$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft File: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft (raw, json) Hash identifier: kzo/dYfx4yxFrZ29nGHmV6Oy/tF+T3np0idlOK6GCrw= Subject key identifier: 93:A6:EC:D7:D2:B3:82:71:49:BD:61:92:10:10:AC:E1:3F:06:48:EB Authority key identifier: 68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 Certificate issuer: /CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Certificate serial: 0B83BF4BE4CAD0299F89080C07558B4434B79FA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 06:32:20 +0000 Manifest this update: Sun 15 Nov 2026 06:27:20 +0000 Manifest next update: Mon 16 Nov 2026 10:06:20 +0000 Files and hashes: 1: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: eNviqEPANiU+R88ED/BdXauQGAcTaPYxgTmStYUAEXw=) 2: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl (hash: VxxkSZGC9E6BYGz+WvJqOQPk0KB8MA+e0QCRPnoP+wI=) 3: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: cwLPRSN2w6mZj3tlDvow1ecrXm+F+7b6N36wRKhpvIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:83:bf:4b:e4:ca:d0:29:9f:89:08:0c:07:55:8b:44:34:b7:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Validity Not Before: Nov 15 06:27:20 2026 GMT Not After : Nov 16 10:06:20 2026 GMT Subject: CN=93A6ECD7D2B3827149BD61921010ACE13F0648EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:d5:29:61:d8:17:f1:31:e6:c9:87:15:5f: 7d:06:25:85:e5:05:79:07:91:ee:af:83:85:aa:17: e5:05:ce:fe:af:55:d1:72:fd:86:eb:fc:a4:fe:7d: 18:9b:d6:c8:4d:21:3a:b9:75:17:9d:56:a3:84:2e: 65:a6:69:51:46:55:77:45:24:fa:b8:fd:b5:70:4a: 49:87:92:ef:02:d5:9f:02:c4:1a:43:09:16:08:e3: dd:3a:8d:18:0b:47:7b:5f:cb:55:93:6c:c7:db:60: 8d:60:de:d7:13:c7:7b:6b:8d:ba:2d:3e:ca:bd:e5: 98:a5:e0:18:0e:ab:bf:f8:ec:6e:77:a0:af:1e:3f: d4:b6:9f:d6:b2:a4:8d:7a:94:a4:da:17:4a:05:57: c8:a5:a4:d1:02:34:41:2b:ac:09:c1:49:72:ff:e4: 8d:9a:55:9d:8f:2a:a5:98:72:7c:84:ce:39:56:2b: d4:f9:b5:ca:61:7f:0c:4a:91:e9:a9:7e:c6:ab:08: 05:37:60:ec:47:6f:7f:38:7e:2f:88:a2:cb:4c:cb: a0:5e:46:18:e3:0b:2a:8c:27:f7:59:d8:ff:a9:cf: a0:b8:ff:0c:04:d3:89:08:18:39:1b:56:dc:cf:7a: 64:b3:50:92:cf:73:fb:47:5a:32:a1:e4:12:58:72: a2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A6:EC:D7:D2:B3:82:71:49:BD:61:92:10:10:AC:E1:3F:06:48:EB X509v3 Authority Key Identifier: keyid:68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:94:b6:0a:51:99:84:0d:78:69:2a:de:03:b2:00:9b:f2:54: af:92:e2:59:61:c6:44:28:54:48:2e:3c:0c:e2:c4:9c:35:0e: 0f:10:1e:c0:19:ca:a2:c8:32:e5:f8:a0:e6:5f:df:be:7e:09: 2e:00:37:2a:84:73:27:2b:f1:7d:2a:96:c5:be:c1:27:bb:0c: c6:56:ea:aa:e4:60:74:24:7c:81:9d:6b:3e:27:c3:ea:96:f0: 47:5e:4f:64:12:1d:b8:16:3c:5a:5a:cf:f1:0e:3c:6b:7a:7b: 34:39:db:0c:68:10:9e:c1:c7:3e:7b:f0:8b:e0:81:f6:7b:89: b0:a3:c8:c2:5c:47:f4:84:93:28:92:ef:25:76:f2:29:29:1b: 30:ed:9f:64:37:9d:b5:84:bd:24:cf:ce:a8:58:f3:32:6f:5b: 8e:5c:cd:85:97:7e:91:60:80:2e:cf:c0:ac:25:a9:98:36:3f: 98:82:93:db:6f:bc:1b:5c:82:f3:d7:ff:3a:a7:68:40:f8:91: 36:43:4b:2d:f6:fd:f8:58:5e:4f:8e:0b:e5:56:72:9c:e3:05: 4f:33:af:c5:e9:8a:52:c1:74:c5:f8:5c:1e:55:ed:b2:20:9b: 2b:82:15:bc:1c:0c:ef:7d:b8:29:1b:c9:d8:af:6e:83:8c:c6: be:58:87:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4O/S+TK0CmfiQgMB1WLRDS3n6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdG RUMxQUNDMTAeFw0yNjExMTUwNjI3MjBaFw0yNjExMTYxMDA2MjBaMDMxMTAvBgNV BAMTKDkzQTZFQ0Q3RDJCMzgyNzE0OUJENjE5MjEwMTBBQ0UxM0YwNjQ4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUNUpYdgX8THmyYcVX30GJYXl BXkHke6vg4WqF+UFzv6vVdFy/Ybr/KT+fRib1shNITq5dRedVqOELmWmaVFGVXdF JPq4/bVwSkmHku8C1Z8CxBpDCRYI4906jRgLR3tfy1WTbMfbYI1g3tcTx3trjbot Psq95Zil4BgOq7/47G53oK8eP9S2n9aypI16lKTaF0oFV8ilpNECNEErrAnBSXL/ 5I2aVZ2PKqWYcnyEzjlWK9T5tcphfwxKkempfsarCAU3YOxHb384fi+IostMy6Be RhjjCyqMJ/dZ2P+pz6C4/wwE04kIGDkbVtzPemSzUJLPc/tHWjKh5BJYcqKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk6bs19KzgnFJvWGSEBCs4T8GSOswHwYDVR0j BBgwFoAUaKeoxSws8xN4L5PcXRLK9/7BrMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFmN2MyNWItNDEwYi00ODJhLTk0MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUy QzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdGRUMxQUNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3QThDNTJDMkNGMzEzNzgyRjkzREM1RDEyQ0FGN0ZFQzFB Q0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNB RjdGRUMxQUNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+UtgpRmYQNeGkq3gOyAJvyVK+S4llhxkQo VEguPAzixJw1Dg8QHsAZyqLIMuX4oOZf375+CS4ANyqEcycr8X0qlsW+wSe7DMZW 6qrkYHQkfIGdaz4nw+qW8EdeT2QSHbgWPFpaz/EOPGt6ezQ52wxoEJ7Bxz578Ivg gfZ7ibCjyMJcR/SEkyiS7yV28ikpGzDtn2Q3nbWEvSTPzqhY8zJvW45czYWXfpFg gC7PwKwlqZg2P5iCk9tvvBtcgvPX/zqnaED4kTZDSy32/fhYXk+OC+VWcpzjBU8z r8XpilLBdMX4XB5V7bIgmyuCFbwcDO99uCkbydivboOMxr5Yh58= -----END CERTIFICATE-----Generated at Sun Nov 15 20:55:47 2026 by rpki-client