$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft File: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft (raw, json) Hash identifier: xsfbsNHgf9t5+JgalxLF5n2t8p6p6e8GWAI/vbLmMqw= Subject key identifier: 9A:95:31:76:3D:76:51:5C:D6:95:C2:C5:54:D7:7B:22:4B:09:42:97 Authority key identifier: 68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF Certificate issuer: /CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Certificate serial: 2D99E98CFFCB7ED2561C418E60714A39191A93FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:41:00 +0000 Manifest this update: Wed 17 Jun 2026 02:36:00 +0000 Manifest next update: Thu 18 Jun 2026 02:58:00 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: yL9CLlILHqLbQJKBIi0ABV5wanAH6ejKvh6ick9wGpY=) 2: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl (hash: FNjUE2/Pw/Ihx41GqZ9dBonGvjW7ICckA/W4p39J0qE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:99:e9:8c:ff:cb:7e:d2:56:1c:41:8e:60:71:4a:39:19:1a:93:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Validity Not Before: Jun 17 02:36:00 2026 GMT Not After : Jun 18 02:58:00 2026 GMT Subject: CN=9A9531763D76515CD695C2C554D77B224B094297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:b2:2c:88:44:83:1b:b7:56:92:0d:df:90: 43:e6:96:d7:b0:ca:64:54:03:10:0c:8b:49:67:09: 43:d7:90:1c:5f:9c:f6:3f:31:a2:63:04:b2:3d:d5: 21:70:ec:ea:e2:70:16:3e:be:29:f4:8b:9c:99:2b: 24:e4:c2:29:4d:ac:92:79:36:62:ad:1f:76:82:72: ae:a6:49:75:d2:58:e6:08:28:ef:89:c6:c5:d0:3d: f3:0a:c8:5d:d4:5e:8c:62:b1:e2:e9:a3:46:e0:a2: 9a:53:eb:1e:c7:f7:c7:59:5d:e4:dd:db:cb:f6:8b: 6f:6c:72:2c:d1:82:2e:78:d6:ba:fa:04:a0:39:77: 56:a9:51:d0:04:8f:2a:46:e3:6c:90:55:48:58:d0: e7:b9:28:0b:f7:c0:50:25:89:34:82:17:b4:4d:2c: d1:75:d2:4c:82:19:5f:b1:e9:01:47:d8:97:0c:8b: 61:86:24:6a:01:b5:ed:ff:cd:39:c6:59:d7:30:78: 49:1f:a5:fd:dc:8b:41:ff:47:9a:2c:80:e2:48:61: f1:b8:31:bd:6c:dd:27:9b:2c:0e:27:20:16:38:f1: bc:32:26:15:f8:c8:f3:40:4a:f1:79:33:fa:10:14: b4:a2:1e:e6:8c:18:6d:46:79:ce:ae:70:fc:e5:b2: 68:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:95:31:76:3D:76:51:5C:D6:95:C2:C5:54:D7:7B:22:4B:09:42:97 X509v3 Authority Key Identifier: keyid:68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d1:16:be:fb:bd:8c:20:b0:b3:ad:df:80:50:22:67:99:68: 33:78:c8:78:b5:64:ac:53:16:ba:d0:c8:6f:b5:81:59:49:b8: b1:ad:d2:00:3f:2b:b0:3f:cb:30:c2:f4:30:d2:d4:cb:58:77: ff:42:5a:61:f2:00:96:13:f2:4f:40:43:5d:84:e1:82:f9:d4: 95:a0:50:95:0f:1d:8a:da:f3:c3:ad:72:e6:15:2b:7f:51:1a: 6f:44:b2:aa:64:f7:28:78:42:5a:34:58:f6:c4:7d:61:f1:89: 2c:af:0e:a3:7a:ad:ba:49:db:0e:c4:ec:cc:69:58:d5:fc:7b: 1c:48:04:7c:19:13:6c:d0:31:d7:e3:0b:e1:a8:7b:35:9f:96: 18:c7:a5:e4:5c:ce:ae:c9:f9:49:1c:3b:7b:6d:0b:70:bd:56: 73:23:71:04:a0:ab:a4:f7:42:15:9d:76:bf:de:11:33:11:80: 68:5e:b8:4e:f9:3d:c5:31:c2:a9:44:b7:1e:69:bc:cd:af:ab: 85:cc:24:fd:88:7e:ce:3c:c6:52:57:81:35:85:12:37:84:6d: 3b:09:42:55:99:13:e6:e4:92:b2:72:05:36:62:03:9c:0b:c6: bf:94:29:11:70:47:26:ff:1b:17:2e:18:4e:4b:75:be:58:b4: ee:31:df:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZnpjP/LftJWHEGOYHFKORkak/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYxQTc3 REZGNzBDRjAeFw0yNjA2MTcwMjM2MDBaFw0yNjA2MTgwMjU4MDBaMDMxMTAvBgNV BAMTKDlBOTUzMTc2M0Q3NjUxNUNENjk1QzJDNTU0RDc3QjIyNEIwOTQyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdprIsiESDG7dWkg3fkEPmltew ymRUAxAMi0lnCUPXkBxfnPY/MaJjBLI91SFw7OricBY+vin0i5yZKyTkwilNrJJ5 NmKtH3aCcq6mSXXSWOYIKO+JxsXQPfMKyF3UXoxiseLpo0bgoppT6x7H98dZXeTd 28v2i29scizRgi541rr6BKA5d1apUdAEjypG42yQVUhY0Oe5KAv3wFAliTSCF7RN LNF10kyCGV+x6QFH2JcMi2GGJGoBte3/zTnGWdcweEkfpf3ci0H/R5osgOJIYfG4 Mb1s3SebLA4nIBY48bwyJhX4yPNASvF5M/oQFLSiHuaMGG1Gec6ucPzlsmh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmpUxdj12UVzWlcLFVNd7IksJQpcwHwYDVR0j BBgwFoAUaLUDUyL/25yNbuwQtdLxp33/cM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQzYTJmZGYtYmNiYS00NzU3LWIzNjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMy MkZGREI5QzhENkVFQzEwQjVEMkYxQTc3REZGNzBDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82OEI1MDM1MzIyRkZEQjlDOEQ2RUVDMTBCNUQyRjFBNzdERkY3 MENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYx QTc3REZGNzBDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTRFr77vYwgsLOt34BQImeZaDN4yHi1ZKxT FrrQyG+1gVlJuLGt0gA/K7A/yzDC9DDS1MtYd/9CWmHyAJYT8k9AQ12E4YL51JWg UJUPHYra88OtcuYVK39RGm9Esqpk9yh4Qlo0WPbEfWHxiSyvDqN6rbpJ2w7E7Mxp WNX8exxIBHwZE2zQMdfjC+GoezWflhjHpeRczq7J+UkcO3ttC3C9VnMjcQSgq6T3 QhWddr/eETMRgGheuE75PcUxwqlEtx5pvM2vq4XMJP2Ifs48xlJXgTWFEjeEbTsJ QlWZE+bkkrJyBTZiA5wLxr+UKRFwRyb/GxcuGE5Ldb5YtO4x3w0= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:35 2026 by rpki-client