$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft File: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft (raw, json) Hash identifier: /bT0qL12gmmrRyE/zHvrZ/0nw2kDOPIaS4y1r3ubleM= Subject key identifier: C1:24:D4:B0:BE:B6:41:82:FB:6F:65:06:E6:85:CC:90:5B:BA:6B:B0 Authority key identifier: 68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 Certificate issuer: /CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Certificate serial: 473A1F0557761804C7AE81013CB666975370FBA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 09:23:10 +0000 Manifest this update: Tue 22 Sep 2026 09:18:10 +0000 Manifest next update: Wed 23 Sep 2026 10:35:10 +0000 Files and hashes: 1: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: eNviqEPANiU+R88ED/BdXauQGAcTaPYxgTmStYUAEXw=) 2: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl (hash: VVjMsxdeT6Iz89baLHEfyX2GLUgydB2a9grm2kYx4xc=) 3: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: cwLPRSN2w6mZj3tlDvow1ecrXm+F+7b6N36wRKhpvIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:3a:1f:05:57:76:18:04:c7:ae:81:01:3c:b6:66:97:53:70:fb:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Validity Not Before: Sep 22 09:18:10 2026 GMT Not After : Sep 23 10:35:10 2026 GMT Subject: CN=C124D4B0BEB64182FB6F6506E685CC905BBA6BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:a4:17:87:43:d0:e0:2a:12:62:49:cf:09: c7:47:ed:92:66:54:30:a5:be:db:7c:4f:66:61:2f: c4:9a:d8:fd:0d:80:7a:86:5a:86:a2:57:c4:db:70: 21:fa:b9:c4:4d:49:74:a0:c8:58:27:52:90:08:06: 97:2c:9f:dd:46:95:03:13:74:4a:3b:3b:21:62:5a: b5:4d:c8:e6:bd:87:df:80:47:8b:32:a8:61:a3:67: b7:8b:7a:5f:8c:6f:03:5f:3e:1b:fb:4c:12:00:1f: 55:27:0b:c8:b3:9d:61:7c:fc:7f:e5:05:ee:21:6e: d1:3d:61:51:5b:e7:bd:84:3c:92:30:24:8c:69:91: 9f:24:35:7b:d1:7e:0c:62:b3:09:6e:7b:45:ad:a4: 23:b2:86:8a:33:39:02:d3:f2:d4:e7:4b:cc:00:e7: 89:6c:3a:e8:af:45:93:c0:de:67:85:18:86:2a:b4: da:5e:53:78:e8:0e:13:e9:f3:e4:1a:45:ab:4d:98: a7:67:81:c5:5b:ce:69:57:3c:10:aa:16:c0:de:b6: af:f1:f4:1d:38:f7:71:c4:65:2b:2f:59:48:7e:a2: f5:d6:c2:0b:4c:27:fa:73:0c:a2:b8:d9:d7:1a:cc: 6d:2f:c0:e1:e8:02:c6:f9:67:96:4a:2f:c1:fd:a8: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:24:D4:B0:BE:B6:41:82:FB:6F:65:06:E6:85:CC:90:5B:BA:6B:B0 X509v3 Authority Key Identifier: keyid:68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1e:ef:a3:26:d5:df:79:99:6c:9a:bf:63:f7:87:41:ca:c6: 39:c7:a9:8d:49:3c:5e:ce:f8:09:0c:d3:05:cc:1f:93:e3:32: 1d:e3:bf:9d:29:af:73:40:42:48:f1:f3:1b:28:bd:5e:e3:03: 15:3d:98:49:c9:32:4c:61:6d:3e:db:2c:e0:cf:e6:55:94:1f: 84:7a:63:de:ef:51:1c:68:0e:b0:83:ed:dd:f9:e4:09:73:9e: 15:70:d0:ef:4c:b6:ea:90:90:05:ba:94:d5:c3:f3:de:3e:a3: b1:04:69:2e:1e:00:23:23:39:79:b0:2c:86:45:d1:89:59:09: 45:67:c6:89:e6:f8:6b:f3:c6:fb:f2:01:78:c6:b9:84:6c:78: ff:49:63:71:5b:a3:a1:d9:3d:a7:c0:a2:d0:dc:d6:62:89:5f: f3:52:6e:d1:6f:01:3a:4d:87:16:e8:e7:2e:2f:bb:1b:40:5f: 53:72:d9:6d:8c:8e:01:ce:20:37:94:ed:5b:2c:02:45:3d:55: ea:32:88:ed:b6:d7:d1:d0:d2:76:52:8f:3a:41:36:62:90:b5: 9c:6d:7d:3c:f0:4f:30:a7:5f:2f:c7:80:3d:71:c8:0d:b0:88: 34:44:8b:2d:b5:8f:ba:ee:5f:4b:c1:ca:60:d7:da:e7:d2:5d: 4d:6b:19:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzofBVd2GATHroEBPLZml1Nw+6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdG RUMxQUNDMTAeFw0yNjA5MjIwOTE4MTBaFw0yNjA5MjMxMDM1MTBaMDMxMTAvBgNV BAMTKEMxMjRENEIwQkVCNjQxODJGQjZGNjUwNkU2ODVDQzkwNUJCQTZCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgqQXh0PQ4CoSYknPCcdH7ZJm VDClvtt8T2ZhL8Sa2P0NgHqGWoaiV8TbcCH6ucRNSXSgyFgnUpAIBpcsn91GlQMT dEo7OyFiWrVNyOa9h9+AR4syqGGjZ7eLel+MbwNfPhv7TBIAH1UnC8iznWF8/H/l Be4hbtE9YVFb572EPJIwJIxpkZ8kNXvRfgxiswlue0WtpCOyhoozOQLT8tTnS8wA 54lsOuivRZPA3meFGIYqtNpeU3joDhPp8+QaRatNmKdngcVbzmlXPBCqFsDetq/x 9B0493HEZSsvWUh+ovXWwgtMJ/pzDKK42dcazG0vwOHoAsb5Z5ZKL8H9qHS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwSTUsL62QYL7b2UG5oXMkFu6a7AwHwYDVR0j BBgwFoAUaKeoxSws8xN4L5PcXRLK9/7BrMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFmN2MyNWItNDEwYi00ODJhLTk0MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUy QzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdGRUMxQUNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3QThDNTJDMkNGMzEzNzgyRjkzREM1RDEyQ0FGN0ZFQzFB Q0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNB RjdGRUMxQUNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwe76Mm1d95mWyav2P3h0HKxjnHqY1JPF7O +AkM0wXMH5PjMh3jv50pr3NAQkjx8xsovV7jAxU9mEnJMkxhbT7bLODP5lWUH4R6 Y97vURxoDrCD7d355AlznhVw0O9MtuqQkAW6lNXD894+o7EEaS4eACMjOXmwLIZF 0YlZCUVnxonm+GvzxvvyAXjGuYRseP9JY3Fbo6HZPafAotDc1mKJX/NSbtFvATpN hxbo5y4vuxtAX1Ny2W2MjgHOIDeU7VssAkU9VeoyiO2219HQ0nZSjzpBNmKQtZxt fTzwTzCnXy/HgD1xyA2wiDREiy21j7ruX0vBymDX2ufSXU1rGe8= -----END CERTIFICATE-----Generated at Tue Sep 22 15:08:59 2026 by rpki-client