d1:2e:4c: 9e:a3:bf:e0:c2:b0:8b:03:67:ff:bc:c3:28:ad:68: e0:49:d0:07:50:d2:ae:8b:cb:47:f2:53:7c:78:95: ca:00:2b:72:d8:ce:f5:eb:b8:b1:e4:de:f6:5b:51: ee:30:c7:49:b1:32:41:bf:81:0d:ea:85:9d:be:8c: fd:ab:50:b9:df:df:17:5a:4e:3e:a1:c2:76:c1:36: 0a:60:b7:c8:02:27:fa:ec:69:1d:ea:35:00:38:0b: 75:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:88:6B:14:D3:37:0D:EC:83:8A:78:35:38:0B:58:2E:E1:11:86:AC X509v3 Authority Key Identifier: keyid:68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a6:25:4c:f9:a9:e3:36:3c:1e:91:1a:87:72:23:da:c2:76: f7:50:b3:08:8a:2f:be:fe:fb:ae:53:8d:33:8d:c4:09:e7:e8: cf:e1:17:87:5e:f4:6a:88:76:2e:8c:e3:09:96:b6:74:30:80: 9e:93:86:bb:68:c3:58:f1:56:fa:28:67:fa:ae:9a:2c:6a:ae: 43:3e:d8:2e:85:fc:85:47:ea:5b:f0:5b:7a:62:2c:39:11:fa: b3:68:04:c8:60:3a:86:b8:75:fe:55:15:a3:6c:f4:73:d2:50: 34:b6:c8:88:9a:be:e9:22:f7:dd:c6:d6:cb:a5:a8:be:b7:bb: 93:20:6f:e7:9d:a2:83:38:cb:57:11:e5:e8:17:d1:b1:5f:eb: 80:c3:11:6e:93:4d:ac:4e:16:0c:f0:89:36:ad:9e:7d:34:eb: 2b:78:e6:a8:69:78:4d:50:ef:a0:c0:e2:e6:6d:a4:4b:62:f6: 38:c6:46:93:a1:40:db:fb:79:07:59:ef:be:52:50:96:41:d1: bc:6c:32:0f:0b:33:ed:c6:ae:fa:41:11:15:b4:72:1b:b5:34: 55:90:a8:f9:95:13:16:50:fe:60:35:59:25:70:3b:65:43:bd: 5c:37:d9:9f:e6:38:f7:6c:40:f1:fe:e0:4c:0b:91:81:9e:24: af:78:98:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQF0xql8o2Lod5mbF7gXyp1HZ5g4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdG RUMxQUNDMTAeFw0yNjA3MjgxMjA2NDlaFw0yNjA3MjkxMjU0NDlaMDMxMTAvBgNV BAMTKDg2ODg2QjE0RDMzNzBERUM4MzhBNzgzNTM4MEI1ODJFRTExMTg2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjuub+LEN6JrWc2vu6V1+nV04 +DIeVEoNy2T5LYbT9sLnQYeekyUWxEO47U6to9Iog97TSeZIOhypHFR5Vy1ExtlU vfMrMu+yQX9/ZfQo3Tw0Pf40BEnN+6ItqvH2bmcjKdljyMvvpgCg9NLDci5+yUIB bgBwKBrWeo7RLiLfSZ/JwrHu0DI/O0RHDNskAgzKEhrdrKEiV1WnURup6XqQYNEu TJ6jv+DCsIsDZ/+8wyitaOBJ0AdQ0q6Ly0fyU3x4lcoAK3LYzvXruLHk3vZbUe4w x0mxMkG/gQ3qhZ2+jP2rULnf3xdaTj6hwnbBNgpgt8gCJ/rsaR3qNQA4C3XLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhohrFNM3DeyDing1OAtYLuERhqwwHwYDVR0j BBgwFoAUaKeoxSws8xN4L5PcXRLK9/7BrMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFmN2MyNWItNDEwYi00ODJhLTk0MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUy QzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdGRUMxQUNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3QThDNTJDMkNGMzEzNzgyRjkzREM1RDEyQ0FGN0ZFQzFB Q0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNB RjdGRUMxQUNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGmJUz5qeM2PB6RGodyI9rCdvdQswiKL77+ +65TjTONxAnn6M/hF4de9GqIdi6M4wmWtnQwgJ6Thrtow1jxVvooZ/qumixqrkM+ 2C6F/IVH6lvwW3piLDkR+rNoBMhgOoa4df5VFaNs9HPSUDS2yIiavuki993G1sul qL63u5Mgb+edooM4y1cR5egX0bFf64DDEW6TTaxOFgzwiTatnn006yt45qhpeE1Q 76DA4uZtpEti9jjGRpOhQNv7eQdZ775SUJZB0bxsMg8LM+3GrvpBERW0chu1NFWQ qPmVExZQ/mA1WSVwO2VDvVw32Z/mOPdsQPH+4EwLkYGeJK94mOQ= -----END CERTIFICATE-----Generated at Wed Jul 29 04:09:14 2026 by rpki-client